London Grid for Learning

Transcription

1 LGFL London Grid for Learning [Type the document subtitle] s Guide Brian Durrant [Pick the date] 2010

2 The London Grid for Learning is a founder member of the National Education Network, the UK collaborative network for education, providing schools with a safe, secure and reliable learning environment and direct access to a growing range of online services and content. This document is version v The LGfL service offering is continually developing, and this document may change. The most current version is available on-line at London Grid for Learning Trust is a consortium of the London Local Authorities A company limited by guarantee registered in England no Reg charity no CI Tower St Georges Square New Malden KT3 4TE fax office@lgfl.org.uk web 1

3 Contents Introduction... 4 What is LGfL?... 4 How has the LGfL Developed?... 5 What information does this booklet provide?... 5 How do I order an LGfL?... 5 What if my school is in a WAN LA?... 5 Infrastructure & Connectivity s... 6 Core Network... 6 Edge Network... 6 Small Site ADSL... 9 Content Hosting... 9 London MLE Web Site Hosting... 9 Synetrix Hosted Web Site first instance... 9 Synetrix Hosted Web Site additional instance Domain Name Hosting (DNS) Domain Name Hosting for StaffMail and LondonMail Broadband Resilience Network Health Checks Secure Remote Access CentraStage Local Cache Devices Network Time Security s SecureStore URL Filtering User-Level URL Filtering WAN Management and Security at LA level WAN Management and Security at School level Content Control and Virus Control Anti-Virus Protection Anti-Virus Dynamic Live Update Forensic - Desktop Content Control Remote CCTV Monitoring E-Safety Guidance Acceptable Use Policy LGfL Authentication and Interoperability Federation USO for staff USO for pupils Secure File Exchange (USO-F) Second Factor Authentication (USO-OTP) MIS to USO automated account updating (USO-AutoUpdate) Automated SMS and Messaging (USO-AutoText) USO-Opencheck USO-Digisafe Digital Signage Learning Platforms Digitalbrain (DB Education) London MLE (Powered by Fronter) Curriculum and Development s Professional Development for School Leaders Curriculum Consultants School Closure Curriculum Teaching and Learning Digital Content Networked Weather Stations Podcasting Video Central Video Conferencing LVC-Net London Video Conferencing Network LA Guidance on Video Conferencing

4 Hosting StaffMail LondonMail Saf Other s The London Public s Network (LPSN) The Pan-London Admissions Register The On-line E-admissions BSF administered LGfL services LGfL for Academies Supplier Contact details The London Grid for Learning Core Network Serving over 2700 institutions 3

5 Introduction What is LGfL? The London Grid for Learning is a Consortium of the 33 London Local Authorities formed in 2001 with the initial purpose of leveraging combined purchasing power in the procurement of broadband connectivity and associated services for London maintained schools. In April 2001, the Consortium incorporated a Special Purpose Vehicle, the London Grid for Learning Trust to enable the authorities to act jointly in undertaking procurements and letting of contracts. The Trust is a company limited by guarantee, owned jointly by all London Councils, and is a registered charity. The Executive Board of Trustees/Directors is made up of representative Directors of Children s s and LA officers with responsibility for strategic leadership of ICT in schools. The LAs engage closely in the work of the Trust through regular meetings of representatives from all member LAs, and the activities and decisions of the Trust are guided and informed by the work of four representative sector groups and five specialist groups: the Editorial Board; the MLE Implementation Group; the Portal Development Group; the Technical Steering Group; the e-safety Group In addition to these standing groups, groups for specific purposes are created from time to time, for example to oversee a regional procurement programme, as recently seen in: the London Managed Learning Environment Procurement Group, and; the Computers for Pupils Procurement Group. Every London LA is represented within these groups and involved in the governance of LGfL. It is estimated that through the aggregated procurement of infrastructure, security systems, learning platforms and digital learning content, London Local Authorities have by 2009 generated savings in excess of 120m compared to securing the same services for schools without aggregation. In addition to savings through aggregated procurement, LA collaboration also provides significant benefits to Local Authorities and schools through shared expertise, experience and resources, and the avoidance of waste created by duplication of effort. In the last year, the LGfL has undertaken a major internal audit of the information security arrangements across itself and its principal suppliers organisation in line with the HMG Security Policy Framework. The recommendations from this audit will be reflected in a new information security policy to be implemented over the next six months. The services and products in this services guide will enable LAs and schools to meet the challenges of the Becta information handling guidelines and Ofsted s new evaluation schedule of judgments for schools in meeting safeguarding regulations. LGfL has collaborated with the twelve other regional grid bodies across the UK to create the National Education Network, a community, a dedicated physical network infrastructure, and a content repository at Although the Trust is essential to the proper and effective working of the Consortium, it is merely the servant vehicle; and it should be understood that: The London Grid for Learning is the Consortium of London s 33 Local Authorities working together to achieve outcomes which exceed (in quality scope and value for money) what can be achieved by working individually. 4

