Leveraging Open Source / Freeware Solutions

(1)

Leveraging Open Source /

Freeware Solutions

Dean Pfoutz (CFE)

Information Technology Director

Indian River County Property Appraiser

(2)

Objectives

• Understand the Open Source License

• The Pros and Cons of using Open Source

• Understanding of Free Software

• Gain Knowledge of Deploying and Using

Spiceworks Network Management Tool and Free

Firewalls

(3)

Introduction to Open Source

• What is Open Source • Open Source License • Free Software Defined • What is a BSD License • What is a GNU License • What is a MIT License

(4)

What is Open Source?

Open source describes a broad general type of

software license that makes source code

available to the general public with relaxed or

non-existent copyright restrictions

(5)

Open Source Projects are Developed

BY:

• Hobbyists • Software Companies

(6)

Where are we?

• What is Open Source?

• Open Source Licenses

• Pros of Open Source Software

• Cons of Open Source Software

(7)

• Open Source Initiative is a CA. 501( c ) 3 corporation they are the stewards of the Open Source Definition (OSD) and the community-recognized body for reviewing and approving licenses as OSD-Conformant.

• The Complete Open Source Definition can be found at:

http://opensource.org/docs/osd .

• Generally, open source refers to a program in which the

source code is available to the general public for use and/or modification from its original design free of charge, i.e., open. Open source code is typically created as a collaborative effort in which programmers improve upon the code and share the changes within the community.

• Open Source License are License that comply with the Open Source Definition found at the Open Source Initiative Web Site

(8)

• The Free Software Definition can be found at

http://www.gnu/philosophy/free-sw.html Generally a program is free software if the program’s users have four essential freedoms:

1. The freedom to run the program, for any purpose

2. The freedom to study how the program works, and change it so it does your computing as you wish (Access to the source code is a precondition for this)

3. Freedom to redistribute.

4. Freedom to distribute copies of your modified versions to others (Again access to the source code is a precondition for this.)

• BSD (Berkeley Software Distribution) Licenses are a family of permissive free software license, imposing minimal restrictions of covered software. MIT is also a Permissive Free Software License and originated in Massachusetts Institute of Technology (MIT)

(9)

MIT/BSD

MIT License

• Only 20 lines!

• Liberal terms.

• Use this code however you like...

(10)

• The GNU General Public License (GNU or GPL) is the most widely used free software license, which

guarantees individuals, organizations, companies the freedoms to use, study, share (copy), and modify the software. Software that allows these rights is called free software and if the software is copyleft ensures those are retained. The license was originally written by Richard Stallman of the Free Software Foundation (FSF) for the GNU project. (From Wikipedia)

• Copyleft is a general method for making a program (or other work) free, and requiring all modified and

extended versions of the program to be free as well. This is the GPL standard

• A directory of free software under the above license can be found at: http://directory.fsf.org/wiki/Main_Page

(11)

Where Are We?

• Open Source Licenses

• Pros of Open Source Software

(12)

Open Source Footprint Pros:

• People all over the look at the same code • Potentially huge development teams

• Broader testing base

(13)

Pros on Cost

IF a component fits your system:

• Save many development hours

• Small customizations may be easy

(14)

Documentation

• Open source projects have many developers

• For them, documentation is a must

(15)

Where Are We?

• Cons of Open Source Software

(16)

Cons to Open Source

• It may not always fit your needs

• Training your staff

(17)

Cons: Temperamental Community

• Make sure you contribute back, at least a little

• This community is full of 'early adopters'

(18)

Where Are We?

• Free Software

(19)

Free Software the other side of the coin

• Free software that does not fall under the GNU rules are free because they have advertising or ask for

donations. Examples of this type of software are:

1. SpyBot Search and Destroy (Spyware removal)

2. Paint.net (Graphics Software)

3. Wordpress (Website or Blog creation tool)

4. SpiceWorks (Network Administration tool)

5. Untangle Lite (Free Firewall with an advanced version for a price)

(20)

Free Developers and Office tools

• MySQL can be downloaded at: http://dev.mysql.com/downloads/mysql/

• SkySQL developed by the executives of MYSQL after the purchase by

Oracle: http://www.skysql.com

• Java can be downloaded at:

http://www.oracle.com/technetwork/java/javase/downloads/index-jsp-138363.html

• Perl can be downloaded at: http://www.perl.org/get.html

• Open Office can be downloaded at: http://www.openoffice.org/download/

(21)

Free Microsoft Developers Tools

• Microsoft Offers a variety of free developers tools as express versions of their full software developers tools and can be downloaded from:

• http://www.visualstudio.com/en-us/downloads • Microsoft SQL Server Express versions can be

downloaded at: https://www.microsoft.com/en-us/server-cloud/products/sql-server-editions

• These tools are suitable for developing small to medium web sites and windows applications

(22)

Where Are We?

• Free Software

(23)

Free Programming Objects and Tools

• When developing a Web site or Application often programmers will leverage off of objects that have already been written. These objects are designed in C#, C++, Java, Visual Basic, ASP and other

languages.

• Indian River County uses iTextSharp a free library to create the Electronic Version of the Trim Notice. That allows you to create, adapt, inspect and maintain documents in the Portable Document Format (PDF)

• The Library can be downloaded at:

http://itextsharp.soft112.com/

• If any Appraiser is interested in how we created the E-Trims they can email me and I will send them a copy of the code and library used to create the Trim.

(24)

Where are we?

• Free Software

(25)

Spice Works Free Network

Management Tool

• Spice Works is a Free software package that uses

advertising to keep the package free for end users

• However they have a fee of $45.00 per month if you

don’t want the advertising

• These next slide will discuss what Spice Works is

what it does and how best to deploy it

• These slide are provided by Spice Works for use here

today

(26)

The Free IT Management

App & Community

(27)

What IT Pros Are Asking

What Do I Have?

