DJ_MonkeyBoy

I am interested in learning whether schools, particularly multi-academy trusts (MATs), implement any type of information security management system (ISMS). Given the increasing number of cyberattacks on schools and the importance of effective security measures, I am curious to know: Do any schools have effective ISMSs in place? How do senior management view ISMSs, if at all? What percentage of the schools budget do schools allocate to protecting their infrastructure? Given the sensitive nature of the data that schools collect, it seems essential that they implement effective ISMSs and achieve ISO 27001 accreditation. However, in my experience, this area of implementation is often lacking. Let me know your thoughts

I use PFsense and diladele.com: https://www.diladele.com/licensing.html

Sorry these. Wrong link https://www.cisco.com/c/en/us/products/wireless/catalyst-9100ax-access-points/index.html#~benefits

Out of interest do these products fit the Dfe spec and requirements? No licensing required? Wifi: https://www.cisco.com/c/en/us/soluti.../wireless.html Switches: https://www.cisco.com/c/en/us/produc...hes/index.html

I'm hoping a supplier or IT company can answer my question about the Cisco SME range. They seem to come with perpetual licensing, which to be honest is my preferred solution. Has the Cico branding and reliability. Im happy to manage the switches locally, if need be I can also VPN remotely. The fact Meraki just switches itself off after licensing runs out is a bit alarming and a problem that schools will definitely be hit with.

Out of interest do these products fit the Dfe spec and requirements? No licensing required? Wifi: https://www.cisco.com/c/en/us/solutions/small-business/networking/wireless.html Switches: https://www.cisco.com/c/en/us/products/switches/catalyst-1000-series-switches/index.html

Yes, Meraki all the way. It's networking we will never be able to afford, unless the Dfe cough up again in 10 years. Which, I hope they do as replacing this kit again with the same updated devices will be astronomical. Just out of interest, what about the other Cisco switches and wifi, do they meet the Dfe spec? They also have perpetual licensing, is this correct? I know the Catalyst 1000 range of switches has no licensing. What about the SME wireless switches?

Yes, to be fair there are some decent suppliers and IT support companies out there. As you say they have to operate within the Dfe framework. But I still can't help but think that this is taxpayers' money. If funding wasn't there then any IT company would not be putting this type of equipment in a one-form primary school. It could be easily be done at a fraction of the price, with solid reliable kit, which would run for 5 plus years, and by then schools would be considering some replacement again anyway. But it is what it is...

IT suppliers and external support rubbing their hands with glee, thinking of their profit margins for sure. Fragment the market with academisation, and feed the money into private hands. Opps I got political!

That's the problem. They would have been better off giving the schools a fixed sum and letting them sort it out. But like most techs, they will be filling their boots with over spec equipment.

It really depends on what degree of snooping you require, the ethics around this and how you interpret KCSIE. Which in itself is another discussion point.

Then you need full SSL MITM proxying, difficult to implement with BYOD (as per the original discussion) due to the user having to install the cert. However, diladele also does full AD integrated SSL decryption: https://www.diladele.com/ for managed devices. Fill your boots.

Diladele offers elements of reporting. Most solutions are overkill, expensive and unnecessary..what level of reporting do you require, to what detail, by who, and for what reasons/purpose. That's the question I would be asking. The KCSIE does not ask for overkill reporting.

Save yourself a headache, create a separate vlan, restrict bandwidth, install dns filtering. Free: https://blog.cloudflare.com/introducing-1-1-1-1-for-families/ or https://dnssafety.diladele.com/

Anyone gone down the Cisco Catalyst 9100 Access Points route with on-site management rather than cloud? I understand the licenses are perpetual. Is this correct?

Looks like Extreme networks fits the bill. So will be one on my list of comparisons. I also like the fact you can manage third-party hardware devices from a central dashboard.

Interesting I was going to ask what others what others were doing, I hate meraki licensing model. Is it this one: https://www.extremenetworks.com/products/

It is definitely hard to say no to the scheme due to the high enterprise replacement...the affordability of such equipment will mean that schools will need to ring-fence between 6-10K (primaries) a year to maintain this high-end equipment for replacement in 8 ish years time. I fear schools will just not do this given it's 10 years away..and not my problem I won't be here...realistically you could probably replace your entire infrastructure on 18month worth of cost with a lower grade kit. As the Dfe don't have a road plan taking the risk may be worth it..who knows?

Wow...I think mine will come in at a similar cost..l think most schools will get it installed and panic in year 9!

Go on how much? What kit are you going for? What's your plan for long-term affordability?

Below makes for interesting reading, government setting the standard, I have oversight of a number of primary school budgets, and there is no way it could afford the standards set out in these documents. The Dfe seriously need a road map of ICT investment if they wish to see this through: https://www.gov.uk/guidance/meeting-digital-and-technology-standards-in-schools-and-colleges

It's nice to be offered to swap out all your kit for this best gear on the market. It appears to be free, but being locked into the top-class enterprise solution could in theory cost you more over the 10-year period when compared with other network solutions (unifi) I need to get some quotes and do a cost comparison over a number of years. The licensing model is something I'm not a fan of. I'm yet to be convinced.

Is anyone concerned about the long-term cost of replacing Unifi with Meraki? Whilst I appreciate we get 10 years of free kit and support, the replacement cost is quite substantial, worse still in one giant hit, albeit in 10 years' time. But! The networks I look after tend to evolve. Upgrade slowly and at a manageable pace. Considering the UNIFI kit is more than good enough for schools of any size, easy to replace and provides good performance. I am left wondering if the Dfe funding programme is too prescriptive and could cause a financial bleep in years to come. Whilst I am still awaiting the paperwork to see the detail, My initial feeling is that the Dfe should be just giving us the cash and letting us decide how we spend the money. First glance at the funding looks to me to favour the Rolls Royce brands of networking and not the actual cost of a school to service the Roll Royce in years to come. Thoughts...?