Technical Onboarding Setup

Ensuring a smooth Tranistion to the LGfL Service

LGfL's Onboarding system for an easy transition to better broadband

Key Milestones

KEY MILESTONE:

Nominated Contact Setup for Support Site access

In order to access support with transition to the LGfL service and raise support ticket as part of the service, the school need provide details of staff within the school that can act as "Nominated Contacts", who are users that have the permissions to access a range of resources to configure and manage their establishment’s service. An establishment can normally have up to five Nominated Contacts.

  1. Nominated Contacts are the only users able to access the service support resources, configure service options and obtain assistance relating to any aspect of the LGfL service.

  2. A Nominated Contact can also view and manage the transition process, via the LGfL Support Site

  3. A Nominated Contact is created by authorisation from the Head teacher/Principal, or other legal ‘data controller’.

LGfL use Adobe Sign to simplify the process of providing detail of Nominated Contacts, and for the Headteacher to sign online or on their mobile. Headteachers will receive a link to the documents to sign.

We have produce a quick guide for Nominated Contacts, "Get Started with the LGfL Support"

KEY MILESTONE:

Review IP addressing for School Network

As soon as possible we would ask that you can provide confirmation of your existing schools IP address range, this can be obtained from your existing provider.

Where possible we will endeavour to reserve your IP subnets that match your existing IP range to reduce the impact of the move to LGfL.

In some cases, this might not be possible, and you may need re-address your internal network and devices, you can access details of your IP allocation via the LGfL Support Site.

KEY MILESTONE:

Review and Confirm firewall configuration

LGfL operates a secure network and this means that our firewall policies are set-up to protect the schools across our network. This default configuration may be different to your current firewall configuration. We can make changes to the firewall rules on request, and will provide advice on the risk of any requested firewall configuration changes.

Please ensure that you have spoken with your previous service provider to ascertain whether changes need to be made to the default firewall configuration. It might be that a particular service used in your school relies on ports being opened on your firewall. These settings will need to be replicated and it’s important that we know about these before you switch over to the LGfL service.

It is recommended that before plugging your local network into the LGfL firewall, that appropriate testing has been carried out. To do this, we would suggest plugging a laptop into the LGfL firewall and testing services that you would usually expect to be able to access.

KEY MILESTONE:

Review and Confirm Web Filtering policies

Filtering policies can be amended by a filtering administrator in your establishment, so there is a large degree of flexibility available to schools to modify the policies to suit local needs and levels of supervision.

Nominated Contacts can access the WebScreen filtering service by going to https://webscreen.lgfl.org.uk. You use your LGfL user account to access this service.

Schools can modify existing policies and create additional ones, by allowing or blocking whole categories, individual sites or even keywords. Schools also choose how, when and to whom each policy is applied.

KEY MILESTONE:

Advise LGfL of planned switchover date

Please discuss with your Customer Success Manager the date you plan to switch over so it can be added to the Technical Milestones on the LGfL Support Site.

KEY MILESTONE:

School migrate Domain Name Services

As part of the service, LGfL can host and manage your DNS free of charge. If your current Internet Service Provider manages your DNS, you will need to move this to LGfL.

If you need to do this, raise a ticket via the LGfL Support Site

Technical Readiness

School update DNS forwarders for external DNS Lookups on day of switch over

Schools need to designate a DNS server on a network as a forwarder by configuring the other DNS servers in the network to forward the queries that they cannot resolve locally to that DNS server. By using a forwarder, you can manage name resolution for names outside your network, such as names on the Internet, and improve the efficiency of name resolution for the computers in your network

On the day of switch over, and after the pre-requisites above have been carried out, you should arrange the schools internal DNS forwarders to be updated.

Your Customer Success Manager will advise you of the IPs to use for your school.

DNS forwarding for external DNS Lookups on day of switch over

Schools need to designate a DNS server on a network as a forwarder by configuring the other DNS servers in the network to forward the queries that they cannot resolve locally to that DNS server. By using a forwarder, you can manage name resolution for names outside your network, such as names on the Internet, and improve the efficiency of name resolution for the computers in your network

On the day of switch over, and after the pre-requisites above have been carried out, you should arrange the schools internal DNS forwarders to be updated.

Your Customer Success Manager will advise you of the IPs to use for your school.

AutoUpdate Setup for Staff and Student User Accounts

In order for your establishment to make full use of our services and resources included with your LGfL connection, LGfL user accounts should be created for staff and pupils. LGfL user accounts can be created and maintained by several methods:

  1. We can use information (normally overnight) from your establishment’s MIS system (where supported) to provide tailored services, such as a class mark book, the automation of user account creation and updates (for example, joiners and leavers). The Headteacher, as the Data Controller for the establishment needs to authorise this first. Once authorised, the AutoUpdate from MIS will need to be configured, for details, see How to configure AutoUpdate

  2. Alternatively, a Nominated Contact may create a single account at any time via the LGfL Support Site, and click on the the "User Accounts" tab, select "User Request (Single)" and fill in the online form.

