Admin & Settings

By KyberGate

• 9 articles

Block Page Customization

Block Page Customization When KyberGate blocks a website, students see a branded block page explaining why the site was restricted. You can customize this page to match your district's branding and messaging. Overview The KyberGate block page features a clean cream and coral design with the KyberGate shield logo. Administrators can customize several elements to align the page with district identity and communication standards. What You Can Customize Logo and Branding 1. Navigate to Settings → Block Page in the KyberGate admin dashboard 2. Click Upload Logo to replace the default KyberGate shield with your district's logo 3. Supported formats: PNG, JPG, SVG (recommended size: 200×200px) 4. The logo appears centered at the top of the block page Block Message 1. In the Message field, enter the text students will see when a site is blocked 2. Default message: "This website has been blocked by your school's internet filter." 3. You can include the reason for blocking using the {category} variable 4. Example: "This site is blocked under the {category} policy. Contact your teacher if you need access." 5. Maximum message length: 500 characters Colors 1. Background Color — The page background (default: cream #FFF8F0) 2. Accent Color — Used for borders and the banner stripe (default: coral #FF6B6B) 3. Text Color — Primary message text color (default: dark gray #333333) 4. Use the color picker or enter hex values directly Request Access Button 1. Toggle Enable Request Access to show or hide the button 2. When enabled, students can click Request Access to submit a request to their teacher or admin 3. Requests appear in Activity → Access Requests in the dashboard 4. Set the Request Recipient to route requests to specific admin emails 5. Configure Auto-Expire to automatically deny pending requests after a set period (default: 24 hours) Previewing Changes Before saving, click Preview Block Page to see exactly what students will see. The preview opens in a new tab with your current customizations applied. Tips - Keep messages student-friendly — Use clear, non-technical language that students can understand - Include contact info — Tell students who to ask if they need a site unblocked - Test on devices — Preview the block page on an iPad and Chromebook to ensure your logo and colors render correctly on all screen sizes - Use SVG logos — They scale perfectly on all devices and screen resolutions - Request Access workflow — Enable email notifications so admins are alerted immediately when a student requests access Troubleshooting | Issue | Solution | |-------|----------| | Logo appears blurry | Use an SVG file or a PNG at least 400×400px | | Block page shows default branding | Clear the browser cache on the device and reload | | Request Access button not appearing | Ensure the toggle is enabled and save changes | | Colors not updating | Hard-refresh the block page (Ctrl+Shift+R / Cmd+Shift+R) | | Students see a certificate error instead of block page | The KyberGate CA certificate is not installed — see "Certificate Installation Issues" | Related Articles - Managing Content Filtering Policies - Certificate Installation Issues - Device Enrollment and PAC Configuration

