securing personal devices on your network
TRANSCRIPT
Securing Personal Devices
on Your Network
Dennis Muley
President, Impulse Point
Anytime, Anywhere Learning
• Advent of Public/Private Cloud Computing Model
• Ubiquitous Availability of High-Speed Wireless
• Exponential Growth of Mobile Devices
Consumerization of IT
The Perfect Storm….
Anytime, Anywhere Learning
District-Wide Bring Your Own Device (BYOD) Personally-Owned Mobile Device Management
BYOD
Ownership
Co
ntr
ol
Guest
Managed
Anytime, Anywhere Learning
Business Drivers for BYOD in K-12
• Enhance Collaborative Learning Environment
• Subsidize Cost of 1:1 Student-Computing Requirements
• Support Centralized Application Portal (Cloud) Model
• Satisfy Student, Faculty, and Parent Expectations
Anytime, Anywhere Learning
HIED NAC Competitive Displacements “The Most Extreme BYOD Environment”
• Enhanced End User Experience
• Reduced Help Desk/Support Calls
• Increased Reliability/Availability
• Ability to Scale Enterprise-wide
• Centrally Deployed and Managed
• Managed Support Update Services
• Lower Total Cost of Ownership!
Anytime, Anywhere Learning
BYOD Solution Requirements
User Identity
Device Type Profiling
Device Ownership
User Centric Self-
Enrollment Automated Secure
On-Ramping
Real-Time Policy
Assessment
Dynamic Role-Based
Enforcement
Self-Guided Remediation
Anytime, Anywhere Learning
Safe•Connect BYOD Policy Management District-Wide - Wireless, Wired, Remote VPN
POLICY MODULE KEY FEATURES
User Authentication Authorizes network user access (AD, LDAP, RADIUS) - SSO Support
Guest User Management Automates guest user self-registration process via SMS/Text that can
restrict endpoint devices to Internet-only access role by time and date.
User-Centric Role Assignment Identifies role by user identity, device type, device and asset ownership.
WPA2 Enterprise - 802.1X
Device Configuration
Automates the user experience of “on-ramping” devices unto
WPA2 Enterprise/802.1X secure wireless and wired networks.
Acceptable Use Policy -
User Agreement Auditing
Displays organization’s acceptable use network policies and allows
user to accept policies prior to receiving network access privileges.
Anti-Virus/Anti-Spyware Manages compliance with anti-malware software policies.
Microsoft OS Patch Ensures that users are up-to-date with Microsoft OS patches
and integrated with existing patch management systems.
P2P File Sharing Prohibits use of non-approved applications such as P2P file sharing. (HEOA)
Rogue Access Point Manages adherence to Network Access Translation (NAT) device policy.
Broadcast Messaging Delivers on-demand emergency broadcast (desktop alert) messaging.
Custom Policy Builder
Ability to build custom policies or integrate with third party systems to
automate endpoint security policy acceptable standards.
