1. Securing Web Access Senior Design III – Spring 2009 Matt Shea

2. Overview Introduction Introduction Project Description and Intended Use Project Description and Intended Use Design Protocols Design Protocols Deliverables Deliverables Demonstration Demonstration Conclusion Conclusion

3. Introduction Problem Problem No way to monitor Web access No way to monitor Web access Bandwidth Usage Bandwidth Usage Security Issues Security Issues

4. Project Description/Intended Use Setup Web Proxy Server Setup Web Proxy Server Open-source Open-source Filtering Capabilities Filtering Capabilities By Domain By Domain By File/MIME Type By File/MIME Type Reporting features Reporting features

5. Design Protocols CentOS v. 4.7 CentOS v. 4.7 Clone of Red Hat Enterprise Linux Clone of Red Hat Enterprise Linux Squid Proxy Server Squid Proxy Server Open Source Proxy Server Open Source Proxy Server MySQL Squid Access Report MySQL Squid Access Report Reporting and Analysis Tool Reporting and Analysis Tool SquidGuard SquidGuard Content filter plug-in Content filter plug-in Perl Perl Used for Custom Script Used for Custom Script

6. Network Topology

7. Data Flow

8. Deliverables Install/Configure CentOS v 4.7 Virtual Machine Install/Configure CentOS v 4.7 Virtual Machine Setup Windows XP Client Virtual Machine Setup Windows XP Client Virtual Machine Install/Configure Squid Proxy Server Install/Configure Squid Proxy Server Install/Configure MySQL Squid Access Report Install/Configure MySQL Squid Access Report Install/Configure SquidGuard Content Filter Install/Configure SquidGuard Content Filter Write Script to translate IP Address to MAC Address Write Script to translate IP Address to MAC Address Setup Linux machine as a router to forward all Web requests from clients to the proxy server Setup Linux machine as a router to forward all Web requests from clients to the proxy server

9. Demonstration

10. Conclusion Web Proxy Solution for Accounting Firm Web Proxy Solution for Accounting Firm Utilized Open Source Tools Utilized Open Source Tools Has Reporting and Filtering Functionality Has Reporting and Filtering Functionality Meets need of Business Meets need of Business

11. Questions?