Last updated on Apr 17, 2026

Billing and Subscription Management

Billing and Subscription Management KyberGate offers flexible per-device annual subscriptions managed through Stripe. This guide covers available plans, how to manage your subscription, and how to handle upgrades or downgrades. Available Plans KyberGate offers three subscription tiers, all billed per device per year: | Plan | Price | Features | |------|-------|----------| | Basic | $5/device/year | Web filtering, block page, basic reporting, PAC-based proxy filtering | | Pro | $9/device/year | Everything in Basic + advanced analytics, ClassLink/Clever SSO, custom block page branding, Chrome extension support | | Enterprise | $15/device/year | Everything in Pro + priority support, custom integrations, SLA guarantees, dedicated account manager, multi-region proxy routing | All plans include CIPA-compliant filtering, SSL inspection via the KyberGate CA certificate, and HTTPS traffic visibility. Managing Your Subscription Accessing the Billing Portal 1. Log in to the KyberGate Admin Dashboard 2. Navigate to Settings → Billing 3. Click Manage Subscription to open the Stripe Customer Portal 4. From the Stripe portal, you can: - View your current plan and billing cycle - Update your payment method (credit card, ACH) - Download invoices and receipts - View payment history - Cancel your subscription Updating Payment Information 1. In the Stripe portal, click Payment Methods 2. Click Add Payment Method to add a new card or bank account 3. Set the new method as default 4. Remove outdated payment methods if needed Downloading Invoices 1. In the Stripe portal, click Billing History 2. Each invoice has a Download link for PDF format 3. Invoices include line-item details showing device count and per-device pricing 4. Use these for purchase orders and district accounting Upgrading Your Plan 1. Go to Settings → Billing → Manage Subscription 2. Click Update Plan 3. Select your new plan tier (e.g., Basic → Pro) 4. The upgrade takes effect immediately 5. You'll be charged a prorated amount for the remainder of your current billing cycle 6. New features (analytics, SSO, etc.) become available within minutes Downgrading Your Plan 1. Go to Settings → Billing → Manage Subscription 2. Click Update Plan 3. Select the lower-tier plan 4. The downgrade takes effect at the end of your current billing cycle 5. You retain access to higher-tier features until the cycle ends 6. Features not included in the new plan will be disabled automatically Adding or Removing Devices - Your subscription is based on active device count - When you enroll a new device, it is automatically added to your subscription - When you remove a device from the dashboard, your next invoice reflects the reduced count - Prorated credits are applied for devices removed mid-cycle Tips - Budget planning — Use the Pro plan for most districts; it covers SSO and analytics which are essential for CIPA compliance reporting - Purchase orders — Contact support@kybergate.com to arrange PO-based billing for districts that cannot pay by credit card - Volume discounts — Districts with 500+ devices should contact sales for custom Enterprise pricing - Annual billing — All plans are billed annually; there is no monthly option at this time - Tax exemption — Provide your tax-exempt certificate to support@kybergate.com to remove tax from future invoices Troubleshooting | Issue | Solution | |-------|----------| | Payment failed | Update your payment method in the Stripe portal and retry | | Invoice not received | Check your spam folder; invoices are sent from Stripe directly | | Device count seems wrong | Go to Devices → Active and verify the count matches your subscription | | Cannot access billing portal | Ensure you have Admin role — only admins can manage billing | | Need a refund | Contact support@kybergate.com within 30 days of payment | Related Articles - Getting Started with KyberGate - Device Enrollment and PAC Configuration - Managing Users and Roles

