Lightspeed Filtering
Mark ShrimptonSchools Broadband Team
EiS
Schools Broadband’s Requirements
• Provide flexible filtering, suitable for entire age range
• Support expanding bandwidth requirements estimated to be ~10Gbps within 5 years.
• Replicate policies over multiple Internet gateways to ensure resilience should a WAN centre fail
• Integrate into hundreds of separate Active Directory forests
• Provide delegated admin to 600+ schools
• Provide granular filtering based on OU group/user, IP address, range, time of day
• Provide full reporting to allow us to comply with RIPA requests
Infrastructure
Infrastructure
Infrastructure
• Rockets put into route Schools Broadband VPN Internet transits through UoK, Canterbury and EIS, Maidstone
• Filtering now in-line to Internet transit
– Additional equipment meant changes to BGP advertisements
• Filtering policy challenges due to the added HTTPS filtering
• Introduction to 10Gb links
Implementation Challenges
Filtering Policies
https://dev.schools.kpsn.net
Mobile Filtering
• From-anywhere filtering, without the need for a VPN
• Password-protected uninstall.
• Reporting of off-network activity, including Blocked URLs, Blocked URLs by Category, Unknown URLs, URLs Visited.
• Forced Safe Search for Google and Yahoo search engines.
• Cross-platform support for Windows, Android, and iOS devices.
Customisations
Reporting
ReportingTraffic Dashboard
ReportingReporting Front Page
ReportingTraffic by Internal IP
ReportingTop Blocked Domains
ReportingTop Blocked Categories
ReportingSearch-engine Queries
ReportingFiltering Search-engine Queries
Other Features
• Email Management• AntiVirus• Power Management