The URL can be used to link to this page

Home My WebLink About2004 11 22 Regular 500 COMMISSION AGENDA ITEM 500 Consent Informational Public Hearing Regular X November 22. 2004 Regular Meeting JD (V .~ Mgr. 1 Dept. Authorization REQUEST: Information Services wishes to present several options to the Commission to allow them access to network resources and the Internet via wired or wireless means. The Commission should choose and fund the appropriate option. PURPOSE: The purpose of this item is to offer several options to allow the Commission to access network resources as well as the Internet via wired or wireless means. CONSIDERATIONS: The Request The Mayor and Commission have, on several occasions, requested that The Information Services (LS.) Department furnish them with Wireless Internet Access in the Commission Chambers using their own personal laptops and the Wireless Access Point (W AP) that was already located in the Commission Chambers, While it seemed as if we should've been able to simply grant the Mayor and Commission access to the existing W AP, there were, and still are, security concerns that would need to be addressed in order to keep the City's network secure, Convenience vs. Security S:\Information_Services\Admin_Docs\Agenda Items\FY 2005\November 2004\November 22, 2004\112204_ COMM _Regular _500 _ Wireless_Options _ For_ Commission, doc CITY OF WINTER SPRINGS CITY COMMISSION November 22, 2004 REGULAR 500 PAGE20F5 While wireless is being offered at many places throughout the country, security is secondary to convenience. In those implementations where security is at the forefront and convenience is secondary, many measures are put into place in order to secure the network. Most times, all the work and security measures are totally invisible to the end user. Thus, end users often think of it as being very easy to implement. While wireless is an easy technology to implement, it is not an easy technology to implement securely, Security Concerns While it was and still is the intention of the LS, Department to provide access to information, there was a few concerns with the current configuration of the network as follows: · The W AP located in the Commission Chambers was connected to the network for testing. · The Mayor and Commissioners wanted to use that W AP for connectivity to the Internet using their own personal laptops, Although no request was being made to access the network, that device was physically connected to the network and therefore, their laptops would be as well, · LS. could not guarantee that the laptop connecting to the W AP at any point and time was Trojan or virus-free, had any virus protection software installed, or had the latest virus dat file loaded, Whereas with City-owned computers, in an attempt to ensure a safer computing environment, various updates are automatically pushed out to all users, These include: virus definition files, system o/s updates, office updates, firmware updates, and software patches. This ensures a safer computing environment. Presentation to Commission On August 23,2004, the LS. Department along with Rick Belisle, a consultant with Internet Security Systems (ISS), presented the commission with three options for wireless connectivity, Each option provided for Internet Access utilizing personal laptops within the Commission Chambers. All three options would allow Internet access as requested, but would not provide any access to the City's network resources thus keeping those resources relatively secure. The options presented at that time were: . Option 1 · Wireless: Yes · Configuration: Separate Internet Connection via Cable provider · Cost: $54 Equipment + $80/month or $960/year recurring · Monitored and filtered: No · Access to network: No · Use personally-owned laptop: Yes . Option 2 CITY OF WINTER SPRINGS CITY COMMISSION November 22, 2004 REGULAR 500 PAGE30F5 · Wireless: Yes · Configuration: DMZ off ofPirewall · Cost: $940 equipment and technical support · Monitored and filtered: No · Access to network: No · Use personally-owned laptop: Yes · Option 3 · Wireless: Yes · Configuration: Segment internal network with additional security appliance · Cost: $2400 equipment and technical support · Monitored and filtered: Yes · Access to network: No · Use personally-owned laptop : Yes Options 2 or 3 were recommended by the I,S, Department depending upon whether the Commission wanted their web activity to be filtered and monitored, What is filtering and monitoring? 1.S. currently uses a product called WebSense which filters and monitors Internet access, Piltering means that WebSense will block users from certain Internet sites such as porn, hate sites, etc, Monitoring means that a log is kept of all the places visited on the Internet and reports can be ran by individual user. The Decision The Commission decided that 1.S. should come back with a new proposal for a wired solution that would also provide access to network resources and that wireless not be used in this particular situation. Our Goal It was not the intent of our presentation to eliminate all consideration of wireless, although that seems to have been the result. We did, however, want to give a complete and thorough picture of what can and is happening with wireless today; and we also wanted to stress that there is a lot more to wireless security than initially meets the eye. We again wish to help the Mayor and Commission understand that wireless should not be totally discounted and that we were not trying to entirely discourage wireless as a viable solution, With all of our City resources and data at stake, security and proper setup cannot be taken lightly, CITY OF WINTER SPRINGS CITY COMMISSION November 22, 2004 REGULAR 500 PAGE 4 OF 5 New Options Wireless can be implemented and monitored more securely with the appropriate equipment in place, With the new request from Commission for Internet Access as well as network access, we are proposing a second look at the "connectivity issue" with the following four options, We'll call them options 4A and 4B (wireless), and 5A and 5B (wired). Both use City-owned computers, not personally-owned computers and equipment. 4A 4B 5A 5B Description Wireless Tablet Wifeless Small Wifed Tablet PC Wifed Small PC Solution Footprint Solution Footprint Desktop Solution Desktop Solution Computer (8)Toshiba M205 (8)Dell Optiplex (8)Toshiba M205 (8)Dell Optiplex Tablet $20,215 SX280 $14,431 Tablet $20,215 SX280 $14,431 UPS (includes 1 (9}Powerware (9}Powerware (9}Powerware (9}Powerware extra for City 3110 $816 3110 $816 3110 $816 3110 $816 Clerk replacement) Powerware 3110 Electrical $300 $300 $300 $300 Connections Data Cablin2 None None $1,794 $1,794 PowerConnect None None $81 $81 2016 Network Switch Multi- $2,400 $2,400 $2,400 $2,400 Functional Appliance & WAP UP 1300 Printer $443 $443 $443 $443 with print servef (THIS PRINTER IS OPTIONAL) TOTALS $24,174 $18,390 $26,049 $20,265 FUNDING: Depends on which option is chosen RECOMMENDATIONS: The 1.S, Department recommends the Commission choose option 4 A or 4B and fund that choice with an additional $300 for contingency, These quotes do not contain any protective carrying cases for the Tablet PC's, CITY OF WINTER SPRINGS CITY COMMISSION November 22,2004 REGULAR 500 PAGE50F5 ATTACHMENTS: COMMISSION ACTION: