170 likes | 395 Views
Technical briefing Internet Content Filtering. Showcasing the new Internet Content Filtering Solution. Clive Moore – Head of technical Services YHGfL. Todays Agenda. Introduction and update. 09:40 YHGfL Architecture – Clive Moore.
E N D
Technical briefingInternet Content Filtering Showcasing the new Internet Content Filtering Solution Clive Moore – Head of technical Services YHGfL
Todays Agenda • Introduction and update • 09:40 YHGfL Architecture – Clive Moore • 10:00 Introduction to Smoothwall and the new Content Filtering solution – Gavin Logan & Rob Faulkner • 10:45 Break • 10:55 Demonstration of the new Content Filtering solution – Rob Faulkner • 11:45 Content Filtering eSafeguarding advice – Richard Cook YHGfL • 12:00 What are my options for unblocking a URL?– Andrew Yoward YHGfL • 12:15 Questions
Objective • The mail goal of this seminar is to :- • Inform Schools and Local Authorities of the new Content Filtering platform • Compare and contrast the architecture changes with the current and new Internet Content Filtering platform • An introduction to Smoothwall and what filtering technologies are been deployed in the new system • Demonstration of the Self Service portal that Schools and Local Authorities can use to manipulate block and allow lists • Looking at the new options that Schools and Local Authorities have when logging url unblock, together with and RIPA implications • A reminder on the policies and procedures that should be in place when managing your block and allow lists
Update • Golive 9th Dec – Service finishes 7pm Thursday evening • Self service portal Golive JAN • All current school, LEA, Global block and allow lists will be carried over onto the new system • School pilots taking place during November
Stepping back in time • How we used to live…. Content Filtering Proxy Load Balancers
Stepping back in time • Before Migration 15xContent Filtering 7xProxy Servers
Present day • How we are now….. 42xContent Filtering 19xProxy Layer
The Headline figures • Over 61Millions pages filtered a day • Nearly 700Mb a second of Internet traffic, and growing • All the content filtering platform is virtualised • Reduced our running cost • 8 Internal DNS servers
Current Traffic Flow Internet Proxy Layer Is the site Allowed? Load Balancers School proxy.yhgfl.net : 3128
Current Traffic Flow Internet Content filtering Proxy Layer Site not on Proxy lists Load Balancer School proxy.yhgfl.net : 3128
Architecture layout - current Proxy Primary CF school Secondary CF Proxy
Architecture layout – New! Proxy + content filter Primary Staff Secondary Social Unfiltered school
Authentication Curriculum Network - Source IP Address Port number – separate curriculum network IP Socket – Individual school list AD Primary School Staff Network - Source IP Address Login.yhgfl.net Port number – separate staff network Secondary IP Socket – Individual school list AD
User based authentication RIPA Log IP Packet DATA 10.160.1.1 10.4.32.27 LEA School YHGfL Private IP regional 10.160.1.1/30 Outside Inside Schools IP range ?.?.?.?
Summary • All existing authentication methods carried over • Can now do socket based authentication • Existing school block / allow list carried over • IWF, Global Block / Allow, Lea, School lists • Schools can still override the LEA block list, and can now manage their own lists • More things may be blocked!