6 How has the LGfL Developed? The London Grid for Learning was in 2003 the first Regional Broadband Consortium to meet the required security and performance criteria to be accredited as a Becta Accredited Internet Provider for Schools, and continues to retain this important accreditation through regular re-assessment. By 2006, LGfL had achieved its initial strategic goal of connecting all London maintained schools, over fibre, to a fast, secure, purpose built, state of the art network; believed to be the largest and most advanced education Ethernet in the World. As the Consortium, the Trust and LGfL services have matured, Local Authorities, DCSF and Becta have seen other needs and opportunities in which the LGfL could usefully be engaged. This has led to a broadening of services which are described later in this document. The Trust is now strategically placed to support LAs and schools with the successful transformation of learning through the effective use of new technologies. What information does this booklet provide? This document sets out the services provided by LGfL, giving a brief executive summary description of each service, an explanation of how the service is paid for, what the associated charges are and how to order. All charges are quoted ex vat. To help provide a quick reference for these services, each section begins with a table outlining the key points of reference. The content of this table is described below. This LGfL The service reference which can be used to order the product This gives the name of the service being provided This gives a very brief description of the service. For full details, see the text of the section or, where appropriate, the full technical specification. This describes whether the service is something that is charged separately, or is part of a package such as the LGfL core service. This indicates from which of LGfL s suppliers the service is procured Where further details are available online a link is provided. How do I order an LGfL? A Matrix which summarises in table form much of the information in this document is included at the end of the booklet. The Matrix shows which LGfL Supplier Partner is responsible for each service and contact details for each supplier are provided on page 33. What if my school is in a WAN LA? Some local authorities (Barking & Dagenham, Hillingdon, Kingston, Redbridge and Sutton) have locally operated wide area networks ( WANs ) which connect schools to their LA Centre and then to the LGfL, rather than directly to the LGfL. Some of these LAs also make local arrangements for some services including URL filtering and hosting. Schools in these authorities should particularly ensure they are fully aware of LA managed services before considering other options. 5

7 Infrastructure & Connectivity s The LGfL network consists of the two elements outlined below. 1. The Core Network is a managed service which is delivered through a total of twenty one core locations. Three of these are the central core locations (London Telehouse, Park Royal and Earls Court) and the remaining 18 are the aggregation point core locations or APs. These APs are located at various points on ring main loops around the whole of the LGfL region. 2. The Edge Network which comprises approximately 2600 connections to schools and other sites from one of the core locations. Core Network This LGfL Core Core Network This is the managed service which provides high bandwidth connectivity through a network of twenty one core locations. Annual LA core payment is supported by Synetrix The Core Network is procured by the Consortium, through the Trust, against an annual fee of 1.7m. A formula which allocates an annual contribution by each LA to this fee was agreed at the inception of the contract, and is embodied in the contracts between each LA and the Trust. Procurement of the core network on a managed service basis has provided LAs, and hence schools, with certainty in regard to costs and protection from unexpected costs and other risks. It places responsibility for the maintenance and renewal of the network, and the fulfilment of Level Agreement requirements, firmly upon the supplier. Edge Network This LGfL Edge Edge Network Each school s broadband connection This is the centrally procured service which connects individual schools to the Core. Annual school payment is supported by Synetrix The connections from the Core Network to schools are referred to as the Edge network. The Edge Network is the aggregate of all of the individual broadband links to schools. The London region is unique in the UK in regard to the procurement of these broadband links for LA maintained schools in two respects: First, almost all 1 the local authorities agreed to procure the connections to schools through a central collective procurement, rather than merely taking a single feed connection and arranging connections locally. As a result, LGfL is the largest end customer in the UK, in any sector, for fibre optic data services, an achievement which provides considerable market leverage. Second, this combined purchasing power was used successfully at the procurement stage to secure standard pricing for school broadband connections, irrespective of the actual cost to the 1 The small number of Authorities (The WAN LAs) which were not part of this collective procurement already had local area networks, managed by the LAs. These LAs receive a high bandwidth feed from the LGfL network and make local arrangements for the connection of schools to the feed. 6

