Appendix: Geedge deployment in Myanmar Month/ Junta Telecommunications Year companies Jan 2022 Early Operational Stage: Six operators carried out log analysis in Yangon. The four largest ISP sites: MPT, ATOM, Ooredoo, and Mytel, and the two largest fibre optic operators: Frontiir and Campana, returned feedback to address incomplete traffic and event log collection across sites to improve network visibility and policy enforcement accuracy. June 2022 Proof of Concept (POC): Geedge Networks (the provider) gave test procedures for TSG testing; POC lasts approximately 6 months. NCSC engineers received training during the POC. Provider gave two-day training on TSG architecture, policy enforcement, system logs, reports, customised signature function and VPN blocking. Joint troubleshooting and maintenance with NCSC engineers. POC Environment Survey: Provider visited MPT and NCSC, checked internet topology, network interfaces, machine room; shared hardware, power and deployment documentation. Hardware and Software Deployment: Installed TSG hardware at MPT and NCSC; set up software and prepared POC environment at NCSC conference room. Initial tests: Provider introduced system functions, presented 18 test cases, explained VPN blocking; NCSC presented test cases to MOTC head. July 2022 VPN/Application Blocking Demonstration: Demo of TSG VPN blocking with 12 VPNs using signatures, captured and imported VPN traffic signatures into TSG. Additional VPN Blocking Demo: Blocked paid VPN applications including NordVPN and ProtonVPN. Rate Limiting Presentation: Presented rate limiting of YouTube on PC and smartphone. Aug-Sept 2022 Function Testing by NCSC: NCSC tested full TSG functionality for MOTC. Oct 2022 Control Features Presentation: Presented control of Psiphon, VPNs, and Viber voice calls per NCSC requirements. Nov 2022 Proof of Concept ends: Training during contract execution. Provider offered ongoing training on operation, management, and maintenance of all supplied equipment and software. 37

Select target paragraph3