Compliance Reporting Real-Time & Historical Reporting Dashboard and Data Export/Archiving
Anytime, Anywhere Learning
Device Network Access “On-Ramping”
Anytime, Anywhere Learning
Guest User Self-Enrollment
Anytime, Anywhere Learning
User Self-Enrollment
Anytime, Anywhere Learning
Device Self-Enrollment
Anytime, Anywhere Learning
Optional Approval Process
Anytime, Anywhere Learning
Comprehensive On-Ramping • Automated Provisioning For WPA2 Enterprise & 802.1X • Resolve Software Conflicts Affecting Wireless • Install Safe•Connect NAC Policy Key in one easy step
Cross-Platform Support
Built for Education Industry • Eases deployment concerns in multi-OS, unmanaged environments • Lightweight, uses Standard OS Components • Zero Dependency Approach
Xpress•Connect Secure Mobile Device Enablement
Anytime, Anywhere Learning
Real-Time & Historical Reporting Dashboard
Anytime, Anywhere Learning
Less hardware, integration and management complexity
Real-Time Endpoint Security Assessment and Enforcement
Integrates with existing IT Infrastructure and requires no
network upgrades/changes
No SLA impact on network performance or availability
Highly Scalable, Distributed Design (VMware Enabled)
Pre- & Post-Admission checks across wired, wireless, VPN
Vendor and Layer2 Network Independent (Non-Intrusive)
Out-of-line Network Design (Fails-Open)
Reduced Business Risk Lower Total Cost of Ownership
Equates to Faster ROI
Delivered as a Managed Service (Plug-and-Protect)
A Simpler, Smarter, Faster Way to Manage BYOD
Anytime, Anywhere Learning
SIEM,
IDS/IPS,
Application
Integration
Safe•Connect NAC Policy Enforcer
Remote/Home Users
User Registration
Non-Compliant Quarantined
Guest Restricted Access
Compliant Full Access
Pre & Post Admission Security Assessment
Remediation Web Sites
Securing the K-12 Data Center Cloud
School #1 School #2
Internet
WAN
Virtual Data Center District Office
Router
Authentication Anti-Virus Server Patch Server Stoneware
Wireless Network
Anytime, Anywhere Learning
Impulse Point K-12 Customer Case Studies
Anytime, Anywhere Learning
Challenge: Personally-Owned Devices aka BYOD
“We know Impulse Point Safe•Connect is the right answer for us
as we grapple with the increasing complexity of handling the
growing number of unmanaged and managed
devices connecting to the network.”
“Impulse Point’s expertise in higher education
environments has been invaluable as our K-12 world
starts to look similar and we find new ways
to tap into technology for learning.”
Marc Elliott
Director of Technology
Bethel School District, Washington
Anytime, Anywhere Learning
Challenge: Visibility and Control / Malware
“Our biggest concern was keeping anti-virus,
anti-spyware, and patches up to date. Additionally,
we were concerned about the possibility of
unauthorized devices being attached to our
network without a reliable and consistent means
of detecting and securing those devices.”
“Once Safe•Connect was deployed,
we were immediately able to see where
problems existed and get them corrected.”
Diane Driggers
Director of Technology
Berkeley County School District, South Carolina
Anytime, Anywhere Learning
Challenge: Ease of Deployment
“Deploying Safe•Connect was incredibly easy and
problem-free. We received the boxes and literally 20 or
30 minutes later we were up and running.”
“Our District was able to completely circumvent the
purchase of numerous new hardware and
the lengthy process and investment of client installation.
No weeks of training or complicated jargon to learn.
Within an hour, we were ready to go.”
Brad Bowers
Senior Network Engineer
Lexington District One, South Carolina
Anytime, Anywhere Learning
Challenge: Flexibility and Control
“What’s wonderful is that we have the control
to decide the conditions and levels of warning too.
It can be just a warning, a warning for a certain number of times,
or access lost immediately if there is an extreme situation.”
“With this warning flexibility, we don’t need to
disrupt our students and faculty unless it’s
necessary. They can continue
their work and learning.”
Richard Kassissieh
Director of Information Technology
Catlin Gabel School, Oregon
Anytime, Anywhere Learning
Challenge: Scalability and Service
“Safe•Connect is an amazing solution for K-12 school districts
and the challenges we face today. It doesn’t require much
training or an expensive consultant to help set it up.
The ease of implementation and peace of mind
with a truly secure network are incredible.”
“This is especially advantageous to educational institutions
that need high-scalability security and
diverse device network features,
despite thinly stretched IT teams and budget concerns.
It is a perfect solution for Lexington One.”
Jeff Salters
Chief Operations Officer
Lexington District One, South Carolina
Anytime, Anywhere Learning
Dell Connected Learning Infrastructure Enables Digital Learning Environments
23
Network Infrastructure
Information Portals
Applications
Core Infrastructure
Data Storage
Systems Management
Secure Access
Connected Classrooms
Home / Remote Users
Impulse Point’s Safe•Connect
Provides Secure BYOD
Access in Dell’s
Connected Learning
Infrastructure
Anytime, Anywhere Learning
Questions & Answers