൰ping to position it. please do not alter the position of

21
SIG Stabilisation

Upload: others

Post on 22-Feb-2022

1 views

Category:

Documents


0 download

TRANSCRIPT

SIG Stabilisation

Presenter
Presentation Notes
Please choose the title slide with or without the public education statement, then click the icon to change the image. Use cropping to position it. Please do not alter the position of the logo.

The SIG is stable…

5.4 EoSJune 2020

SMI Activations

are slow

However…

Not using Vendor

supported tools

Inconsistent Configurations

Re-design necessary

Difficult to manage

Presenter
Presentation Notes
Applecross – 4 custom groups -> over 60 policies SMI activations have moved from 1 hour to 2 minutes Embracing customisations to an extent

Preparing for the future

800+ FortiGates7 Models

EPN

CMI

SMI

Improved Support

Improved Management

Improved Security

DOE Router

The SIG has improved

Agile to feature requestsImproved expertise across multiple ICT teamsFast commissioning of internet services

Support for a wider range of schools typesCentralised Management toolsQoS and traffic shaping policies for ‘SIG at the Edge’MultiVDOM - More control given to schools

New updates soonerFast deployment of configuration updatesImproved security through migration of ZBFWEfficient use of Security Profiles and Policies

Custom Policies

Simple Policies

Access Denied Pages

Improved SSL Inspection

Safe Search

Accountability

Reporting

Customisability

*Enabled upon request only

Further changes

Explicit Proxy

External

Internal

Improved Integration

Development In Progress

Over 40 schools are participating in the pilot of SIG Stabilisation

High SchoolsPrimary Schools

Remote SchoolsOffsites and Kindys

Split SchoolsShared Sites

Beginning in November 2018

Presenter
Presentation Notes
Thank the schools for participating

The Road Ahead

New Features

Bug Fixes

Updates to configuration

Firmware upgrades

More Schools and Offices

Presenter
Presentation Notes
Features: Scheduling of policies, traffic shaping Bug Fixes – Assisted directly by Fortinet Updates to configuration – clean up and remediation Firmware – better support, security and feature sets Expand the range of the pilot

Centrally Managed Internet (CMI)

Provide more bandwidth to schools

Telstra Internet Direct (TID) serviceSymmetrical bandwidthVarious Speed

Connect directly to SIGSeparate policy set

Presenter
Presentation Notes

EPNCENTRAL OFFICE

CMI

SMI

SIG Traffic Path Selection

Presenter
Presentation Notes
IP Telephony, Central services & site-to-site traffic Primary path - WAN EPN Centrally managed internet services Cisco WebEx, NAPLAN, Office365, ChemAlert, SCIS Primary path - CMI Failover path - WAN EPN Unmanaged internet services Primary path – SMI Secondary path – CMI (primary if no SMI) No failover path over WAN EPN

EPNCENTRAL OFFICE

CMI

SIG Traffic Path Selection

CMI

End-to-End Connectivity

Internet

MPLS

SMI

EPN Central Services

Public Cloud Services

CMI Services

IP Telephony

CMI Readiness

Telstra NTU to Fortigate SIG Telstra NTU to access switchCore switch to Fortigate SIG

Questions?