Lightspeed Filtering

Mark ShrimptonSchools Broadband Team

EiS

Schools Broadband’s Requirements

• Provide flexible filtering, suitable for entire age range

• Support expanding bandwidth requirements estimated to be ~10Gbps within 5 years.

• Replicate policies over multiple Internet gateways to ensure resilience should a WAN centre fail

• Integrate into hundreds of separate Active Directory forests

• Provide delegated admin to 600+ schools

• Provide granular filtering based on OU group/user, IP address, range, time of day

• Provide full reporting to allow us to comply with RIPA requests

Infrastructure

Infrastructure

Infrastructure

• Rockets put into route Schools Broadband VPN Internet transits through UoK, Canterbury and EIS, Maidstone

• Filtering now in-line to Internet transit

– Additional equipment meant changes to BGP advertisements

• Filtering policy challenges due to the added HTTPS filtering

• Introduction to 10Gb links

Implementation Challenges

Filtering Policies

https://dev.schools.kpsn.net

Mobile Filtering

• From-anywhere filtering, without the need for a VPN

• Password-protected uninstall.

• Reporting of off-network activity, including Blocked URLs, Blocked URLs by Category, Unknown URLs, URLs Visited.

• Forced Safe Search for Google and Yahoo search engines.

• Cross-platform support for Windows, Android, and iOS devices.

Customisations

Reporting

ReportingTraffic Dashboard

ReportingReporting Front Page

ReportingTraffic by Internal IP

ReportingTop Blocked Domains

ReportingTop Blocked Categories

ReportingSearch-engine Queries

ReportingFiltering Search-engine Queries

Other Features

• Email Management• AntiVirus• Power Management