Managed Network Terms

These terms were last updated on 10th February 2020.

Introduction

The Network for Learning’s (N4L) General Terms, and our Privacy Statement, apply to all the Products and Services that we provide to you. Additional terms and conditions (Managed Network Terms) also apply, depending on the specific Products and Services that you use.

N4L uses the umbrella term “Managed Network” to describe all of the Products and Services we provide to schools. Under the Managed Network, we have a set of Products and Services, which each have their own terms:

  1. Managed Network to the School
  2. Reporting App
  3. Filtering Portal
  4. Managed Network to the Classroom
    1. Network Support Extension

Additional Third Party terms and conditions may also apply, as set out below or notified by us to you at any time.

Capitalised words defined in the Glossary have the same meaning in these Terms.

1. Managed Network to the School

Overview

1.1 Managed Network to the School includes the following features:
  • Internet Connection A single N4L internet connection of a specified bandwidth (see 1.2 Internet Connection).
  • Safe and Secure Internet Web Filtering, Firewall, and DNS Threat Protection over your N4L-provided Internet Connection (see clause 1.3 Safe and Secure Internet). We recommend that you do not remove this feature. However, you can remove Safe and Secure (and in some cases, you will be deemed to have removed this feature), in accordance with clause 1.6 (Additional options).

Internet Connection

1.2 The standard components of the “Internet Connection” are:
  • Uncapped national and international internet access to internet sites that are not directly connected to your Internet Connection. Use of the internet is subject to N4L’s Acceptable Use Policy.
  • Bandwidth as specified in clauses 1.4 (Standard Internet Connection Allocation), or 1.5 (Upgrades to the Service).
  • Managed Router that does not constrain reasonable use. We will monitor your Internet Connection and upgrade you to a more capable Managed Router when required.
  • IP Address Management providing a range of fixed IP addresses to you.
  • DNS Resolution providing a URL to IP address resolution service.
  • Device and Access Management providing proactive (threshold monitoring, troubleshooting errors) and reactive (device/interface down scenarios) management of the Managed Router to ensure continued operations and availability of services.
  • Bandwidth Management providing differing individual types of traffic or individual weights using a traffic scheduler and policies.
  • Content Delivery Optimisation using technologies such as caching and CDNs.
  • Raspberry Pi providing enhanced support capability including proactive support.

Safe and Secure Internet

1.3 The standard components of “Safe and Secure Internet” are:
  • Web Filtering providing a level of control over all internet content, URL filtering, application filtering, file type filtering, safe-search, real-time scanning of search results for all http and (where you are using SSL Inspection) https traffic.
    • Default Blocked Categories by default we block access to categories of websites that we believe could be harmful to Your Users, such as websites known for child abuse, pornography or illegal purposes. See our Glossary for specific details.
  • Firewall providing malware filtering, virus filtering, intrusion prevention, and the ability to filter IP traffic that traverses the firewall, including traffic leaving your LAN to the internet and from the internet to your LAN. The traffic filtering is based on source IP address, destination IP address, protocol and ports used by applications and devices.
    • Default Blocked Firewall Rules by default we block all inbound connections, and will monitor and flag any firewall rules which are likely to put school users or systems at unnecessary risk. See our Glossary for specific details.
  • DNS Threat Protection providing filtered DNS resolution to protect against access to online security threats via the Internet Connection, including but not limited to malware sites and botnet command and control servers.
  • DDoS Protection that allows a school to continue to operate should anyone instigate a denial of service attack towards the school to interrupt internet services.
  • SafeSearch filters explicit search results for major search providers

Safe and Secure Internet Risks

Safe and Secure Internet provides a strong level of protection against identifiable internet threats and objectionable content.

