Sophos UTM Prepare your schools network for BYOD with Sophos UTM Wireless Protection

Agenda

Agenda

2

What is

BYOD?

BYOD

Benefts

BYOD

Preparation Concerns &

Considerations

How Sophos

UTM can help

Q & A

What is BYOD?

• General term which may mean different things to

different people

• Big topic that covers more than just technology

• Most people agree it means allowing personal devices to

access business networks

• Also used to describe programs where equipment is

provided (1 – 1 initiatives)

• BYOD concerns relate to both policy and infrastructure

• This talk will focus mostly on infrastructure concerns

3

Why the trend?

BYOD Benefits to Schools

• U.S. Department of Education suggested BYOD in 2010

National Technology plan

• http://www.ed.gov/technology/netp-2010/executive-summary

• Technology may enhance:

• Creativity and Innovation

• Communication and Collaboration

• Critical thinking, Problem solving, Decision making

• Present concept of Digital Citizenship

• Tech skills are essential for modern life and business

• BYOD may save money

• On equipment, app’s, and management

4

What should you be thinking of if you’re planning a BYOD initiative?

BYOD Preparations

• BYOD Policy

• What are we trying to accomplish?

• What’s acceptable use for equipment and network?

• Infrastructure

• What do we need to support the policy?

• Do we have the proper equipment or do we need to purchase?

• Impact on community

• Are teachers prepared to use and maybe support devices?

• Privacy concerns, can all students afford devices, do parents

support, etc…

5

The Network

BYOD Infrastructure Considerations

• How many new users/devices are you adding onto your

network? Twice as many? 3 times?

• Will your current network handle that traffic?

• What are the security risks? (How can we ensure that

Guest and/or BYOD traffic is segregated?

• Will current network and web security solutions be able

to support BYOD policy?

• How much extra work is this going to be for IT staff?

6

The Network

BYOD Infrastructure Considerations

• Network & Web Security equipment should provide (at

least):

• QOS functionality to shape bandwidth

• Content filtering to enforce CIPA

• Application Control (Next Generation Layer 7 Firewall)

• Ability to scale as demands increase

• Reporting

7

Your Wireless solution and its capabilities

BYOD Infrastructure Considerations

• Does it support multiple SSID’s (wireless zones)?

• What security policies does it offer?

• What levels of encryption does it offer?

• How easy it is to add capacity?

• What are the Guest capabilities?

• How much work for staff to deploy and manage?

8

Your Wireless solution and its capabilities

BYOD Infrastructure Considerations

• Wireless Solution should provide (at a minimum):

• Multiple Wireless Zones

• At least WPA2 encryption

• Ability to integrate with security solutions

• Usage reporting

• Guest Options

9

How can Sophos help with BYOD?

• Sophos Mobile Device Management solution

• Sophos Endpoint protection for Laptops

• Sophos UTM Wireless Protection

10

Sophos Wireless Protection

• Easy deployment of Access Points

• Simple setup and management of zones

• Enterprise level encryption

• Configurable Guest options

• Integrated protection via UTM security suite

• Easily scales to meet increased demand

11

Sophos UTM Wireless Protection

12

Components

Now also

available

Sophos AP 50

Sophos AP 10 / AP 30

AP 10

• Up to 10 users

• 150 Mbit/s throughput

• 1 x 10/100 Base TX

• IEEE 802.11 b/g/n

• 1 x detachable dipole antenna

• Power consumption: < 8 Watt

• Desktop/wall mounting

AP 30

• Up to 30 users

• 300 Mbit/s throughput

• 1 x 10/100 Base TX

• IEEE 802.11 b/g/n

• 3 x internal antennas

• Power consumption: < 8 Watt

• Desktop/ceiling mounting

• Power over Ethernet (IEEE 802.3af)

13

Plug and Play Access Points for classrooms

PoE-Injector included!

Sophos AP 50 Plug and Play Access Points for common areas

14

• Dual-band/dual-radio access point

• IEEE 802.11 a/b/g/n support

• Support for up to 50 users

• 300 Mbit/s throughput

• 1 x 10/100/1000 Base TX

• PoE+ compatibility (IEEE 802.3at)

• Power consumption: < 10 W

• 2 x 2.4G/5G detachable antenna

• Desktop/wall mounting

PoE-Injector included!

Centralized Management

15

Built-in wireless controller

Sophos UTM

Easy installation

16

Guest

Student Staff

Sophos UTM

Guest Portal Hotspot support

Most flexible UTM based

Hotspot solution

• Manage temporary Internet

Access for guests

• Options for:

Configurable Usage agreement and

logos

Automatic ‘Password of the day’

Quota’s on time and usage

Part of UTM Wireless Subscription

17

Flexible access for the entire organization

18

Sophos Access Points can be placed anywhere in your organization.

Easily create multiple separate wireless zones.

Sophos UTM Wireless Protection

19

Advantages

Easy installation and management

• Centralized configuration (all work done via UTM GUI)

• Plug and Play Access Point simplify deployment

Secure and reliable

• Integrated UTM security for wireless devices

• Best protection for wireless connections (separate zones, isolate client

connections, configure quota’s)

Flexible access

• Easy Internet access options for guests

• Multiple SSID support for varying levels of access

Integrated security

20

Once connected to the UTM easily integrates with other security features

Integrated UTM Security

Strong Encryption

Sophos UTM

UTM Security features

21

Optional Subscriptions provide the security features you want

• Wireless controller

• Multi-zone (SSID) support

• Captive Portal

UTM Wireless

Protection

• URL filter

• Antivirus & antispyware

• Application control

• Reporting

UTM Web

Protection

• Reverse proxy

• Web application firewall

• Antivirus

UTM Webserver

Protection

• Intrusion prevention

• IPSec/SSL VPN & RED

• HTML5 VPN Portal

• Reporting

UTM Network

Protection

• Anti-spam & -phishing

• Dual virus protection

• Email encryption

UTM Email

Protection

• Stateful firewall

• Network address translation

• PPTP/L2TP remote access

Essential Network

Firewall

• Antivirus

• HIPS

• Device Control

UTM Endpoint

Protection Antivirus

optional

Sophos UTM fit any size network

22

Hardware

Appliance UTM 110/120 UTM 220 UTM 320 UTM 425 UTM 525 UTM 625

Multiple

+ RED

Environment Small

network Medium network

Medium network

Large network

Large network

Large network

Large networks + branches

Network ports 4 8 8 6 & 2 SFP 10 & 4 SFP 10 & 8 SFP Multiple

Max. recommended firewall users

10/80 300 800 1.500 3.500 5.000 10.000+

Max. recommended UTM users

10/35 75 200 600 1.300 2.000 5.000

Software Appliance *

Runs on Intel-compatible PCs and servers

Virtual Appliance *

VMware Ready & Citrix Ready certified

Runs in Hyper-V, KVM, and other virtual environments

*Pricing based #IPs/Users

Questions?

Resources

• National Educational Technology Standards

• http://www.iste.org/STANDARDS

http://digitalcitizenship.net/

http://www.zdnet.com/how-to-write-a-byod-policy-7000003502/

http://www.fathomdelivers.com/the-benefits-and-risks-of-byod-in-

schools/

23

24

US and Canada 1-866-866-2802

NASales@sophos.com

UK and Worldwide + 44 1235 55 9933

Sales@sophos.com

nakedsecurity.sophos.com

Staying ahead of the curve Staying ahead of the curve

facebook.com/securitybysophos

twitter.com/Sophos_News

Sophos on Google+

linkedin.com/company/sophos