American International School of Johannesburg, South Africa
American International School of Johannesburg finds Cyberoam’s Identity-based Architecture Innovative
About American International School of Johannesburg, Education

The American International School of Johannesburg (AISJ) is a pre-kindergarten through grade 12 co-educational school founded in 1982. The school offers an American Diploma Program, the rigorous International Baccalaureate (IB) Full Diploma program and IB Certificate courses.

AISJ is accredited by the Middle States Association of Colleges and Schools in the United States. The school is also a member of the Association for the Advancement of International Education (AAIE), the Association of International Schools in Africa (AISA), and The International Baccalaureate Organization (IBO).

I am very pleased with Cyberoam’s performance. Its AD Integration, Reporting and Application Control features helped us tackle all our security concerns.

Mr. Andre van Wyk
IT Services Coordinator

Highlighting the need for a network security solution, Mr. Andre van Wyk, the IT Services Coordinator at AISJ said, “We needed a solution that could provide us with flawless AD integration with in-built Logging and Reporting feature.”

According to Mr. van Wyk, the issues that they faced were:

Need for Logging and Reporting

Mr. van Wyk worryingly quoted, “We needed a Reporting solution that could give us real time logging and reporting of all our students’ online activities”. He believes that Logging and Reporting should be a necessary feature for any UTM solution as it helps organizations, especially the educational institutes, in Forensic Analysis and Compliance Management.

AD Integration Issues

Mr. van Wyk desired to integrate their Active Directory (AD) mechanism with their network security appliance, thus eliminating the need to manually create local users and groups in the appliance. He wanted to map the existing users in their AD Server with Cyberoam. Hence, he was looking for a solution that could provide him with easy to use and flawless AD Integration feature.

The Cyberoam Solution

AISJ searched the network security market for a solution that could address their above-mentioned security concerns. After a thorough search, they purchased Two (2) Cyberoam Appliances. They deployed CR 500ia at their Head Campus in Johannesburg and CR 300iNG at their Sister Campus in Pretoria. They deployed both the Cyberoam appliances in Gateway Mode.

After deploying Cyberoam in the network, the benefits that they notice are:

  • Seamless AD Integration

    Cyberoam’s Active Directory integration feature allows the appliance to map users and groups from ADS with Cyberoam for the purpose of authentication. This enables the appliance to identify network users transparently. Cyberoam communicates with Windows Directory Services to authenticate users based on groups, domains and organizational units. Cyberoam offers two options to integrate the appliance user database with ADS: Tight Integration and Loose Integration, offering a great flexibility to configure policies governing how a user is mapped to their respectiv e groups in Cyberoam.

    Mr. van Wyk said, “Thanks to Cyberoam’s AD Integration feature, mapping users between our AD Server and the Cyberoam appliance for authentication purposes, is now a piece of cake.”

  • Extensive On-Appliance Reporting

    Cyberoam network security appliances deliver in-depth reporting over the appliance, eliminating the need for an independent reporting solution and minimizing the resultant security investment and operational expense. Over 1200 in-depth reports offer real-time visibility into user and network activities over dual dashboards – Security dashboard and Traffic dashboard. This in turn yields AISJ with high security, optimal network performance and helps them meet regulatory compliance requirements.

    Moreover, its Forensic Analysis feature offers historic user and system activity, reducing the cost of investigation and minimizing network downtime.

    “Cyberoam’s user based reports provide us with a pretty accurate idea of who is consuming what amount of our networks bandwidth and for what purpose”, Mr. van Wyk said.

  • Industry-leading Application Visibility and Control

    Cyberoam offers granular visibility and control over 2000+ key applications. The Application Visibility & Control feature helps Mr. van Wyk to have a complete knowledge on which applications are being accessed within the school network and by which student, irrespective of their ports and protocols. This stops sophisticated application-layer threats right at the network perimeter, ensuring Application Security.

    Cyberoam classifies applications based on their risk level, characteristics and technology, offering granular controls. The pro-active protection model eliminates the need for manual intervention by Mr. van Wyk to update policies for new applications that are being added to the list. Real-time network logs and reports further allow him to promptly re-set network settings for maximum security and productivity.

    Mr. van Wyk happily quoted “Thanks to Cyberoam, we now have complete visibility, control and security over the applications running in the school network.”

  • To Conclude

    Expressing his satisfaction, Mr. van Wyk said, “I am very pleased with Cyberoam’s performance. Its AD Integration, Reporting and Application Control features helped us tackle all our security concerns.”