  • N4L strongly recommends that Schools use the Safe and Secure Internet service in conjunction with endpoint protection and good security practices, to help protect users from objectionable content and online threats.
  • Removing or not making full use of all the components of Safe and Secure Internet may significantly increase the risk of exposing your school network and users to objectionable content and online threats.
  • In any case, Schools must be aware that, while Safe and Secure Internet provides a strong level of protection, due to the inherent nature of the internet, N4L cannot guarantee that the Safe and Secure Service provides complete protection against all internet threats and objectionable content. You must notify N4L immediately if you become aware of any actual or potential breach of security or unauthorised access or use of any part of our Products and Service.
  • See section 1.6 for Additional Options.

Standard Internet Connection Allocation

1.4 We allocate a 1Gbps standard Internet Connection to you regardless of your size (or if you are a School, regardless of your roll size), provided:
  • you are connected to a UFB or RBI Wholesale Access Service; and
  • we can reasonably make the connection available (which is determined at our discretion).

Upgrades to the Service

1.5 At its discretion, N4L may upgrade the bandwidth of a School’s Internet Connection. For Schools, such upgrades may be implemented if considered appropriate based on the following considerations:
  • a School’s bandwidth usage regularly approaches the maximum standard Internet Connection allocation;
  • ensuring equity of provision for Schools with similar needs;
  • maintaining quality connectivity for Schools to support teaching and learning;
  • student needs and the achievement of learning outcomes (and the associated needs of teachers and support staff in Schools) not being limited by the size of the Internet Connection allocated; and
  • ensuring efficient service delivery (for example by avoiding the need for a School to be revisited if a School’s roll is likely to expand in the short term).

Additional Options

1.6 The optional features of Managed Network to the School are:
  • Safe and Secure Internet (as described in section 1.3):

    This feature is enabled by default when your School initially joins the N4L Managed Network.

    N4L recommends that you do not remove/opt-out of the Safe and Secure Internet feature as it provides your School with a strong level of protection from identifiable online threats and inappropriate content.

    If we identify you have removed the Safe and Secure Internet feature, we will endeavour to either work with you to correct this or record your decision to opt-out of Safe and Secure Internet. By opting out of Safe and Secure Internet you accept that:

    • your School (and not N4L) will be solely responsible for managing the safety and security of your N4L-provided Internet Connection
    • other N4L Products and Services (e.g. the Filtering Portal or Reporting App) may lose functionality or become unavailable to your school
    • your School must ensure that it complies with N4L’s Acceptable Use Policy (for example, to ensure that Your Users do not use the Managed Network for any Illegal Uses).

If in future you wish to re-enable Safe and Secure Internet, N4L will work with you to do so.

Opting-out of Safe and Secure Internet

Your school may elect to opt-out of the N4L Safe and Secure Internet feature by notifying us (please note that we do not recommend this).

If you remove a single component of the Safe & Secure Internet feature, the remaining components will continue to operate. However, in doing so you may significantly reduce the effectiveness of your protection against identifiable internet threats and objectionable content, and will still be required to meet our Acceptable Usage Policy.

Your school will also automatically be deemed to have opted-out of the N4L Safe and Secure Internet feature if any of the following components have been removed:

  1. Web Filtering
    • This component is considered to be removed if you allow any of our Default Blocked Categories through a change request or via self-service.
    • By removing this component, you acknowledge that:
      • we will not be taking any action to stop or warn against access to websites in our Default Blocked Categories, and you are taking full responsibility for determining what level of filtering is appropriate for your school;
      • although we won’t filter the Default Blocked Categories, we will retain records of your filtering settings, who requested them, and of websites your users visit, in accordance with our Managed Network Terms and Privacy Statement; and
      • if you have allowed any of the Default Blocked Categories, the Default Blocked Categories are not automatically reset by N4L at any time and you are solely responsible for updating your filtering settings if changes you have made do not reflect your preferences in the future. However, we may contact you from time to time to understand why you set your filtering settings as you did and whether the settings remain appropriate in light of your preferences and the risks that our Default Blocked Categories are intended to protect against.
  2. Firewall
    • This component is considered to be removed if you allow any of our Default Blocked Firewall Rules through a change request or via self-service.
    • By removing this component, you acknowledge that:
      • you are taking full responsibility for all firewall features and for the external access that any parties have to your LAN, services within that LAN, and to any public facing internet services you operate;
      • we will not be able to provide advice on the firewall rules that you establish, nor will we be able to assist with the implementation of those rules; and,
      • we will not be taking any action to stop traffic flowing either to or from your Managed Router; you are responsible for all the effects that traffic has on both your internal LAN, our Managed Network, and the networks of any other sites connected to our Managed Network that are impacted by any inappropriate traffic originating from your network, such as but not limited to malware, viruses Trojans or other Disabling Code.
  3. DNS Threat Protection
    • This component is considered to be removed if we identify that this service is not in use, or has been removed at your request.
    • By removing this component, you acknowledge that we will not be taking any action to stop or warn against DNS resolution requests to access online security threats via the Internet Connection, including but not limited to malware sites and botnet command and control servers.

