ࡱ> efghnӂ/D60a E';PNG  IHDRΐ sRGB pHYs.#.#x?v6PLTE,3*=XQ@Fc[{qofΈ}Ԕڢ߱濶濷ڬsIDATx} ҭ A' #d0ٽUT5~~~~~~~~~~~~~ܚ^]SZWmuvlr55~j&m^H+YO 7Xio=tt:I7<i?h^*?j-?~=@ϯY .:?$@[w/5?#_#@ydo3?~o3.Gt9enܗ݆|B:Kx9|B 'κo.(? @]k/H}K=/JfkWEtAM)|}]KH?Ț?{MC{}(<-,32(ݜI=?ǭ4F y9\I4cS21܈7?+!%CE=c' ڱ`Ku5X0yj؋c_e(a8yL1l/䌵|_#v00Q̦0\8('F5U;?@|Z#Cm!~s/vM֖p;WmX,RNppBEpR汮x߳FgbAlmk גy œ3Xrd])e&)Pk&4 y `(ITЦJ |Z>cHq3Eeq,(0ܢ iR7Yjr-?d}r>脧"'6h7,H 8(8=+ /g@!!~d'NV Uu9\r!iWSOg9t~ŠbYdJ|MxĻOܲ'(p \W?Vdpn&.XAs {]6I6$-)0_sAsm?VQ V`r 8k" R U # %Rc۽?dRiBp"WsZtK  ,%'%j\Qa'orPH$r)[R Yz,Ga0c6'J0q4?"k)P;:Ffx6y ,ˤ뚭(٘kbR2׿318JgFGtfqǣCEg02[XK\䤑wlVOY'^J*Ds8] >?V@ݯ>Fi .-vot[Ez&U`'???驞bqm ^?!HRX 0"@Z146: THX8]ϟ!t;;A̿O J*$"(lӟ :jx <3Ƭ ؕvt kMc.oaec5PG  +iFX^K^N`2^h Ii y1N( z"R& pMA0ۘH D$߽ /#۵IRpE:˅IghJؙםK\΄L4sw0AfED!"V-6P,>!h3_YY>x5,-5;n,QUP &_;$c߶fJߟPW o0 9AH@X-9fv "Ibai,4/0;jdć#<\ϘhwP޷O N5 Q*2uVupk?…1vSෑ@XLtWq:Ao 4GJil_@!r䖊pb?~tLj9ē?EkZoB#vzAKg6a"◶!lmDul Yy Ry[猦FV !64.k;b$l? BaN gJ mExu6ywyl%$Rss.i_V D Eok1@KҜF'n 477M5/pوs6,]6D} ĢˍJHQdBpUQM(%z$@)%/^Lgds 5L⡇_\ QR45ǒzcδ;x؛ ?!_&5 .q_IV?I{ Dވrd~h{ۤY0Y^Rgd]hֽޢH f1w8Ak \ B&-(6y_Sv3Al 2L5ш\sؗC+@m"@1WD1,9kZ0hIe%0N `?^"V,{I5a`)*Pq74 |di>TXx[Ɋ #u< 3bWU,=IJJ4܂D ~Œin:,O%+!Q\fxD~9MALFhfA|M3 嬜㧽%ٽJ8>fj!/q>x۳.Ztuhu΁vLCȏ&[T?B}ғ|(h)Y*Z8 u˅7@4eycB7:1[^s*>?5qފ;( <+/ b4 tgAoKNaX^Y2VP2 n8~ r?WX.Bmsk"x7!"H4Q!nv2T1< Ô)MܘL)!HIl <3H}śuB)mNbI91 \Q@$Q]/8_r ejȴ,c9 B uj 4L*L7QR{դK D\ 0mBIZy7@V_*Qٓ)3 g?H AIEYp3e.Y/!+'& /\y&2tkS?fA<<=s,+UJ9qϋi o I s`wWI`OPyP0%0v0o0wu_ 4$XC ]z1.U 8iYmPσ4CA'b$E_~m` )D"bd%?JՑYm@_£ Ԇ>z|$LLjKï!aE|僊GE@H!^|ibqHADa uAL*@.^Lp:^hzIEu-}^kkz~z@jw*ȖHf`0iJ&+-df@8n ^Qi`T9(& And-8KN8K&(xVS8Ұ-<}nTw)F s3& RC"OBcv:U&ޤ<̒Q @ImFj5c;a^ T"D;Ka3(`5SiHUTzLhj]+|*7[Gb^H.6_lCKmW*jُS$~ b* Vs BC ;o27y1tb|h⪕#A LX^E98 ܤz+$4fʁL 8L,"g5CZ$} yAJc>z 1LMT >oDǃ0I'wUb R#E}Tm';!)I@4бbEJ~,hNb!e! ta/%+b)JL1ٖ,imDb( bLDLEy[HF>|dKrj[ 26OvLʺm^=Bi-/5D 21~,:C(.PA`0=8j_$fES:$yL5CJ*dW^]!OA=C4W_q)g1R$yӲc򺴗8UGIǣA`qfJI Ndou:ؗ uMLcS1w.63gb)P¡K,@@x7>̋Dvm!,a9nFqA=6jӪL5=Q%|JPSWj+R) xS\M;vܐ1.XF Lߑ$ Ɠ;gɒ7.瞒 U(XzɹoKhY7dtxA Do_2HAҼCw4/z|M? ] >:9yuD\h|hH@88aܛOL-ձ dlx >jIq]=(P1dnx ]yRUVG޹K*p} yC͊Dw3)%em1dı}MOEg0<R(G\Q0 eNc$˅E#\{Nr1EuZOT2CEf"}يGG0hWpE(r Ij_jzt ;$e9iP<zbe*h;S?qA`\'tҥ}af"ۍ$ 7cIa9rD5#\ 2FA8WV\F(P;?a0:&3+,"y5(~v5)KTpT9W=P@b|bH2^w77`>)\cu E|. ? ;L.s;u2-` .bd>չ{\UX,r 9=AƐQ8fg>>qĢ H`W=i=,#.H,3a ~8fEu|Nv6k 9.!$OrX>6^e#6ZtXt+jK3i9B0 !ef9q>I5T/I7rė]ܻ3!*x@XIQb67v#>`jn*n!lЛ7)WzZ7qˡ>B#6#4*m(- ğA;@1.&{AOP@D"bwzވEi.p[BmAVJR`(OYBbUKp?jUZ%#g7SVp`LIhʥIx˾hs$rIxW4nLcf6}~ؼ4s`kLr@ߋK΂SҼgD<`=bfAwNC?n OEgP&Y=- Ww2^,O[6_ G'C̻#HΜU9둈8 !l] OևuhE)L^`fV#얍]вQEDo:(d9f@]L0U,r̮!fruvs1&p؎) 98˟-ȏ)uir7EST!^Wb$M$t rsP88#~"X9/^[` ]|1 At}}<3JUَAٜ-3Ƕiu侾MsdDʩX&;PY1CW:vE_W.#(r RSro@y 陮 K7ŵ*{HKy*6TK\%-+"m#!n{)RIsq(Ud)ǟ?^}ƨj BM4jU 1<~Rq2cPIL.09>Q>bSf$O gˮ Y5]?=2^123 1R =n;v鞈7p9f3®H[:WJx+&(~l[oRFpg GhqJW`̱{O/ o0=Չd%; Ma8)>{ExNE&ڦ?H[AX aɢ gBÜà}f2cWW>C@` XMtRE4=PȰón&*˔zYE3oa}WzYW5SA6q`;gݩ'8D&^sl`RTT$g\kz7&?Jм2W'&,}8ҍwFC"ѷj̵NTO}l d_))+;ٿ=+2s{l S͑[䱓 j-9C-iK?s( T*of8)98сuT}K$%վ#0,#!Rs*q= SnV/}w .Gx3#rO;#kC]IV|kC#xrzՒ#ȋֿMu^ dA҂54*Edw.kx^ʼn|[.ǝۊ!RUk"%+ {O8NG0V# %7!)mkQ @3e{?mD-O.kO=>ȉ_A`}zSO__ϳqETϓAbP73(\ȡ|ȳm9aVCTM;IaǒxoӞz6=5UZtV/aA;Mu%mHP| s /!lh ҃;l5,t2b'174(]!<A;S_-%ղ?c.aO`hXEЬ Cѹj4^2,M^{@_2 3N-:3/w UBPJ0z刧uk.}_i˝'`',PCXWX0 V**<[@țPLItkL$C:Q1x FùcT@.$Wk;,¼!r6VZ%e-Ktmᜏ+X< W:H@"_n`z* )4_^uR`bkkL5mqYz}}w[}=Ma6 k:n r\ 6)bf0=tǵ UnP]]͈n! yC޷½"97p(V1ޅ1t>&|umEyp3cp:U|",C SC*FDIvTi̭$/;p _);ɱrqaWc$H zI0u%96֑̃ueI3WT'P@ZS;z g_ g^_I_pq# Ǵ[MM pJdGڏs~շgz4GƐpt(lqUC^:b%_ Š܅0GKYdp  w..K N:~p|PV*Kj1seR/NٿU;0D>ج2H}n1^v)dPp>PaH x>@ݨ~#quu~؎MĄ3m`RnSv+\j2|$" 3j$C؏Qw_IN#`h/ x$\8 yĎAes?jʡ<8w:ႿGڌoSo_A٭1jms/HzyBOT`ԫ:+}fnW7B!}au ,D=! Ӣ7J08wWtĢ+zQa26T滄۶aGݐ8R3ZaHeț)HeZM"/[ҽx} Gڀw2seLUU]i79 ͚B0F$`~JOUjb)mrf`pι{! O (: tX;` F&8 2UX"QWP_E,m3Gv}c TV}a4= 7oW٩׹[/W&O0/-ҴApX:vs37xA3C;Pm*2eAqwY[nu=S#,b;9; ھ*Y"/[/ û~Þos\= w_"v4.p/{yN?t_| ´8Z"g1l0? }ZC,˃ ZrK(DAGF24RB"B9 Lj1}7[b(iXDH`0S_ B-1q(.gCdn`{n5 ,[v- rWW 飑@4wyFv/n4Ob {;MokZ ˖3* L8~n% G~/TܻsrhVA!6ZY$.=.jd*.4JlCE{&-G%!m[U빙WY^vb-=q7h56)Ӧzه.mcΣPz"-`Z_Tb NnF_BY ˵46y=wpv @빙W f=Y8ge$zhj6Yv䩴%  nG,2֚?zvIIl)AQoB̋!K0,Kf^TDB{>RS_XGSC dY 8# Ugɧ]¿|t!tBt^.iчAZ+3kׇCQy]Wf$Jܽ%hͼ YV Q4Yw*  aN{N#{Jd $&&|hBtJ +lm0萤2M$Hb(tʉU!կfwnʲ2bОF:#󮢯 ;A^c6َR9~ & BRvd J06lp> \ŶRd6c77.<. ?3* 9iyc34Bae<I3#{ TOeX<Cv97Amev{6xOVUfdQ8غq{]79%௷;TC+4?Mq7,\A]m蝫Yv v{3ؕ,%X}6#͡0Gэ#uQ UBA]d(VGF6HBiO 3Qu#T*QYE28Q6hfI ]xUT65}a[ϕ/<7z$@RoFV=z% yS@QR]/wnL7Yvvkiș:\Azby#2c/sFsB5cpFTlL'iBn<6o"R}="lv] }@˻va|hca_ B`.Lh KNFl>ԙLL;$ažfo&a9yI }C0Ciƾ/%iWEfcJE<|Lhxm[A(5Bڔȿo|5~ȍ%__; FwȞ[NWxY;f ).Fa~NᤨS<)&sf!Fp$b|f.G ou"@]LT-?C *ͦD׆֞{z6ٚ#ٹQCty' m% Nj&jH@F^AޑwX˵w.NBŠ j6w/WɁS_Be(EoQgGi}j11_8v"挊V ᆲ]@2pAʞ]K{Pm&; 'œȀp}D8˺:Grsr\!na9^HOcE@cD{.Ng\r\mOI%WqGV,H|f,oO &eެ,{#Ǜe &=y)"]6@*ޝEᡣCjG%"@7,{.2=xV,a[gd0d$qm mv[H  "뎷Ct]M=+IIק) 6>K6"qnK0M/ڕNZ^o`/+&1[z:uxˣpQBNfn:׺7hwA3@ DA1ykXUw{#\1fN2H†xBQ.7AQ(vԖyϕ) [{Ov}..( SFĭ)ATC좍[?98g!3;|z%;$?>d攓6Eg_c a+3CE K{0J4aC/b& d?4,Y 7HrE t9geI0Pu`;痘›@X0NCb3'/b/-7E0)x . 7ڷQ5$N#FGx&{,ps.\O;A`pn67\´s[deKUP)܏A]"D`'οp0b8Φ;L.K!P첓Ga ?1\⸙E\g|̭Y6MMB&PUh 2|[RtBJ2mH/^}Tn w悳[r1A$Y΂ɺ`{tHO;G99VL1^ sy@QE-ϗ_ q-{e7msJQaz|DQlIm+L- ,=BuŋttFIxVk'_ vM/+tÆʗ>lC]- ϢpL%WK!i+=G  5-E55q}.aOYDMkcf_|j\_nd[ q.RvΓdMDe\T&{_` aL,C8f\lڰ<n/ sHR+vcG(Eŋ}l>J5[ry巙;@}*;LuXRX!nVJægn㲍$Rt(ѫՄ׮w̩H s.y@g`N@{(_Ezi47bF@[]7Ȯ[%ܨlH G)j^sAiudZ Q~Zh^!>Sx9LAD ޾8B\y?Oà{?_㶧ra@(D-FQE3Ase[3!sAx$5ܕH^;*"`uOBpetfmAyJ\#Nѐ:6ğ-mԲB[c_RwXaZǛ kڄ[*PC >/%raafΜDs:1C4fiϾu' Kk]LoRL m^ry8K@"89wdd1AS3k;"{i,hKM)o2A D$Į Lk֜ 4%Y Oy鴍VDEewEOSt1%VfO:`reJ"b'E 9/>oBć"©\0B<E-K mmV\3>뇓WBF, 6LNM3B v|7DB]N͹ g售'ݖ4op#QR/[-w 9ahEoZXy) BP.piD3 es+ss|ciB9d7[xȶlP4;g;GТ4%68!M?K[&_/TR[YKbl*%eR8P8@Ϝ7($5I-WaVF{9MkszÝրyDL_;4CuJb f54b\Wx Tϛ6k H# h'XJ)cT^*]1Q^9,Ͷkں go[8G1(첣ebV!W5/VB6Q9!o0)0]"n_mN;hZm$`CEɌ4r ,a[sV|vSxїBk'?(VJ-TZ3/yEcC6gnT vrBG]"c^UzSĽJ,B2ՇWmMX>]ViS9k@rM PGj{'JJc{F*%.N7͞RnjMwֲ@'=f/$0 n/Z{ / eS*v@,5v EF f6G]ZjlvB]sEL(mxi@/psؚs`ZAvqOE6Eˋ.@\]L_ᔍMyB{F~\yK@b[}nP(W1qórѡ> 8bQҮRkmbs;/ah^jV4WBW7N ze_-Pin lzZ[&9j^R:cQ_UaAr(7P&͆۠浖m_ yuspW"t}`ڏapDgk,=4.yo8HtOo(m^$2rG _썲s/#SC:?7gOV1HN yMF 0X h}lcn>"aH[5W"*١'͆p:U H(SW2oKt}BӾU2a:ϬVCU^ %(sN3T\0!um_ 9mQw\`fHT0*)48J'Fpͥ_"R"HHu6'. fVh."\COy?ɔlUw}c541Q誌0bmL 9jP\-)`.M3 ~tWvN&iHE=% b~]#"CTfmihOfUKS(9k7w5se`9тw(juF`d,wDkQL|4("]{? !`z:W'[2L,DAW un@͜!Mih(e0D}~%T[r2aj0Xpq!GZX'e&U(ɔ!mlsᒽDXn&A Lsۤ4m+:l v RT 15T\ WG# 0}웼J&5})\Ғ@o fs6vP@W4SJ].Z7#ˉPf +I:7W8x)/ZCLuNk5maa@tH"(x0RB'OnBl׶|G>ɞ 9i<\M!A io~"IcK5t-d|O0 EDA y!yeҗ0q"%CyWV`-uW[4~wYO*U/^?eORc,Yg$Dщp)G:cL/nkΤg(CݞaMEg@4{q@g ǦxEDDV8 +CPJv!X#[![QP67v0O $yfۣwY Xm'2 g&4a./^mw,侗Ko7@Za?޻v0Lo&Y{JxPN1% e=@3I0g/ĉ-=,TM{풛Fxc qfG >\dqS;%:^YPmojw(we wTxnqQH,n!}!)1/2?HGJuu0ZTM0}!X#~Sh`+[C0_ W987;ڝCUeeɀ'fB>`Da.Y'-S^ر'"X#05'l7 o= >#Wq~"Rw wrў5~KM2C&{h#O{A8f"<2ƲW`}%N2 4,Ű2mܡ'T52ֿBlOCX:-}ŭEzE>E²kd,x1M}CE ͔<@ZFLEcɐ%0%dfF:vaӴ&]@HbtB%?0?.lS=za Xkb0'>BsrKnKwؓ3p%UE?'ѾQsCk3J F-N -/2y'pzI hBRS Ӆ+QĄwy]*ہ YkeF]?gn#fc3xU|*ZPƲ-n* f |=z0fqsh8GAF%C78YIV"'tBe`-H{Bf#kvQzB?{`]@;aZ]1cpZN4 SbzWу z"Ղ,kSby\%OA!+if rlat n2X9ΓgW@8#jS8֪З +1f1ݍbJCsSA-JCIAbR8}V嶅0DҎ m#]W-2AKm޷"LaX.zz4TXbx ^KCY/sw)Kp4e~-a a itӱ|}fTa 3> kK03htNa.REs'z^ (x| z)PchI@+hț;?