Zscaler Security

What is Zscaler Security?

To help protect staff, students, devices and data across digital networks, Catholic Education, Diocese of Wollongong (CEDoW) and the College employ a Zscaler Security platform at both a device and network level to enforce cybersecurity policies and standards. 

Zscaler Security is a key component in ensuring students safely and securely access appropriate content or services whilst on the College's network.

How does Zscaler Security work?

Zscaler Security at St Benedicts is comprised of 3 core components:

1. A digital CA (certificate authority) Certificate

2. The Zscaler Client Connector app

3. The Zscaler Internet Access (ZIA) platform

Both the Zscaler CA Certificate and Client Connector app are installed as part of enrolling a student's device into the College's BYODD Program. Failure to correctly install these components will result in a device being denied access to the College's network.

Once the Client Connector app has been installed, students are prompted to sign in (authenticate) to the app using their CEDoW student account. It is important to note that students must complete the sign-in process as soon as possible, as Zscaler will block the Mac's internet connection until a user is authenticated (referred to as Zero Trust Connectivity).

Zscaler Internet Access (ZIA)

Zscaler Internet Access (ZIA), which works in conjunction with the Client Connector app, is the the primary method by which the College secures, protects, filters, and logs internet traffic sent or received by devices across the network.

Enforced only on the College's network by default, ZIA plays a key role in assisting students in securely accessing safe, appropriate, and approved content on their devices, helping students remain engaged and focused in the classroom. 

This includes restricting access to apps, websites and content categorised as social media, gaming, streaming, adult material, or gambling, which is referred to as web filtering.

Through ZIA, all internet traffic transmitted on the College's network is captured and logged. This data can be utilised by the College and CEDoW ICLT teams to assist in identifying, analysing, and securing potentially malicious or unsafe content, or help troubleshoot connection or access issues.

Once a student's device disconnects from the College's network, the Internet Security service is disabled and ZIA is no longer active on the device.

What happens when my child's device is at home? Is ZIA still active?

No.

Although the CA Certificate and Client Connector app remain installed and/or running in the background, Internet Security and ZIA services are only active while a student's device is connected to the College's network.

Once the device is off the network, internet traffic is no longer secured, filtered, or logged by Zscaler, allowing students to access apps or websites that are restricted while at school. Students and families can verify this by opening the Client Connector app while at home and checking that Internet Security is turned OFF.

We appreciate that for many families, helping children form healthy technology usage habits and regulating device usage can be a stressful, difficult, and ongoing process. If you think you or your child would benefit from having the Internet Security and ZIA services enabled on the device 24/7, please contact your child's Year Coordinator.

The importance of Zscaler Security at the College

Zscaler Security is an integral extension of the College's cybersecurity infrastructure and is closely tied to our Learning and Wellbeing frameworks, assisting students in the responsible and appropriate use of technology at the College while helping to protect both users and ICLT infrastructure.

As with the Jamf Pro MDM Profile, Zscaler Security a compulsory component of a student's enrolment at St Benedict's.

Failing to install or attempting to remove, disable, or modify any Zscaler Security components is not only a violation of the CEDoW Student Responsible Use of Technology Agreement, but restricts the device from safely and securely accessing the College's network, apps and services required for learning. This action will also result in disciplinary actions being taken against students.

It is also important to note that if a student's device is erased, replaced, or in the event of some service/repairs, Zscaler Security will need to be reinstalled; please contact the IT Office for assistance.

When a student signs out from St Benedict's, all Zscaler Security components will either be removed remotely by the IT Office or instructions provided to families on how to perform this.

We wish to remind families that the use of Zscaler Security by the College does not replace the need for our students to always respect themselves, others, and property, particularly in relation to technology resources. Please refer to the CEDoW Student Responsible Use of Technology in Compass or the Student Responsibilities page for more information.

If you have any questions about Zscaler Security, please contact your child's Year Coordinator or raise a support request via the ICLT Support page.