IMPORTANT NOTICE ABOUT INTERNET SECURITY

Each school acknowledges that it will automatically be deemed to have removed the Safe and Secure Internet feature of N4L’s Managed Network if any of the components outlined above have been removed.

If you remove Safe and Secure Internet, your school will be solely responsible for managing the safety and security of your Internet Connection and for ensuring that your School and Your Users comply with N4L’s Acceptable Use Policy.

  • Mail Relay

    Provides a basic SPAM and AV scanning service over SMTP for email to and from on-site mail servers, providing:

    • inbound and outbound SPAM and AV/Malware filtering
    • the ability to tag and pass or quarantine suspicious inbound emails
    • the ability to send bulk emails from school email servers.

    Mail Relay is not enabled by default.

  • Remote Access

    This lets specific users remotely connect to your LAN and any services hosted by you. Examples of users who may benefit from remote access include teachers, administration staff, and Third Party support providers.

    Remote Access is not enabled by default.

  • HTTPS Inspection

    This feature, previously also referred to as SSL Inspection, allows the N4L firewall to scan the content of https websites in real-time, providing:

    • a significant uplift in protection against online threats
    • the ability to filter out unwanted keywords.
    • the ability for content accessed on https websites to be reported on.
    • the ability to exclude web categories from being inspected, e.g. internet banking.

    Risks:

    • It can be onerous to manage and deploy the required HTTPS Inspection certificates without a Mobile Device Management (MDM) solution.
    • ​Websites and applications which employ Public Key Pinning will not work with HTTPS Inspection and will need to be excluded from HTTPS Inspection.
    • All website categories will be inspected unless specifically excluded.

    HTTPS Inspection is not enabled by default.

  • Identity Awareness

    This allows supported user directory services to be integrated with N4L’s Web Filtering and Reporting App, providing the ability to filter content by users and groups and to report on internet usage.

    Identity Awareness is not enabled by default.

Service Boundary

1.7 The boundary of the Managed Network to the School service ends at the Managed Router on your premises. That is to say, the service does not extend into your LAN infrastructure, end user devices, or other ICT infrastructure.

Prerequisites

1.8 The prerequisites for us to accept your order for the Managed Network to the School service are:
  • the availability of a Wholesale Access Service which is acceptable to us, to connect you to the service; and
  • a suitable location for housing our Equipment at your premises, as per the specifications below.

Managed Router Housing Requirements

Each school must:

  • ensure that the room housing its Managed Router has adequate air circulation;
  • ensure that the room and/or rack housing its Managed Router has restricted access;
  • allow clearance, around the rack housing its Managed Router, for maintenance; and
  • ensure its Managed Router utilises a permanent ground connection, installed in a secure location.

Ordering

1.9 This Service may be ordered as follows:
  • New Internet Connection – via an N4L Order Form.
  • Moves, Adds or Changes – via:
    • manual order form (where available); or
    • call or email the N4L Helpdesk.

