Fortinet for NZ Schools

Securing the School Network Perimeter

FortiGate next-generation firewalls form the core of a secure school network. These devices provide advanced threat protection, intrusion prevention, and application control. For schools, key features include granular web filtering to block inappropriate content and enforce internet usage policies. FortiGate firewalls can segment the network, separating student, staff, and guest Wi-Fi networks to enhance security and prevent lateral movement of threats. They also offer VPN capabilities for secure remote access for staff and students, supporting flexible learning models.

Key FortiGate Features for Education:

• Advanced Threat Protection: Detects and blocks known and unknown threats.
• Web Filtering: Enforces internet safety policies and blocks unsuitable content.
• Application Control: Manages access to specific applications to optimise network performance and security.
• VPN Connectivity: Provides secure remote access for staff and students.
• Network Segmentation: Isolates different network zones to contain security incidents.

Endpoint Protection and Management

FortiClient provides endpoint protection for devices used by students and staff, including laptops, desktops, and tablets. This software integrates with FortiGate firewalls to offer unified threat management across the network and endpoints. Features include antivirus, anti-malware, web filtering, and vulnerability management. For schools, FortiClient helps ensure that devices accessing the network are secure, regardless of whether they are school-owned or personal devices (BYOD). Centralised management simplifies deployment and policy enforcement across a large number of endpoints.

Benefits of FortiClient in Schools:

• Comprehensive Endpoint Security: Protects against various cyber threats.
• Integrated Management: Centralised control through FortiManager.
• BYOD Support: Secures personal devices used for learning.
• Vulnerability Management: Identifies and helps remediate software vulnerabilities.

Secure Wireless Connectivity

FortiAP access points, managed by a FortiGate firewall, deliver secure and reliable wireless connectivity throughout school campuses. These access points support multiple SSIDs, allowing for separate, secure Wi-Fi networks for students, staff, and guests, each with its own access policies and bandwidth controls. FortiAPs integrate seamlessly with FortiGate's security features, extending threat protection to the wireless edge. This ensures a consistent security posture across both wired and wireless networks, crucial for modern learning environments that rely heavily on Wi-Fi.

Advantages of FortiAP for Education:

• Secure Wi-Fi: Provides encrypted and authenticated wireless access.
• Multiple SSIDs: Segregates user groups with distinct policies.
• Centralised Management: Simplified configuration and monitoring via FortiGate.
• Scalability: Easily expands to cover large school premises.

Centralised Management and Analytics

FortiManager and FortiAnalyzer provide centralised management and robust logging/reporting capabilities. FortiManager simplifies the deployment, configuration, and ongoing management of multiple FortiGate devices and FortiAP access points across a school or multi-campus district. FortiAnalyzer collects and analyses security logs, offering insights into network activity, threat detection, and compliance reporting. These tools are essential for IT teams to maintain an overview of their security posture, respond to incidents, and demonstrate compliance with educational technology regulations.

Management Tools for School IT:

• FortiManager: Centralised configuration and policy management.
• FortiAnalyzer: Security logging, reporting, and threat analysis.
• Compliance Reporting: Assists with meeting regulatory requirements.
• Operational Efficiency: Reduces administrative overhead for IT staff.