Last updated on Apr 17, 2026

ClassLink Integration

ClassLink Integration KyberGate integrates with ClassLink using the OneRoster 1.1 standard to automatically sync your district's roster data — students, teachers, classes, and schools. This eliminates manual user management and keeps KyberGate in sync with your SIS. Overview The ClassLink integration provides: - OneRoster 1.1 Sync — Automatic import of users, classes, schools, and enrollments - SSO (Single Sign-On) — Students and staff log in to KyberGate using their ClassLink credentials - Automated Roster Sync — Daily automatic sync keeps user data current as students enroll, transfer, or graduate Prerequisites Before setting up ClassLink integration, ensure you have: 1. A KyberGate Pro or Enterprise subscription (SSO is not available on Basic) 2. ClassLink admin access to your district's ClassLink tenant 3. OneRoster 1.1 API credentials from ClassLink (Client ID and Secret) 4. The KyberGate app registered in your ClassLink LaunchPad Setting Up OneRoster 1.1 Sync Step 1: Enable OneRoster in ClassLink 1. Log in to your ClassLink Admin Console 2. Navigate to Roster Server → Applications 3. Click Add Application and search for KyberGate 4. If KyberGate is not listed, click Add Custom Application - Application Name: KyberGate - OneRoster Version: 1.1 5. Generate API credentials (Client ID and Client Secret) 6. Copy the Base URL, Client ID, and Client Secret Step 2: Configure in KyberGate 1. In the KyberGate admin dashboard, go to Settings → Integrations → ClassLink 2. Enter the following from ClassLink: - OneRoster Base URL (e.g., https://example.oneroster.com/ims/oneroster/v1p1) - Client ID - Client Secret 3. Click Test Connection to verify the credentials 4. A green checkmark confirms successful connection Step 3: Configure Sync Options 1. Select Schools — Choose which schools to sync (or select all) 2. User Types — Select which roles to import: Students, Teachers, Staff, Administrators 3. Sync Schedule — Set the automatic sync frequency: - Every 6 hours (recommended) - Every 12 hours - Every 24 hours - Manual only 4. Conflict Resolution — Choose how to handle conflicts: - ClassLink wins (recommended) — ClassLink data overwrites local changes - KyberGate wins — Local changes are preserved 5. Click Save & Run Initial Sync Step 4: Run Initial Sync 1. The initial sync imports all selected users, classes, and enrollments 2. Progress is shown in real-time with a count of imported records 3. A summary report shows: users created, updated, skipped, and any errors 4. Review the error log for any issues (usually duplicate emails or missing fields) Setting Up SSO Enable ClassLink SSO 1. Go to Settings → Authentication → SSO 2. Select ClassLink as the SSO provider 3. The integration uses your existing OneRoster credentials 4. Toggle Enable SSO Login to activate 5. Optionally, toggle Disable Password Login to force SSO-only authentication Add KyberGate to ClassLink LaunchPad 1. In the ClassLink Admin Console, go to App Library 2. Search for KyberGate or add a custom SSO app 3. Configure the SAML/OAuth redirect URL provided in KyberGate settings 4. Assign the app to the appropriate user groups Monitoring Sync Status 1. Go to Settings → Integrations → ClassLink → Sync History 2. Each sync shows: timestamp, duration, records processed, errors 3. Click on any sync entry to see detailed logs 4. Enable email notifications to receive alerts when a sync fails Tips - Start with one school — Test the sync with a single school before enabling district-wide - Review before enabling SSO — Ensure all users synced correctly before switching to SSO-only login - Check data quality — Common sync issues stem from missing email addresses or duplicate records in the SIS - Sync timing — Schedule syncs for off-hours (e.g., 2 AM) to avoid any performance impact - Role mapping — KyberGate maps ClassLink roles automatically: Teacher → Staff, Student → Student, Administrator → Admin Troubleshooting | Issue | Solution | |-------|----------| | Connection test fails | Verify Base URL, Client ID, and Secret are correct; check for trailing slashes in the URL | | Users not importing | Ensure the selected schools have active enrollments in ClassLink | | Duplicate users after sync | Check for duplicate email addresses in your SIS data | | SSO login fails | Verify the redirect URL in ClassLink matches the URL shown in KyberGate settings | | Sync runs but no new users appear | Check the user type filters — you may have deselected the relevant role | | Stale data after sync | ClassLink may be caching old SIS data — trigger a fresh export in your SIS | Related Articles - Clever Integration Guide - Managing Users and Roles - Billing and Subscription Management