Term

1.10 The term of Your Managed Network to the School service:
  • commences on completion of its provisioning; and
  • continues until terminated by us or your, on at least one month’s written notice to the other.
1.11 If you terminate the service as above, N4L may invoice the following additional Charges to the extent they are payable by N4L to its suppliers in relation to that termination:
  • a $195 termination charge;
  • any early termination charges from the Wholesale Access Service provider; and
  • a pro-rata proportion of a $300 plus GST network connection provisioning charge that was waived by N4L’s network supplier, in respect of the period following termination and calculated over the first two years of the term.
1.12 Upon termination of this service:
  • On our request, you will return our Equipment. We will arrange a suitable method to do this e.g arrange courier collection.
  • If required by either party, both parties will work together in good faith to jointly develop and agree a plan to effect your disengagement from this service with minimum disruption to either party.
  • We will give you all reasonable assistance, at reasonable rates, if you wish to transition to another service provider.

Service Level Targets

1.13 N4L will use reasonable endeavours to meet the following service level targets for the Managed Network to the School service. However, we will not be considered to have failed a target, to the extent the failure is due to:
  • you not notifying us of the failure;
  • any maintenance on or in relation to the service carried out within a planned maintenance window;
  • any Wholesale Access Service outage;
  • any breach by you of your agreement with N4L; or
  • an Excusable Event for the purposes of clause 7.8 (Causes beyond our control) of our General Terms or any other event or circumstances outside the reasonable control of N4L or its subcontractors (including a failure of or within your LAN infrastructure, end user devices or other ICT infrastructure).
Availability Description
Definition The proportion of time the Internet Connection is:
  • functioning; and
  • available to the School,
  • meeting the latency service level target below.
Target Over a rolling 12 months:
  • UFB and RBI

    >99.863% Metro

    >99.817% Non-Metro

  • Others: Best endeavours
  • Remote Access >99.7%
Measurement Manually measured by historical unplanned downtime in relation to P1 and P2 Incidents recorded in the network provider’s systems. Downtime caused outside of the Network Boundary is excluded.
Calculation Calculated by:

Percentage Uptime = Uptime / (Uptime + Downtime) x 100

Where:

  • Uptime is the total time in the period in which the service is operating as defined above.
  • Downtime is the total time in the period that is not Uptime.
  • The calculation is expressed as a percentage.
Data Source Network monitoring system
Latency Description
Definition The time taken between an IP packet being transmitted and received at an N4L defined endpoint.
Target Best Effort
  • Average over a month:

    UFB and RBI

    200 byte packets: <215ms 1472 byte packets: <215ms

  • Others: Best endeavours
Measurement Samples from a loopback address from the Managed Router at one site to the loopback address from the Managed Router, at another site nominated by N4L.
Calculation Measured as an average on a monthly basis
Data Source Network monitoring system

Pricing - Fully Funded Schools

1.14 With the exceptions below, the Managed Network to the School service is fully funded by the Ministry of Education for:
  • State Schools
  • State Integrated Schools
  • Partnership Schools
  • Health Schools
  • The Correspondence School
  • Activity Centres.
1.15 Full funding includes a reasonable volume of Moves, Adds and Changes (refer [clause 5]). N4L will monitor the volume of MAC requests being made by Schools and will work with Schools to ensure that the efficiency of the MAC request process is optimised.
1.16 The only exceptions to full funding for these Schools are where:
  • a School continues to require an unreasonable number of MACs after being fairly advised by N4L that its use is unreasonable; or
  • there is a physical change at a School site that was not required by the Ministry. In that case N4L will invoice the School for N4L’s time and costs resulting from the physical change.

See clause [1.21 (MAC Charges)].

Pricing - Independent Schools

1.17 Independent Schools are not funded for the Managed Network to the School service by the Ministry of Education. Accordingly:
  • each Independent School’s Charges for their N4L-provided Internet Connection are as specified in its Order Form (a document titled “Managed Network Contract for Independent Schools”)
  • MAC Charges are payable in accordance with clause 1.21 (MAC Charges).