8 supplier of installing the fibre, which in some cases has greatly exceeded the revenue. No other region in the UK has secured a similar arrangement. Although the Trust s contracts with LAs and the infrastructure supplier provide for price reviews, and adjustments in line with inflation, the standard charges for school connections have thus far remained stable since 2001, with a single adjustment of 5% applied in 2004, a further 4.5% adjustment was agreed in April 2009 and this is reflected in the pricing tables below. LGfL standard annual rates for existing broadband services (Broadband Connection or BBC ) to London LA maintained schools are: Primary, Special Schools, PRUs and other LGfL registered educational establishments with up to 20 PCs Annual BBC 2Mbps Primary 3, BBC 5Mbps Primary 3, BBC 10Mbps Primary 6, BBC 20Mbps Primary 11, BBC 100Mbps Primary 15, Secondary Schools, Libraries, CLCs and other LGfL registered educational establishments with over 20 PCs Annual BBC 2Mbps Secondary 3, BBC 5Mbps Secondary 5, BBC 10Mbps Secondary 7, BBC 20Mbps Secondary 11, BBC 100Mbps Secondary 15, New services: changes in the underlying costs of fibre circuits have necessitated an adjustment for services which require the installation of a new fibre bearer to revised prices shown below. Where a bandwidth upgrade is required which can be accommodated using the existing bearer, the lower LGFL standard rates will apply. Prices for upgrades or shifts will supersede any previously agreed promotional pricing. New Provision Set Up Annual Primary, Special Schools, PRUs and other LGfL registered educational establishments with up to 20 PCs BBC 2Mbps Primary 2, , BBC 5Mbps Primary 4, , BBC 10Mbps Primary 9, , BBC 20Mbps Primary 9, , BBC 100Mbps Primary 9, , Secondary Schools, Libraries, CLCs and other LGfL registered educational establishments with over 20 PCs BBC 2Mbps Secondary 2, , BBC 5Mbps Secondary 8, , BBC 10Mbps Secondary 9, , BBC 20Mbps Secondary 9, , BBC 100Mbps Secondary 9, , Academies BBC 10Mbps 9, , BBC 20Mbps 9, , BBC 100Mbps 9, , Upgrades - Primary 2 5mbps 1,200 3, mbps 7,000 6, mbps 6,600 6, , 5 or 10 20mbps 4,750 13, , 5 or mbps 4,750 17, mbps 1,200 15,

9 Upgrades Secondary 2 5mbps 5,800 5, mbps 7,000 7, mbps 2,888 7, , 5 or 10 20mbps 4,750 13, , 5 or mbps 4,750 17, mbps 1,200 15, Upgrades - Academies 10 20mbps 4,750 13, mbps 4,750 19, mbps 1,200 19, B end or Ext Shifts and Changes - Primary Set up Annual Ext Shift, 2mbps, Bespoke 5, Ext Shift, 5mbps pricing, 6, subject to Ext Shift, 10mbps 6, survey Ext Shift, 20mbps 13, Ext Shift, 100mbps 17, B end or Ext Shifts and Changes - Secondary Ext Shift, 2mbps, Bespoke 5, Ext Shift, 5mbps pricing, subject to Ext Shift, 10mbps survey Ext Shift, 20mbps 13, Ext Shift, 100mbps 17, B end or Ext Shifts and Changes - Academies Ext Shift, 10mbps Bespoke 9, Ext Shift, 20mbps pricing, 13, subject to Ext Shift, 100mbps 19, survey Schools wishing to order or upgrade should contact LGfL s infrastructure partner Synetrix Holdings Ltd via education@synetrix.co.uk. Because of the substantial costs involved, wherever possible, B-end (i.e. school end of the fibre) shifts should be avoided. For the technically minded, there are four schemes under which a school s computers can be allocated IP (Internet Protocol) addresses: OPTION 1 - LGfL supplied private address range This option provides a school with a range of private IP addresses. LGfL provides up to 6 Class C ranges of 255 IP addresses per connection. These ranges can be allocated across the networks according to your requirements. OPTION 2 Public IP addresses with school s own managed firewall This option is suitable where a school would wish to have total control and responsibility for network security. LGfL will supply the school with a quantity of public IP addresses for use on its firewall. The quantity of IP addresses supplied will be based on the current and expected usage. All firewall policies and Network Address Translation (NAT) are the responsibility of the school. OPTION 3 - Retaining existing IP address ranges If a school wishes to maintain their existing IP address scheme then, in most instances, this can be accommodated by use of NAT. If a school has multiple networks LGfL will provide dynamic NAT, such that each network will appear as a single IP address to an external site. LGfL will provide static NAT for devices that need to be externally accessible, such as web servers or SMTP servers. Firewall policies to protect access to such devices from the Internet are provided by the WAN (wide area network) Management and Security service. OPTION 4 School s own public IP addresses with your own managed firewall This option uses the schools own public IP addresses. To use this option the school must have provider independent public IP addresses assigned directly. 8

