Internet Services

Schools ICT will continue to develop internet services to meet school, LA and national requirements for administrative and curriculum use.

Working with schools and evaluating technology available, appropriate solutions will be implemented which will carefully balance quality and cost. We will also develop appropriate guidance and standards documents that will be published to all schools, identifying roles and responsibilities when using these services.

All services are fully administered and supported by Schools ICT Unit.

• A high speed broadband link that is reviewed and increased to ensure it is large enough to support the schools growing internet requirements whilst still being cost effective.  During 2025 this link will be increased to provide 1Gb download speeds (100mb Upload).
• An additional link to create resilience and ensure uptime of internet services.
• In the extremely unlikely case of both links being unavailable a replacement 4g/5g link will be implemented within 4 hours of total loss of internet.
• Provides link speeds that are 10 times the DfE standards recommend minimum of 100mb download speed.
• All Broadband links are continually monitored and managed to ensure any issues are rectified as quickly as possible.
• Schools using multiple sites can be configured to utilise secure links between sites to ensure shared data access.
• Resilient and high speed connections to support services schools use such as home working, IP telephony and schools migrated fully to the cloud.

Located between the school network and the internet, the Edge Firewall protects the school network from internet dangers.  Using industry standard top grade firewalls allows required protection which adapts to constantly changing. 

• Working with the council and security companies, highly knowledgeable and experienced staff evaluate the security landscape to ensure the correct choice of firewall and supporting technologies are used.
• All edge firewalls used are a member of the Internet Watch Foundation and signed up to the Counter-Terrorism Internet Referral Unit list.
• Edge Firewall used fully meets UK Safer Internet Centre filtering checklist.
• Security threats constantly change and the firewall continually updates to meet these threats.
• Selected, configured, updated and monitored to ensure the very best security and complete compliance with DFE Standards and other regulations.
• Internal services and firewalls configured in conjunction with the edge firewall to ensure overall protection.
• Utilising the latest technologies such as Intrusion protection, HTTPS scanning and URL database updates.
• Continually monitored alerts and reports ensure immediate actions are taken as required and applied to all schools on the service at once.

Built into the firewall and supported by central logging and monitoring, Internet Content Filtering provides URL filtering and packet inspection customised to different requirements across school.  Supplemented by help and guidance with acceptable use policies aimed at different age groups.

• Carefully configured, developed and maintained systems to safeguard pupils and staff.
• Much more than just URL filtering, every item of information going in and out of school is checked for dangers including malware, malicious code and viruses. 
• At the core, URL filtering is always using up to date industry standard URL databases.
• Categories allow for different access rules for staff and pupils.  With custom block/allow lists to support the schools’ needs which differ from these categories.
• Extensive monitoring and security alerts ensure that any threats are dealt with rapidly and thoroughly.
• AI and 24/7 human intervention provides an additional level of safeguarding.
• Meets all the DFE standards regarding Internet Content Filtering.

Supporting schools’ need to meet statutory guidelines.  The KCSIE alerting and reporting part of the internet service provides key safeguarding alerts, reports and guidance for schools. 

• Links with the Council, DfE, security experts, schools and other organisations The services are developed to stay relevant with demands.   
• Responding to changes to ongoing updates of  KCSIE guidelines.  This service not only provides alerts and reports, but also a package to help schools develop their internal procedures and policies.   Ensuring schools make the best use of the features and meet critical safeguarding requirements. 
• The alerts are now a part of the school routine with support provided to investigations as required. 
• SICT are now looking at advancements to reporting and monitoring such as working on school devices outside of school and will work with schools to ensure any improvements are beneficial. 
• Alerts and monitoring can be extended to protect content in Office 365 or Google Classroom.

Industry standard Anti-Virus products, suitable for use in the curriculum environment, are selected for use across schools we support. This is licensed at levels to cover every workstation and server, whether the equipment is supplied by SICT or purchased via another supplier.

• Anti-Virus sitting on school devices operating in and out of school, providing protection from malicious code, applications, malware and viruses. 
• Careful consideration is given to security, with in-school solutions offering a higher level of protection than standard home antivirus software
• Cloud based deployment, polices, monitoring and alerting allows quick response to any situations.
• Server specific versions of Anti-Virus protect all data on the server.  Scheduled routine scans add an additional layer of protection.
• Schools are subject to high level threats from ransomware and other security attacks, especially in the last few years.  Anti-virus forms part of complete package of protection. 