Local Fibre Company Terms

1.18 Some Managed Network to the School services are delivered over the Government’s ultra-fast broadband (UFB) initiative. The UFB network is provided by Local Fibre Companies (LFCs). A list of LFCs may be found at https://www.crowninfrastructure.govt.nz/ufb/who/.
1.19 Each LFC has LFC “End User Terms” relating to the supply, installation, ownership and use of the line (and any associated equipment and infrastructure) (the LFC End User Terms). You agree to comply with the LFC End User Terms of any LFC connected to your premises. LFC End User Terms are generally available on the website of your LFC. If that is not the case, then you should ask your LFC to provide you with a copy or a link to its End User Terms.

Safeguarding the Managed Network to the School

1.20 So that our Products and Services to you and other customers are not disrupted, it is important that you help safeguard the service. It is your responsibility to take all reasonable:
  • security precautions to protect the service including our Equipment at your premises;
  • ensure you do not introduce any faults, viruses or other Disabling Code (and the like) into the service; and
  • prevent interference with, or damage to, the service and our Equipment at your premises.

MAC Charges

1.21 Where MACs are payable, they will be invoiced in arrears, at the following rates:
Charge Amount Charge Description
Onsite MAC POA Case by Case basis Complex MAC requests normally require detailed investigation or design work to implementation
Simple MAC $150 Simple change that can be completed in less than 30 minutes 8:30am - 5.00pm local business days Outside those hours incurs a charge of $380
Complex Remote MAC $220 Simple change that can be completed in less than 60 minutes 8:30am - 5.00pm local business days Outside those hours incurs a charge of $500

IP Addresses

1.22 Depending on the Products and Services you acquire from us, we will arrange for appropriate IP addresses to be allocated to you. Unless we have agreed otherwise with anybody else, all IP addresses allocated to you remain our property. You must not transfer or sell those IP addresses to anyone else. We may change any IP address that we allocated to you. We will always give you as much notice as we reasonably can before making these changes.

Terms relating to the Equipment

Your responsibilities

1.23 We remain the owner or licensee of our Equipment. Where our Equipment is at your premises, the Equipment will be at your risk and you will (and, where applicable, you will ensure that Your Users will):
  • only use our Equipment for your own lawful business use and for the purposes for which we provide it;
  • not change or interfere with our Equipment in any way, unless authorised by us and in accordance with our instructions;
  • comply with our reasonable directions and restrictions regarding use of our Equipment;
  • comply with any manufacturer’s terms of use for our Equipment;
  • make sure nothing or no-one on property or premises under your control interferes with or damages any of our Equipment;
  • if requested by us, insure our Equipment against loss or damage by fire, theft or otherwise, with a reputable insurer for its full replacement cost;
  • let us know immediately if any of our Equipment is lost, stolen or damaged;
  • not sell, dispose of, grant any security interest in or otherwise part with possession of, any of our Equipment; and
  • pay our charges for repairing or replacing any of our Equipment which is lost or damaged (however caused) while at your premises, but there is no charge where damage occurs through normal wear and tear.

Our responsibilities

1.24 Where we provide Equipment (or any other goods) to you, we give you, except to the extent our Equipment is affected by any failure to meet your responsibilities in clause 1.22 above, our Equipment will:
  • be safe, durable, substantially free from defects and in good working order;
  • be fit for the purposes which we describe in writing and for which we are providing it to you;
  • be as we describe in writing or demonstrate to you and will do everything we say in writing it will do; and
  • be approved for connection to the Managed Network to the School service at the time we provide it to you.
1.25 If our Equipment does not comply with the requirements set out in clause 1.23 above, we will replace or repair the Equipment (at our cost) as soon as reasonably practicable and such replacement or repair will be your sole and exclusive remedy in respect of any failure of the Equipment to comply with such requirements.
1.26 We will also:
  • ensure that we have the right to provide our Equipment to you and it will be free from any undisclosed security; and
  • not interfere with your possession of our Equipment except where both of us agree otherwise.

