The Children’s Internet Protection Act (CIPA)
Compliance Card
The Children’s Internet Protection Act (CIPA) was passed by the United States Congress, and signed into law by thePresident, in December 2000. CIPA requires certain K-12 schools and libraries that are eligible for federal funding support
for Internet access or internal connections through the e-rate program, to certify that they are enforcing an Internet safety
policy that includes technology protection measures. This document describes how Sophos products can be effective
tools to help address some of the requirements as part of a customer’s efforts to comply with CIPA.
Specifications and descriptions are subject to change without notice. Sophos disclaims all warranties and guarantees regarding this information. Use of Sophos products alone
does not guarantee legal compliance. The information in this document does not constitute legal advice. Customers are solely responsible for compliance with all laws andregulations, and should consult their own legal counsel for advice regarding such compliance.
Requirement

Sophos ProductHow it helps

Prevent access by minors toinappropriate content on the InternetSophos Firewall

Powerful web filtering policy: Manage Internet access to minors with flexible user/group policy definitions utilizing over 90 predefined
website categories, covering billions of pages maintained by SophosLabs with the option to import custom URL lists. Built-in CIPA
policies and activities like “Not Suitable for Schools” are available right out of the box and can be easily modified to meet specific needs.
YouTube for schools: Allow access to educational videos on YouTube with YouTube for
Schools feature for a safe and controlled environment for minors.
SafeSearch enforcement: Ensure child- appropriate search engine results with the SafeSearch option.

Address the safety and security ofminors when using electronic mail,chat rooms, and other forms ofdirect electronic communications

Sophos Firewall

Powerful web filtering policy: Restrict inappropriate communication sites and social media sites with Sophos
URL filter utilizing over 90 predefined website categories, covering billions of pages maintained by SophosLabs.
Built-in policies for CIPA and pre-defined activities including “Not Suitable for Schools” as well as features
such as SafeSearch, YouTube restrictions, and Keyword Filtering enable child safety online.
Top-rated protection from threats: Sophos Sandboxing scans all files coming in through the web or email for
malicious behavior in a safe environment, using the latest deep learning technology from Sophos Intercept X.
Identifying tunneling and evasive applications: Sophos Firewall’s Synchronized Security Endpoint integration identifies all unknown,evasive, and custom applications running on your network so you can easily identify rogue applications like Psiphon and block them.
Context-aware keyword filtering: Sophos Firewall logs, monitors, and even enforces policies related to keyword lists
related to problematic behavior like bullying, radicalization, or self-harm. Schedule reports to identify users at risk andget details about their activities, including what and where they are posting or what sites they are visiting.

Prevent unauthorized access,including “hacking” and otherunlawful activities by minors online

Sophos Firewall

Top-rated protection from threats: Powerful intrusion prevention system (IPS) catches any
hacker or attack attempting to exploit a vulnerability across the network.
Identifying tunneling and evasive applications: Sophos Firewall’s Synchronized Security Endpoint Integration identifies all unknown, evasive,and custom applications running on your network so you can easily identify inappropriate or rogue applications like Psiphon and block them.
Identifying risky users: Identify top risk users with risky online behavior based on recent web activity and threat and infection
history. Take immediate action to address students engaged in behaviors that put themselves or your network at risk.
User authentication: Sophos Firewall offers the most extensive set of user authentication options available
on any firewall, including Active Directory integration, Chromebook support, and even our unique and easy-touse Synchronized User ID solution that makes user identity completely transparent and trouble-free.
Sophos ZTNA: Validates user identity, device health, and compliance before granting access to resources.

The Children’s Internet Protection Act (CIPA) Compliance CardRequirement

Sophos ProductHow it helps

Prevent unauthorized disclosure,use, and disseminationof personal identification
information regarding minors

Sophos Firewall

Top-rated protection from threats: Powerful intrusion prevention system (IPS) catches any hacker orattack attempting to exploit a vulnerability across the network. Sophos’ web protection solution performs
JavaScript emulation to catch threats lurking in compromised websites such as cryptojacking.

Sophos Intercept X

Data loss prevention policies: Prevent misuse and distribution of predefined data sets.

Sophos Intercept X with XDR
Sophos Intercept X for Server
Sophos Central Device Encryption

Full disk encryption: Protects devices and data with full disk encryption for Windows and macOS.

Sophos Email

Automatically scans message bodies and attachments for sensitive data, allowing you toeasily establish policies to block or encrypt messages with just a few clicks.
Offers TLS encryption and support for SMTP/S along with push-based encryption to send encrypted emails and attachments aspassword protected documents direct to the user’s inbox, full portal-based pull encryption to manage encrypted messages entirely
from a secure portal, and S/MIME to encrypt email messages and add a digital signature to safeguard against email spoofing.

Sophos Cloud Optix

Public cloud security benchmark assessments proactively identify data storage services (e.g. Amazon S3),
hardrive snapshots, and databases without encryption enabled, or with public access enabled and ports exposed.
Guided remediation then instructs the administrator on how to protect these services and data at rest.
IAM visualization tools provides a complete map of IAM relationships and allows IT security teams to quickly and easily identify overprivileged access that prevents a security breach risk and create right-sized IAM policies before they are exploited in cyberattacks.

Implement restrictions on minors’
access to harmful content

Sophos Firewall

URL Filtering: Restrict access to harmful or inappropriate websites with Sophos URL filter that utilizes over90 predefined website categories, covering billions of pages maintained by SophosLabs.
YouTube for Schools: Allow access to educational videos on YouTube with YouTube
for Schools for a safe and controlled environment for minors.
SafeSearch enforcement: Ensure child- appropriate search engine results with the SafeSearch option.
Preventing use of evasive applications: Sophos Firewall’s Synchronized Security Endpoint integration identifies all unknown, evasive, andcustom applications running on your network so you can easily identify inappropriate or rogue applications like Psiphon and block them.

United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com© Copyright 2022. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UKSophos is the registered trademark of Sophos Ltd. All other product and company names mentioned aretrademarks or registered trademarks of their respective owners.
2022-03-01 RC (PC)

Australia and New Zealand SalesTel: +61 2 9409 9100
Email: sales@sophos.com.au

Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com