Resources
Sekolah Seri Puteri (SSP)
16/03/2017Sekolah Seri Puteri (SSP) - Case Study
Customer Background
Sekolah Seri Puteri was founded
on 6 May 1990, and the original name was Sekolah Menengah Kebangsaan Perempuan
Jalan Kolam Ayer (Female Secondary School of Jalan Kolam Ayer), Kuala Lumpur. It
was established to provide secondary education for students from across
Malaysia. On 1 May 2003, Sekolah Seri Puteri moved from Jalan Kolam Ayer to its
current location in Cyberjaya.
The school can accommodate up to 1,200
students along with 250 academic and support staff. The main building contains a
large hall, recreation and sports facilities, classrooms, laboratories, and
workshops blocks. The site also includes a student residence, a teacher
residence, and a dining hall. A great hall holds 1,200 people, and a lecture
hall seats 255 people.
Requirements
o SSP needs
to control student internet behaviours and generate user bandwidth and traffic
report.
o SSP requires to have a firewall which can provide protection to
internal network. SSP was previously using a Firewall as a gateway protection
but weren’t too satisfied with it.
o Authentication system: SSP requires to
have a SSO integration with their MS AD and generate report with actual
username.
o SSP was looking for the most valuable solution in terms of
price/performance.
Challenges
• Unable to monitor and control user
internet behaviours.
• Users complained that internet speed is slow when
browsing internet, but SSP couldn’t identify what were the reasons.
• P2P
behaviours application consumed most of the bandwidth but SSP was unable to
block it with the previous appliance
• Only provided authentication system
for Wi-Fi users, no authentication on LAN users segment.
• No protection on
their current server farms against advance attacks such as website defacement.
How SANGFOR aBOS helped SSP?
• SSP’s IT team can
create 4 virtual machines in aBOS for some lightweight system server such as
DNS, DHCP, File System, etc.
• Centralize management UI to manage SANGFOR IAM
and NGAF, and virtual servers
• From a cost perspective, aBOS can hold
SANGFOR IAM, NGAF and 4 servers with an affordable pricing.
What
vNGAF provided to SSP?
Security Features for endpoints and
servers
• IPS.
• APT protection.
• Anti-DDoS.
• Email Protection.
•
Ransomware protection.
• Enable WAF to protect on Server Zone, effectively
provided layer 7 protection for every server.
• Risk assessment tools which
can provide real time vulnerabilities scan on all the servers to find out any
loop hole or server vulnerabilities.
What vIAM provided to SSP?
• Network to surf
internet. Including bandwidth consumption, application used history, website
browsing history, online duration, etc.
• Block illegal websites such as
pornography, gambling and malicious websites on both HTTP and HTTPS.
• Enable
application control for P2P streaming media, P2P download tools, so that P2P
application won’t abuse campus network.
• Using Sangfor IAM to do bandwidth
limitation for streaming media application. Also, guaranteed bandwidth for
browsing education websites and application to ensure user experience.
•
Sangfor IAM has report which can provide IT administrator with detail user
behaviours and analysis user statistics such as bandwidth consume, website
access, applications usage etc.
• IT team can identify the network slow
issue by the report details.
Customer Network Topology