Risk of loss of Equipment

1.27 Each party will be responsible for the risk of loss of, and damage to, any Equipment (as the case may be), software, systems and other materials used in the provision of the Products and Services under this Agreement, in its possession or under its control. Unless otherwise agreed in writing, risk of any loss of, or damage to Products and Services will pass to N4L upon delivery to N4L’s premises, your premises or receipt by N4L.

Title

1.28 Where you purchase any Equipment from N4L, all rights, title and interest will pass to you when the Charges for such Equipment have been paid to N4L in full.

Access to your premises

1.29 Where required for us to provide our Products and Services to you, you will provide us with reasonable access to your premises. This includes access to install, test, repair and carry out maintenance on our Equipment, and to remove any of our Equipment which is no longer required to provide our Products and Services to you.

2. Reporting App

Overview

2.1 N4L’s Reporting App provides Schools with insights into activity that takes place over a School’s N4L-provided Internet Connection.

Features

2.2 Features may be added or removed in the continuous improvement of the Reporting App. The following provides an outline of the features which will be available in the initial release:
  • Safety insights: e.g. attempted access to default blocked categories
  • Security insights: e.g. infected devices and attacks blocked
  • User insights: e.g. top users by browsing time, bandwidth & blocked attempts (subject to the School having identity awareness on the network)
  • Content insights: e.g. top websites, apps and categories for the School and the individual user or device
  • Device insights: e.g. user, content, safety and security insights for each device.

Options

2.3 A single option for the Reporting App will be provided, which will be via an online web portal. However, provision of the fully-featured Reporting App is contingent on the availability of requisite data to N4L systems, see “Prerequisites”.

Prerequisites

2.4 The prerequisites for us to accept your order for this Product are:
  • Schools need to use the N4L-provided Internet Connection with an N4L-provided firewall
  • in order to receive User insights throughout the Reporting App, your School will need to have Identity Awareness enabled on your N4L-provided Internet Connection
  • Schools need to have their network architecture configured in such a way that other systems or devices (e.g. Layer 3 devices) do not preclude N4L systems from collecting the requisite data (e.g. device or website blocks data)

Requesting Access

2.5 Requests for access to the Reporting App can be placed via call or email to N4L’s Helpdesk, via interactions with N4L’s Relationship Managers or via an online expression of interest, if made available.

User Accounts

2.6 In order to ensure appropriate access control to the sensitive personal information available within the Reporting App, access is restricted to named user accounts (e.g. firstname.lastname@schoolname.school.nz)

Term

2.7 The Reporting App’s term begins at the point of signup and ends once a School either requests discontinued access to the Reporting App or discontinues usage of the N4L-provided Internet Connection.

Service Level Targets

2.8 The service will endeavour to maintain 99.9% uptime, excluding regular maintenance windows e.g. hardware, software, O/S patching and upgrades.

3. Filtering Portal

Overview

3.1 N4L’s Filtering Portal provides an online self-service security policy management capability, which allows the delegation of configuration and visibility to authorised users, such as IT Providers and School administrators. Specifically, the Filtering Portal enables role-based access to configure firewall rules and web filtering rules.

Features

3.2 Features may be added or removed in the continuous improvement of the Filtering Portal. Filtering Portal currently provides:
  • the ability to block or allow websites and website categories
  • the ability to block or allow applications and application categories
  • the ability to block or allow outbound firewall traffic
  • automated revision control
  • automated policy compliance checks
  • notifications to school of non-compliant policies.

Prerequisites

3.3 The prerequisites for us to accept your order for the Filtering Portal are:
  • Schools need to be connected to the Managed Network to the School service;
  • Schools need to use N4L’s web filtering and firewall components
  • Filtering Portal Users need to apply for access and be authorised by the school’s principal or other Delegated Authority; and
  • Filtering Portal Users need to have read N4L’s provided training material prior to making any web filtering for firewall changes.

