SWGfL Change Control Form

Enable Access to Computers on Your Network from the Internet

This form is to be used to request access inbound to your local network. If you are not sure of any of the required details please talk to your network administrator or external services provider.

To enable us to complete your request, we need to gather certain information from you. Please complete the following form and return it to us by fax on 01235 854 686

Important Information:

Access to and from your network is controlled by a firewall. By default, this will block all traffic unless it is specifically allowed. If you wish to alter the default security settings, please provide as much detail as possible about the type of access required. For the security of all network users please try to keep access as restrictive as possible.

Restrictions:

There may be some cases where particular changes cannot be accommodated due to the need to maintain a secure environment. Changes are carried out on a best endeavour basis according to the information provided; it is not guaranteed that all services will function correctly across the firewall.

Multiple Local Addresses

Requests for access to more than eight local IPs at once are less likely to be accepted. This is due to tight controls placed on us regarding the number of public facing IP addresses assigned to each site.

Ports

Requests for “All Ports” or for large ranges are less likely to be accepted. If you do not know the specific port required please contact your network administrator or external service provider. Due to conflicts with the SWGfL Security Policy we will not open ports 25, 8080 or 53 inbound for any internal or external address.

Multiple External Addresses

If you require access from all public Internet addresses please state “All” in the appropriate field below; this will allow all users on the internet and inside the SWGfL to access the requested service. Please note that a large number of source addresses will reduce the likelihood of your request being accepted on security grounds. It is best to provide IP details of only the server or servers you require access from.

All Firewall Change Requests are technically assessed by an engineer before being accepted. If your request conflicts with the SWGfL Security Policy we will contact you to discuss alternative access changes.

Please note that the change will not be completed if the security disclaimer is not signed and faxed to 01235 854 686.

For assistance with this form please contact the SWGfL Helpdesk on 08453 077 870.

Kind Regards,

South West Grid for Learning Managed Service

SWGfL Change Control FormEnable Access to Computers on Your Network from the Internet

All fields are mandatory and must be completed, unless otherwise stated, to ensure we fulfil your change in a prompt fashion and to your requirements.

Firewall Details

Purpose of Change / To allow school to use ipads and to download apps
Source IP Address / Destination IP Address / Port Number / Protocol / DNS Address (e.g. service.school.lea.sch.uk if required)
*TCP 80
*TCP: 8077
*TCP 465
*TCP port 993
*TCP 443
*UDP 3478 * 3497
*TCP 5223
*UDP 16384 * 16387
*UDP 16393 * 16402 / See previous column

Establishment Details

School/Establishment / Postcode
Contact Name / Position
Email Address / Telephone

Security Disclaimer

The South West Grid for Learning reserves the right to modify or refuse changes that reduce the security of other users within the Grid. Schools requesting changes to the South West Grid for Learning Firewall are considered responsible for any impacts on themselves that occur as a result.
Other than where caused by RM’s negligence or wilful conduct, and save as expressly provided otherwise by law, the school accept liability and responsibility for any virus infection of the school’s computers resulting from the infection of the schools connected networks.
On behalf of the school, I acknowledge that RM has the right to suspend provision of service in the event of a virus infection on any connected networks.
By signing this form you indicate you have read and accepted the above and that you are authorised to request this change on behalf of the establishment given above. / Print Name
Date
Signature