Through our provision of top quality solutions and working alongside schools, we are proud to say that SICT has never had to restore a school from a ransomware attack or virus outbreak. 

Internal threats can be just as dangerous as external ones.  Combining client and server configuration with network switches, WIFI networks and Edge Firewalls allows overall protection of the network.

• Installing and maintaining structured cabling that meets DfE Standards. Ensuring that faulty or low specification cabling does not negatively impact on network performance.
• When purchasing switches for a cabinet it is important to make best use of space. Some suppliers may provide switches with the minimum number of network ports required for that service (e.g. 8 or 16 port). It is highly recommend to fit switches with 24 ports or higher to ensure switches do not need to be replaced due to ports running out.
• Some switches can include Power over ethernet ports. These special ports allow the powering of devices such as WIFI routers and phones without the need of a power supply. It is likely that at least one switch will require some of these.
• WIFI infrastructure is part of the backbone of the network. WIFI access point/router locations and configuration require careful consideration and WIFI audits ensure the best service is delivered from the WIFI network. Guest WIFI networks have been implemented to segment devices and support the new KCSIE requirements.
• Other complexities such as internal firewalling, IP addressing, VLANS and routing will be considered as the network develops.
• Advice and guidance on obtaining the best out of the school network while ensuring its security is provided as standard.

Balancing the security need with the impact on a busy school environment, Two Factor Authentication secures account logins, and Conditional Access removes the two factor element when accessed in school.

• The configuration of Two Factor Authentication has to be part of the standard for authentication of core services such as Email, Remote access and any other service that connects users to school data. 
• A Two Factor Authentication solution that is continually improving to keep up with threats.  Deployment and education is completed to ensure end users use the latest features.
• The requirement of Two Factor Authentication in school can impose on the curriculum delivery, therefor Conditional Access is used to limit the requirement outside of school.
• Services (where possible) will be developed and integrated to use single sign on with the highest level of two factor.
• Additional licensing required for Two Factor and Conditional Access, which is included in this service.

Critical in the increasing pressures of phishing and ransomware attacks, email protection is configured to the highest standard.  Combined with other security measures and end user security training, this provides the best protection against email based attacks. 

• Email phishing has always been a problem, but has massively increased in recent years.  Hackers are finding innovative ways to trick users into sharing their personal data. 
• Email flows between schools and a number of sensitive locations ranging from the Police, Councils, DfE and other schools.  Requiring additional transport to be configured to protect from spoofing and other attack methods. 
• Monitoring, configuration updates and sharing information is taken between important locations including the Council and other experts to help minimise the risk to schools.
• Incident plans involving schools, Councils and other important locations ensure rapid reaction and resolution to incidents.
• Each school’s Office 365 tenancy is continually configured to protect schools from harm, with 1000’s of emails blocked or quarantined every day.

School communication often involves sensitive information requiring email encryption.  Email Encryption service provides an ad hoc ability to send emails securely to any destination.

• Working with the Council, general email has transport level email encryption.  Protecting all email flowing between schools and the Council.
• Additional higher level email encryption is available to schools at no extra cost.
• Integrated into Office 365 for ease of use – email encryption can be used to send encrypted emails to anyone and receive replies to these emails with the same level of encryption.

Schools regularly share information files with different departments in the Council, e.g. Finance, HR. AVCO Anycomms provides the facility for this information to be transferred to and from the Council in a secure manner.

This service includes:-

• Encrypted Data transfer between various Council departments and schools to share information such as financial, HR and personnel.  This is provided by AVCO Anycomms.
• A simple to use application which, at the click of button, compresses and encrypts files before sending them to Council departments.

Provides the authentication platform to allow users to login to school computers and services.  Microsoft Active Directory holds the information and shares it securely with other services such as Office 365.

• Microsoft Active Directory which is used worldwide as the user and device authentication platform for schools and businesses using local servers.
• An Active Directory infrastructure which holds all domain joined devices and users.  This is centrally managed and shared across Multi Academy Trusts.
• Schools on the central primaries domain share the infrastructure which removes the risk of running a single domain controller in school.
• Linking to Office 365 allows single sign on between device and cloud services.
• Maintenance of the core platform is completed by highly trained consultants and technicians.

For schools that move fully to the cloud, the same dedication forms part of the delivery and configuration of the cloud version of Active Directory.