Requesting Access

3.4 Access to the Filtering Portal may be requested as follows:
  • New product – via

  • Moves, Adds or Changes – via:

    • call or email the N4L Helpdesk.

User Accounts

3.5 In order to ensure appropriate access control for this critical service, access is restricted to named user accounts (e.g. firstname.lastname@schoolname.school.nz)

Risks

3.6 Incorrect use of the Filtering Portal could affect the operation and security posture of your School’s Internet Connection.
3.7 Failure to follow N4L’s policy setup guidelines may leave your School at undue risk and remove the protection of N4L’s Safe and Secure Internet.
3.8 While N4L takes steps to automatically detect improper web filtering and firewall policies created through N4L’s Filtering Portal, Schools are responsible for maintaining a safe internet service for their users.

Term

3.9 The Filtering Portal’s term begins at the point of signup and ends once a School either requests discontinued access to the product or discontinues usage of N4L’s web filtering or firewall components.

4. Managed Network to the Classroom

4.1

Network Support Extension

Overview

4.1.1 N4L’s Network Support Extension provides an extension to Schools’ wireless licences and warranty of switches provided through the Ministry of Education SNUP and Wireless SNUP programme.

Features

4.1.2 Features may be added or removed in the continuous improvement of the Network Support Extension. The following provides an outline of the features which are available at the time of writing:
  • extensions of the support licence on network switches;
  • extensions of wireless licences for existing hardware;
  • backup of each switch configuration, so they can be restored should a fault occur;
  • a single point of contact for assistance with network switch and wireless hardware failures; and
  • monitoring of wireless and switches for remote diagnostics.

Ordering

4.1.3 N4L will contact Schools who are eligible to be part of the Network Support Extension service. Alternatively, Schools can contact N4L via our Helpdesk.

Term

4.1.4 The Network Support Extension’s term begins at the point of signup and ends once a School either requests to opt-out of the Network Support Extension or the licence period expires.

Service Level Targets

4.1.5 The solution will normally be available 24 hours a day x 7 days per week excluding during agreed outage windows. The solution will endeavour to meet 4hrs Recovery Time Objective (RTO) & 24hrs Recovery Point Objective (RPO).

Pricing

4.1.6 The Network Support Extension is heavily subsidised by the Ministry of Education, however the School will be required to make a roll based contribution towards the cost.

5. Moves, Adds and Changes (MACs)

N4L will perform, or will enable you to perform, the following MACs:

Managed Network to the School

5.1

Internet Connection

MAC Transaction MAC Type Description
Managed Router upgrade / downgrade Onsite MAC Upgrade or downgrade of a Managed Router
Access speed upgrade / downgrade Complex Remote MAC Change to the access speed within profiles and within the capability of the Managed Router
IP Address add / remove / change Complex Remote MAC Changes to IP Addressing
IPsec VPN add / remove / change Complex Remote MAC Change to a VPN defined within the network
VLAN add / remove / change Complex Remote MAC Change to a VLAN defined within the network
Security zone add / remove / change Complex Remote MAC Change to a security zone defined within the network
QoS traffic add / remove / change Simple MAC Change to the QoS traffic classification
Pre-approved Firewall rule add / remove / change Simple MAC Change to a pre-approved firewall rule on the Managed Router
Customised Firewall rule add / remove / change Complex Remote MAC Change to any other firewall rule on the Manager Router
DHCP add / remove / change Complex Remote MAC Change to the DHCP settings on the Managed Router
Relinquish Product Onsite MAC Relinquishment of a Managed Network Product
Site to site VPN add / remove / change Complex remote MAC Change to site to site VPN routing for a customer
5.2

Safe and Secure Internet

MAC Transaction MAC Type Description
Web Filtering rule change Simple MAC Change to a filter rule within the “Web Filtering” Product
5.3

Remote Access

MAC Transaction MAC Type Description
Remote VPN add / remove / change Complex remote MAC Change remote VPN access for a customer
Remote access user add / remove / change Simple remote MAC Change remote access for a user