#v#e{yIB@H|( qSXA [uHQz}y#5hPXF;<1#8#L66@֦kzڅϟ-YV$돮y\Ք@hnE'MyLa! yxQ/9gvLb8ǃ’7 d2eU{F k}eheM4?n :7B` a"K'iTۡ#٭50=A^ *E\zgk%+07APs~j `ѵe@Lrͮ')ujCЉwեYTz{~sKk,MKy uP(Ҷ/W/[**k"io8O[ 1z٢SF"'/}HdZITc~ jB5SZ7 oIwŒ{O'C; :oNu cmRyN*:AEQŢ@D$E5q}>2 o,ńeֵrɳ"fpW(Bf߷`ӝ)x(qZg4$70A?esHs"4E/| {N/fiWw4<ƎOen̐G1Q $Ⱦ܄@vO:F S G͡-icOFw=kEmE+o: WD=*OoBӗR3}bmZs5OɀxpCag ٖ A@Fؐ9Vm{,~tmfzCR3`!Q-3~DPX ¬M <&݅ۯO:T7&N,O,, 8eZ?T.bwn ZeŻ9ei\Pkw1'udy.HPX \QCSM%e™1 9fض6o aruNr'=Ka{*֞,8ka5cyTgls{J2#CHPX{( ı+$(hjPk-h1 <[ 3_e4]ݛ;'>p-'x/P|\G*>ȁBfl =fLX>bD! @qw4E#Z<9펆̗M|Fw=cB.vUFO^b%D,:op{*(L'LɟˡTL%Ou CBp*/Gg34y,pλKK/A.Tk9'iF(\ ePyK˛AS: :~8Z3\ݑ<ց\nu?ZY>*RqLbsCi'@*7ax3@8N%IhqvAwB]3|A8d"UCޚ"C]so' E1WF5cA`';;U\Y?e/٢A8 J^@h0@:K. #, -l Es[&A7ޯ.EÏhO6'h`t޾fdYr4IU49565`x,PݹE@(Ujې ,śufME̋yvʉ܎Tɍŵzl jiPai4:S.1Sm},S3qm&Cti,UGގ`%At)CT섄ѻSN5!)S᪷l0"􉽨6fjM(+Ё'&"|Xߧsp>me?@X&с1]!MED1 25 VXϳm+_5Rfسnqwb;rr[_iux{Te&`kPA Z}W.S} ?sՀpJO !a P^-7:=>1]/oo %W. T:;3(.]'B{WCU1uNfZR]_=IB4ǺxechMD$߀±r8t?Jqv2g QPW).0xz Sh Y}c1'?8d`:3=;| ׻z_c4YP[#XOcNG_#w;@(a>aG7lMy:D )KmT'5dۍu,xڡ0~j4 v`5#"qHEHt[A?6r! -#˜ @) PuvfNs3 'ToCJp>_Cj(NZ$%F:[1~Liy,ADfx6(G ňH,ű- ȚPѓPE|C½%FP\T#`=;Ri;h fI"{}'aP rd;"EP$v4urUPO-.TƗytJ`?G3(`kZ$dxTqYe8'ѿ]µv7{5/!s)Acd⪅S ef8$~D,ͨ N-rQ\ s_B vNn"4N櫍}ꋼ2hסmS:DL[AnzXUI[a(v,(jfS$!"^cpyya.+؛yHl7,0}}Zowxes~gDrkk4ӆk`C;ڗm)jSՅ z)@bMuS3`fA? \aZyE=@Rz! >ˊ IklC1?\"6$B3+ajhk1= >Qw\C(6vvHASaN($ǭ|ô9@ω"ܐjSN2 /ٌT9& Umyw>tíY{sr+u[cQm@HK ކCQJ놦h)zv14uSa[\T˜a"if5ׅ_Gu5+bfJg|~6ՊD5-O0{7şN L+@T6,0~2W)RtJ |J(qT <Z*" 9wyKLK|Vå7=?el _Q࿵ q<F36OFDΗ\zt7\`R"m #bfPSxCvf NQ?q4c5ƴ 2#[6sPAkn*X=f92}H8{A u@ݶ  ޚMG}ˑs$^O)USн>"A8bw86.u Yu:bn`FTp+êBs帱lrvS<2P~PX B~D"9#ޓ )_eCx4 ->w)0 N V%JbΏ&sFS_J+* )P!Kpypm(9ʀ~d*0"$u s zU =6չ=V/-#"auA'ϩУ{"YUT_}U!!o-k<ѡ|t;ݛsQl~Z`>/N勴cqPGѝ_.FlEF?1z_ )/|^f%fSMc53YV 9 Į+6(.z J ޗG;>gk6CS3~LMCala q|t :[d<j"m5"ߵ3h`+h5AaFMˉ3k&#.a^ajTUdtCf lw4!*zsgWF߅G`65o+d5{Tbƚ'1,@3uCk!YΗ!K'%IAI[ `YkF")k|Ȥ$PuՖ ˗3,(|9 E>d ˑŏ&7욢O{)e K sA-O0ߢe]QL{b-{1M43i]B4h~%ډf|A,I 8 :Sh%Qy]D G-7Fȉ`.{v0tlF=ѥ4@zt=X^iqlc)x2/o2b4@W J* 7UWUA󸬤G~z4itXh b(Fcq`[Z(Kpj("cyda acve`!3bSo)bq3d%˸?T'B#-"i24}} dU#q9Cw`pA8%/hD0A{,Џ^) XY;9 #At:gb @'& 'bv2Ѵ !gIC#J40G|XgNKvLܷaUtQM*vf v /S !.빈qCQK;ʝķn)ksA,fZH:XjHpjCtљ!DDtICɗsޕ>*n E@FU8Sb:QGl |:\!N2bGf6 F|lH TgDu\3 B^k_fQ "trq0_V(O81WD=dG/S@CY퐭d D97{NRþ@~@`pIŽO`pSVGhKqx &ā}[ΛlH E /dG#203bF{$bQ4(M>6:|-I%D*]]adEb uM Hџ!33e"{*KTRA Jz[t|ˣ)s |p̮.n#g В=/I C*Qߌ>>QX ؁mYsdrkΙT3-fwRvOf`r i^*jf=3)#;K_$a֫]2orA| &!?6$@v0[*f48bԑJI0Ԁo*ҡԤ`@$V:!Pq[C.CV|$|jHUPen`GC欽KVX vЬ|v#x~ ˳;-<.na_ȜOJ[ @PT1ve 4c⌣֕Os+ L5U '>Y$gQ ̦G.SɌ4nˇ@0hǑݿ-"σXhd-0wIN?Wߕ]jXzmΞܐ&Og("rTF\*wa|sӪswhwn6cdŧl!xTZqIl "f?&W(2C C3O:P$ l [$mY<y9eIG b/ B@TCrKZ) o_1HVaG(|-" 7Ho/M_&9JJc zirH^%!dğ!Z0Z06o܎P3t_&d9t{e:~x9 #ig0G(RW*D(D TE^]wxoBՙ֎֤|c~E(D*$lD}AgŮ%˥-x˞(xf"+~FXԼTDR?:=KhX4n8W'>w:$ IIeKEKy%xXyVxDUqېCB\6u(3(!!Udi YZ,EVƯ3fLSWzN~eV~sȒ'R- ^2NO U'98Wႁy4~(u*,EM$&z)%~ZJ%9aZ&2<#fk+P.JIav_˰kX8w3;^}$U*ʫ@4),Qllw' M!6ڰB5-ҹ˙#G6 Q/Mr.#m3pň X1[AH5sGCha1_.YkMݢ+* >_s|*Ҭ6C ʖ?BxŹzkkK]uAFpaÙ'? X`US%ۦv޴  -͖B To)&z,>0wPp.p^[{dmK%U@^axSM]΢(^kaҐFݪo)8@-Q:O$ِy ޼g҅]=PVWpXwxNe O<&‰ !cZ2# [1aѮMmxǒ-F&FSOݰQt8m޻\y.`#w)`I|`hsZRXu-2Q6i rM,h6 ogtU2HfBuԩi-y.놆ߴRQՓ3 [lsbMIоXh_%M/!mkb}Ŷ$[jx{cj}Jolh1UZu!l5j &%GFz;O!t!I$:Ax>1Cм1U \0T|Ki9 +n2 -?6GvY5ap%.Enm HVG,CtB6C! *şqXPd⌫1%._Y@h9< n*EѸA.&¬ujfRK(2{|~5 y\+8ӓ=4;ڡt1+ D>O5>t-_ZQI۪qlw+4˻o6O pK]css~ e>J `+qıFjč uvMk& WՖK_lcѠ] [<5~㔘;@ܕp+13=^B;@H:Z}Zgw=a*IG.i1ǭ_ŜR4מ4qu?zK_ ~i" ܒ' V8T!gb:ŧ78W@\OH&LovBuڽi:dl28X(.ڀm(/_}x{Avu1ojJ@ /ݖY[SiFQi,0"kنo἟^* my7kޑQ_ehrE4k(1CO?O>M-# GW]"Vq}!`"'⤽uчvGU\@FBpᄔ!UO 1AH>EkۓOa 2)L^ /lt5ȁ )}*w!`3G 5#D@Xo~zYjAHn~KCW&`^\IQ9 Qll#$kE]*PHon#cS Bt 0ngCA(ΤtOSkI&;Γ )m!%aR sL!GdTw[7I3;΀shJB*_9 WP~ >c _ֵ`{*#G9ѹ] n~~cK lj;F@-BִX!!3Jw "S&S.ޢv#m1V )!^ׁj Z]%@??vm{88n1HB`ۧG,+1jSN2Eg!C7t95yBjF=_,zZU/l*n!>jAɩLw@h<7kNOCڳuB`ڳDzF~+FaN%?UZxz!<{s25%}q8&dA6G+1#9gqb3y^z)o]I_g4Jn@dڇ9"_0 @ئ~1a ms垛™4vtB h]Z?J;mBn1Y<SLcAt,hICEVƝɃu. s[s!ݞ[@=қۄ܀ֱf-ҍL)= %ִs$0@R)T+Yda[5chpig>E>P iO>|_]WEO6H-7Ȫ-̞2po(јϐ@ c%th{6p$<&a?V4Un hw0]{z9tO$ޝaZX <奍íɾ;S8`K]jIna0N_B xpZmGHk% =ns, Co4 'fÖv薤0|CkPoTa u/!R! 6A}DIorC1b+} c¶o[ޓ54 E[ 9Y$z|/?vl?kӑ5I@[T5A?P9pIÉ6`2-f976"4!?[iT0"WMu%,z?B\vE2Z'Ip0@mW'K[Ah8'wT g\h@3<(O'O 58, ą$;=WIY .u!F[HQ~^R_(x̳yBႨY 'N=&gWteBGy8eˁu|Q~:Ao_Q'R @W&p9aR'ƾ ̎p;??r$|p-BNϷo7= xΛ$sHOoM^,(wA86nA6I2T$;y??mPQ1%h{^Y7%kaoIwTD҅YjL:!3>O\X_V[]{.X]6J@jK 5gZG>=׭k]s?*רBmo 'h\vzĐ-H/FO{Mk2i<fn./-Ĝ@JFg$|a5W2әSZ>&ZQjlQz E_GA3E;sZ=(QcOeދa'.xłqTm\gB$(1C~m`pK^5_l`n˵<"U4K~āMV쑢ޖFv' 5=bvgA](!,]|͢2gTl6͹i2l'-˪x#8ӯBFd4cZs5~H1WtTօCGbIڛL >C~\·d/+~<^o? h)A?`O:;RpNFG5s \=.c 3Yq6:h7agdZ3*"tc|߼( vFz )"`Yo7Xyچ(MA@":a9fX/\&<g%!Vd*F!:7{٭wZ2?pk!^5sypg\F@I-(eYoi mKmBi)jXUMDQ Tw> \m{g9*nVc߀K(Ƈ:411vs?=R08I;^eKÙaGTЦ '(.] BP0 pZ!RtmeYDokuFYwu+&:&&pz|k(VEc<DL=پ `!.Zu6,@؂ K@ RtqۜDtЯEoE6^IܝޝLrnFPwk7l\̀ 1[/^͖Wojg2$nnedGEӝ]f=g۰[0mx v*UVw`/ZJ Ǟ ݾlD^B M)iL=E,x%hW;@StaT[[&(B*9nQ~.SΐA!{s'_kC6.?<W|KE2 l F!|$ r|ŧ8QI`4gat6ɛM/Q?=Z68#K7 "̪(C1ኬ'LG,Y>7¶2Q*'dH/(Hg18:vd0}jΗbL#7xii aMÔPNCk?纰X@Ĕ3)Ue2Q;Aޥ J>ݭ_"Q9 Ci֘Plϡu>mAc Ou{c'7ڙ̓Un.ON?0~ lٍV*R yeҍQU)-v4JJܼl*M_fe.cKN훳ILh/PE<q,?5ό7:SC@}t-q2<({GWݕGAi5nzLՀq}޼C C>MAT$Gܨ0]L!i>@uED6=3%?I12>MOm?0AXSdW\Uwo o-hy0b 7HV SX7,[T=:DZUNĖyPz 9 SP"(Ɲ6#)e( %e\e4[[J!M3ەXjH0DZoۢq T)Epm/7n}k~wI*Ÿ́=m¹I1 B-:sN70iuh7ĸ $X;h̡A U١@(<]6fouþHL;ƾQE^R 7ARVV w@wK G УTK3c&rnqE[Y` "ٯɸ;ɘ6Pm3$;;1Hw.-: hdB,GGx#ne7w)FqnjhlךR4qX[ٽke,є.29Z8 jK$d3(SF[.Hf]SL2b3,?XW$! dV/s] Ǎ I F(+?X>H|}͌Iǯ-Z͞ w) ޺o5F 3"4gHsYejeRV(ەM B|8ɄpX:Er&2y0Nl^!ƞIkج>?yx0>Ye ۚ(Kj4ح6y%.,8K$M2svHo>y_BYw2  Y g|l})G1¯k=ÙAA*'/R=̺ c1cs ̔d{0{=K{ 1d2 ^?DX A4MYd!ꖜ3Ý;(vvv&< úD[_"GA:hOCMF Q!zò"",Fr+_q;ȧmBJ Rb&R2qߩV6itdjmݝ=XrG@1/=6,W.aHͷ Dg<54ʐ[Ϝ&h}+ːm GJgP3(JjW7~v,O~=/{$sIﻬgOrl< .I8=R-Z>^GInM"BgXbL7 ~j&/Uf0[hjv dHUHy}SACa#U_Lxf$sZx~GAᲗ@ ];{(&hMdV- ( bQ-;B%ߦ:·zqys|ӝ5}Ҕ~5v,m}qE*Oۥv0P͜~0Ý0Rh=Nrtsg?O\ʏdf C8.P$Qlech zwޓP#zf&%QK;1\YVJvAU(}T #;Mmo\[ )UK lbnU}Kp>~g`:`mQzFtGy9Bp1y*:ߐ$]Ƌ`^k*@B&4SÞ@h:c! }P)y7`:j%=@OeeEhEL=Υ1g:$GUou[dZeiY#DձJFcCD9lx}rff+> $)rsaqqK?DʭrCh dE#.L9Rj}03q( IR|2(l>M@8=>?wzjC,ZQ# u4 ^\a(;*>Ql*Qk&u;h֞J[ZKʝ:Iү ᚱTھvUG;-Rcp,apk M *磩(vU $MkFe'y+΅xh$PX9?اqA`I۸4 ֙23@m($N΢9Ǫn]E3%+ gzN^4@X*'(JofblHZ }ƣ]6[|za*عaꏁpɁP8u73~K'z I]#EkU D:j\^SNFKؙ%@M'n%۝ORrKV~ F\&GAy+5}] 3/SB›4#d}k2"9=i? IoA5™W.vŬO.I["s ~0 \Bx{%sG {ii1MƌpJ aX,BY\fE_;0=C ct bLy5|#|K;[f'޴_N"5#KCot,s!}5=f* 5Y7Í.ĵ*%Xɥ _ꏮ}dM殺ITYx>;2 /"h=ݫBMCE`7.~hNv!5<ioJOBARTmC+0KbKؔ5{+xeyCXP& Ucl)ԼAaEBZWa<'l,Pn}biFߖÀ[01_<]T.ԿWg+z!&N)d- R<ӠR4~ldrYnZ8YSJ^Z@І }Bz,AH1a{XbT+E>߶Z[cr%lE B)J!w9tB\49KXخ` tLDRdz sq]򣡐1XK,eJ䠯KxYOl!U<*1OC\s:փpnʬ@%&}D _B]V ; e-o%ppC>K~^S6EDr$K1җ:/bfB_>]~Kn'[h l1RhjlÅG@ߐ  ]pcjՆ1N)-nvc1SGصVթ}5JwC9~Ξ*%jyA>{QaYe U_cBl>NWPb_<уC&oJ?*aC]NԬ!ȵzFS(CeMd`/іЧ=3ǿ~/u &2>EZ5EǙ\:t65?Q<.odz4;81MRD*{CB L!R*T6ʖV\f GxOa §֑ t6 cԃ^MW wi +?ĎW) pxwpI?!/G5 ¥+xϒƣnd1@(7|J4~T-x UFUKMfغeosշΤ E\#w4c~ffF1u1V_pSX#цx\.ƹg4zϋ 4*O?3?0 r?)ýB_RRpQݠjY$hR[b!CŸw) 3EGᦐJԵ&m59.bɌ z:#T35{d30S?V\W<[⋙0!d7"p?+̤[[xTXTͦƺ(5 SކA&eг t)P+Ib@DY#Kӏ$hܗB 8c+@(noګK )L {,'=ɰJ"oZ2* |BaS#z::=ȋ$a6+7wTظK./'ϻ}CQox/a5$"yB)]) O)8uI=A[I%* d(ki~܁ևn u7bÅKJ '!\Bv߰7z퉌{(2*Rkki0k5f9ѵa7׸ܴT7n x&kĺ!Mv/bEM!`͉z^_Fp,аwvCFMd믱Q5 YMg /rrS <-:z b Sƭ67#s# e9*˖7zK]bMf^X~hl\0gQL=E1X[y޾o'$6r K$aG h4-3_ ky"LlΣ&C"կ!L.o^ (yqɑ7]ss<8W:ow붃aQh:P ҝְQW߅jղv`fh*Ԯcőo2= Boƣ < uիUS~86$3^hLL֔^M(M!QAUN٪F6$Z#B&$4IJ銼9Z0;<%U=̋+XsPXЖ݉c!m ^TTt1mN4 ;\zwDuJP!'p0 ᫅">=M7zE&}KkC/fm'iiL%]q@ y9l]>!s3(dٞ|*>Cl2ƛ!1)ȕmyS>%k+T@6NyXkђ3wġ9|!9;xy]O;W؍ L1U0֒hw'Z==3|9vD8o-WmdXԃk6yUEϴጚH)̞@#far{Teg8p;@? Hl~xBBK#+䄠Yv0No;r-e+" l4]1}3yV$Dau@] ]QcD7P6["YU35a_ zCsHӢfK=pC}!aG7?HQDon|~}ZLIIpi߻~ Bsz%]B F RtRl!rSʸ nP3F, PGsk|Д+iDЁK9XMDIN~I V <&o6y .n!xxuЏ%,9ӷC#esՄTfnQ Pb{hR Z;>Ez -@qIιhTTQ-KZ\2$zҠF7 GZ2 kT`&QH!