190 likes | 331 Views
Enterprise Internet Filtering. Presented by Sheri L. DeVaux. Agenda. Why filter Filtering background at DOIT Product selection, Why 8e6 Infrastructure Implementation Logical Flow Categories Delegated Administration DOIT Request for Review Process FYI Q&A. Internet Filtering.
E N D
Enterprise Internet Filtering Presented by Sheri L. DeVaux
Agenda • Why filter • Filtering background at DOIT • Product selection, Why 8e6 • Infrastructure Implementation • Logical Flow • Categories • Delegated Administration • DOIT Request for Review Process • FYI • Q&A
Internet Filtering • Tool to enforce the Acceptable Use Policy (AUP) http://www.ct.gov/doit/cwp/view.asp?a=1245&Q=314686&insidedoitPNavCtr=|31104|#31105 • Preserves Network Resources • Helps to control access to bandwidth-intensive sites • Keeps other network devices available for their core functions • Protects the States network infrastructure by blocking internet threats • Centralization frees up IT personnel for other agency mission critical projects
Background • Late 2007 Governor Rell “asks that each agency review their internet filtering standards, and that each Commissioner and Executive Director ensure their Agency's compliance with State standards”. Letter to Commissioners January 2008. • DOIT charged with conducting a review of all internet access allowed by agencies • Late 2007 RFI to gather data • 8e6 solution selected • Early 2008 Bid • February 2008 Awarded • Summer 2008 DOIT Pilot • Fall 2008 Delegated Admin and Reporter Training by vendor • Late 2008 begin Phased Agency cutovers • Currently in the Implementation Phase
Product Selection • True enterprise level filtering • Transparent • Filters – http, file types (mp3, .zip, etc…), anonymous proxies • Directory Based Authentication • Delegated Reporting capability
8e6 R3000 • Standalone appliance • Secure and Hardened • Red Hat Linux OS • Functions in “pass-by mode”
Categories • 100+ Predefined Categories • Threat Groups • Adult Content, Bandwidth, Security, etc…. • Productivity Groups • Entertainment, Investments, Shopping, etc…. • Custom Categories • Re-categorization http://www.8e6.com/external/submit-a-site.php • Human Review
Delegated Administration • Distributed Management Scheme • Delegated Responsibility • Agencies Business Needs • Custom Block page
DOITs Request for Review Process • Site Review request submitted via the Block/Warn page • Business need/Justification required • Request received by the DOIT EIFS Staff • Needed analysis performed • Request forwarded to Director of ITSecurity, Michael Varney and Deputy CIO, Richard Bailey for approval/denial • Approved changes configured, notification sent • Weekly meeting held for review and analysis • Site Review report forwarded to CIO Wallace weekly
FYI • HTTPS Filtering • 8e6 R3000 attempts to identify and validate the secure server certificate • Section Reports to DOIT Directors • Internet Activity is tracked and reports are included in the Monthly MARS
Thank You DOIT/ITSecurity Staff Sheri DeVaux 622-2455 Christine Northrop 622-2512 Robert Johnston 622-2437 Anna Marie Rohon 622-2075 doit.eifs@ct.gov