BYOD June 1st 2016 SPA DET Instructions

 Secure Proxy Authentication (SPA)
(Our new DET authentication process to the Internet and DER network)
Extracts From: The DET Information Technology Directorate
BACKGROUND
The Department of Education has provided Filtered Internet Browsing (FIB) services to all schools since
1996. The main function of the department’s Filtered Internet Browsing service is to provide filtered access to
the Internet to minimise the risk of students and staff accessing websites that contain inappropriate material.
In 2006, the Authenticated Internet Browsing and Email service was launched and staff and students were
provided with individual accounts with year-level filtering introduced. In order to access the Internet, users
authenticate with their DoE Portal ID and password. The filtering service is accessed by authenticating to the
department’s proxy servers which have recently been updated. The update provides for a new authentication
process with user credentials encrypted and securely sent to the proxy server. Starting in Term 4, 2015 it is
planned for high schools to transition to Secure Proxy Authentication (SPA). All remaining schools will be
completed during Term 1, 2016.
WHAT NEEDS TO CHANGE
***A slightly changed popup for proxy authentication will appear with users now
REQUIRED to append @detnsw to their user ID
***The DER wireless infrastructure will centrally be configured for the necessary SPA changes, so DER
laptops will automatically work with SPA.
***However, the school’s wired infrastructure and any non-DER wifi (such as BHS) that may be at the school
will need local configuration set. Any computer, laptop, tablet or other mobile device in a school that can be
used to access the Internet via the school’s network, this includes Apple Macs, iPads, Android devices,
Chromebooks, BYODs (including Windows) as well as any school-owned Windows devices will need to
manually authenticate to the Secure Proxy to access Internet services.
*** Configure your device to automatic proxy
(see next page “Configuring BYOD Wi-Fi and Proxy Settings”)
If the device can only accept a manual proxy, it should be set to proxy.det.nsw.edu.au on port 8080.
***PAC File
If “Auto Detect Settings” do not work, e.g. you aren’t asked for your Internet username and password, you
may need to add a PAC file.
Under SPA, all schools in NSW will share a common PAC file rather than the previously issued unique PAC
files for each school.
The new PAC file is:
http://pac.det.nsw.edu.au/fib/proxy.pac
(see page “Problem authenticating with your Windows BYOD?”)
In case you are curious:
What is a Proxy?
A proxy server is a computer that offers a computer network service to allow clients to make indirect network
connections to other network services.
Web proxies can also filter the content of Web pages served.
What is a PAC file?
A proxy auto-config (PAC) file defines how web browsers can automatically choose the appropriate proxy
server for fetching a given web address.