SOLUTION BRIEF

MEETING CIPA COMPLIANCE WITH FORTINET

Schools are expected to keep their students safe, even

with rapidly increasing numbers and types of devices

connecting to their networks. While numerous attack

vectors make complying with the Children’s Internet

Protection Act (CIPA) more complicated, pervasive Internet

use by tech-savvy students make it more important than

ever. Much has changed since CIPA was enacted by

Congress in 2000, but the rules enforced by the Federal

Communications Commission remain in place. Essentially,

CIPA requires K-12 schools and libraries to certify that they

are enforcing Internet safety policies, in order to be eligible

for E-rate discounts.

CIPA REQUIREMENTS

Schools and libraries subject to CIPA are required to adopt a policy that addresses all of the following:

nn Access by minors to inappropriate matter on the Internet and World Wide Web

nn The safety and security of minors when using electronic mail, chat rooms, and other forms of direct electronic communications

nn Unauthorized access, including “hacking” and other unlawful activities by minors online

nn Unauthorized disclosure, use, and dissemination of personal information regarding minors

nn Access to materials harmful to minors. (Security measures must be able to block or filter pictures that are obscene or contain child pornography.)

FORTINET SOLUTIONS

Fortinet offers products that can help you achieve CIPA compliance, with E-rate discounts for your school or library.

FortiGate: Our E-rate eligible, next-generation firewalls deliver top-rated network security, as well as the ability to monitor your network and filter Internet traffic for inappropriate content in real time. Granular controls let you decide whether to allow, block, or partially enable Internet-based applications, such as Facebook, Twitter, and Skype, on an individual or group basis. Antivirus, intrusion prevention (IPS), and data loss prevention (DLP) add additional protection against malicious content, unlawful activities, and unauthorized disclosure.

FortiMail: Email is the most frequently used delivery method for malware. Our secure email gateways feature high performance, top-rated security effectiveness, and DLP.

FortiClient: Our endpoint protection platform delivers easy-to-manage, automated, customizable antivirus, web filtering, application control, IPS, and more, for endpoints on- or off-network, including Chromebooks.

FortiWeb: Our web application firewalls (WAFs) monitor, allow, or block application traffic by categories. It can prevent the use of unwanted applications including proxy apps and HTTPS messaging apps.

FortiSandbox: Proactive advanced threat protection (ATP) stops the latest and most sophisticated threats.

FortiGuard Services: Around-the-clock threat research and analysis provides regular updates to block new cyber threats and unsavory websites.

SOLUTION BRIEF: MEETING CIPA COMPLIANCE WITH FORTINET

Copyright © 2018 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

GLOBAL HEADQUARTERSFortinet Inc.899 Kifer RoadSunnyvale, CA 94086United StatesTel: +1.408.235.7700www.fortinet.com/sales

EMEA SALES OFFICE905 rue Albert Einstein06560 ValbonneFranceTel: +33.4.8987.0500

APAC SALES OFFICE300 Beach Road 20-01The ConcourseSingapore 199555Tel: +65.6513.3730

LATIN AMERICA HEADQUARTERSSawgrass Lakes Center13450 W. Sunrise Blvd., Suite 430Sunrise, FL 33323Tel: +1.954.368.9990

June 29, 2018 10:40 AM

Mac:Users:susiehwang:Desktop:Egnyte:Egnyte:Shared:Creative Services:Team:Susie-Hwang:Egnyte:Shared:CREATIVE SERVICES:Team:Susie-Hwang:SB-CIPA-Compliance:sb-cipa-compliance

CIPA Requirement Addressed With

Prevent minors from accessing inappropriate matter on the Internet and World Wide Web

FortiGate:nn Web filtering to block sites under inappropriate categories such as adult/mature content nn Manual website blacklisting to block webpages by keywords or URLs nn Safe search enforcement to rewrite search queries with Safe Search option to deliver child-appropriate results

FortiWeb:nn Prevents the use of unwanted applications including proxy apps and HTTPS messaging apps

Address the safety and security of minors when using electronic mail, chat rooms, and other forms of direct electronic communications

FortiGate:nn Antivirus to detect malicious attachments or file transfers over electronic communicationsnn Anti-spam, DLP to stop malicious or inappropriate content nn Web filtering to restrict social media and online communication sites

FortiSandbox:nn Sandboxing to stop advanced threats that evade traditional security measures

FortiMail:nn Secure email gateway to protect from email-borne threats

Prevent unauthorized access, including “hacking” and other unlawful activities by minors online

ForitGate:nn Firewall to enforce access to other networks and Internet. User authentication can also be implemented. nn Application control to prevent use of malicious or inappropriate applications nn IPS to detect and block unlawful activities

Prevent unauthorized disclosure, use, and dissemination of personal identification information regarding minors

FortiGate:nn Firewall to prevent unauthorized access to internal hostsnn Antivirus to mitigate malicious code infections that allow external control nn DLP to protect against servers and terminals from disclosing personal information

FortiMail:nn Integrated, robust data protection to prevent disclosure of confidential information

Address measures designed to restrict minors’ access to materials that are harmful to minors

FortiGate:nn Web filtering to blocks sites under inappropriate categories such as violent content nn Manual website blacklisting to block web pages by keywords or URLs nn Safe search enforcement to rewrite search queries with Safe Search option to deliver child-appropriate results

FortiClient:nn Device-level security and web filtering, IP reputation, and application control to keep students from accessing inappropriate sites, even when off the network

FortiWeb:nn Prevents the use of unwanted applications including proxy apps and HTTPS messaging apps

HOW FORTINET PRODUCTS ADDRESS SPECIFIC CIPA REQUIREMENTS

Visit Fortinet at http://www.fortinet.com/education or email us at education@fortinet.com for more information.

194916-A-0-EN