Release: SecureSchool 14.2-260212xx-xx

This SecureSchool release includes enhancements to firewall rule flexibility, firewall table management, DHCP diagnostics, VPN authentication options, and overall system performance and reliability.

---

🔝 Feature Enhancements #

🔹 New “Deny + Skip Transparent” Firewall Rule #

Area: Firewall Rules / Transparent Filtering

SecureSchool now supports a new firewall rule type: Deny + Skip Transparent.

Previously, the Skip Transparent option was only available for Allow rules. This update extends that functionality to Deny rules, providing administrators with more flexibility when managing transparent filtering behavior.

Benefits

• More granular traffic control
• Greater flexibility when designing firewall policies
• Improved compatibility with SecureSchool’s transparent filtering framework

---

🔹 Enhanced Firewall Tables: Lists of Sites & IPs #

Area: Firewall Tables

Firewall tables now support multiple entry types within a single table including:

• Individual IP addresses
• IP ranges
• Website domains
• Mixed entries

Benefits

• Easier management of large rule sets
• Simplified blacklist and whitelist creation
• More efficient administration of filtering policies

---

🔹 Protection for Internal System Tables #

Area: Firewall Tables / Admin Interface

SecureSchool now protects internal system tables by hiding them from standard administrative views. Only EZ_Admin users will see these internal tables.

• Prevents accidental modification of system-critical tables
• Cleaner and simpler interface for administrators
• Improved rule stability and safety

---

🔹 Support for INCLUDE in Custom Firewall Rules #

Area: Advanced Firewall Configuration

Advanced administrators can now reference external rule files using the INCLUDE directive within custom firewall rules.

• Easier organization of advanced rule configurations
• More modular firewall rule management
• Maintains backward compatibility with existing configurations

---

🔹 New DHCP Event Log Viewer #

Area: Logging / Diagnostics

A new DHCP Event Log page has been added to the SecureSchool interface. Administrators can now:

• View DHCP-related events directly in the interface
• Access archived DHCP logs
• Troubleshoot DHCP issues more quickly

---

🔹 DHCP Relay Configuration Support #

Area: DHCP Services

SecureSchool now includes full support for DHCP Relay configuration through the interface.

• Configure relay interfaces
• Define DHCP relay servers
• Eliminate the need for manual backend configuration

---

🔹 Expanded WireGuard Authentication Options #

Area: VPN Services

SecureSchool’s Public WireGuard VPN now supports additional authentication modes including:

• User-based authentication
• Group-based authentication

---

🔹 Google Domain Configuration Enhancements #

Area: Authentication / Google Integration

The Google authentication configuration now supports multiple domains using a single configuration field.

• Supports schools with multiple Google Workspace domains
• Simplifies configuration and management

---

⚡ Performance & Scalability Improvements #

🔹 Improved Firewall Table Performance #

Firewall table processing has been optimized to improve performance when working with large rule sets or large IP lists.

• Faster firewall updates
• Improved system responsiveness

---

🔹 Increased Firewall Table Capacity #

SecureSchool now supports larger firewall tables, allowing administrators to manage significantly larger IP lists without performance issues.

---

🛡 Validation & Input Improvements #

Several validation improvements have been added to help prevent configuration errors including:

• Improved firewall table name validation
• Improved IP range validation
• Additional safeguards for DHCP configuration

---

🔧 Stability & Reliability Improvements #

This release includes several behind-the-scenes improvements designed to enhance system stability and reliability.

---

🔄 Compatibility & Platform Updates #

🔹 FreeBSD Compatibility Updates #

SecureSchool now includes updates to ensure compatibility with newer FreeBSD system frameworks used by the SecureSchool operating system.

🔹 PHP 8 Compatibility Improvements #

Internal scripts have been updated to ensure continued compatibility with PHP 8 environments.

🔹 Improved YouTube Embedded Video Handling #

Updates were made to support newer YouTube embedded video formats and prevent unintended filtering issues.

---

🐞 Bug Fixes #

• Improved handling of Skip Transparent behavior on PF firewall rules
• Website deletion interface improvements
• Log viewer cleanup and improved error display

---

📘 Documentation Update #

The SecureSchool Administrator Manual is now maintained exclusively in the online knowledge base:

https://www.k12usa.com/docs/secureschool-administrator-manual/

• Always up to date
• Easier to search
• No outdated PDFs floating around

---

Need Help? #

If you have questions about these updates or would like assistance reviewing your SecureSchool configuration, please contact K12USA Support.

Phone: 877-225-0100
Email: support@k12usa.com