NetSafe

Take advantage of the change

The changes to the Act provides an opportunity to look at how copyright is currently managed in your school. Netsafe encourages schools to review and revise existing policy and procedures for managing copyright infringement.

The Act puts the responsibility for the management of infringing file sharing directly on the school’s ISP account holder. This is even f the infringement is carried out by an individual network account holder. Schools need to be aware of what the Act covers, and how they can prevent infringing file sharing occurring.

This involves reviewing Acceptable Use Policies and agreements to ensure that they cover this type of activity.

In addition, there are technical solutions to minimise the likelihood of infroiging file sharing activity occurring across their internet service. Any system, or combination of systems that both prevent the installation or use of peer-to-peer software clients, and block peer-to-peer traffic across a schools gateway (firewall) can assist schools in stopping peer-to-peer file sharing across their networks.

The Ministry of Education funds a number of managed internet services which can assist schools with this. Below is some specific advice from each of these services.

Watchdog

Watchdog are currently undergoing test on their MoE funded firewall service, to look at whether or not it will be able to provide schools with the ability to close off Peer-to-Peer traffic. As soon as the test are completed, we will post Watchdogs advice here.

In the meantime, watchdog are advising schools to ensure they run their own proxy servers, and use the features of those to control any peer-to-peer traffic across their gateways.

Schools who use watchdog as an ISP, can request that they block all Peer-to-Peer traffic at the ISP level.

SchoolZone

All schools using SchoolZone are blocking peer-to-peer traffic by default. This means that unless a school has specifically requested that this feature be removed from their firewall, it is unlikely that peer-to-peer traffic is currently able to come or go from a schoolzone school.

SchoolZone also provides by default, full logging of all user activity, for between 60 and 90 days, meaning that any and all activity that comes and goes from the network is able to be assigned to a specific user, at a specific machine  at a specific time.

If schools have specific questions about how SchoolZone can help them to manage peer-to-peer traffic, they should contact schoolzone@telecom.co.nz.

Websense

Websense can perform protocol level filtering of Peer-to-Peer traffic. This means, that websense will actively look at each packet of data that is sent through its gateway, and match the structure of the data against a pre determined list of “allowed” protocols structures. If the protocol is part of a blocked policy, then websense will break the communication link, preventing the traffic from flowing.

If schools would like further information about how websense can assist them with their management of peer-to-peer traffic, they should contact them via their website at www.websense.com.

As well as these organisations, companies that provided managed network services to schools, may also be able to provide help and guidance to schools. Some examples of organisations like these and their advise can be found below:

Edtech

By default, Edtech prevents access to peer-to-peer network protocols via configuration of the firewalls that they manage on behalf of  school customers. This helps prevent such activities taking place from within the school network.

In addition, using group policy to restrict access, Edtech managed schools prevent teachers and students from loading ‘peer-to-peer’ software on school computers. However teachers do have access and are able to load software on their teacher laptops. These laptops cannot be used inappropriately when connecting through the school network, but Edtech do not govern nor actively monitor inappropriate use of the teacher laptops outside of the school network.

Student owned and unmanaged devices also need consideration. School networks that are managed by Edtech and that are set up to allow unmanaged or private device access to the Internet via the school network are restricted by the firewall from using the ‘peer-to-peer’ protocols.

If any schools have questions or concerns we are happy to set up a meeting to talk through the issues, identify any risks and then formulate a plan to mitigate those risks.

Isometric Solutions

Isometric solutions are advising their school sites to do the following:

• Ensure different types of ICT devices are joined to different VLANs, allowing far more control of that device by the firewall.
• If staff or  students are bringing their own ICT device to connect to the schools network,  the school must record the MAC address of the device against the staff or student network ID (for both the LAN and wireless network)
• Log the following information and retain it for at least 50 days:

• IP Addresses
• MAC Addresses
• URLS

• Use a firewall device or appliance that can block P2P traffic, this isn’t a guarantee of blocking outbound P2P traffic however, as it can go over HTTP ports.
• Do not use pre-shared keys on wireless networks, authenticate against a radius

If you would like further advice on how Isometric solutions may be able to assist you with managing peer-to-peer traffic on your network, please contact them via their website at www.isometric.co.nz.

New Era IT.

NetSafe and New Era IT Ltd have worked together regarding the possible impacts for schools of this law change. Should New Era customers  have any concerns regarding the upcoming change , they are advised to contact their Client Manager at New Era IT Ltd, or alternatively their service desk on 0800 GET ICT (0800 438 428).