ٸITwFT9MѦI r@K5i̥\ͽUʈiQ~A5ueOhQxi[Z$I3hE{L-_jC*ݞ\{HV}b󆷙MYB쏝>$y3K).$WiP7Lg~ՀpnЊ@ fRDk 6*U[2GhHYh T$c|ObTE ag8Ve@^¼E}f]P0R})LHFX-sI> B_~G="ORj/a+(m#{WxO5v:y8(5F )f=*`-\a|㵪cLK2 TY} }GzʜlHA+ަe)<ҷxnihO)e^[erUyiR-.v\J{P:Y iާez-w2@CЈϛ8e)0}{{V#hRJ4{H7dZT梍5*R_QƧ7`kMC K[8w ywX$j:g-)ޕ(aEw_Utm4({.nVuhwϼU^ÏGWIX=Pj[I¢l̀w:J UWi+ U3c x۲~YE$Ǘt-OOJ{c[n6|<\Kb%T ~3cJ7T\U¾zlJ-i>XN1i]Ye>mSDTFu+Ր&M֩#x9"~1izk2>ֿ@c&@NS=6a0?!jةmmK JIaK7Tg)w΂Y?]6BMRm:?TACM.hV'ؔ懊w0;j$)*y:T3y_-{wWhu_f󻠉nͣyOFmEqW~24J{M 3e@5Ք_C6E \@,_! A)^xBbBCZݗJ:R ꘔaGȮە#%@ l d?JOͩ{f9;50qXHxKz .S5>l{Er6=PԝyJQ!0W Jpo6sK)`iUtݲ)6"r4)V[szJHwCI 87`~tO骳 kWghFL' &#oRFS>;"N]ϧddu͵g!LEtu|"".jД5p9@rouTT\&_eWA|UH F-~àfxHD"AR|[L~'k4>-[Q1oIoA{efFה{qp 2нWpbP`84~MM6nEW g=77g%sڦ*/yBpmO.G(u'NB_8!p@05>y)-{z&)mf5Wu .CH({1fœT`2zn$YS!UA_'ζf9!ċW 'd]}?BQ)`5GSEߕ꒩6MИȧ+=+~Ƈ4($k`{QJϐv.y=dԡ5F|]&1O%AZD\Odm㠎b 6=]ʸ 5'NV-oJrR3b=ki '7Jy¼4AhPA3F >M52SV2ϧ3Ö]}C+c+1.&{F7d|UAq* X^ CZv9wݸɚ9;KEZ+v=.wy1=ʹ_wxckоm>iKs/_OW@j?.L!O?RT6''{){0踉ɴ1n'jM/HY}Ot~gnUk@q\`P$S>t;t@X0< =;-`U-(%'7,(IB눓5 `g4jd{-ar6_oxn r Pn KNh FKJ}nDӚib&*%ͅ ySJ/xX(J1R^}Y!'ΐ+uH$쮍FLRn#=[w)9[2?4ZKʈM^yҍo6袟 6N)r5q|!  7BWuq=3=Tp=_[Y L\Y.' -5tV㩋N&9n>#=ǧa9\ιH\Ibz3p͂)+D8CwݣV}וdܸ:L,0P5`e/})\ F7u D)@ taB`{㼶j_0fnl %ZP4is]r':o#rW'Yaֿc. Ɠ2 Vnؓ.B;k#4f-i mIZIkGlYNx\#EQ^}Zp!  >v!{e@X=wUOQm^ﺓyavp9-l2n6/7m6JIZd![U8G,ki i{*7m%VbJ/.WA8gI%=<-/S=nyJqm;_ոyh' u=5?! inc+~=IXrVbsᚥDJf08 5$̐*m^;Nܗ PJ ܗPo k }761L_ŴFk/Tz*=P|m3m9l'=֐P^asTB'͒h^hYE;Gy˰wɏ{cҘ>өOZ⇠Ur%) sNbs61Axʮdm7rwyY% ::dr'P\TNź{ 1z~z޼<~ Cke[ 33oQ.ު-) Lee'- <% ܁wfO($8ewIȳ]Bf. Kou( f^*Z]tO4RM̠5slu(Ɔ9(~fv&gk;$D<,c<]wnp+Py„ @)CbpVBWGVB;[P&Ka_j + 0xؓ0~Rz7?!HyN~O{;'~onuϰ$e60t,̉pgڶ]4g]F.ia߱RNL7>1և13&dc|ezE iXrM?lo3{.éؕ[]Q9!K9#NZk 5cX?el}0jnXy_NRڝAOc買.s\Gvڵ|!E ɘ\+r/! T44j}ep &. Ch9'w8!?h}4kUcH8_{z[Gu/ێ8 QG)׋!e_2~b\:WeWCǣ ӁJ=265W {}8%Ey橦0S6&Qǝr使0XZcj%gpVcg*s{ yݖбH&08PJ1=HVR`dv@!Oy9B':B{'Ls7lbWt\SL7|K OJ7_}hcg.M6XtLFkZhR؆h]QpЇ*TKTE3NÝ)^$ 0se 9f< nIJfS09eDt"`󋝷K mUR(\#e+:MSd™HĜBG)cnPboԭ]ieCԙN׶"Z떍gж9h9wJF>FከAh@5vaj'\lUͮL!'#wI?g GjE+A)Pyj'E'azdz~2(dLIJG8$gkK#d_q6U4~ciFka-찷аZLVz(qE8(i3Qp+4:h2nj>;XW0ty,U%ApҀSe ,͏\MgkT b $K֩)r tVk.g>"[NEse1 >U[ϊP$pH8"+[ Z%)wѓVRϣM@ӆi=3?+G=OvwvhBM]MmDo::֣VS}|+~BZp5z?%j$Zmbsh/T%gZWްprQql䎚MQ.V^h6- BWtkU C,,_M \P@ԅ{t~H;H=J|!l4qmaBڀ}?yy\hcjENƆ]i̵?'/F* wXbA.1ђX,>?1vX7ѿAOcj5ApѨ`:B}'~R(Ea5@Icn;ftv(84U, |o'kZÖ<2 hZ~sN._}'4{\QHLנs3amnUvpzLsMpT"}5  W#.UBϷE1Ӥ'$[> }ވXDWHupZ[ME4|&׎[V‹ $/u$ڻQRD-Hx;d !+/v,qDEW\w / qp x2oVza" aIzDW>BSz`ɓ7.ӀyY=rA#>~^[dx|(и3b;I,B7- 3kzkgrOȱ0!@2@:HҔ@'9.VI XPCvkxDuM2M񀮧ZaBm*N,WjEEdfkY_%{$sb_W&bQYGV(.@Y{t:c"60Pػld>N[hHf*S\Ӷ6ͫ8 |+A&rPoLw.P+f"hR,5Big9Vb|䒊[׃0Ҵq@R$k1DsݜQADio#=:Z 2: m0hk-n>kYD[#g>*+A ʾЕOM:o!tHS j{ܩpL$k 3ѢS1+.}oEҥvmJ X|iho6ɟQm 9C:eA> x0Pr낡l-|p/wFB萦WCyMhJ{,UxFMZj}F]<7P&^])r63&zkj8:)詁<ަc fн3FۙG29Ú;R%}|(g&|ԜvOf _[GX95D6L ;>Q]M:v}2'~ Nf%cV7;oa(F N~O BN%\ab0Z]2Ek[х<=%&·~'=b: I ~%1D{!+=4 D',;716'b'MeH{@z@>>[954@Ʒ ֜YۀS6?3*N#<~e%MoWbĄ݂X7al0}#dT3}3F5> lDw!tjr01n1G^[>f4şXp=V[6]81-M 8)٫q$vWYބB9b3xXx9$n׾kQ0^g7vh66`A_:}=fV V HK< `G0@P#%d+:tKLMY SU]Eh# (s^.)/ue [; > f|lR*bH'R[CS _Ռvn`^p9|1(KT47X-\ti,C0*!$X4Z!n#=y?bO^};0\gBڑ\>8Ƕ9(Gfa5r+NDv bYw5?O~o)y;X/?B@/O [†NIsYü)WZOG3JtO)$\w~W`,]v32/R*~<>*JJ(pd;WL; OQmulŌݽ;Kxu}vjC9(q?p؁ o `F }ioa QuVT__cJBzm/s0_ѽͮ?]I3t#!lyއ($q@jAqB]^;#x ĝ۹DỲoat/B`h7$}H60Rv;rmf<.QNmjaxh˖m^|5*!MD3v Ů,Q9$ܑ{advJ ((d!56\a3USjF4eBE{Y=yDwUͧ!ϫɦ{({QC/DUζ-: K7K 8 vv)F!vp)A-Ƈ>nʖr1oUIΡB=6+>a7&SִB߫{ypśڵ}K(x&W$+=?[#9 BJ{2K,(pW!3Fo]q!jG~Qs֯v,Ab^6Z=w<`L Q[ Ԝ!6.\`eBj]#XPm8a&<^뉐zn38fK^c=#w<+6`0hX_rB~|O v5d@؄u_Iqҁx]s@2^9t9$ t3 ٺb( &[+~ܙ߫-X =G\z{|]|A~c UvNPTLyUPXyEwQuKgv"QTB0+}%8 rPjQF2!_E?*2cS.t,U> +JD:\Tm`O0~B0(Db%%N5?1{7 v 2'Ejv@(v[!t##3{Sͣ]]PYB 7N(b!= x8L 0SI!0KpvҢfA߈sN T$ƮxAO\INdeN}L~ґ)GYs+@46}@t #Fߧp,q\ODfl Ż=W_EF[rٞ4Q .@6%pK ^ۋ9DMsND=E(jh|]->/t qN`4 IohƗ͚FFbuCtUo|ˀ3_P{K>+W˽EO2Owz l?(Ŭ[MRA4-h m*_Y|T#M0̙.WM-8 ̭/9trkIӺ^LB0cPCB?An&9ݴ mh>=Qr5+U(oag%>`5~iB]l@qo/KjƳ[ 3~7?%=hLXFMt t4op@5ɽŷO2.7^R NX֯^` a!OٰMW{HQ7 罻|퓈CqLcr5W9(I9*wQ_^3m͔L BAzrRr _:E 4+Qg0KjM BƱ)t`MU.FKC/nQ3~ {fx [3lbohԕL B?To*.wHo('`p:=êN19^93R.0` alF-[%q)`Aa6` ѰrO^ !>W%LS8EMn7ݕl-Q(*|+4bdrjE6BG~ dlf^Y SlcFuLB@!K]Xm1IEf`pV~h<6Bo CEۍIjIv4OqXY勱!0 d36$||,P$=VQZ#L'Im+߆gI:OʁA'fP 1^u -X&i%}̝Kż@UzwR\! h׉:CIiN'necn~F!gO1:a `y$msU-n,w4R9F' 0CKg6a2s,W*}ϣevTuIɀ˫5"tn#imAϋdpg_;~v}5>zns¿m!RX/d(lը35T&^%V8Wx`5p2$ ~ 7ҺԎ:4s#o|V۴B9p\bu_B7 28IZÄiS~@9+yhrJ'Iݖ+.!4w֏wd\lHp=\S~lUؿ>nx4 AX:!,$5(+cd;ei0圡igE~y99]b^߂S:va6֔"X[m2́lEH" H15r."V59mTV@Q0 !(p7ގI}X&vozX)NJ 큕Ƀ蘭f 5 _>ה@&]K?M,KԉbfW[׃ bD@_e)3r6TI|_:CoǎQp*tX“Xzm;XHJl>raGMH d\3.(Xxfnh}< VVb4pfO#SSwK`J*Vu(~g !CyT?'Jw:D8ō 0t(joP+&3G hc!O Rse oryAYnzHT!C3]sVx*j">nE[8˪(6#v!18 cM i9CXz\~tt=C$M6]tx8;FЩ Mo3IC:Tb@ fЕkLuT7j|AB"Wp^USn&nn$",Uuӹr$.sW%SkMUl6COzgӣF͗|=xHZʬٟ^x-ȱwW}빇34fBJ3=f eHڤJ51=Gzt-+ۃS؝h6c,VOО?I$NȪswz_&E&CH5ԁhzԛnv B,茄6F5McHCQ\QOoWH[ "Vh5F;,&%2!QuGl}Eҿ 1BwlsU970CְHct@D jې1E+6Ҁ/s MGT+Dmm3x+/CHho8X[ ֌|B4dlgZnA =Dh]okUq}\+ q feMR#]-N(c?+M {xfF,.Ah%PsJTN/`΂PGQA5oBx g>su> բ] t C8 ! vP _j|wE9v% 1P6>AJЕߋ0dmBಐ6xrƹI;ʱѫEX-]lF IB @)+۩* 1R¦+H|#xl?/VcچqwH9zb>~1$1DÕ1[ ?>[ "[}RAפ% gB nTvuF\u:q8~c;W=p]?`#1YM$}7>LY0v1 F `02M5΅Z*>بۂd08BzbM;7-/ Ơ>*cw1 4%pRBZ}8[5>b-^ RGۡ C1uBȩg p#%3FUi|ΘMme&{oH7t)cBtx0yb3\CV?dz0Bv@qcp+0S~!d:|ޡg T*e49@ =Q0Z:_T8B;|мo}v!̾LCįaߔ^z3mqV[vݗuYaBHZ,J JG4ҤSۥ\fG芘m5028 b^34qeYuucgU4pֻD']ƺDmGab/XQwʿxVC9+ټ- aAx楱)j[=# w+zv(CQ|5W sآ:!Mi#.سs.z j'񉍷E0"P=iA[Ǜ>[:ƿCE_60l AC0Aen3- pUb87wPoGP=1$61, aﳍNodAf8e( O1Ԅ^-#]hsb%*}n髎v /(ͬcǛvYe#~4ݛjtTZ.Q] d3!<@:yQGY8&̥E'3B857^tWQ6J.fFX*jOK0̰Soʨ%GCC9l%73Fdx ; 24@`j+F[0:AwUl7&!<2rF2gЮHK>7*|AEL Cxi6ttoǰSrÈ\m) avrMWP!WDS3Mv+|?1?]q'dtZ7e $?;UW|F!LMV8RS۽;,e7!LUjØiV:nv=9!-QՕ8㼤O*cY_o0-z5pU(Cx)m6ϩc0Ϗ)ߟ&j0)wy]EI;Of?۬ѬdkKfҿMd!]}D]Du`򷾼!ID! ֈTI^F.sQeſZff)0iR-2ȱcYˏј8DwCu 1vB +G+ī-!daaaYXB!daaaYXB!daaaYXB!daaaYXB!daaaYXB!daaYXXB!daaYXXB~FDIENDB``!^m1Odv8G xڝOhuǿ3MM3YL45H-d%-FQdkkD! tvK\VO'1 %*H!0Dޛ]sp67GZoct8/|p ss<ҋ[ൈ4>J4k 1c{l}rq{|CswU#nJyT8P HKq31ιpcd1Y-n&'$!)T+Ćcd@9se/EYtyjU0\0i#Y&0bxLf#nO ̣adn' )dn̲8$,)lYbv,S֗f,Xaʺ/0LYzrqSԓl=96\'fɩYFO-0'FOy}WUc~j,}~_ոU $Re<#6׺+?ug kئPs@ +x:.#oVgǀ;J{xH` ,֓S_Q|٣O$Hd/F,sfS0#Xh49'StW MO  i 5)8{R^ Si6NPd2dpe( h4Z-[ֺ1+_p^9XRT!ɬ*x6OcL w].xG.n޼% aç:Cl%$ğ6xF[/aL"MEQ!F`U-,-D|٨N<*=#g] )uk{ Ƀptfqk8O:3M5waEkx_ iӢBBĞ&9-z R.DrI5b](\>@(\}J$D罯Kb t~'D?qDtf kתYDfj)OũA\hCk;ֽqE:jtkY߶m_g۾κn} u:}h߯O׭oھ %싰Oz"&g:ž:Kh11n g15PNG  IHDR1 pHYs.#."a7PLTE'tRNS@* ?IDATxn1D\Y`f{&]?0vm; g~tqpߡ}63ִ V x>F`.t)ɦѦkw 4C? =i5|qWf~"ъ_Ţ{!Mm׽>O $8uwX~~ v EX);ĥx┴Zpϵ-'CY'k08b{xk%VXIS`Ig%+W_8 Sl >'ǽǪsLY\jg*!jؘm[(XٱR;OVM1>ju,>ݛ`|%)Ae!Lxd+ʳ<tkEH"^z"-Òa-b[$aa-W#Qʥ ;IL;a;׊V*?<8;Ql֯b>wj"mdwqquU~ =tS%؁iÔް3<>7ЁT-,/`OzFaVB! &ט/ʙ|a^K\ 1)E O^|d~l1d nk Vy`eQL9PҽiI҆q|0Leqq9 {tI S9 :V5#z2qA0@GGP 8ܒT՝gaJ`Z(8?&[Ĭ:be* vb=MҴ `4"EX٭W@9jY~0s<[k^\bH&F?1)O;*~zZ9UBŖ-j K[Cѷ4%t`zF^K\c-Ok, h뉞GJ R૯<>?^a=G=k>3,og6Z&w}fߖ l_‹ւBL/5]G,{U-ʢH>a)g/V +|$%#"| Gn҆[gߛP+WF^|}_:g,Lv3Ѧe\iAG G^$Cw7Z-ERP|BjQM升 ԰Hz'NZٽ4)J"4s‚Ё**[x&Ou}K+؊~X(YCcQcZaDCG^PK̼uYB:JC\=lt&H) oka+N;۹T<4eZKo۰!]"M|(EHkMG 2bXWx~2'Ahj0sZ'סuzXb198WҢkXj3ѢP{c`#!(t9bMeҾ\&y\Ȇ_ĚD>TK,,lצXҀϝ![){њ&kS%@)?L&g&:=2ҕupvlF1Z8xe <0HPO@ y]F]PX *V^ut|)$ạP-(}Zt`o/$9T &6F)Ջ瑡V-ߵ W$+/"a\AXX}/MUYKFVÛeшfsjs241 ݠy47t}TXA&KfB jmdU~'n-Ln12@V%6̚O#Vg֫Utt[u3C%12H (qw H2 YŸr/I6nwgg9ep4 ]cERg)q3D1RmnxXEs#`vƒHf:t0C#QyFVWll~J%:fbtTIrEXxKƄ˗F,P<D6/ATvXz~t0ab,248cŔH\]]*&14~!cvܘ 9Ο3nf JSE9ķvIm?