Government Technology - November 2007 - (Page 46)

A government technology Solution Spotlight: Alcatel•Lucent ® Ahead of the Game Built-in security protects critical Harris County, Texas, information network from threats. T he converged information network in Harris County, Texas, serves as the Internet service provider for the county government. Operated by the Harris County Information Technology Center (ITC), the network supports voice over IP (VoIP), video and high-speed access for more than 275 remote locations, e-commerce applications, and wireless local area network and radio convergence for the entire county. With so many mission-critical systems relying on the ITC’s converged information utility, the network cannot be compromised without serious consequences. With more than 16,000 users whose actions cannot be controlled by the ITC, the county has learned security must be integrated within the network. The county relies on Alcatel-Lucent OmniSwitch Chassis LAN switches equipped with the Alcatel-Lucent OmniVista 2770 Network Management System, which comprises the Quarantine Manager module and Alcatel-Lucent Access Guardian, to detect and quash threats before they harm network operations. Plus, this solution performs in the face of intense user-traffic. The network managed more than 3 billion Web page hits and more than 61 million e-mails during 2006. That year, the ITC thwarted nearly 80 million Internet attacks and processed 1.8 billion secure non-PC-based transactions. The solution’s combination of content management tools, firewalls, intrusion prevention systems (IPSs) and other security appliances were critical to that achievement. The network switches and security appliances provided by AlcatelLucent enable county technicians to detect abnormal network activ- Built-In Security ity and quarantine the user or affected area of the network, stopping the problem before it can propagate. “When switching first came out, the whole idea was how fast you can move traffic. But the thing nobody thought about was: If you get a virus, an attack, what you just managed to do was move infected data at a million bits per second through your network. There was nothing to stop it,” said Keith Bryant, division manager for networking and security at the ITC. “The type of hardware we have now allows us to stop it.” The OmniVista 2770 can receive feedback from other security devices, such as firewalls and IPSs, and can automatically quarantine the affected network area or alert network managers, depending on how managers choose to configure it. “If we get a rogue device, I can take that device out of the system. If harmful traffic goes past the device where it’s in an area supported by a port, I can take the port out. If it goes past there and travels to the switch level, I can take the switch out,” said Bryant. He said the process typically happens without other network users being the wiser. “The biggest thing this solution gives end-users is stability,” said Harris County CIO Steven Jennings. “With that stability, they often never know when a problem actually is impacting the network. We have a lot of automatic rollover capability in our network from ports and different switches and systems. If the system senses the network is having a problem in one area, it automatically rolls over to a different path, and the customer never knows his primary path is taken out of service. “It has worked very well for us to be able to notify other departments, let them go down to the infected device and tell them what to do with it.” ADVERTISEMENT

Table of Contents Feed for the Digital Edition of Government Technology - November 2007

Government Technology - November 2007 Contents Point of View Way Back Machine The Last Mile GT Spectrum Big Picture Building Better Government Up Close Inspector Gadget By the Numbers Money Talking No Greenwashing Pinching Pennies Bay Bridge Bustle Two Cents Products Signal: Noise

Government Technology - November 2007

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.