Tales from jails: How I helped network a prison

18.04.2006

Clothing counts

Get approval in advance for all equipment supplies. Make a list and check it twice. If you need something and it's not on the list, then it might as well be on the moon. Many prisons also have strict color-code dress policies for staff, visitors, correction officers and inmates. The sight of the wrong color in the wrong hallway or corridor leads to unexpected consequences.

Dial-up networking is quick and easy but generally unsuitable because it's insecure. It could also be too tempting a target for interested outsiders. Standard telecom resources, such as DSL and ISDN, may not have adequate bandwidth. A virtual private network (VPN) can be set up relatively quickly provided that firewall and connection issues are resolved. The simplicity and robustness of a VPN configuration are very important because the more complex the resource, the less likely it will be used.

Port lockdown is severe. The cogent philosophy is "If in doubt, keep it out." Depending on cost and need, a frame-relay T1 network, in conjunction with proxy servers, makes a viable solution if it can be monitored and maintained. Be sure to obtain the blessing of prison officials. Secure networked printers so that output cannot be misdirected. Automate routine tasks by means of a script language. One-click executables empower the user while maintaining security. (In the Windows environment, WinBatch is an excellent scripting development tool and an evaluation copy sans compiler is freely downloadable). Detect loss of connectivity quickly. Block potentially dangerous e-mail attachments.

Be aware that some prisons use vintage hardware and software so what appears to be a routine problem becomes a major effort for lack of compatibility. (Case in point: a request to copy a large database between a very old machine and a contemporary machine was confounded by an out-of-date operating system, a lack of Internet access, a lack of intranet access, inability to install a Zip drive or CD-ROM burner or USB flash drive, not enough electrical outlets and a reluctance to open the case and physically remove the hard drive.)