• Microsoft Active Directory which is used worldwide as the user and device authentication platform for schools and businesses using local servers.
• An Active Directory infrastructure which holds all domain joined devices and users.  This is centrally managed and shared across Multi Academy Trusts.
• Schools on the central primaries domain share the infrastructure which removes the risk of running a single domain controller in school.
• Linking to Office 365 allows single sign on between device and cloud services.
• Maintenance of the core platform is completed by highly trained consultants and technicians.

Various services are provided via the Microsoft Office 365 platform. These products offer a range of functionality to cover curriculum and administrative requirements.  Schools can make use of the cloud at a time that’s right for them.

• Office 365 gives access to a wide ranges of applications and services.  From Outlook for email, latest versions of Office, curriculum applications such as Minecraft for Education, OneDrive/SharePoint for data storage and much more.
• Schools on the shared tenancy and academy trusts with their own tenancy, are configured in a way that allows schools to be securely separate but allow collaboration between each other.
• Highly technical custom configurations have allowed secure pupil access to areas of Office 365, e.g. Teams, while limiting access to others, e.g. email. 
• Multiple levels of Microsoft protection and constantly updated custom rules protect school data across the whole of Office 365. 
• Content filtering ensures that security and safeguarding are implemented.
• Shared mailboxes allow for multiple user access to a single email, while meeting DfE guidelines.
• Working with other services including the Council, Police and NHS, Office 365 is adapted to provide schools with what they require. 
• We support schools utilisation of cloud services at a pace set by the school.  Whether you’re simply looking to use cloud-based email or planning a full migration to the cloud, our team is here to support every step of the journey — and beyond.

Technology, monitoring and reporting is only one half of the protection against threats.  Awareness and training forms the other half.  Pupils education are covered in the many services provided by the Curriculum Team and regular staff training is also provided.

• Alongside the services we deliver, training and support are important to ensure that users can obtain the best from these services in a secure manner.
• Immediate support and guidance is provided direct to staff as it is required with no delays or waiting for scheduled visits.  Ensuring minimum impact from any threats.
• Utilising self-service and guidance from industry experts, training and guidance will be developed further to ensure safeguarding and security remains in place.

For schools utilising a local server to host their data, this service provides subscribing schools with the facility to remotely access school resources and data using a web browser. The service is secured using Two Factor Authentication and ensures that any potential threats from home computers are kept away from the school.

• Alongside the services we deliver, training and support are important to ensure that users can obtain the best from these services in a secure manner.
• Immediate support and guidance is provided direct to staff as it is required with no delays or waiting for scheduled visits.  Ensuring minimum impact from any threats.
• Utilising self-service and guidance from industry experts, training and guidance will be developed further to ensure safeguarding and security remains in place.

Remote Backup protects the school from much more than accidental deletions.  It is the final level of protection should data be compromised and is extremely important.  This service provides multiple layers of backup to keep a secure copy of data offsite and fully meets the requirements of the RPA insurance.

• Subscribing customers with a managed facility to backup school data located on a school server and in the cloud.
• This service provides the secure backup of data.
• This service fully complies with RPA insurance requirements.
• This service combines previous versions on the server and in the cloud for almost instant restoration with an industry standard solution to backup the data offsite.

Virgin Cloud Voice is a hosted VoIP (Voice over Internet Protocol) telephony solution designed for schools and businesses, delivering advanced call management without the need for traditional phone lines or on-site hardware. It operates over a secure internet connection, offering flexibility, scalability, and cost savings. Users can make and receive calls from desk phones, mobiles, or computers, ensuring seamless communication whether in the office or remote. Features include voicemail-to-email, call forwarding, auto attendants, and detailed call analytics. As a cloud-based service, it supports future upgrades without infrastructure disruption. Virgin Cloud Voice integrates easily with existing systems, making it ideal for modern, agile workplaces.

Phone line options

The cloud voice solution includes the migration of existing numbers as required and offers three phone line options, providing a cost effective solution to the schools needs.

Combined with a choice of Handsets and software applications:

Schools have the option to take a desktop based phone with a number of advanced features and ease of use, a portable DECT based phone which can have multiple handsets to each number and a softphone that can run on any desktop PC or mobile device.

Complete wrap around experience.

Finally, to provide a complete service, the installation, maintenance, configuration, updates and support are provided by a dedicated team of experts.  We don’t just put the phones in, we configure them to meet the schools requirements.  On top of this we configure the network and firewalls to segment the traffic to provide the best experience and minimise the impact to other services on the internal network. All at very competitive price.