10 Small Site ADSL This LGfL Small Site ADSL Small Site ADSL This service provides very small units (less than 7 computers) with an alternative to the EDGE Network connection above. Small site annual school payment is supported by Synetrix For very small units, such as a small pupil referral unit, where there are less than 7 connected devices, a connection to the LGfL network can be provided using ADSL at a lower cost than a fibre connection. The annual charge is 1,320 (set-up 200). Content Hosting This LGfL Content Hosting Content Hosting This service provides the storage for on-line content resources is managed directly by LGfL Like the engines in a liner, this service is largely invisible to users, but it is equally essential. LGfL invests heavily in hosting capacity in order to ensure that LGfL on-line resources will always be available, quickly and easily, irrespective of how many users may simultaneously request the same resource. The LGfL hosting platform is resilient, which means that if one hosting centre were to fail, users would not be aware, because another centre would continue the service. London MLE Web Site Hosting This LGfL MLE website London MLE Website Hosting This service provides a way to create, store and publish website from information stored in the Managed Learning Environment. MLE is supported by Fronter LGfL offers two means to host a school s website. This is the first option. Users of the London MLE are able to create web facing content using Web-Fronter, a new facility in Fronter, developed at the request of LGfL. Synetrix Hosted Web Site first instance This LGfL First Synetrix website First Synetrix Hosted Website This service provides storage and publication of a website created with proprietary site-creation tools Included in annual school payment for broadband connection is supported by Synetrix 9

11 LGfL offers two means to host a school s website. This is the second of these options. The service is a shared-server Microsoft Windows based web hosting service, suitable for most small to medium size web sites. It supports classic ASP, ASP.NET and PHP scripting and includes MySQL database hosting. An administration portal is provided to allow users to manage their own website configuration. Users create their content offline. A single instance of the web hosting service, with initial storage space of 55Mb, is included with the school s broadband service. Additional space is available at 100 per 1Gb (set-up 50). This service does not include training or support and users will need to know how to use the appropriate tools. Synetrix Hosted Web Site additional instance This LGfL Additional Synetrix website Additional Synetrix Hosted Website This service provides storage and publication of a website created with proprietary site-creation tools Separate annual charge is supported by Synetrix LGfL offers two means to host a school s website. This is the second of these options. The service is a full web hosting service inclusive of cgi-bin (database) functionality. Users create their content off-line using their chosen proprietary tools (e.g. Front Page) and use ftp (file transfer protocol) to upload content to the site. A single instance of the web hosting service from Synetrix, with allocated total storage space, is included with the school s broadband service. Additional instances are available at 80pa with additional space at 100pa per 1Gb (set-up 50). This service does not include training or support and users will need to know how to use appropriate tools. Domain Name Hosting (DNS) This LGfL DNS Domain Name Hosting This service provides a hosting service for a single or multiple domains. First DNS included in annual school payment for broadband connection. Additional provided by. is supported by Synetrix The DNS hosting service is provided by Synetrix. Domain Name Hosting for StaffMail and LondonMail This LGfL StaffMail DNS Additional Domain Name Hosting This service provides a hosting service for additional domains. is supported by Atomwide A DNS service for domains used for StaffMail and LondonMail managed for LGfL by Atomwide 10

12 Broadband Resilience This LGfL Broadband Resilience Broadband Resilience This service provides schools with a backup connection to the LGfL so that service will continue even if the primary connection fails. Separate set-up and annual charge is supported by Synetrix The LGfL network has an excellent track record of continuity of service, and a history of SLA metrics is available to verify this. However, schools are typically linked to the network via a single fibre connection, which represents a single point of failure. This service provides the means for a school to invest in a second lower cost connection using an ADSL link which routes back to the core network via a different route. Although the capacity of the fail-over ADSL link is significantly less than the fibre link, essential services such as can (in the event of a failure in the main fibre link) be maintained, as well as slower access to remote (Internet or other) resources. The annual charge is 2,517 (set-up 2,664) Network Health Checks This LGfL Network Health Check Network Health Check This service provides schools with a network health check. Separate one-off charge is supported by Synetrix It has been a common occurrence for the LGfL Customer Centre to receive service calls for schools wishing to report a slow connection. It is a common perception that when the experience of the user at the computer desktop is slow, the reason must be the LGfL connection. In practice, this is rarely the case, as can readily be established by attaching a (laptop) computer to the switch where the LGfL service is presented on site. In some cases, the slow experience at the desktop is the result of weaknesses in the design or configuration of the school s on-site local area network and poorly-configured proxy servers are a common culprit. School networks have sometimes developed in an irregular way without expert oversight, and a school may lack the expertise in-house to accurately assess the performance of its in-house network. The LGfL Network Health Check provides a means to obtain a cost-effective assessment, diagnosis and recommendations of any required remedial action. The one-off charge for this service is 485 for a Primary school and 695 for a Secondary school. Secure Remote Access This LGfL Secure Remote Access Secure Remote Access This service allows secure access to school networks and servers from outside school. Separate set-up and annual charge is supported by Synetrix 11