Last updated on Apr 17, 2026

Managing Team Members and Roles

Managing Team Members and Roles Collaborate effectively by inviting team members to your KyberGate dashboard with role-based access controls. Assign the right permissions so teachers, administrators, and IT staff each see only what they need. Before You Begin - You must have Admin or Owner role to manage team members - Each team member needs a valid email address - Review available roles before sending invitations Understanding Roles KyberGate offers four permission levels: | Role | Access | |------|--------| | Owner | Full access including billing, integrations, and team management | | Admin | Manage devices, policies, users, reports, and settings | | Teacher | KyberClassroom, screen view, activity logs for assigned groups | | Viewer | Read-only access to dashboards and reports | How to Invite Team Members 1. Navigate to Settings → Team Members in your dashboard 2. Click Invite Member 3. Enter the team member's email address 4. Select the appropriate role from the dropdown 5. Optionally assign them to specific device groups or schools (for multi-site organizations) 6. Click Send Invitation 7. The team member receives an email with a link to create their account Managing Existing Members - Change role: Click the member's name → select new role from the dropdown → click Save - Remove member: Click the ⋮ menu next to their name → select Remove → confirm - Resend invitation: For pending invitations, click Resend next to the email Tips - Use the Teacher role for classroom staff — it limits access to classroom tools without exposing administrative settings - Assign teachers to specific device groups so they only see their students' devices in KyberClassroom - Review team members quarterly and remove accounts for staff who have left your organization Troubleshooting - Invitation email not received: Check the recipient's spam folder. If still missing, try resending from Settings → Team Members - Cannot change own role: You cannot modify your own permissions — another Admin or Owner must make the change - Login issues after invitation: Ensure the team member is using the exact email address the invitation was sent to Related Articles - Getting Started with KyberClassroom - Understanding the KyberGate Dashboard - Managing Device Groups and Assignments

Last updated on Apr 17, 2026

Configuring School Schedule

Configuring School Schedule Set up your school's operating schedule in KyberGate to automatically apply different filtering policies during school hours, after hours, and on weekends. Schedule-based policies ensure students have appropriate access levels throughout the day. Before You Begin - You need Admin role or higher - Know your school's bell schedule including start/end times and any period breaks - Decide on your after-hours filtering approach (relaxed, same as school hours, or fully blocked) Setting Up Your Schedule 1. Navigate to Settings → School Schedule in your dashboard 2. Click Edit Schedule 3. Set your school start time and end time for each day of the week 4. Toggle days on/off — disable weekends or teacher workdays as needed 5. Click Save Schedule Configuring Schedule-Based Policies Once your schedule is set, you can create policies that activate based on time: 1. Go to Policies → Create Policy (or edit an existing one) 2. Under Schedule, select when the policy should be active: - During school hours — applies only within your configured schedule - After hours — applies outside school hours - Always — applies 24/7 regardless of schedule 3. Set your filtering rules for that time period 4. Click Save Policy Example Setup - School hours (8:00 AM – 3:00 PM): Strict filtering — block social media, gaming, streaming - After hours (3:00 PM – 8:00 AM): Relaxed filtering — allow social media, keep adult content blocked - Weekends: Minimal filtering — safety categories only (adult, malware, weapons) Tips - Set your schedule 15 minutes before the first bell to ensure filtering is active when students arrive - Create a separate Testing schedule during exam periods with stricter policies - Use Schedule Override in KyberClassroom for temporary changes during class (e.g., allowing a blocked site for a specific lesson) - Schedule changes take effect within 60 seconds across all devices Troubleshooting - Policies not switching at the right time: Verify your timezone is set correctly in Settings → General → Timezone - Weekend policies applying on weekdays: Check that you haven't accidentally toggled weekday checkboxes off - Schedule not saving: Ensure end time is later than start time for each enabled day Related Articles - Creating and Managing Filtering Policies - Understanding Content Categories - Focus Mode and URL Push