@ ,z #$I{4KbŢgX7ʕA\%إz:/DQr.g55X1Sf_ *µD"zY bBx k,B5$N+/gt98nZ&Sƪ j{[XJ|A/on1K{)~vfX!=} X'Xe 5c%Z]{x&s7?PdM{VIENDB`F<,sC&ql/eJFIFHHExifMM*C  !"$"$C*" K !1AQ"aq#2BR3b$Cr4S%Ts&5Dc ?R R R R R R R U5Uajf:>p~ AQk2LyiN?4wsHCN N0OlI,^V!9 i V`=}cnLeJ}`EzOAr>}6VBP?ַ&]'bJܴVLW5VqJH@x8uui+Stөd[[$J3Qˣ7:rpތ% %*BAoXß*7hQ2yCD6P$p{ BuC £2X[H?p F~dTmһY)LL^ŗVJRqyPROK4T ep2wDR'>e>΂MJRJRJRJRJRJRX;TE)- 8ʏl$"ֽo֨ e9y`O⬂8m`8(-[Q%!#u`}.HH 2 ~?z{3LRM彸 RS䅤(ܐ>8HiSnqpRHpr\t<{xH F:͝c"kV P|qωR[WM,1R.^tɫ沅 WQYztsÏM41 %'[v8qn,9!9՗ٗuybZJ^G4ְ7':ux*TKL8>ZX8 JX65n'a7VA: e):t#sYZLVyo(nTk1zoe֠B=߈Lp*HN|^j3Bg*$`]Q \m-I- RrҡJTxޥjv,9$%iPR@U/4Ѻ˾ 2pA 1ZS+]ǦݗcjK:Lm[oI85vp=?sER* -8;߸ Y*ZBŵ06^BJЬ=}GK((((:Kp?-e85Qēs*lZsbHIZT3YyGR}#Rʏ ]8kiUOA) s .q/fG޵YqmmmFCo%XQÈaHF>ٶIȹOFHi+ v@ R R RZ,#%GƭemxHIy2Il?jذNZ^ZHRG {?[%^!t TsjɪZ]݋]O]2wrVՅm}ݬn7u{Qp8ٿ+ABRN p-ۋI(݌I*ϭy>Rq %֜AJд(V3XV¼S.Rx8㲼+LZ0Rpyy>~G|(2X|`q]P)JP)TDI悪ݧ !?!õFUgQM|=kIDVCcߑhpCSV6 ;'GAOd8dv d/-uheRֲ {M{ dVSzL m `,uCH#@;]uW~,1vb.2e+.:{olyWIty-Ϭ)??\C6˼]}컵ը6wRҞ(NE1tfPJJP)JP*/v-96kS.HqX`(x$`RQA'r0A2Wu<>ҳM:VASH ^>Cߚ ݆yNzjxN)jʙA/(I+uK+ʖUqs3\tliSMS:pd (vnP}kխ5a@ ˖CcsޢumV>& .2 2A+eIu4ThDe_d+˔v]Q8f0~nICa D JDb"=WKq\1U|b\QI'#Hhm.GrC )֛ 1mn:|83A~zU?RnB@ @HWWYVXG5 v\aŀ@>U(xʐXIeI'A S&+O\۸(* O((*mÒߛ{M%Hβ H j+ʲ8OOukNiYR)֢JFnS*<9T/M]1>!n!HO84'YM~eMGnCo5: a* IASU|/&񠤬9vk8hJGr~Rko0D  PFTs|Z3lzI̸rӯ[)\  m养֜VFd[=hNN].ZjS2"9Yih*B>m^8#bר֝;PÌ۞RHdV?AAP6R^7뼽rhuxAA 6Ra!! H@Zd)#jK|zGݲD2A*C% ^ӑlRnҘm ,Iu- % 8+4GhY-~^lzV2W] ֽ?1 9AN++_)]3.k 4rO!ɒ9^Qi6z)OTcY7=!i?Yn%#>Tvnӱ1ٔ@#4]F~Z-CL*UJ1e&)9$lǩ?B.=Gv'π Ocֵv QFZ̩SϨ#ZPu?Pu 복m[M*ҞRꒄ3djR:鋺gBNR’Zj)ZUzi9t&OeL;2 z`3Kmv\^.ӘQ@]müddoA2nveIrB$LJ- W~{Բӻwp0l} mBx[EtЇgj{փXh}RDIQ;:I TmlHWv()JA;Z4Il[N 8[RROz~SFcGL"|i2-#FeeIZԧ0B+>t B&&SGJ$e {;F95:w٩,V:䆘RYS [gVRNNk?kֱz=6KlG,mI>{Q*<[u"IPrT:Qoׯ425@b%DA)u99H !SŔYuˍd$TwAXYKhUiDT °g,>ԺlIaT2HTS:.pazTLkKgv24ldzc]9 V6`WΐYXsP5{ # XkǮZȘǼwJB>P{JoZt^˻L׊F CSAoSjReOC?Z8?&뺛-'2W_'(J}<}JHV&p:'n_d$+l7{`j?OlMHr=zr*™RZgDKq4EtM-g~"8Y6aEglch4|7ZO<y͓9% ucך|8DDf $U)@)@)@)@%n_Ij\E\-74%/4Dy $I–Ӑ9ڴj ȏ}UGƒvsU.́mK_٤9u `6+IjqfQٚԺ]id}!l&!,GC-p?gn0զD=6Yu hڒԢx0 $'jimdoz|2Vʰx)${(SxwNzٵM5 mM?FR7 O4̹3.1Ta(ڂ$$ē\٠dM^.sr^r >*‚ܤ2);I ^t\]/bV79G8‚G *8(6*JRJRJRJRJRJRJRJRJRJRSrkސ8G- <#?Wך[Sm.MKm%D +oc#)g$ 򮉨m{FV\Q2Cō[Ny{fz9gҖ⃓l˃VAړr0g;@="]m;t`Ho0%iZH[[^,wؖ~\܁,xYiܨ O#bj#슎u^nV0Gi}ӀM6q "xw rM~"rno>w*s)S͐A )TyH-_W@ڦIQc^b2V>ʔ7 y(T7jP⿒kFsߣ=ohHbcCydm)<{KOilzm_8h.y3MPȈEu{ZnZ>$~j#5(}gW zvv{0~ʔ >9jt٢ҐO`9N?U|S]X)O=]ɖmەΌ[hFv}e  ;奋x%E%$GyA#B*J檬FĤˆ?z䤤HAh2t$3J8yZGnjvi;dr3AU)J)J)J)J)J nL%~mx+GkH:r 36՟>^|A?kLfdcJء۳-l9$qzR- I<$Ihu"ɣRLNKV|hJBJ^2V+g]-r s"6trj|FxJQqnkߵe9!'#53UH<)U --)I) MB|Z 3ki |oO>nWDwd6ݕ X$sV@\IYunҺ~ϭmzBq"ؙp[-$+#v(6ONzu}E]gC1f4ڂHYA$Ix#3ABЕ$}kUtצ^:Un0 -ٹQ`0Akp0KNݲA,Ql=!uN!%joqHR#!D AnHlo;R9J**$I$'5tEh)կXUJs BFPem d}dk>GjF>>cԨŃ!?JCkK Aܓ#((((װԨ-\_5n*HŽ>UIC-el͸$)#PAt9{dWe^Ri.*EVWJ¤c#r)Ry8gUc h(c8^;q>* ]Z>yaHj !$)u)g*/L,haM1 vBG#tY |g)iI4'"RKMei3F6i8MNPx̫H"q![X]ϡhj;l ej+li>5nK-{8l+J[F,,zGdA۟s $sUp8>lےGG]mnv8RcXipN Rkm̸v)A8$?RtJ.eJx.0H8DŽǡ_ft6vKBt)4Vڳ.Zî&9p`@\g?ΚOSu M$.G=r\I!+>ʪWѻ=;;-x)-$RAi]D#}oYwXu-w2[䘮 2{d$qCĩh8<Ѓ:ZqEP{`ybZKqqɬ ! j5@)@)@)A]jƛHq(in$9AHyjlG!B$v(JVNJs#]t;tmeGM}yҴT䛕}#XN-±JG2a]XV֡}txhnTmot#%cރ].Z$B\XvO!Xf(\㚤8H8z =ZSv6HғO*VJM[㴰>#s[JRJRJR7ng?h#2@5ZJuN v<1d6uː ?(X_ݪ{GBW{*h6ٷxJNjK[scX8[o >L|rjrHYhahCh UtZF+{P}Q 9$zVN #oD<*<85>x_h>q[?$ (r˸RѧKIH{ke)[S BG\Eu^IeϡEHB$2Oo 7,z/ڪ~W'-궜!#JGW\=|MnmMCxi%?a)ڜkh(((5qZsRg.)U.-*ve~5ꥲ5HbdψPEQ >ʆFGb9 tS5Z:,-UIfd|[^#)',ݝRYB~p&jĴ䅤I% % ۔,<s+\rBI;-D?gMl$bK0josPn_/kDh=88Jp#~3-C VcqYuғnDCރE(̩ 97^U_9A}$K b5Df=}aqYqMzAP$}}+; *PZ ,lX< VR G  fuy- (d=jrH Ц}9@$a*5mW Q` ϛ6$I+瘔p PJO'Ց:)ʮfˀ4QnHA.7};[cA- :Z %8'湫=g{-4HNc0}rsߵG:~\+}3q,SvvN1ZjU4sxu2'H|D r~* ˟=23U*p2I?U|5c6jRP '=oRYF]W\ˌY_?,+m20S"% t'@vHy$WNtMgN6Bh N@` AU)J)J)J)JRi)W U(59$ZHkIjm%.>A>؀ȬMCnm$Y|[Kqħk"ޯY9kK<)HRy}ZۗޕFq%~^ tj<@R:[Ï8X۞O׍A{^1Rm! vGSֳΈ ;1 z1o4M]\$%E'=ԥw'56 H;.kx98I] bm*Ⲓ|qm Ylc(5~黉B]>v]9܀B7,ỳҪ qUR R R R R R R |Px.4g> q?*)a|  WJ @v((((((?n  ZST7PNG  IHDR"B 6IDATXOhj &nDҸJBF=D+A]r* =rhިqjJ]csZ31i{AT3L|"ⷛ7}{ٙYIVKNٛVYYp/|C!_/IN"W≙;+IݎG7^z{#գ߫$#iȷI&#"KL.;/tEk f{dd0n,IZߙt/ ntĎ$HnDI\;1|@IRΤtarl` 4jUp+Ͻ'Gv4y}>P n4O\'VB qg9k䵘$)R!B sCJNRkʍ 0ߚxnx<Ф]*^;թwj}cyۤOMu.k)?0AIz: ?$)8IhcbI";Ԙ#'#FKQI}Md85]I^SZMJ5^7Ԕskbl Sw Ij2kę,I 7h͢NIC.IrHl3>{)N8KZz͈t!RLL4aPVVO8_&q*͚.Y+tovgD(c  xp$?Z499|48ۺ 偽.Ώpb~GʸV:$إم$oG$r?tRdX!~awjbt!ߑ qla"[O~9 t񆻉z҅~7Pb&97jwg*D0&CܠȶH6 |r*{ddJCvSIRX3r+ PI ٽO.# F CJRd^$kaxBTI6DC!Ev-h#Q[xB$ULEMU h$@m|ڛI`4@Xo'SSPXAi%5!IoXt`u Z i*Q`g"{YT*6%tԘ2V4ap鱿1; I%>7'MLl%~Fb8ؠ i~06k uFB r;'36%&BmF>%Iκ.oz$ C^"MB`X48`wzy# Ddd;kH,JRS7 h?>c%1ܖ4؎(aNX{䙯 &H'+%Ҩ(V+9'FO \* i/7|E61I]!$%I d؟[%qt=<{ %xx$ "#gJX&I VȓE(B,VW "i#NOVcj5}nTr)I)GN R=I^zx~$EJJ"TFČ<Ǒ 9JƛH$JZ$n"EpPT W,&XK?rX& #$} Pc?)XW󍓷ܩBn8{0>:'t%Db$ӂ/D60a E';2$^m1Odv8G$b$g15 j$$$$$$$$$$R$sC&ql/eD,>b$ ZST7 J 0AA@ff@wʚ;54ʚ;g4NdNd9 0ppp@ <4dddd k 0T$- <4BdBd l 0T80___PPT10 ?  %.The Protection Problem in Enterprise Networks //$  Talk Focusv Negative affects of protection measures on edge networks Motivated by anecdotes from real networks Introduce Ethane w:f=Network ExampleswNational Lab, Small-moderate size business, academic, hospital Security sensitive More LAN than large routable network &wwProblems Areas0Inflexibility Loss of Redundancy Filtering woes F0SProblems1Inflexibility Loss of Redundancy Filtering Woes P0f"@ Inflexibility( R Inflexibility( N Inflexibility( P Inflexibility( Q Inflexibility( M InflexibilityfTopology (ports, interfaces) and addresses sprinkled throughout configuration state No distributed maintenance like routing tables Difficult to move machines Moving machines can be bad Indirection points (e.g. ARP, DHCP) insecure (.. often removed) MAC addresses everywhere Chew up memory No aggregation L TfY!Tf LProblems1Inflexibility Loss of Redundancy Filtering Woes B1fOLoss of Redundancy( &ULoss of RedundancyLEasier to reason about/verify Proxies are a catalyst Distributed firewalls are not the solution Lack of good support for L5 routing (does anyone have this turned on?) Existing solutions exacerbate the problem Bluecoat SG8000 series  the  do everything proxy Consentry  single bridge for NACv5s*U5P#*" WProblems2Inflexibility Loss of Redundancy Filtering Woes B2 fXFiltering Woes"Filtering done on the datapath today Generally limited filtering state (so can have large forwarding tables) Common problem is running out of ACLs MAC addresses everywhere Chew up memory No aggregation L In some networks, forwarding tables + filters doesn t make sense .. fZ ZEZH&?E,q^Ethane: Towards a SolutionfCentrally declare network policy Authenticated end-hosts Central-arbiter grants permission to connect on a per flow basis Central-arbiter has fine grained control of routes 6g4`Ethane aEthane: Properties Flexibility Dynamic bindings are secure (movement is easy) Security policy independent of topology Redundancy More switches != more configuration state Fine grained control of routes allows L5 routing Permission checks done on connection setup (taken off data path)  X [A ) [+]Thanks!?,fV IsolationNetworks exist today with differing levels of sensitivity Casino Financial Medical Government/Military Want reasonable Isolation No DDoS from less secure to more No data exfiltration