13 This service provides the means for senior management (for example) to access servers and other assets connected to the school s internal network from a remote location (e,g, using one s home broadband service). There are agreed charges for this LGfL service, including an annual user licence of 59.37pa. Set-up costs will depend on the amount of support required and are available from Synetrix. CentraStage This LGfL CentraStage Asset Management & Document Control CentraStage Primarily an LA or larger site service provides a hosted application to manage hardware, software and other network assets from a central location. Provides the ability to upload and manage applications, documents etc ensuring that all staff and site agents have the latest or up to date versions on their local machines. The service is secured using password access control. LA or site licensing based on number of users. is supported by Synetrix The service is charged on a price banding based on the number of devices under management, as below. There is a 850 per annum support and maintenance charge within which software upgrades are included. Annual fee for up to N managed devices, based on bands, as follows: N , , , , , , , , , , , , , , , , , , , ,000 12

14 Local cache devices This LGfL Cache devices Cache devices A device which is installed within the school which stores frequently visited web sites, and can also be pre-loaded with content. Single school purchase is supported by Atomwide, Synetrix or Espresso LGfL offers a choice of three different local caching devices with varying characteristics and associated costs. Further details, and a comparison, are available at Network Time This LGfL Network Time Network Time This service offers a high precision time reference using the NTP protocol for LA, and other LGfL-connected, servers. is supported by Atomwide This service offers users the ability to synchronise LGfL-connected Windows 2000 and later server systems to a core source, calibrated by external services such as the MSF radio time signal, and GPS satellites, to atomic clock standards. 13

15 Security s SecureStore This LGfL SecureStore SecureStore This service provides secure off-site storage of data. Separate annual charge is supported by Synetrix This service provides off-site storage of data, typically to avoid the situation where back-up tapes on site are lost (e.g. by fire, flood or burglary) at the same time as the source data. It also allows greater confidence in the ease of restoring data if such a disaster does occur. There is a minimum requirement per site of 1 server or 10 pc licenses at 250 per annum and 50GB of storage space at URL Filtering This LGfL URL Filtering URL Filtering (Unique Resource Locator = web site) This service filters web content and blocks inappropriate content. Separate annual charge at either LA or School level is supported by Synetrix The Internet is an open system with huge numbers of independent, unregulated contributors; consequently it is simultaneously wonderful and horrible. For LGfL, making the Internet safe for schools has been one of its greatest challenges and triumphs. Through Synetrix, LGfL supplies a sophisticated filtering system which schools can, if necessary, adapt (i.e. configure locally) to meet their own particular requirements, or operate using the Becta accredited standard LGfL policy configuration. This service is procured by almost all member LAs, on a LA-wide basis, for an annual fee of 5,679 (set-up 1000) covering the service for all of its schools. It is also available on a per school basis for which the annual fee is (set up 50) User-Level URL Filtering This LGfL User-level URL Filtering User-level URL Filtering This service filters web content and blocks inappropriate content. Separate annual charge at either LA or School level is supported by Synetrix The URL filtering service described above provides protection for the school using a single policy for the school. User Level URL filtering allows a range of different policies to be applied to different groups, for example younger pupils, older pupils, and staff. This service also provides the means to track and establish who did what, when? This LGfL service is available on a per school basis at 225pa (set-up 145). This service requires Pupil Level Unified Sign On (see information about the Pupil Level USO and about Authentication below). 14

16 WAN Management and Security at LA level This LGfL LA WAN (wide area network) Management LA WAN Management and Security This service provides a basic degree of connection configuration to Local Authorities. Annual LA core payment is supported by Synetrix The LGfL Core network is capable of configuring school and LA connections in a way which is appropriate to local circumstances. For example, a user on a school network may be allowed to access systems on the Councils Corporate network or be prevented from doing this. A basic level of LA configuration changes is included in the core service to LAs. This basic level of service to Local Authorities is included in the annual LA core payment. WAN Management and Security at School level School WAN (wide area network) Management School WAN Management and Security This service provides a basic degree of connection configuration at individual establishment level. Separate set-up and annual charge This LGfL is supported by Synetrix The LGfL Core network is capable of configuring school connections in a way which is appropriate to local circumstances. For example, within the overarching LEA default WAN Management service, specific individual access links between an assigned group of schools can be enabled, e.g. a split site school may be linked, giving access to servers or printers on the other site. The LA WAN Management and Security provides basic level of LA configuration changes at LA level, this service provides similar configuration service at an individual site level. It is available at a charge of 150pa (set-up 350) per school site. Content Control and Virus Control Content Control Content Control and Virus Control This service monitors communications and removes inappropriate messages. Separate annual charge at either LA or School level This LGfL is supported by Synetrix is a common means for the malicious conveyance of computer virus infection, and over 80% of incoming is unwanted spam. This LGfL service filters outgoing and incoming , to remove s containing spam, obscenity, and suspected viruses. This service is procured by almost all member LAs, on a LA-wide basis, for an annual fee of 16,000 covering the service for all of its schools ( 1000 set up). It is also available on a per school basis for which the annual fee is ( 50 set-up) 15

