Managed Internal Broadband Services
Overview
Securolytics provides a managed suite of services designed to align with the FCC’s Category Two guidelines under the E-Rate program (47 CFR §§ 54.500 et seq). This solutions helps schools in managing internal broadband infrastructure securely and efficiently, with a focus on distributing high-speed broadband throughout instructional facilities.
Onsite Firewall and Router Appliance
The IoT-max appliance is designed to function as an internal connection under Category Two. It is deployed independently of Internet access services and supports internal broadband distribution, access control, and secure communication between instructional buildings.
Each location is equipped with a dedicated on-premises appliance that functions as a firewall, router, and DHCP server for both wired and Wi-Fi-connected devices.
The onsite firewall and router appliance is available in 2 form factor options: 1) physical appliance and 2) virtual appliance. Both options run the same code base and share a common Make and Model Name:
Make: Securolytics
Model Name: IoT-max
The 2 options are differentiated by their model numbers:
1) Physical Appliance – Make: Securolytics, Model Name: IoT-max, Model Number: IoTSA-1000
2) Virtual Appliance- Make: Securolytics, Model Name: IoT-max, Model Number: IoTSA-CHR

Physical Appliance
Make: Securolytics
Model Name: IoT-max
Model Number: IoTSA-1000
Virtual Appliance
Make: Securolytics
Model Name: IoT-max
Model Number: IoTSA-CHR
Physical Appliance Specifications
(Applies to Make: Securolytics, Model Name: IoT-max, Model Number: IoTSA-1000):
Processor: 1.2 GHz Tilera TILE-Gx9 multicore CPU
Memory: 2 GB DDR3 RAM
Network Interfaces:
- 7 × Gigabit Ethernet (copper)
- 1 × SFP port (fiber)
- 1 × Ethernet management port
Power: Internal 100–240V AC power supply; UPS-compatible
Key Features and Required Software Licensing:
(Applies to Make: Securolytics, Model Name: IoT-max, Model Numbers: IoTSA-1000 & IoTSA-CHR):
- Firewall enforcement and LAN routing
- DHCP for both wired and Wi-Fi infrastructure
- Hardware-level site-to-site VPN gateway
- Standard 19″ rack-mount compatibility
- E-Rate Intent: The IoT-max appliance (model IoTSA-1000 or model IoTSA-CHR) is designed to function as an internal connection under Category Two. It is deployed independently of Internet access services and supports internal broadband distribution, access control, and secure communication between instructional buildings.
Managed Services
Securolytics offers third-party managed services designed to operate and maintain E-Rate eligible broadband internal connections. These services are structured to align with the definition of Managed Internal Broadband Services (MIBS) under Category Two

Managed Firewall Services
-
- On-going configuration, firmware updates, policy management and monitoring the on-site firewall
- E-Rate Intent: Designed to align with the eligibility of separately managed firewall services not bundled with Internet access.
Managed Routing and LAN Operations
-
- Ongoing configuration, firmware updates, policy management, and monitoring of the onsite firewall.
- Includes DHCP support for Wi-Fi
- E-Rate Intent: Structured to support ongoing management of internal broadband connections such as routers and switches.


Site-to-Site VPN Connectivity
-
- Secure, managed VPN tunnels are provided to link multiple instructional sites to centralized servers and applications
- E-Rate Intent: Intended to align with support for internal broadband connections used between eligible instructional buildings.
Software and Licensing
-
- Provides the software, firmware, and management tools necessary for the operation and support of the eligible internal connection components described above, including routing and firewall functionality.
- E-Rate Intent: These items are included as part of the operation of eligible hardware and are not priced separately. They are intended to support the configuration and management of eligible internal broadband equipment in accordance with Category Two rules.


Basic Maintenance and Support
- Provides firmware updates, security patches, technical support, and hardware repair, upkeep and replacement as needed.
- E-Rate Intent: Structured to maintain the reliable operation of eligible broadband internal connections.