CoSN Community

Expand all | Collapse all

DDoS Protection for K-12 Infrastructure

  • 1.  DDoS Protection for K-12 Infrastructure

    Posted 10-24-2018 09:47
    Hello Everyone,

    I'm researching DDoS solutions to protect our infrastructure (edge routers and switches) from attacks.  So far, I've looked into F5 Silverline and Imperva Incapsula.  I'm curious about what products you all are currently using to protect your infrastructure from DDoS attacks and if you've had a good experience with them.  I look forward to your responses!


    ------------------------------
    James Costello
    Security Specialist
    Cypress-Fairbanks ISD
    Houston TX
    (832) 214-9799
    ------------------------------


  • 2.  RE: DDoS Protection for K-12 Infrastructure

    Posted 10-24-2018 20:32
    Hi James - We have Comcast as one of our ISPs. They provide a Threat Mitigation Service that we have used for five years now. It protects the IP blocks assigned to us. It was much more reasonable than buying a hardware and scrubbing subscription. You may want to check with your ISP to see if they have an offering.




    -------------------------------------------------
    Keith A. Bockwoldt, CETL
    NSBA "20 to Watch"
    Director of Technology Services
    Township High School District 214
    2121 S. Goebbert Road | Arlington Heights, Illinois 60005
    Phone: 847.718.7671 | Fax: 847.718.7673
    keith.bockwoldt@d214.org
    Twitter: @District214 | @techdirector214 | www.D214.org


     



    Let's Connect!

         







  • 3.  RE: DDoS Protection for K-12 Infrastructure

    Posted 10-25-2018 08:23

    We use a similar DDOS service from our ISP. It is well worth the investment.

     

    - Kurt

     

    ==============================================

    Kurt Rheaume, Director of Information Technology

    Wayne RESA : www.RESA.net

    734-334-1630

    @RESAKurt


    This email is intended only for the use of the addressee(s) named herein. It may contain legally privileged and confidential information. If you are not the intended recipient, or an authorized representative, consider this notification that any review, copying, or distribution of this email or attachments is prohibited. If this email was received in error, please immediately notify the sender by return email and delete the email. Thank you.






  • 4.  RE: DDoS Protection for K-12 Infrastructure

    Posted 10-27-2018 11:42

    We've been using Cloudflare successfully for about two years.  There's a single IP that we need to change for a legacy service when the migration occurs, so we know when there's been an attack.  This service has saved us downtime several times since we implemented it.

     

    Christopher Thieme | Senior Director of Educational Technology

    Oak Park and River Forest High School | 201 N Scoville Ave Oak Park, IL  60302 | 708-434-3275
    Crest

    TwitFace

     

    This is an authentic email from the OPRFHS Helpdesk. If you have any questions concerning the authenticity of this email, please call ext. 3737 opt. 2.

    GO HUSKIES!!!

     






  • 5.  RE: DDoS Protection for K-12 Infrastructure

    Posted 10-26-2018 10:58
    1+ on Alex Kennedy response

    The further upstream this can be mitigated the better off you are so it is not filling your pipe to your school with this traffic. There have been attacks recorded at over 60 Gbps most of the garden variety are 6 to 10 Gbps. So most school can't through enough band with at this to out bandwidth the attackers. Many of these attacks are a paid service that any student with a credit card can purchase. Finding an ISP that can handle this is a key piece to this issue. By the way Charter doesn't do this very well at all maybe they will help and then again maybe they will not.


    ------------------------------
    Fred Sharpsteen MOISD
    Director of Technology
    Mecosta-Osceola ISD
    Big Rapids MI
    (231) 592-9601
    ------------------------------



  • 6.  RE: DDoS Protection for K-12 Infrastructure

    Posted 10-26-2018 08:06
    It is a must have!! We have it with our ISP as well. This is not something you can really have on premise as the attacks can easily consume all of your bandwidth even if you can protect your infrastructure. It must be positioned up the line at the ISP.

    Alex

    ------------------------------
    Alex Kennedy
    Assistant Director
    Volusia County School Board
    Deland FL
    ------------------------------



  • 7.  RE: DDoS Protection for K-12 Infrastructure

    Posted 10-26-2018 08:43
    Hello there,

    In the past, I had an ISP that didn't provide any services and it was up to us to contract a company (if and ever needed), but nowadays Zayo is our ISP and we have a service through them for situations like that (low monthly fee). While they have several levels of service we selected one that I just have to call them and they activate it.

    ------------------------------
    Fernando De Velasco
    Chief Technology Officer
    Prosper ISD
    Prosper TX
    469-219-2054
    ------------------------------



  • 8.  RE: DDoS Protection for K-12 Infrastructure

    Posted 10-26-2018 09:02
    Good morning, all.

    In Connecticut, our research and education network (Connecticut Education Network) provides DDoS mitigation for all members. Our in-house appliance has allowed us to identify and mitigate attacks of 15+ Gbps in less than a minute, with automated reporting to impacted districts, towns, universities, and libraries. We also have an off-site failover appliance if needed.

    If you have interest in the specifics, let me know, and I can connect you to our CEN team.

    Best,

    Doug

    ------------------------------
    Douglas Casey
    Executive Director
    Connecticut Commission for Educational Technology
    Hartford CT
    (860) 622-2224
    ------------------------------