17 Anti-Virus Protection This LGfL Anti-Virus Anti-Virus Protection Provides protection of school computers against virus infection. Sophos anti-virus is supplied as part of the Content Control is supported by Synetrix This service provides for the protection of school computers (including staff laptops and home computers) against virus infection. Sophos anti-virus software is provided with the Content Control service. Anti-Virus Dynamic Live Update This LGfL Anti-Virus Update Anti-Virus Dynamic Live Update Ensures Sophos anti-virus protection installed on school computers is kept up to date against new strains of virus infection Sophos Enterprise servers and software are provided using LA pooled funds is supported by Atomwide LGfL provides the means for school computers including staff laptops and home computers to be kept protected against virus attack. This service additionally ensures that the protection is updated regularly and automatically without the need for further manual intervention. The service is authenticated through the Unified Sign On service, which is described further below. Forensic - Desktop Content Control This LGfL Forensic Desktop Content Control This sophisticated service provides the means for schools to record computer user activity Separate annual charge is supported by Synetrix This sophisticated service provides the means for schools to record computer user activity and if necessary flag up alerts to an administrator of potential abuse. The charge for this service is as follows: Primary school 995pa Secondary school 2,500pa 16

18 Remote CCTV Monitoring This LGfL Remote CCTV monitoring Remote CCTV monitoring This service provides the means to remotely monitor the school site using closed circuit television Separate Set-up and annual charge is supported by Synetrix This service allows the LGfL broadband connection to add further value by providing the means to remotely monitor the school site using closed circuit television. A remote monitoring station uses sophisticated software to sense movement and can collect and record images in a secure environment capable of producing submissible evidence in cases where legal action is taken. A range of options are available, including: 4 Camera System 4,193.55pa (set-up 12,186.90) [subject to survey] 16 Camera System 5,000.00pa (set-up 25,032.14) [subject to survey] E-Safety Guidance This LGfL E-Safety E-Safety Guidance E-Safety Conferences and events is managed directly by LGfL London LA professionals have worked together through LGfL to develop a comprehensive set of resources to support schools in developing and implementing policies and in keeping children safe on-line. These resources can be accessed on-line via LGfL has recognised the need to provide professional development opportunities for school leaders in regard to e-safety awareness and arranges regular free-to-attend conferences which have been invariably well attended and well received. For details contact office@lgfl.org.uk Acceptable Use Policy This LGfL Acceptable Use Policy Acceptable Use Policy Acceptable Use Policy Templates is managed directly by LGfL All connected schools are required to subscribe to the LGfL Acceptable Use Policy and to develop and implement their own School Acceptable Use Policy for which templates are provided via LGfL Authentication and Interoperability Federation This LGfL LGfLaai Federation Federated management of authentication and interoperability protocols This provides users with authenticated access to web-based resources and interoperability of information across supplier platforms. is supported by Atomwide, Fronter and Synetrix 17

19 LGfL successfully implemented the International Web-2 Shibboleth protocol in June This was the first school-serving Shibboleth implementation anywhere in the world, and with support from supplier partners, LGfL was awarded the Computing Public Sector Project of the Year Award as a consequence. The Shibboleth protocol provides a means to allow access to multiple web based (http) resources using a single login. The Shibboleth protocol does not apply to non-web based resources such as Microsoft Outlook which uses protocols collectively referred to as Exchange Server. The LGfL USO is fully Shibbolethised and provides access to web based and other LGfL systems and services. Also successfully Shibbolethised, the London MLE log-in will provide a user with access not only to Fronter, but also to most LGfL premium content. In 2009, the LGfL implemented the Systems Interoperability Framework (SIF) protocol which enables information in different supplier systems, or applications, to be interoperated between them without having to create point to point proprietary protocols. The SIF protocol will be an increasing requirement by the LGfL from MIS, MLE and other suppliers to schools, the intention being both to remove the cost of developing these proprietary solutions, and also reduce the time taken to transfer information between systems. Both the Shibboleth and SIF protocols are technical solutions which require an element of central management. The LGfL has determined that, in addition to the management of the technical aspects, both also need to have an overlay of federated management that ensures compliance with data protection, child protection and the overall standard of behaviours from all participants. The LGfLaai Federation manages this federated management on behalf of the London LAs, schools and participating suppliers. USO for staff This LGfL USO for staff Unified Sign On for staff This provides a unified sign on for staff accounts. is supported by Atomwide This provides a comprehensive approach to authentication, allowing access to a range of resources and services, not only those that are http web resources. USO is required to allow certain other services such as updating of security software, or access to LGfL Staffmail. A USO is a user name and password which allows access to a range of LGfL services, in school, or outside via the Internet. A staff account USO for John Smith would typically have the format jsmith.314 (where 314 is the LA s DCSF code). To obtain a USO, school staff should contact their school or LA ICT co-ordinator, or visit USO for pupils USO for pupils Unified Sign On for pupils This provides a unified sign on for pupil accounts. LA purchase option to 31 st March 2010 from 1 st April 2010 This LGfL is supported by Atomwide This service provides a comprehensive approach to authentication, allowing pupils to access a range of resources and services, not only those that are http web resources, with the same 18