from more secure to less Note, VLANs generally insufficient j:/r:/r>"  Y Today s Solution Z Isolation Cont & Obviously suboptimal Management Number of components (MTTF) Could use same components, separate queues, TDM Consolidation on the road-map for some very large networks 8X<X<_Connection Setup_<  Switches disallow all Ethernet broadcast (and respond to ARP for all IPs) First packet of every new flow is sent to DC for permission check DC sets up flow at each switch Packets of established flows are forwarded using multi-layer switching E\(Existing Solutions & ~ I will take over your entire network Apani Oakley (attempt to solve the confinement problem & ) Consentry Many large proxy venders (e.g. bluecoat) Admission control + intelligent detectionR';^' -],'6 U/?MNOPQRSTVYZ[\]_`abcdef   0` 33` Sf3f` 33g` f` www3PP` ZXdbmo` \ғ3y`Ӣ` 3f3ff` 3f3FKf` hk]wwwfܹ` ff>>\`Y{ff` R>&- {p_/̴>?" dd@,?vdd@  " @ ` n?" dd@   @@``PR    @ ` ` p>> A9 (    H "  [#Click to edit the title text format$$ ZB  c $DfS"`@@k   B "P  Click to edit the outline text format Second Outline Level Third Outline Level Fourth Outline Level Fifth Outline Level Sixth Outline Level Seventh Outline Level Eighth Outline Level Ninth Outline Level&g NB   C D$"UZ ~   # "0N"   S GK ~    0@_˶_˶ ~  May, 2006D %-Z  %-X    %???   0Ŕ_˶_˶ "0  EdgeNet 2006,  %-Z     %?X ??H  3 A"H  0޽h ? 3380___PPT10.3[ Default Design 0 zr` (    0$ P   $ P*    0,    $ R*  d  c $ ?  $  0D   0 $ RClick to edit Master text styles Second level Third level Fourth level Fifth level!     S  6P  _P    P*    6`  _    R*  H  0޽h ? 3380___PPT10.4[cM 0   &(  r  S $``. $ T  C ,AhandcuffsP    N$gֳgֳ?`  LzMartin Casado PhD Student in Computer Science, Stanford University casado@cs.stanford.edu http://www.stanford.edu/~casado0 60 n0  0 F67,DF   S A8cP H  0޽h ? 33___PPT10i.3[+D='  = @B + a 0 0 *(   r  S $l ` `0  l  x  c $l   ` l  H  0޽h ? 33___PPT10i.3[+D='  = @B + b 0L0 @6(  x  c $l  `}  l  ~  s * l  P `y l  H  0޽h ? 33___PPT10i.3[+D='  = @B +}  0 P$(  r  S l  ``  l  r  S l  @ l  H  0޽h ? 33___PPT10i.4[&C+D='  = @B + T 0 P 0(  x  c $@Rl  ``  l  x  c $Rl  P `s l  H  0޽h ? 33___PPT10i.4[&C+D='  = @B +O4 ? 0 f3^3P*I2(  x  c $Yl  ` ` l    TZl  @`  l  B  rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem  # RB   s *DԔ  RB   s *DԔ  RB  s *DԔ @ RB  s *DԔ    <d%    L2 SwitchXB @ 0DV RB  s *DԔ l2  6"` 0  <Hbl   %Firewall + RouterXB @ 0DVp ^B  6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vvXW9BqEZ'r9gKH4!B <$7~N=kM.asFJw`Vv2-h+c2[/\ "l.~lamZ+V X ^g g# v g ) #w O= {   m W?    ` z Y A? &  4-";yQ  : y ,8  K h 3j 1ln d`Kbkz#W53IY5D dG+! .?  M!!(W"<"\[#}#U$$D%2%n!&&&7Q'|'( P(t(('=*Q*' +r++K,,/-{-n.e._.]j/f/nN0|0.112r22'>3U33X44&5dR555.$6wa666]67A7Z\7u7 7^ 7c 7f )8p 8{ 19 9 4: : 1; ;4  > >& H?u ? ? *@s e@ @,@@!AO@A]AkA~vA{AJyArAaA}JA-AC A@ @fw@:@?{?a?#?ph???]@A@p@;@@@$@x@@AmA@@b@@@T@d@8@: @??]?T?>> 7>B=v=8=<z<%#6X#h6m# 6~#5#K5#4#4#)4#3#g3#3}#2p#L2Y#1D#1)#@1 #0"0"E0"."."W. #.:#-f#-#G-#,#,#`, $,)$+@$j+S$+a$*m$i*u$*{$)}$g){$)v$(m$`(a$ (R$'@$e''$'$&#x&#-&#%#%f#\%9#% #$"$"C#""""!#@"Q#!|#!#!!# #Z $$-$:$G$@M$L$gM$G$8$#,$$Q$##%#x#hL# #"d"y"<" "9"e""""""## # ##""" " " r" I" " !2 ! w!_ 7! @ d  Pn f_.GR@=  ; BCDEDFLMMMJ.\k^PCN6,!L #$@ +   < BTCDEDFLMMMJ-E_r &@S#$@< B   = B9CDEDFLMMMJ!u3VE9YlnQ 68#$@$ k [   > BCDEDFLMMMJ!0DFeYj~8[|#$@Z . h ? 8BCDEhFpMMMJ\ hlrHm Wi$0t;(-Yg58@]    @ BCDEDFLMMMJ=x0Kg#Y"'TKt#$@ w   A BCxDEDFLMMMJ 4 Mf    /G`w#$@4  B BCBDEDFLMMMJA-oO3vf`LI11A#$@  C BCVDEDFLMMMJUD,mZIv9`+I1 U#$@& d   D BCDEDFLMMMJ#u8WG9Yk{a@ #$@ z   E B`CDEDFLMMMJe L.&,4:mERJ:W_#$@ BXB I@ 0DpP pP  G 6Xpl  @` P If one is compromised, can t sniff traffic of others Can t enumerate how many hosts on network Can only get  out through proxy Prevent rogue connections H  0޽h ? 33___PPT10i.4[&C+D='  = @B + 5 S 0 "440 +93(  x  c $Hl  ` ` l    T l  @`  l  B  rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem  # RB  s *DԔ  RB  s *DԔ  RB  s *DԔ @ RB  s *DԔ     <8l     L2 SwitchXB  @ 0DVP P RB   s *DԔ l2   6"` 0   <l   %Firewall + RouterXB @ 0DVp ^B  6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vvXW9BqEZ'r9gKH4!B <$7~N=kM.asFJw`Vv2-h+c2[/\ "l.~lamZ+V X ^g g# v g ) #w O= {   m W?    ` z Y A? &  4-";yQ  : y ,8  K h 3j 1ln d`Kbkz#W53IY5D dG+! .?  M!!(W"<"\[#}#U$$D%2%n!&&&7Q'|'( P(t(('=*Q*' +r++K,,/-{-n.e._.]j/f/nN0|0.112r22'>3U33X44&5dR555.$6wa666]67A7Z\7u7 7^ 7c 7f )8p 8{ 19 9 4: : 1; ;4  > >& H?u ? ? *@s e@ @,@@!AO@A]AkA~vA{AJyArAaA}JA-AC A@ @fw@:@?{?a?#?ph???]@A@p@;@@@$@x@@AmA@@b@@@T@d@8@: @??]?T?>> 7>B=v=8=<z<%#6X#h6m# 6~#5#K5#4#4#)4#3#g3#3}#2p#L2Y#1D#1)#@1 #0"0"E0"."."W. #.:#-f#-#G-#,#,#`, $,)$+@$j+S$+a$*m$i*u$*{$)}$g){$)v$(m$`(a$ (R$'@$e''$'$&#x&#-&#%#%f#\%9#% #$"$"C#""""!#@"Q#!|#!#!!# #Z $$-$:$G$@M$L$gM$G$8$#,$$Q$##%#x#hL# #"d"y"<" "9"e""""""## # ##""" " " r" I" " !2 ! w!_ 7! @ d  Pn f_.GR@=  , BCDEDFLMMMJ.\k^PCN6,!L #$@ +   - BTCDEDFLMMMJ-E_r &@S#$@< B   . B9CDEDFLMMMJ!u3VE9YlnQ 68#$@$ k [   / BCDEDFLMMMJ!0DFeYj~8[|#$@Z . h 0 8BCDEhFpMMMJ\ hlrHm Wi$0t;(-Yg58@]    1 BCDEDFLMMMJ=x0Kg#Y"'TKt#$@ w   2 BCxDEDFLMMMJ 4 Mf    /G`w#$@4  3 BCBDEDFLMMMJA-oO3vf`LI11A#$@  4 BCVDEDFLMMMJUD,mZIv9`+I1 U#$@& d   5 BCDEDFLMMMJ#u8WG9Yk{a@ #$@ z   6 B`CDEDFLMMMJe L.&,4:mERJ:W_#$@ BXB 7@ 0DpP pP  8 6l  @` P If one is compromised, can t sniff traffic of others Can t enumerate how many hosts on network Can only get  out through proxy Prevent rogue connections  9 0ul "`` R"Firewall rules ACCEPT 192.168.1.20# 2#H  0޽h ? 33___PPT10i.4[&C+D='  = @B +5 O 0 44P .@c4(  x  c $ll   l    Tl  `0  l  B  rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodemP I S RB  s *DԔ 0 RB  s *DԔ  RB  s *DԔ RB  s *DԔ P    <l ) `D   L2 SwitchXB  @ 0DV 0 RB   s *DԔ P l2   6"` `   <tl  %Firewall + RouterXB @ 0DV@ @RB  s *DԔ@@^B  6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vvXW9BqEZ'r9gKH4!B <$7~N=kM.asFJw`Vv2-h+c2[/\ "l.~lamZ+V X ^g g# v g ) #w O= {   m W?    ` z Y A? &  4-";yQ  : y ,8  K h 3j 1ln d`Kbkz#W53IY5D dG+! .?  M!!(W"<"\[#}#U$$D%2%n!&&&7Q'|'( P(t(('=*Q*' +r++K,,/-{-n.e._.]j/f/nN0|0.112r22'>3U33X44&5dR555.$6wa666]67A7Z\7u7 7^ 7c 7f )8p 8{ 19 9 4: : 1; ;4  > >& H?u ? ? *@s e@ @,@@!AO@A]AkA~vA{AJyArAaA}JA-AC A@ @fw@:@?{?a?#?ph???]@A@p@;@@@$@x@@AmA@@b@@@T@d@8@: @??]?T?>> 7>B=v=8=<z<%#6X#h6m# 6~#5#K5#4#4#)4#3#g3#3}#2p#L2Y#1D#1)#@1 #0"0"E0"."."W. #.:#-f#-#G-#,#,#`, $,)$+@$j+S$+a$*m$i*u$*{$)}$g){$)v$(m$`(a$ (R$'@$e''$'$&#x&#-&#%#%f#\%9#% #$"$"C#""""!#@"Q#!|#!#!!# #Z $$-$:$G$@M$L$gM$G$8$#,$$Q$##%#x#hL# #"d"y"<" "9"e""""""## # ##""" " " r" I" " !2 ! w!_ 7! @ d  Pn f_.GR@=  , BCDEDFLMMMJ.\k^PCN6,!L #$@ +   - BTCDEDFLMMMJ-E_r &@S#$@< B   . B9CDEDFLMMMJ!u3VE9YlnQ 68#$@$ k [   / BCDEDFLMMMJ!0DFeYj~8[|#$@Z . h 0 8BCDEhFpMMMJ\ hlrHm Wi$0t;(-Yg58@]    1 BCDEDFLMMMJ=x0Kg#Y"'TKt#$@ w   2 BCxDEDFLMMMJ 4 Mf    /G`w#$@4  3 BCBDEDFLMMMJA-oO3vf`LI11A#$@  4 BCVDEDFLMMMJUD,mZIv9`+I1 U#$@& d   5 BCDEDFLMMMJ#u8WG9Yk{a@ #$@ z   6 B`CDEDFLMMMJe L.&,4:mERJ:W_#$@ B < 0l "` 0 m;Turn of ARP Static ARP cache Ca:fe:d0:d0 192.168.1.1 < 2<XB = 0DV ` XB > 0DV @  @ 0l "`0 R"Firewall rules ACCEPT 192.168.1.20# 2# ; 0xl "`    DTurn of ARP Static ARP cache ca:fe:de:ad:be:ef 192.168.1.20E 2E H  0޽h ? 