DJ_MonkeyBoy

I am interested in learning whether schools, particularly multi-academy trusts (MATs), implement any type of information security management system (ISMS). Given the increasing number of cyberattacks on schools and the importance of effective security measures, I am curious to know: Do any schools have effective ISMSs in place? How do senior management view ISMSs, if at all? What percentage of the schools budget do schools allocate to protecting their infrastructure? Given the sensitive nature of the data that schools collect, it seems essential that they implement effective ISMSs and achieve ISO 27001 accreditation. However, in my experience, this area of implementation is often lacking. Let me know your thoughts

I use PFsense and diladele.com: https://www.diladele.com/licensing.html

Sorry these. Wrong link https://www.cisco.com/c/en/us/products/wireless/catalyst-9100ax-access-points/index.html#~benefits

Out of interest do these products fit the Dfe spec and requirements? No licensing required? Wifi: https://www.cisco.com/c/en/us/soluti.../wireless.html Switches: https://www.cisco.com/c/en/us/produc...hes/index.html

I'm hoping a supplier or IT company can answer my question about the Cisco SME range. They seem to come with perpetual licensing, which to be honest is my preferred solution. Has the Cico branding and reliability. Im happy to manage the switches locally, if need be I can also VPN remotely. The fact Meraki just switches itself off after licensing runs out is a bit alarming and a problem that schools will definitely be hit with.

Out of interest do these products fit the Dfe spec and requirements? No licensing required? Wifi: https://www.cisco.com/c/en/us/solutions/small-business/networking/wireless.html Switches: https://www.cisco.com/c/en/us/products/switches/catalyst-1000-series-switches/index.html

Yes, Meraki all the way. It's networking we will never be able to afford, unless the Dfe cough up again in 10 years. Which, I hope they do as replacing this kit again with the same updated devices will be astronomical. Just out of interest, what about the other Cisco switches and wifi, do they meet the Dfe spec? They also have perpetual licensing, is this correct? I know the Catalyst 1000 range of switches has no licensing. What about the SME wireless switches?

Yes, to be fair there are some decent suppliers and IT support companies out there. As you say they have to operate within the Dfe framework. But I still can't help but think that this is taxpayers' money. If funding wasn't there then any IT company would not be putting this type of equipment in a one-form primary school. It could be easily be done at a fraction of the price, with solid reliable kit, which would run for 5 plus years, and by then schools would be considering some replacement again anyway. But it is what it is...

IT suppliers and external support rubbing their hands with glee, thinking of their profit margins for sure. Fragment the market with academisation, and feed the money into private hands. Opps I got political!

That's the problem. They would have been better off giving the schools a fixed sum and letting them sort it out. But like most techs, they will be filling their boots with over spec equipment.

It really depends on what degree of snooping you require, the ethics around this and how you interpret KCSIE. Which in itself is another discussion point.

Then you need full SSL MITM proxying, difficult to implement with BYOD (as per the original discussion) due to the user having to install the cert. However, diladele also does full AD integrated SSL decryption: https://www.diladele.com/ for managed devices. Fill your boots.

Diladele offers elements of reporting. Most solutions are overkill, expensive and unnecessary..what level of reporting do you require, to what detail, by who, and for what reasons/purpose. That's the question I would be asking. The KCSIE does not ask for overkill reporting.

Save yourself a headache, create a separate vlan, restrict bandwidth, install dns filtering. Free: https://blog.cloudflare.com/introducing-1-1-1-1-for-families/ or https://dnssafety.diladele.com/

Anyone gone down the Cisco Catalyst 9100 Access Points route with on-site management rather than cloud? I understand the licenses are perpetual. Is this correct?