20 username and credentials. A USO is a user name and password which allows access to a range of LGfL services, in school, or outside via the Internet. A pupil USO for John Smith would typically have the format smitj (where 314 is the LA s DCSF code). This format helps retain pupil anonymity, in line with Becta guidance The value of this service will increase as LAs/schools use more LGfL pupil services which require authentication. Additionally, schools can purchase an ADSync option to enable the use of USO credentials when accessing school LANs using Microsoft Active Directory services. Secure File Exchange (USO-F) This LGfL USO-F Secure File Exchange This provides for secure transfer of files over non-secure connections LA purchase is supported by Atomwide This optional service, which is complementary to the USO service, provides a secure means for encrypting and transferring electronic files of up to 2Mb (or larger by agreement with the LA), for example between schools and the local authority. All movements of files into and out of the transfer system, and accesses to files, are tracked to the relevant USO account holder(s). The transfer system provides a secure file transfer area of a capacity based on [no of schools in LA] x 20Mb. The annual charge for the service is based on [no of schools in LA] x 42. Additional storage space, if required, is available at 53 per Gb pa. Second Factor Authentication (USO-OTP) This LGfL USO-OTP Second factor authentication using a one-time password This services provides added security for strategic users LA purchase is supported by Atomwide OTP (One Time Password) 2nd Factor Authentication adds an additional security layer to LGfL USO, which can be applied to specific services that grant access to sensitive data, or to services that carry additional risk to network security or personal data when in use. Each supported user is provided with a key-ring size device which on request generates a digital code (a one-time password) as an additional authentication element for use alongside USO. There is a second option to provide the digital code as a text message to a mobile phone. The charge for this service decreases for a greater volume of units taken up within a single LA, such that for 5 tags, the charge per tag is 21 for set-up plus per annually per tag or for 250+ tags the charge per tag is 8.40 for set-up plus 5.25 per annum. More information and full per-la, and per-tag, pricing detail is available from LGfL. 19

21 MIS to USO automated account updating (USO-AutoUpdate) USO-AutoUpdate Automated data extraction from NIS and into USO This service provides synchronisation between a school MIS and the school s user accounts in USO LA purchase option to 31 st March 2010 from 1 st April 2010 This LGfL is supported by Atomwide USO-AutoUpdate provides the ability to automatically extract user data from a school MIS and use it to populate, and keep updated, USO. This, typically overnight, process, ensures that information held by the school relating to the status of a member of staff or a pupil is always communicated quickly to the LGfL USO service which in turn is making authentication and service personalisation decisions based on that information. As well as increasing the accuracy of data held in USO, which is itself a benefit that allows more personalised services to be offered by LGfL than ever before, the service also uses a far more secure transport methodology compared with having schools manually compile and send data for account creation and update purposes. USO-AutoUpdate can also be used to support, for example, the automated movement of pupils between Year Groups and/or schools, and generally improves the accuracy and appropriateness of other services such as USO-ADSync. The implementation of other enhancements such as parental access, - or SMS-delivered attendance (absence) alerts, and reliable MLE synchronisation, are all possible through use of this service. The annual charge for the service is based on [no of schools in LA] x 30, pro rata charged until the end of March As of December 2009 the service supports SIMS and Wauton Samuel MIS, with other popular MIS platform support is anticipated during Automated SMS and messaging (USO-AutoText) This LGfL USO-AutoText Automated text and messaging system This service provides a method for a school to issue messages, typically to staff, and/or parents. LA purchase (single school option available) is supported by Atomwide USO-AutoText is an automated messaging service, which is integrated into LGfL-USO for the purposes of management, message initiation, and recipient identification. It can deliver messages via SMS or , and messages can be issued in concert with an automated process, such as absence reporting when used with an attendance reporting module within an MIS. Messages can also be sent manually. AutoText is typically enabled at the LA level in order to provide a very low per school cost of deployment and aggregate the purchase of text message credits, which are then distributed to the schools by the LA, and consumed as one per SMS message sent, or one per ten messages sent. Issued messages can receive responses via SMS or . A full audit trail, message cost alert notification, and school-level management control, ensures practicality of use in a school environment. The whole LA annual charge for the service is based on [no of schools in LA] x 42. Message credits are sold separately in bulk. There are no installation charges for whole LA deployment. 20

