120 likes | 273 Views
State of West Virginia Dept of Education. 2013. Secure Networks TM Architecture. Strong Differentiation. – Higher performance, expanded visibility & control Best-in-class wired and wireless technologies with industry-best unified management
E N D
Secure NetworksTM Architecture Strong Differentiation • – Higher performance, expanded visibility & control • Best-in-class wired andwireless technologies with industry-best unified management • Optimized for seamless application availability & client experience • Lowest operational expense • Maximum reliability & agility • Most comprehensive lifetime warranty • Industry-best services & support New Data Center Fabric Command & Control Smart Edge Scalable Distribution/Core 3
OneFabric ArchitectureIdentiFi™ bolsters OneFabric Edge Control Center (Unified security and management) OneFabric Data Center Core Networking Services Application Provisioning and Delivery OneFabric Edge Integrated Wired/Wireless Solution – Mobile IAM OneFabric Security Mobile IAM (BYOD) Managing Devices, Users, Applications, etc. 4
Industry’s fastest growing Network Company Secure Access Management Security Security Isaac S6 Switch Forrester Wave NAC Leader Info-Tech WLAN Top Innovator Wi-Fi Solutions Isaac
Enterasys Supports K-12 Nationwide • +28% year over year growth in K-126000 schools in 550 districts!
Managing the Endsystem Explosion Wired & Wireless Access Control Facility Management Building Control Personally Owned Devices “ X Factor “ Smart Phones “xPads” Network Complexity VoIP Phones System/OS Diversity Where’s the Security Enforcement Point? PC IP Printers Laptops (Virtual) servers IP Video Surveillance Number of Connected Devices 7
Providing Personalized Network Access… For Personalized Learning • Everyone can no longer be grouped together • Provide the level of resource and Internet access permitted for each student tied to their needs and responsibility • Offer a seamless end-user experience • CIPA compliance
Digital Signature on the NetworkThe industry’s best BYOD profiling engine Security Events Network Behavior Access Profile Access Type(s) Application Provision Smith, Joe Wireless Associated AP: wifi-243 SSID: Prod-Guest BSSID: 0-1a-e8-14-de-98 Web (HTTP): 5Mb download Email (SMTP): 2Mb download All other Services: DISABLED Virtual Device Identity(s) Authentication MAC-Auth: 28:37:37:19:17:e6 PWA: 00:00:f0:45:a2:b3 802.1X: 00:0D:3A:00:a2:f1 Windows v7.5.3 Physical Device Identity(s) Device Type(s) Apple MacBook Air Samsung Galaxy Note Apple Lion OSX v10.7 Android v4.0.4 Stored Centrally Health Location Enforced Globally Symantec Anti-Virus: Enabled Signature Update – v10.4.3 OS Patches – Up to date Peer2Peer Service: DISABLED 43 Services Running Building-A Floor-2 Conference Room-7b Authorization Time of Day Role: Sponsored Guest Sponsor: Jane Doe Internet Access Shared Engineering Servers Wednesday, April 11, 2012 9:41:00 AM EST
One SSID – Multiple Topologies – Multiple Solutions – No VLANS… • StudentDistrict Device Access to Internet at line rate speeds and district network in Classroom • Student Personal-Device Access to Internet at line rate speeds but not district in Classroom network, after registering the device to their username for tracking purposes • Student Play Station Portable No Access • StudentPersonal-Device Access to Internet at line rate speeds and district network.w/ DDLin Classroom Elevated browsing capabilities like Facebook, Twitter • Admin District Device Full Access • Guest Classroom No Access • Guest Common Area Internet access, but rate limited sponsored to 128k • AllWireless VoIP Handset Correct QoS and CoS for high priority voice services
How can a network support Digital Citizenship • Access to District Owned Resources • Embedded Network AUP • Most restrictive access to resources Basic DDL • Basic + • Allowed to register Personally Owned Devices • Elevated access to online resources Penalty Box • Basic + DDL + • Access to Social Media Resources via Personally owned devices • Most unrestricted access to network and online resources Advanced • Basic Access rate limited • Access only to district owned resources • Most restrictive filtering