SchoolProtect Health Check
The Health Check in SchoolProtect highlights items that may be misconfigured or can be improved upon. (To access the Health Check, first log in to SchoolProtect and then navigate to: https://schoolprotect.lgfl.org.uk/secure/healthchecker)
Each item is assigned a priority based on the impact to your school's filtering effectiveness.
Please use this guide in conjunction with the results of your school's health check, starting at the highest priority items first.
High Priority Items (Red)
User policies have not been set up
This alert appears when no policies are set up with either Chrome or Windows agent authentication.
This is important to ensure that users are identified to the filtering platform when they log into devices.
Please follow the instructions in either the Chromebook User Authentication, Windows Active Directory Authentication or Windows Intune Authentication guides to set up user policies and deploy the agents.
User policies are not active
This alert appears if none of your user policies configured with the Chrome or Windows agent have had no browsing activity during the last 2 weeks. If it is a school holiday (e.g. Summer) then this likely can be ignored for student policies.
If you are expecting these policies to be active then check the agents have been deployed correctly.
Use these guides to check and troubleshoot your deployment.
Decryption is disabled on user policies
This alert shows if none of your user-based policies have HTTPS decryption enabled.
HTTPS decryption is important to ensure the filtering can see the details of pages and searches. Without this, only whole websites can be filtered. While DfE guidance doesn't state that you must have decryption enabled, but certain parts of their guidance require outcomes that basically make decryption mandatory.
Please follow the guides here to roll out certificates and enable decryption.
High-risk Categories allowed
This alert shows if any of your policies have the following high risk categories allowed:
- Mixed Mature & Adult Content
- Bullying
- Criminal Skills
- Extreme
- Gambling
- Hacking
- Hate Speech
- Host is an IP
- Malware
- Phishing
- Remote Access Tools
- Self Harm
- Terrorism
- Viruses
- Web Proxy
Please use the Policies > Categories page to review which categories you allow for each filtering policy based on your school's safeguarding policy. Remember the DSL should be involved in such decisions as there should be a safeguarding rationale for this.
Medium Priority Items (Amber)
User policies are not active
This alert appears if some of your user policies configured with the Chrome or Windows agent have had no browsing activity during the last 2 weeks. If it is a school holiday (e.g. Summer) then this likely can be ignored for student policies.
If you are expecting these policies to be active then check the agents have been deployed correctly.
Use these guides to check and troubleshoot your deployment.
Decryption is enabled on some user policies
This alert shows some of your user-based policies don't have HTTPS decryption enabled.
HTTPS decryption is important to ensure the filtering can see the details of pages and searches. Without this, only whole websites can be filtered. While DfE guidance doesn't state that you must have decryption enabled, but certain parts of their guidance require outcomes that basically make decryption mandatory.
Please follow the guides here to roll out certificates and enable decryption.
Categories allowed which most schools block
This alert shows if any of your policies have the following categories allowed:
- Age Restriction
- AI Chat & Image Generators
- Alcohol
- Games
- Humour
- Intimate Apparel
- Match Making
- Nudity
- Profanity
- Sales
- Search Engine
- Social Media
- User-Generated Content & Stock Imagery
- Weapons
- Web Chat
Schools will generally block these categories for students and most staff.
Please use the Policies > Categories page to review which categories you allow for each filtering policy based on your school's safeguarding policy. Where these categories are allowed, you might consider allowing specific websites rather than the whole category.
Keyword 'allow' entries used
This alert shows if you have keywords added as allowed entries in your policies.
This is potentially dangerous as keywords match anywhere in the URL. This means that by allowing a word or string that may seem innocuous, undesirable content may then be allowed.
To fix this, please use the Policies > URLs page to review and remove any 'keyword' type entries.