22 USO-Opencheck This LGfL Opencheck Opencheck This service offers an easy to use service providing real-time information about the open, closed, or other status of schools is supported by Atomwide OpenCheck offers publicly accessible on line map, or telephone service-accessible, information about whether schools are open, closed, staff training, or other status that may need to be communicated to potential visitors, parents, staff, etc. The service can be particularly useful in times of crisis, such as extreme weather conditions, flu epidemic, or other event that may render a school unable to remain open. Comprehensive features designed to assist the placement of messages, including pre-formatted messages, rolling calendars, and the ability to enter free-form messages. The web-based element of the service can be used as is, or can be used to update entries on a school or LA s own web site. The telephone service can be accessed by entering the relevant school s DCSF code when prompted during the call. USO-Digisafe This LGfL USO-DigiSafe USO-DigiSafe This service provides secure storage devices for data in physical transit, backed by a support strategy that ensures the integrity of the data under the governance of the Data Controller and/or the LA. School or LA purchase is supported by Atomwide USO-DigiSafe offers a range of USB-connected storage devices incorporating hardware-based data encryption, linked to the holder s USO account, and accessed via a grid/networkindependent PIN code unique to that user and device. PIN-protected flash drives (memory sticks) and ruggedized hard drives are available, ranging in capacity from 4GB to 500GB, with the addition of biometric (fingerprint) protection as standard on all hard drives, and optional on flash memory. DigiSafe devices can be unlocked via the LGfL centrally-managed DigiSafe Access Management service. In the event of any device being lost/returned, or otherwise needing to be identified/reset, or its contents revealed for legal reasons, this process can be initiated by contacting the LGfL Help Desk to arrange for the device s return. 21

23 Digital Signage This LGfL Digital Signage Digital Signage This service provides installation and support of single instance school-wide multimedia digital signage message displays. Single school purchase is supported by Atomwide Digital Signage solutions offer an exciting way for schools to distribute dynamic and up to date information to one or more AV displays such as LCD TVs, providing static or animated text, images, audio, video, RSS feeds, and even live TV or other broadcast streams. Web-based management of the system can be split between multiple administrators (including LA level admins) each responsible for different elements of the presentation.presentations can be changed according to time of day, or display location. Critically, LGfL Digital Signage solutions are provided with an optional Support Contract, and/or end-user display design and management training. No advertising is ever enforced upon a school presentation solution, and no mandatory subscription charges are applied. Costs are highly competitive, with many LAs offering local support services to their schools. 22

24 Learning Platforms The LGfL currently offers two learning platforms as detailed below. LGfL is concerned to support schools in realising the government s target of all schools making use of a full managed learning environment by 2010, and in conformity with this aim the LGfL DB Education service will be discontinued in July LGfL has provided a three year overlap period (July July 2010) to allow schools to migrate to the new London Managed Learning Environment, powered by Fronter. Guidance on migration from DB to the London MLE is available at under support documents. Digitalbrain (DB Education) This LGfL DB DB The original LGfL Virtual Learning Environment is supported by DB Education In 2001, LGfL procured the LGfL Portal service from DB Education, on an annual managed service basis. The DB Education service is a virtual learning environment which permits a log-in for any London teacher or pupil, and provides access to a personal 100Mb on-line space, editing and authoring tools which can be used to create a personal or school website or on-line community, and also provides authentication for access to LGfL Premium Content. This service will be discontinued with effect from 31 st July

25 London MLE (Powered by Fronter) This LGfL London MLE Managed Learning Environment The regionally adopted Managed Learning Environment which allows schools to meet government targets for providing pupils with a platform for learning and parents with up-to-date information. Separate per school set-up and annual fee is supported by Fronter A consultation in 2006 led to a clear consensus for London LAs to challenge industry for the supply of a new MLE for London schools. The clear business case for a regional approach to providing a learning platform is based on an established track record of collaboration synergies and excellent value for money, as well as the significance of the Capital having one of the highest levels of pupil mobility between schools in Europe. The LGfL London MLE service is purchased through LGfL on a school-by-school basis, for set fees, based on school size. The current fee structure for the London MLE is: Primary Schools Set-Up Annual Students and staff 1,250 1, Students and staff 1,750 1, Students and staff 2,250 2, Students and staff 2,500 2,500 Discount on set-up if no MIS integration Secondary Schools Set-Up Annual students and staff 2,000 2, students and staff 3,500 5, students and staff 4,500 6, students and staff 5,000 7,000 Full details of the London MLE service description are available at 24