33___PPT10i.4[&C+D='  = @B +56 Q 0 L5D5 .<4(  x  c $ l   l    Tl  `0  l  B  rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodemP I S RB  s *DԔ 0 RB  s *DԔ  RB  s *DԔ RB  s *DԔ P XB  @ 0DV 0 RB   s *DԔ P l2   6"` `   <l  %Firewall + RouterXB @ 0DV@ @RB  s *DԔ@@^B  6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vvXW9BqEZ'r9gKH4!B <$7~N=kM.asFJw`Vv2-h+c2[/\ "l.~lamZ+V X ^g g# v g ) #w O= {   m W?    ` z Y A? &  4-";yQ  : y ,8  K h 3j 1ln d`Kbkz#W53IY5D dG+! .?  M!!(W"<"\[#}#U$$D%2%n!&&&7Q'|'( P(t(('=*Q*' +r++K,,/-{-n.e._.]j/f/nN0|0.112r22'>3U33X44&5dR555.$6wa666]67A7Z\7u7 7^ 7c 7f )8p 8{ 19 9 4: : 1; ;4  > >& H?u ? ? *@s e@ @,@@!AO@A]AkA~vA{AJyArAaA}JA-AC A@ @fw@:@?{?a?#?ph???]@A@p@;@@@$@x@@AmA@@b@@@T@d@8@: @??]?T?>> 7>B=v=8=<z<%#6X#h6m# 6~#5#K5#4#4#)4#3#g3#3}#2p#L2Y#1D#1)#@1 #0"0"E0"."."W. #.:#-f#-#G-#,#,#`, $,)$+@$j+S$+a$*m$i*u$*{$)}$g){$)v$(m$`(a$ (R$'@$e''$'$&#x&#-&#%#%f#\%9#% #$"$"C#""""!#@"Q#!|#!#!!# #Z $$-$:$G$@M$L$gM$G$8$#,$$Q$##%#x#hL# #"d"y"<" "9"e""""""## # ##""" " " r" I" " !2 ! w!_ 7! @ d  Pn f_.GR@=  , BCDEDFLMMMJ.\k^PCN6,!L #$@ +   - BTCDEDFLMMMJ-E_r &@S#$@< B   . B9CDEDFLMMMJ!u3VE9YlnQ 68#$@$ k [   / BCDEDFLMMMJ!0DFeYj~8[|#$@Z . h 0 8BCDEhFpMMMJ\ hlrHm Wi$0t;(-Yg58@]    1 BCDEDFLMMMJ=x0Kg#Y"'TKt#$@ w   2 BCxDEDFLMMMJ 4 Mf    /G`w#$@4  3 BCBDEDFLMMMJA-oO3vf`LI11A#$@  4 BCVDEDFLMMMJUD,mZIv9`+I1 U#$@& d   5 BCDEDFLMMMJ#u8WG9Yk{a@ #$@ z   6 B`CDEDFLMMMJe L.&,4:mERJ:W_#$@ B 7 0l "`    DTurn of ARP Static ARP cache ca:fe:de:ad:be:ef 192.168.1.20E 2E  8 0Hl "` 0 m;Turn of ARP Static ARP cache Ca:fe:d0:d0 192.168.1.1 < 2<XB 9 0DV ` XB : 0DV @  < 0l "` R"Firewall rules ACCEPT 192.168.1.20# 2# ; 0D "`p   VNo DHCP Also insecure Might undermine firewall rules Might undermine static ARP cache " 2O 2WH  0޽h ? 33___PPT10i.4[&C+D='  = @B +7 R 0 66 0=6(  x  c $       T  `0   B  rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodemP I S RB  s *DԔ 0 RB  s *DԔ  RB  s *DԔ RB  s *DԔ P    < l  `Dw   L2 SwitchXB  @ 0DV 0 RB   s *DԔ P l2   6"` `   <  %Firewall + RouterXB @ 0DV@ @RB  s *DԔ@@^B  6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vvXW9BqEZ'r9gKH4!B <$7~N=kM.asFJw`Vv2-h+c2[/\ "l.~lamZ+V X ^g g# v g ) #w O= {   m W?    ` z Y A? &  4-";yQ  : y ,8  K h 3j 1ln d`Kbkz#W53IY5D dG+! .?  M!!(W"<"\[#}#U$$D%2%n!&&&7Q'|'( P(t(('=*Q*' +r++K,,/-{-n.e._.]j/f/nN0|0.112r22'>3U33X44&5dR555.$6wa666]67A7Z\7u7 7^ 7c 7f )8p 8{ 19 9 4: : 1; ;4  > >& H?u ? ? *@s e@ @,@@!AO@A]AkA~vA{AJyArAaA}JA-AC A@ @fw@:@?{?a?#?ph???]@A@p@;@@@$@x@@AmA@@b@@@T@d@8@: @??]?T?>> 7>B=v=8=<z<%#6X#h6m# 6~#5#K5#4#4#)4#3#g3#3}#2p#L2Y#1D#1)#@1 #0"0"E0"."."W. #.:#-f#-#G-#,#,#`, $,)$+@$j+S$+a$*m$i*u$*{$)}$g){$)v$(m$`(a$ (R$'@$e''$'$&#x&#-&#%#%f#\%9#% #$"$"C#""""!#@"Q#!|#!#!!# #Z $$-$:$G$@M$L$gM$G$8$#,$$Q$##%#x#hL# #"d"y"<" "9"e""""""## # ##""" " " r" I" " !2 ! w!_ 7! @ d  Pn f_.GR@=  , BCDEDFLMMMJ.\k^PCN6,!L #$@ +   - BTCDEDFLMMMJ-E_r &@S#$@< B   . B9CDEDFLMMMJ!u3VE9YlnQ 68#$@$ k [   / BCDEDFLMMMJ!0DFeYj~8[|#$@Z . h 0 8BCDEhFpMMMJ\ hlrHm Wi$0t;(-Yg58@]    1 BCDEDFLMMMJ=x0Kg#Y"'TKt#$@ w   2 BCxDEDFLMMMJ 4 Mf    /G`w#$@4  3 BCBDEDFLMMMJA-oO3vf`LI11A#$@  4 BCVDEDFLMMMJUD,mZIv9`+I1 U#$@& d   5 BCDEDFLMMMJ#u8WG9Yk{a@ #$@ z   6 B`CDEDFLMMMJe L.&,4:mERJ:W_#$@ B 7 0 "`    DTurn of ARP Static ARP cache ca:fe:de:ad:be:ef 192.168.1.20E 2E  8 0% "` 0 m;Turn of ARP Static ARP cache Ca:fe:d0:d0 192.168.1.1 < 2<XB 9 0DV ` XB : 0DV @  = 0p$ "`` R"Firewall rules ACCEPT 192.168.1.20# 2# ; 0. "`p   HNo DHCP Might undermine firewall rules Might undermine static ARP cache " 2A 2I < 04 "`p   QPort Security Tie MAC address to Port ca:fe:de:ad:be:ef 192.168.1.20" 2D 2R-H  0޽h ? 33___PPT10i.4[&C+D='  = @B + N 0 0 0(  x  c $x  ``   x  c $     H  0޽h ? 33___PPT10i.4[&C+D='  = @B + M 0  0(  x  c $\ʪ  ``   x  c $˪  P `s   H  0޽h ? 33___PPT10i.4[&C+D='  = @B +}0 P 0 //p 4,(  x  c $Ъ  ` `     TTѪ  @`   B  rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem  B 9 vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower, @ B : vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower B ; vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower B < vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower B = vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower` B > rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem P B ? rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem 0 B @ rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem B A rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem 0 p B B rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem  B C vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower B D vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower` B E rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem, B F rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem B G rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem lB H rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem \B I rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem L B J rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem  < ^ K 6GyH+Iy0 ^ L 6G5H+I50` ^ M 6GяH+Iя0 ^ N 6GH+I0 X O 0G3H0I33@ p X P 0GH0I3@ ^" Q 6ZG#*HcI<.   ^" R 6ZG#*HI<. p  ^" S@ 6ZG#*H`OI<. ( ^" T@ 6ZG#*H!I<.  ^" U@ 6ZG#*HI<. P ^" V@ 6ZG#*HgI<.  R" W s *HTpI\3@  R" X s *H}I@W3@ "R2 Y s *HYjI@W3@ \R2 Z s *H<I@W3@ lR" [ s *H*I@W3@ uX \ 0G@WH=eI@W@ 3l2 u 6_"``pl2 v 6_"`0`pl2 w 6_"`@ l2 x 6_"` p0l2 y 6_"` l2 z 6_"``p l2 { 6_"``P l2 | 6_"``p l2 } 6_"`` ` l2 ~ 6_"``  l2  6_"``0 l2  6_"`` H  0޽h ?/@9:K 9;L 9<M 9=N 9CO 9DP <Q <>R <?S <@T<AU<BV9W9X9HY9GZ9F[9E\ 33___PPT10i.4[&C+D='  = @B + V 0  0(  x  c $  ``   x  c $4   `   H  0޽h ? 33___PPT10i.4[&C+D='  = @B + Z 0  0(  x  c $  ``   x  c $$  P `s   H  0޽h ? 33___PPT10i.4[&C+D='  = @B + [ 0 0 & 0(   x   c $ `0   x   c $Ќ  0   H   0޽h ? 33___PPT10i.4[&C+D='  = @B + c 0L0  DZ(  D D T^    U R r D S S ``z   < D c $޽h ? ̙33y___PPT10Y+D='  = @B +p e 0L0 I5A5P ?CT4(  TB T 0D>$ n ,$@ 0B T 0D> ,$@ 0B T@ 0D> - ,$@ 0B T@ 0D>n5 ,$@ 0LB T c $Dd  R T C *ABD18246_3 3 B  T rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem. OT B  T rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem Y^ B  T rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem  ^B  T 6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&v B  T vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitowerY B T vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower u B T rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem. = B LB T c $D u LB T c $D. ^B T 6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&v;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitowerxRLB T@ c $D) x. ^B T 6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&v;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower YHl "T 68c"`2 R] l #T 68c"`. = H l $T 68c"` Ye l %T 68c"`  l &T 68c"` u l 'T 68c"`Y l (T 68c"`xRl )T 68c"` YHl *T 68c"`  l +T 68c"` xHl ,T 68c"` Hl -T 68c"` ,>  .T Hg CC  V$0     /T T s CCi Y,$ 0 @Publish martin.friends.ambient-streams allow tal, sundar, aditya:A0 9P    0T T CCY,$  0 PAuthenticate hi, I m tal, my password is:)0     > 1T H CCz,$  0 martin.friends.ambient-streams 0     p 2T T CC. ,$ 0 .First packet to martin.friends.ambient-streams./0     B 3T@ 0DԔk,$@ 0B 4T 0DԔ2 ,$@ 0B 5T 0DԔ  ,$@ 0B 6T@ 0DԔ  ,$@ 0B 7T 0DԔ e ,$@ 0B 8T 0DԔ! 5 ,$D 0 9T T DD̙"`: J,$D 0 3Global Network Policy: (allow all martin using rtp)24 /    :T 0Qy,$@ 0B ;T 0DԔO X ,$@ 0B T 0DԔu,$@  0 ?T T̯ CCp $,$ 0 VAuthenticate hi, I m martin, my password is:,0      CT T\  ``z   < T c $޽h ? ̙33::___PPT10:+wFBD8'  = @B DC8' = @BA?