Applying to Use the Web Filtering Service

Eligibility

The service is intended to provide web filtering for JANET customer organisations that do not have the resources to support it themselves, or organisations with certain specific needs. Each application will be approved at JANET(UK)'s discretion.

Applying

To apply for the service, an e-mail should be sent on behalf of an organisation by a recognised JANET contact to the JANET Service Desk at:

service@ja.net

with the Subject 'JANET Web Filtering Service application for (name of organisation)', and if you are one of the following classes of organisations, using the Application form:

FE colleges
People and Community Development Learning
Specialist Colleges
HE institutions (need to discuss with JANET(UK) about suitability of the service)

For other eligible organisations, using this Application form.

Acknowledgment of applications

JANET(UK) will acknowledge receipt of applications within four working hours. If nothing is heard after that time please contact the JANET Service Desk.

Processing of applications

JANET(UK) will seek to set up the service within eight working days of receiving an application. However, this is dependent on the detailed technical co-operation of other parties including the applicant.

What happens next?

An organisation will receive a confirmation letter when the Web Filtering Service has been activated. The service will be of no benefit to users until the organisation has made a number of local changes.

For the filters to be effective, the organisation must prevent users from obtaining direct access to the Internet for web traffic. Changes may need to be made to the router, firewall, local proxy or individual client machines or several of these.

Configuring browsers

The proxy setting in the browser of each desktop and laptop computer must be configured to use the local proxy if one exists, or alternatively use the JANET web filtering proxy (on the port 8080): proxy.webfiltering.ja.net. Where there is a local proxy, it should be configured to only access the web through the JANET filter named above.

Web sites' access authenticated by originating IP address

Sometimes organisations may have a need to access certain web sites which authenticate by originating IP address(es). This can be achieved by setting a proxy exception in the browser; and configuring a firewall to block traffic at the ports listed in the following section with the exception of allowing access to the selected sites from the IP address in your own network for which you want to permit access over port 80 or 443 (depending on the application).

Firewall configurations

To prevent users from bypassing the filter by changing or turning off the proxy setting in their browser, it is essential to block access from their computers to port 80 anywhere in the Internet. It is also advisable to block the common proxy ports to prevent users from using open proxy servers on the Internet. At a minimum the following Transmission Control Protocol (TCP) ports should be blocked:

20, 21, 80, 443, 3128, 8000, 8080.

Good practice requires a default-deny approach, in which no access is permitted by default, and every item of access needed (port, protocol, service, network etc) must be explicitly enabled.

Organisations should ensure that this policy is maintained when changes occur in their network, such as a new PC, or laptop brought in, or browser upgrade.

It is worth noting that there will be several minutes delay between the time when an organisation configures a change to the filter and the time when change becomes effective.

Contacts

JANET(UK) or its contractors may need to contact an organisation for various purposes such as:

Requests for urgent action in an emergency, in respect of some user activity.
Routine announcements about the operation or use of the service.
Notices about abnormal operation.
Escalation of unresolved requests.

By applying to join the service, the customer organisation agrees to provide a contact name and e-mail address and that the contact details may be included in any mailing list that JANET(UK), or its sub-contractor, might establish to communicate information relevant to this specific service. The contact e-mail address may be, for example, an individual responsible for the customer activities associated with the service, a local functional address for the service, (provided this is read regularly by an appropriate person), or a helpdesk.

Any such mailing list will only be used by the JANET(UK) service managers or the service sub-contractor. The contact details will be retained on the mailing list, unless a change is notified by a recognised JANET contact of the customer organisation, for the duration of the customer's use of the service.

Conditions Of Use

Use of the JANET Web Filtering Service is subject to the JANET Acceptable Use Policy (AUP).

It is also subject to the JANET Security Policy.

Organisations applying to use the JANET Web Filtering Service must indemnify JANET(UK), its agents and subcontractors against any and all liability for claims arising out of their use of the service.

By using this service, an applicant is indicating to JANET(UK) on behalf of the organisation he/she represents, without limitation, that the organisation:

Accepts that in accordance with the JANET AUP and recommendations made by Internet Watch Foundation (IWF), the service will prevent access to web sites that are known to contain unlawful, threatening, defamatory, obscene, scandalous, inflammatory, pornographic or profane material or any other material that could give rise to any civil or criminal liability or in the reasonable opinion of JANET(UK) or its contractor is inconsistent with the JANET AUP. The list of sites to which access is barred is not disclosed for obvious reasons.
Accepts that the service cannot and does not guarantee to block all access to such content.
Takes responsibility for managing the local web filtering list in accordance with the JANET AUP and local filtering policy.
Will only use the service for legitimate purposes and in compliance with all applicable laws.
Accepts that if any unlawful activities arise from the use of the service, such violations are the sole responsibility of the organisation and not of JANET(UK), its agents or subcontractors.
Informs JANET(UK) if there are any changes to the contact information, the number of schools, the number of computers, or the connecting IP addresses or address ranges.
Undertakes to meet the charges if applicable and any revised charges resulting from any notified changes.

Organisations using the service must make their own arrangements for end user support. Neither JANET(UK) nor its contractors offer such support as part of this service.

Legal considerations

Using the JANET Web Filtering Service raises issues of privacy, Data Protection and access by Law Enforcement agencies.

The service systems make a log record that contains system information and the web browsing activities of each organisation and that will be retained no longer than 12 months. This information will not be used for any purpose other than providing and improving the JANET Web Filtering Service.

JANET(UK) and the supplier of the service will comply with UK law that applies to all providers of computer and network services. This includes the Data Protection Act 1998 and Human Rights Act 1998 as well as the Regulation of Investigatory Powers Act 2000.

End-users should be made aware that under current UK legislation JANET(UK) and its contractor, like any other network provider, may be obliged to disclose this information to Law Enforcement Agencies where necessary to prevent, detect or investigate crime.

Charges

The following classes of organisations entitled to use the service without charge. If this policy changes, users of the service will be advised no less than three months in advance.

FE colleges
People and Community Development Learning
Specialist Colleagues
HE institutions (need to discuss with JANET(UK) about suitability of the service)

For other eligible organisations, a charge will apply based on the service provided. A quotation is available on request.