Is Everything Working?

How Do I Keep Tract of Everything?

(28)

IT

(29)

Everything IT... For Free!

Full Inventory of Hardware & Software Full Inventory of

Hardware & Software _{& User Requests}Track To-Do’s

Monitor Troubleshoot & Report on Assets

Collaborate With a Community of IT Pros

IT

(30)

Spiceworks is a 60mb download designed

for…

• IT Pros who have admin rights on their network • Organizations with less than 1000 devices on their

network. It will work with more, but it won’t be as fast • Discovering Windows, OS X, Linux and Unix (but must

(31)

What Do I Need for Spiceworks to

Work?

System Requirements

• Windows ,Windows Vista, Windows 7, Windows 2003 Server SP1, SP2 and R2, & Windows 2008 Server and Windows

Server 2012

• 1.5 GHz Pentium 4 class processor • 2GB RAM

Browser Requirements

• Firefox most recent version • Internet Explorer 9.0 or later

(32)

•

Automatically discover hardware & software via agent-free scans

•

Gather technical data

about assets

•

Create custom attributes

like “Department”

•

Inventory non-network

devices such as PDAs

•

Compare two devices &

troubleshoot from Spiceworks

(33)

•

See software

installations, disk

usage, trouble tickets & more

•

Easily create custom reports

•

Export reports in CSV, PDF and Excel format

•

Exchange report builds with other Spiceworks users

(34)

•

Allow clients to submit

tickets with attachments via email or web portal

•

Create tickets in one click

for devices that need attention

•

Assign tickets across your

IT team, manage projects and view progress

•

Access and manage your

help desk via your mobile device

(35)

•

Monitor disk space, software installations, anti-virus updates & more

•

Create alerts to detect

events and prevent issues

•

See & set up alerts for

Microsoft events across your environment

•

Monitor the health of

your Exchange server

Network Monitors & Alerts

(36)

•

Ask IT questions and share answers

•

Join groups of IT pros based on interest,

geography, expertise and more

•

See recommendations & ratings on IT products & services from other IT pros

•

Get tips and support on getting the most out of Spiceworks

(37)

No Gimmicks. No Catches.

Here’s How Spiceworks Keeps IT Free

(38)

Where do I get Spiceworks?

• Go to www.spiceworks. com • Enjoy IT Freedom in less than 5 minutes! www.spiceworks.com

(39)

Where are we?

• What is Open Source?

• Open Source Licenses

• Pros of Open Source Software

• Cons of Open Source Software

• Free Software

(40)

Open Source / Free Firewalls

• If you were to do a Google search for open source firewalls you would be very surprised as to how many show up.

• So rather then try cover them all I will touch on a few that I am familiar with.

• Smoothwall Express Open Source and can be downloaded at: • http://www.smoothwall.org

• Smoothwall Express for corporations website is: • http://www.smoothwall.com/en-gb

• Pfsense a free firewall for both home users and corporate web site:

(41)

Free Firewall Myths

• “Hardware” firewalls are better Myth

• The reality is there is no such thing as a

"hardware firewall”

• All firewalls are hardware that runs software

• Most Commercial firewalls are based on BSD or

Linux

(42)

Open Source is Insecure Myth

• The mindset that because the source is open, it's

insecure because everyone can see how it works

• No software relies on the obscurity of source

code for security

• One of the Strengths of open source code is that

all vulnerabilities are quickly identified and

(43)

Where are we?

• Free Software

(44)

Untangle Firewall Free vs. Paid

• What is the Untangle solution?

• Product Comparison

• Review of Free vs. Paid Features • Resources

(45)

What Untangle does…

SMB network – the HARD way!

 Firewall  Email Server  File Server  Anti-Virus  Anti-Spam  Anti-Spyware  VPN  Web Filtering  Intrusion Prevention  Reporting  User Monitoring  Phishing SMB Adoption High High High High Medium Low Medium Low Low Low Low Low

New Apps & Threats

 SSL Traffic Inspection  Application Control  Bandwidth Control  BYOD/HYOD  Captive Portal  Future Threats/Apps?

SMB network – the SIMPLE way! SMB network – the HARD way!

 Firewall  Email Server  File Server  Anti-Virus  Anti-Spam  Anti-Spyware  VPN  Web Filtering  Intrusion Prevention  Reporting  User Monitoring  Phishing  SSL Traffic Inspection  Application Control  Bandwidth Control  BYOD/HYOD  Captive Portal  Future Threats/Apps?

New Apps & Threats

` ` ` `

Online Library

(46)

Untangle Implementation

(47)

(48)

(49)

Application Control Lite vs.

Application Control

• 90 regular expression signatures • Higher tendency for false positives • Not updated regularly

• Based on L7-Filter open source project • Http://l7-filter.sourceforge.net/protocols

VS.

• 590 application protocols

• Scans attributes and metadata for very few false positives.

• Checks for updates nightly

• Based on Network Application Visibility Procera Networks

• http://wiki.untangle.com/index.php/application_control_application_

(50)

Firewalls Comparison for Web Content

Filtering

To see a Demonstration of Untangle go to: http://demo.untangle.com/

(51)

Links and References used in this

Presentation

• GNU Operating System http://www.gnu.org

• Open Source Initiative http://www.opensource.org

• Free Software Directory http://directory.fsf.org

• Spiceworks http://www.spiceworks.com

• Untangle http://www.untangle.com

• Open Office dot org http://www.openoffice.org

• Paint dot net http://www.getpaint.net

• Microsoft Express Tools and Languages: http://www.visualstudio.com/en-us/downloads#d-express-windows-8

(52)