%,( < +O%,( < +DA' =%(D' =%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*9T%(D' =%(Du' =%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*;T%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*?T%(D' =%(D' =%(D' =4@BBBB%(D' =1:Bhidden*o3>+B#style.visibility<*;T%(D' =A@BBBB0B%(D' =1:Bhidden*o3>+B#style.visibility<*?T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*+B#style.visibility<*/T%(D' =%(D/' =%(D' =4@BBBB%(D' =1:Bhidden*o3>+B#style.visibility<*+B#style.visibility<*/T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*>T%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*0T%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*1T%(D' =%(D' =%(D' =4@BBBB%(D' =1:Bhidden*o3>+B#style.visibility<*>T%(D' =A@BBBB0B%(D' =1:Bhidden*o3>+B#style.visibility<*0T%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*2T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*=T%(D#' =%(Dq' =%(D' =A@BBBB0B%(D' =1:Bhidden*o3>+B#style.visibility<*2T%(D' =4@BBBB%(D' =1:Bhidden*o3>+B#style.visibility<*=T%(DR' =%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*3T%(D' =4@BBBB%(D' =1:Bhidden*o3>+B#style.visibility<*3T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*4T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*5T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*6T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*7T%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*8T%(D' =%(D^' =%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*:T%(Dz' =4@BBBB%()?)?)D' =.7 BBBBBM -7.62354E-6 1.44867E-7 C 0.06342 0.06655 0.127 0.13311 0.1654 0.14214 C 0.2038 0.15117 0.20506 0.05207 0.23024 0.05375 C 0.25542 0.05543 0.27651 0.13479 0.31649 0.1518 C 0.35646 0.1688 0.44412 0.15452 0.47056 0.15557 *3>*B ppt_xB ppt_y=0BB aaaaA<*:T+0+0+/T0 ++0+/T0 ++0+0T0 ++0+0T0 ++0+1T0 ++0+2T0 ++0+2T0 ++0+9T0 ++0+?T0 ++0+?T0 + f 0L0 p \`(  \ \ T4   U 4 x \ c $hF4``z  4 < \ c $޽h ? ̙33y___PPT10Y+D='  = @B + ` 0  40(  4x 4 c $  ``   x 4 c $H   `   H 4 0޽h ? 33___PPT10i.4[&C+D='  = @B +l Y 0 { (  x  c $,  ``   x  c $   `     6  Pp u/This is not solely a government network problem*0%H  0޽h ? 33___PPT10i.4[&C+D='  = @B +^ \ 0 ]]P asP](  X q C 0Asneaker_netp , x  c $P  ``     # DBC DEFq$ w8 N @ g     7 j" : I p I @e fo    %       -  :   K  5 m Xy n *[ {V @ H  @ /  7@ X sWK$[sl @_@!j-eL5So@I$  ` +7 n  K %w,d=RIqmO<4$[7_t@@/I R[ f@@ [    ! $ \`@                                            `"< `?0 p^B  6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&v;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower"` p B ( vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower4 XH B ) vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower @ B * vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower, mA LB + c $Dh Oi LB , c $D 8| LB - c $D} 1 LB .@ c $D d b /  `/ G0*3S" ?8 O  4 0 b 0  `- G0*3S" ?h K  4 0 b 1  `7 G0*3S" ? .  4 0 b 2  `L9 G0*3S" ?? R  4 0 LB 7 c $D ) b 8  `> G0*3S" ? b  4 0  :@ # DBC DEFq$ w8 N @ g     7 j" : I p I @e fo    %       -  :   K  5 m Xy n *[ {V @ H  @ /  7@ X sWK$[sl @_@!j-eL5So@I$  ` +7 n  K %w,d=RIqmO<4$[7_t@@/I R[ f@@ [    ! $ \`@                                            `"< `?  ^B ;@ 6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&v@ 6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&v'I>G< 'I>G< 'I>G<  LB S c $D U LB T@ c $D, . LB U@ c $D El LB V c $D: .E LB W@ c $D:  b X@  `L G0*3S" ? >  4 0 b Y@  `J G0*3S" ? rN  4 0 b Z@  `S G0*3S" ? G  4 0 RB [ s *D8c p p B \@ vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitowertj B ]@ vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitower @ B ^@ vEF$QVUVW ##0*`T`T-`TK>;`TJ)`T`T-r9`Tr9r9r9BDr9`T} 4 4 } } }44}}}:4:4}}:@ `@@@@@ 0*`T`T-`TK>;`TJ)`T`T- XSxitowerl _c LB _@ c $D 1 LB ` c $D H LB a@ c $D O LB b c $D | b c@  `Z G0*3S" ?x 1  4 0 b d@  `DX G0*3S" ? (  4 0 b e@  `\a G0*3S" ?E@  4 0 b f@  `c G0*3S" ? !  4 0 LB h c $D! O b i@  `h G0*3S" ? 3  4 0 RB n@ s *D8c    o 0pb @ J(really) heavyweight, application proxy (cannonicalization + fuzzy timers)"K(#) p 0xp    :OR & R r N, G<,"`   , s <R"`  (H  0޽h ? 33___PPT10i.4[&C+D='  = @B + ] 0 p 0(  x  c $w  ``   x  c $w    `0   H  0޽h ? 33___PPT10i.4[&C+D='  = @B +BD d 0L0 C;0 $$L(  LRB L s *DԔ] L  `&  p   L8  X  w @R L C *ABD18246_XB L rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodemZ_MB L rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem  B L rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem  B L rEtF2QVUVW?  } H`T `T`T`T `T.7 7 ..e.e77.e. . 7n7n. ..7)7)..@`@@`@`@`@`  } H`T `T`T`T0*0*`T@4`T@4WR0umodem]).LB  L c $DE{r l  L 6m"`)Xl  L 68c"`ZeMl  L 68c"`])3l  L 68c"`  l L 68c"`   RB L s *DԔX<RB L s *DԔ) RB L s *DԔ. LB L c $Dr8LB L c $Di   L TX@      ^B L 6E,F>QVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&vQVUVWKKRGOIGIv3v9C RHp3+7p3|9|E|9|E+7p3+7k&v<&v     ; L Z`f3 DD &b ,$ 0 }        L T DDL 8  WAlice     L T DDL F  UBob     L T DD2B ,$ 0 ]        L T DD2L,$  0 W? $   B  L 0D>Gy ,$@  0B !L@ 0D>\4 ,$@  0B "L 0D>~ ,$@  0B #L 0D>|  ,$@ 0? $L T DDNR,$ 0      < L c $޽h ? ̙33%%___PPT10g%+AصDs"'  = @B D."' = @BA?%,( < +O%,( < +Dw' =%(D' =%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*L%(D.' =A@BBBB0B%()?)?Du' =.=7 BBBBBOM 0.04658 -0.01806 L 0.02156 -0.14676 *3>*B ppt_xB ppt_y=@0BBAApBB\HNB<*LD' =%(Ds' =%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*L%(D' =A@BBBB0B%()?)?D2' =.7 BBBBB3M 0 0 L 0.03211 0.10959 *3>*B ppt_xB ppt_y=0BBAA<*LD' =A@BBBB0B%(D' =1:Bhidden*o3>+B#style.visibility<*L%(D ' =%(D' =%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*L%(D,' =A@BBBB0B%()?)?Ds' =.;7 BBBBBMM 0.02046 -0.01343 L 0.1311 -0.35145 *3>*B ppt_xB ppt_y=@0BBAApBB,Db=BA-<*LD' =A@BBBB0B%(D' =1:Bhidden*o3>+B#style.visibility<*L%(DA' =%(D' =%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*L%(Do' =%(D' =%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<* L%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*!L%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*"L%(D' =4@BBBB%(D' =1:Bvisible*o3>+B#style.visibility<*#L%(D' =A@BBBB0B%(D' =1:Bhidden*o3>+B#style.visibility<*L%(D?' =%(D' =%(D' =A@BBBB0B%(D' =1:Bvisible*o3>+B#style.visibility<*$L%(D_' =A@BBBB0B%()?)?D' =.n7 BBBBBM 0 0 L -0.02739 0.05753 L 0.13519 0.02687 L 0.15974 0.12849 L 0.20286 0.23598 *3>*B ppt_xB ppt_y=0BB AAAAA<*$LD' =A@BBBB0B%(D' =1:Bhidden*o3>+B#style.visibility<*L%(++0+L0 ++0+L0 ++0+L0 ++0+L0 ++0+L0 ++0+L0 ++0+L0 ++0+L0 ++0+L0 ++0+L0 ++0+L0 ++0+$L0 ++0+$L0 + _ 0  ,0(  ,x , c $  ``   x , c $l   `   H , 0޽h ? 33___PPT10i.4[&C+D='  = @B +4 0 pD(  X  C      S X  0   F2Broadly decompose Internet into public and privateH  0޽h ? 3380___PPT10.4[MJ@ 0 `Z(  ^  S      c $  0   P<This is pretty basic really & .H  0޽h ? 