  3. If your MIS system is not supported, LGfL user accounts can be created for a whole school by submitting a spreadsheet. A pre-configured spreadsheet template is available to download from the LGfL Support Site. Output from a Management Information System (MIS) such as SIMS can be imported into this spreadsheet template and the file uploaded via a dedicated page on the support site. More details on how these techniques work are to be found in the online LGfL Support Site User Guide.

Backup and Data Recovery to the Cloud

As part of your LGfL service, schools are provided with free encrypted storage on our secure offsite backup storage platform GridStore, the size of storage available to the school is dependent on the type of school.

If you would like to use this service, please log on to the LGfL Support Site and raise a "Support request", selecting "GridStore Service Order" as the topic.

A backup agent will be configured for your school and provided to you as a download to install onto your servers. You do not need your LGfL Internet connection to be live before you start using this service as the backups can be securely sent to LGfL’s Data Centres over the Internet.

Should you require any further information, visit https://www.lgfl.net/services/gridstore or if you would like to purchase additional GridStore storage, please contact michael.eva@lgfl.net.

VoIP telephony and test

If your school uses a Voice over IP (VoIP) telephony system, you will need to test it prior to switch over to the LGfL connection, as their may be specific configuration required to ensure it works. You may need to arrange changes to your system with your VoIP supplier.

Please discuss this with your Customer Success Manager.

Website Hosting Migration

As part of the LGfL service a web hosting platform is provided for school websites. This offers a fully resilient hosting environment balanced across multiple UK data centres with all content backed-up on a nightly basis. Schools have full control over the management and content of their websites with access via a simple, user-friendly web-based interface.

Website hosting is included at no additional cost as part of the LGfL service. Schools are able to use either an IIS (Microsoft) or Apache (Linux) resilient platform with a starting limit of 15GB per site.

To make use of the LGfL web hosting service please raise a support case via the LGfL Support Site and ask for it to be enabled. You will receive details on how to access your web space once int has been set up.

The web hosting service may be set up and activated in advance of the installation of the physical connection but not before the Nominated Contacts have been created.


Externally hosted sites

It is possible that your school website is hosted (stored) ‘in the cloud’ (i.e. on a remote web server rather than on a server on your local network). If so, the transition to LGfL will not affect your access to it.

However, if your website is hosted with your current internet service provider (ISP) it may cease to exist when you disconnect from their services. Therefore, the school will need to move it to the LGfL platform before the end of your existing contract or to another cloud platform.

You will need to know the following details, to be able to move it away from the existing provider:

  • Who it is hosted with?

  • Who controls and manages the domain name (most important)?

  • Who designs and updates the website?


Internally hosted sites

Establishments that run their own internal web site servers need to request an internal IP address to be mapped to be a real-world IP (a ‘MIP’ or managed IP address).

To request a MIP, log into the LGfL Support Site, select the "My Account" tab, then choose "LGfL’s deployment" from the menu, then select "Firewall and Mail Relay" tab, and select "Request a MIP"

The domain DNS settings would then be changed to reflect the change of the real- world IP address.

Mail Services Migration

If your existing Internet Service Provider provide you with an email service, you will need to migrate to a cloud based mail system, such as Google or Microsoft, or you can migrate to LGfL propriety mail services: one designed exclusively for staff users cand another for pupils called LondonMail. This will need to be done before you existing service terminates.

If your school hosts its own local mail server (for example, a Microsoft Exchange system) then the internal IP address of the server will need to be mapped to be a real-world IP (a ‘MIP’ or managed IP address) and the relevant ports opened to allow it to be accessed. To request a MIP, log into the LGfL Support Site, select the "My Account" tab, then choose "LGfL’s deployment" from the menu, then select "Firewall and Mail Relay" tab, and select "Request a MIP"

Please discuss your existing email service with your Customer Success Manager, so that they can advise on the options available to you.

Mail Protect setup (Optional)

LGfL uses the industry-leading email filtering system, MailProtect, to remove viruses and inappropriate content and attachments, at the same time as preventing spam mail reaching your inbox (you can opt to receive by email a daily digest of the spam items which have been filtered out so you can check for any you might want to see and help the intelligent system learn and improve).


Already using Microsoft O365 / Google

The LGfL email filtering service (MailProtect) offers a hosted 'Software as a Service' solution that removes the need to manage complex, locally installed software, and its typically costly hardware, freeing technical staff to undertake other essential work. The service aims to provide a relatively 'low footprint' and unobtrusive solution for your organisation and can be used to add an increased layer of protection to your existing cloud email environment.

To get set-up with MailProtect, please raise a support case on the LGfL Support Site


For more information on MailProtect visit, https://www.lgfl.net/services/mail-protect