8e6 Technologies Offers Advice on Managing This Threat to Online Learning Programs

ATLANTA – NECC BOOTH 1146 – June 25, 2007 – At the National Education Computing Conference (NECC), 8e6 Technologies, the leader in Internet filtering and reporting for the K-12 market, is sharing its best practices to combat the use of proxies in schools with administrators, educators and IT managers who are responsible for ensuring the safety and security of students using the Internet. With the proliferation of anonymous proxy sites, which allow students unfettered access to typically restricted content such as online social networking sites, peer-to-peer networks and objectionable content, schools must take active measures to protect their networks and maintain a safe learning environment.  

“Proxies have become the number one online threat to school districts and thus, district administrators must implement technology and policies to ensure safe online learning,” said Paul Myer, president and COO of 8e6 Technologies. “In providing these tips, we hope IT administrators are able to directly utilize these suggestions in order to maintain a safe learning environment in their schools.” 

Proxies 101: Top Five Tips to Securing Your Network 

• Blocking URLs Is Not Enough – There are many free, open source, proxy software packages available on the Internet. Students download these programs, install them on their home computers, then text message the IP address of their computer to a few trusted friends. Pure URL-based filtering using a “blacklist” of known sites is hopelessly overmatched by these “anonymous” proxies, which can appear and disappear on a daily or hourly basis. Effective filters must have a proxy pattern blocking feature that writes signatures against known proxies and provides zero-day protection against anonymous proxies.
  
  Bottom Line: Ensure that your filtering solution has signatures that automatically protect against ever-changing proxies.
  
• Stopping HTTPS is Essential – Filtering HTTPS is an important component of blocking proxies. Circumventor - a free, open source, proxy package from Peacefire.org – provides an SSL configuration that is very easy to set up. In China, there are a number of proxy packages delivered over SSL, which allow political dissidents access to material that is blocked by the government. Students in the United States use these to gain access to social networking and other Web sites containing inappropriate material.
  
  Bottom Line: Effective filters must have the capability to identify HTTPS proxies and block them.
  
• Client-Side Proxies – Most administrators tend to think of proxies as server-side programs, and many are unaware that there are a number of client-side proxies that can be installed on school and library computers that allow students to bypass filtering. Managing and blocking these proxies is similar to handling IM and peer-to-peer applications.
  
  Bottom Line: Application management must be included as part of an overall Web security posture.
  
• Beware of Non-Standard Ports – IT departments must go beyond monitoring only the standard HTTP and HTTPS ports, since many proxies are found on non-standard ports. Open proxies, which students can utilize by configuring browsers to route all Web requests through a specific IP and port, are regularly published and distributed via mailing lists. While it appears that traffic is going directly to a single IP address, it is actually being proxied by that IP to sites that might otherwise have been blocked.
  
  Bottom Line: A filter must be configured to identify and monitor all ports, much the same as how a traffic cop would not only need to monitor a freeway, but the side streets as well.
  
• Enforce the Acceptable Use Policy (AUP) – Administrators have a general sense of their students’ willingness to bypass the AUP. Students, with “nothing to lose,” are much more relentless than enterprise end users in finding ways to get around a filter. School districts that explain their AUPs to students and make an effort at enforcing their AUPs have a better success rate in blocking proxies. Administrators need to utilize the reporting feature of their filter, sit down with students and let them know that their Internet use is being monitored and any inappropriate sites will be blocked. Through these practices, proxy use tends to decrease considerably.
  
  Bottom Line: Communicate the rules, use the reporting feature of your filter to determine who is bypassing the filter via proxies, and enforce the policies.
  

About 8e6 Technologies 

8e6 Technologies is the leading provider of appliance-based Internet filtering, monitoring and reporting solutions for education, and has played a significant role in filtering the Web for over 10 years. 8e6 directly addresses the challenges of online child safety by giving network administrators and educators the tools to view, understand and react to Web-based threats arising from online learning. As a single-source vendor, 8e6 provides all of the hardware, software and support to ensure a secure learning environment while maintaining CIPA compliance. The company maintains headquarters in Orange, California, and has a network of channel partners worldwide. For more information, including free resources and best practices for ensuring effective enforcement of Acceptable Use Policies, please visit www.8e6.com/education or call 888.768.7999.