3380___PPT10.4[M@L 0  P(  ^  S      c $  0   F2Broadly decompose Internet into public and privateH  0޽h ? 3380___PPT10.4[MM 0 ph@ (  ^  S    b  c $l  0   Network forwarding is maintained by distibuted algorithms (OSPF, RIP, etc.) Security configuration is NOT (generally) Security configuration often more complicated, and probably more important$ H  0޽h ? 3380___PPT10.4[MN 0 tl` (  ^  S    f  c $|ɱ  0   Have to turn off arp - race condition - don t want to be able to enumerate the number of hostsOH  0޽h ? 3380___PPT10.4[MO 0 `X (  ^  S    R  c $ѱ  0   Choke points can and do turn into performance bottlenecks (solution is often  buy a bigger machine ) Why?H  0޽h ? 3380___PPT10.4[MJP 0  Z(  ^  S      c $ٱ  0   P<This is pretty basic really & .H  0޽h ? 3380___PPT10.4[MJQ 0  Z(  ^  S      c $  0   P<This is pretty basic really & .H  0޽h ? 3380___PPT10.4[MJR 0 @ Z(  ^  S      c $  0   P<This is pretty basic really & .H  0޽h ? 3380___PPT10.4[M@S 0 ` P(  ^  S      c $  0   F2Broadly decompose Internet into public and privateH  0޽h ? 3380___PPT10.4[MU 0 \T (  ^  S    N  c $P  0   Two major contributing factors to this - simple to reason about & - simple to maintain (multi-homing = consistency problems) - proxies are becoming more and more prevalent Bluecoat can be used for internal traffic monitoringH  0޽h ? 3380___PPT10.4[M@V 0  P(  ^  S      c $\  0   F2Broadly decompose Internet into public and privateH  0޽h ? 3380___PPT10.4[M@W 0  P(  ^  S      c $  0   F2Broadly decompose Internet into public and privateH  0޽h ? 3380___PPT10.4[MEX 0 @ U(  ^  S      c $  0   K7Today generally use ACL instead of capability approach H  0޽h ? 3380___PPT10.4[M@Y 0 ` P(  ^  S      c $4  0   F2Broadly decompose Internet into public and privateH  0޽h ? 3380___PPT10.4[M@Z 0   P(   ^   S       c $  0   F2Broadly decompose Internet into public and privateH   0޽h ? 3380___PPT10.4[M@\ 0  0P(  0^ 0 S     0 c $p  0   F2Broadly decompose Internet into public and privateH 0 0޽h ? 3380___PPT10.4[M@] 0  8P(  8^ 8 S     8 c $#  0   F2Broadly decompose Internet into public and privateH 8 0޽h ? 3380___PPT10.4[ME 0  <U(  <X < C     < S   0   WCFocus on negative affects protection measures have on edge networksH < 0޽h ? 3380___PPT10.p`&h 0  @x(  @X @ C     @ S )  0   zfBiased towards security sensitive networks (probably much more so than the average enterprise network)H @ 0޽h ? 3380___PPT10.^$^ 0  Hp(  Hp H 0 ?)?    H 6<   GZ   B.Specify that policy is defined over principalsB H s *޽h ? ̙33x_ 0 80@ P(  Pp P 0 ?)?    P 6hoR  GZ   - Really important, DC does not make the decision based on the source address in the packet, but On the circuit it was forwarded from - B P s *޽h ? ̙33` 0 g_` X(  Xp X 0 ?)?   M X 6   GZ   o I claim that: We can do this efficiently And in a backwards compatible fashion And support very large networks"a-pH!B X s *޽h ? ̙33a 0  `p(  `p ` 0 ?)?   4 ` 6v4  GZ  4 B.Specify that policy is defined over principalsB ` s *޽h ? ̙33r<0ByGJL QaV_3=d 4'z8Op”7S,y\w7 Quy,VxV1+( (/ 0`DArialew RomanTT~?ܖx: 0ܖDArial Unicode MST~?ܖx: 0ܖ" DWingdingsode MSTOh+'0T `hx  Bleh Martin Casado Dave Maltz18Microsoft Office PowerPoint@p@=%P5[@`sϵGS;  )'  A  """)))UUUMMMBBB999|PP3f333f3333f3ffffff3f̙3ff333f333333333f33333333f33f3ff3f3f3f3333f33̙33333f333333f3333f3ffffff3f33ff3f3f3f3fff3ffffffffff3ffff̙fff3fffff3fff333f3f3ff3ff33f̙̙3̙ff̙̙̙3f̙3f333f3333f3ffffff3f̙3f3f3f333f3333f3ffffff3f̙3f3ffffffffff!___wwwc4'A x@(xKʦ """)))UUUMMMBBB999|PP3f3333f333ff3fffff3f3f̙f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3̙33333f333ff3ffffff3f33f3ff3f3f3ffff3fffffffff3fffffff3f̙ffff3ff333f3ff33fff33f3ff̙3f3f3333f333ff3fffff̙̙3̙f̙̙̙3f̙3f3f3333f333ff3fffff3f3f̙3ffffffffff!___wwwmmmmmmmmmmmmmmmCmmmCmmmCmmmCmCCCmCmmmCmmmmmmmmmmmmCmmmCCCmmmmmmގn޽nonm޼omCmm޼mmmnmCC޽nmm޼ohmmmmCnnmmmmm޽ommmmCCCCCCmmޓmCmmmmCCCmmmmmmommCmmmmCmCCގmnmmmmalew Romanhh~?x: 0DArial Unicode MSh~?x: 0" DWingdingsode MSh~?x: 00DComic Sans MSMSh~?x: 0B@DStarSymbolMSMSh~?x: 0PDUtopiabolMSMSh~?x: 0`DTimes New Romanh~?x: 0pDTahomaew Romanh~?x: 0@ .  @n?" dd@  @@``   `8/ *   @1%=%*!  #1J A;;;=>:'t%Db$ӂ/D60a E';2$^m1Odv8G$b$g15 j$$$$$$$$$$R$sC&ql/eD,>b$ ZST7 J 0AA@ff@wʚ;54ʚ;g4JdJd?x: 0vppp@ <4dddd4 0h~? <4BdBd4 0h80___PPT10 ?  %6.The Protection Problem in Enterprise Networks //$  Talk Focusv Negative affects of protection measures on edge networks Motivate~?ܖx: 0ܖ0DComic Sans MSMST~?ܖx: 0ܖB@DStarSymbolMSMST~?ܖx: 0ܖPDUtopiabolMSMST~?ܖx: 0ܖ`DTimes New RomanT~?ܖx: 0ܖpDTahomaew RomanT~?ܖx: 0ܖ@ .  @n?" dd@  @@``   `8/ *   @1%=%*!  #1J A;;;=>:'t%Db$ӂ/D60a E';2$^m1Odv8G$b$g15 j$$$$$$$$$$R$sC&ql/eD,>b$ ZST7 J 0AA@ff@wʚ;54ʚ;g4JdJd?x: 0vppp@ <4dddd  0T~? <4BdBd  0T80___PPT10 ?  %6.The Protection Problem in Enterprise Networks //$  Talk Focusv Negative affects of protection measures on edge networks Motivated by anecdotes from real networks Introduce Ethane w:f=Network ExampleswNational Lab  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~, Small-moderate size business, academic, hospital Security sensitive More LAN than large routable network &wwProblems Areas0Inflexibility Loss of Redundancy Filtering woes F0SProblems1Inflexibility Loss of Redundancy Filtering Woes P0f"@ Inflexibility( R Inflexibility( N Inflexibility( PPowerPoint Document(WDocumentSummaryInformation8 MsoDataStore @$5L@$5L1QR4GPGN35FA==2@$5L@$5LItem  nPropertiesIY0HOC5TECA==2 @$5L@$5LItem  PropertiesGHJ30HVGNHQA==2 @$5L@$5LItem "Properties$ "  Y Today s Solution Z Isolation Cont & Obviously suboptimal Management Number of components (MTTF) Could use same components, separate queues, TDM Consolidation on the road-map for some very large networks 8X<X</h?MNOPQRSTVYZ[\]`abcef V 0  0(  x  c $ ``   x  c $  `  H  0޽h ? 33___PPT10i.4[&C+D='  = @B +r([+1+( (/ 0`DAriomanTahomaDefault Design/The Protection Problem in Enterprise Networks Talk FocusNetwork ExamplesProblems Areas ProblemsInflexibilityInflexibilityInflexibilityInflexibilityInflexibilityInflexibility ProblemsLoss of RedundancyLoss of Redundancy ProblemsFiltering WoesEthane: Towards a SolutionEthaneEthane: PropertiesThanks! IsolationTodays SolutionIsolation Cont  Fonts UsedDesign Template Slide Titles DocumentLibraryFormDocumentLibraryFormDocumentLibrar:element ref="ns1:PublishingExpirationDate" minOccurs="0"/> "  Y Today s Solution Z Isolation Cont & Obviously suboptimal Management Number of components (MTTF) Could use same components, separate queues, TDM Consolidation on the road-map for some very large networks 8X<X</h?MNOPQRSTVYZ[\]`abcefr+s+W1Root EntrydO)@$5L Pictures TCurrent User2SummaryInformation(*Tk}      !"#$%&'()]+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTVWXYZ[\^_`abcdijplmoqrstuvwxyz{|U~  !#%&'_Wdmaltzdmaltz Maltz՜.+,D՜.+,    bOn-screen Show W  ArialArial Unicode MS WingdingsComic Sans MS StarSymbolUtopiaTimes New Rt.com/office/2006/documentManagement/types"/> This value indicates the number of saves or revisions. The application is responsible for updating this value after each revision. yForm 0PublishingExpirationDatePublishingStartDate 2018-11-21T15:59:05Z2000-01-01T00:00:00Z