Last updated on Apr 17, 2026

Network and Proxy Settings

Network and Proxy Settings KyberGate uses a cloud-based proxy architecture to filter web traffic. Understanding the network configuration helps ensure reliable filtering across all devices in your school. Before You Begin - You need Admin role or higher - Access to your school's network equipment (firewall, router) or your IT team - Know your MDM platform for deploying proxy settings to devices How KyberGate Proxy Works KyberGate routes web traffic through its cloud proxy network using a PAC (Proxy Auto-Configuration) file. This approach: - Enables SSL/HTTPS inspection for full content filtering - Works across all platforms (iPad, Chromebook, Windows, macOS) - Uses smart geo-routing across 8 regional proxy servers for optimal speed - Requires no on-premise hardware Proxy Regions KyberGate automatically routes traffic to the nearest proxy: - East Coast (NYC) — Primary - Southeast (Atlanta) - Midwest (Chicago) - Central (Dallas) - Northwest (San Francisco) - West Coast (Los Angeles) - Canada (Toronto) - Europe (London) Deploying Proxy Settings via MDM For iPads (Jamf, Mosyle, Kandji) 1. In your MDM, create a Global HTTP Proxy configuration profile 2. Set the proxy type to Auto (PAC) 3. Enter your organization's PAC file URL (found in Settings → Network in your dashboard) 4. Deploy the profile to your device groups For Chromebooks (Google Admin) 1. In Google Admin Console, go to Devices → Chrome → Settings 2. Under Network → Proxy, select Use proxy auto-config 3. Paste your PAC file URL 4. Apply to the appropriate OUs For Windows/macOS 1. The KyberGate agent automatically configures proxy settings during installation 2. No manual proxy configuration needed 3. Verify in Settings → Network that the agent is reporting proxy status as active Firewall Recommendations Ensure these are allowed through your school firewall: - Outbound ports: 443 (HTTPS), 80 (HTTP), 8080 (proxy) - Domains: *.kybergate.com, proxy.kybergate.com - Optionally block direct internet access (bypass proxy) by restricting outbound 443/80 to only KyberGate proxy IPs Tips - Use the Network Health Score on your dashboard to monitor proxy connectivity across devices - The PAC file URL is unique per organization — do not share it publicly - If your school uses a firewall with SSL inspection, add KyberGate proxy domains to the bypass list to avoid certificate conflicts Troubleshooting - Devices not routing through proxy: Verify the PAC file URL is correctly deployed via MDM. Check Devices → [device name] → Network for proxy status - Slow browsing: Check the Network Health Score. If a specific region shows high latency, contact support - Certificate errors: Ensure the KyberGate root certificate is installed on all devices (see Certificate Installation guide) Related Articles - How Web Filtering Works in KyberGate - Enrolling iPads via Jamf Pro - Enrolling Chromebooks via Google Admin - System Requirements and Supported Devices

Last updated on Apr 17, 2026

Google Workspace Integration

Google Workspace Integration Connect KyberGate to your school's Google Workspace to automatically sync students, teachers, and organizational units. This integration eliminates manual user management and keeps your KyberGate roster in sync with your directory. Before You Begin - You need Google Workspace Super Admin access - You need Admin role or higher in KyberGate - Your school must have Google Workspace for Education Setting Up the Integration 1. In your KyberGate dashboard, navigate to Settings → Integrations 2. Click Connect Google Workspace 3. Click Authorize — you'll be redirected to Google's OAuth consent screen 4. Sign in with your Google Workspace Super Admin account 5. Review the requested permissions and click Allow: - Read user directory (names, emails, OUs) - Read classroom rosters (for KyberClassroom groups) - Read user profile information 6. Once authorized, you'll be redirected back to KyberGate Configuring Sync Settings After connecting, configure what gets synced: 1. Select Organizational Units (OUs): Choose which OUs to import (e.g., /Students, /Students/Grade 5) 2. User Type Mapping: Map Google Workspace user types to KyberGate roles (students, teachers, staff) 3. Sync Frequency: Choose automatic sync interval (every 1, 6, 12, or 24 hours) 4. Google Classroom Integration: Optionally sync Google Classroom rosters to auto-create KyberClassroom groups 5. Click Save & Sync Now to run the initial import What Gets Synced - User accounts: Name, email, OU, status (active/suspended) - Organizational units: Full OU hierarchy for grouping - Classroom rosters: Teacher-to-student assignments (optional) - New users: Automatically added when created in Google Workspace - Removed users: Flagged as inactive (not automatically deleted) Tips - Start by syncing a single OU to verify everything works before importing your entire directory - Google Classroom sync is especially useful for KyberClassroom — teachers automatically see their class rosters - The initial sync may take a few minutes for large directories (1,000+ users) - Changes in Google Workspace typically reflect in KyberGate within one sync cycle Troubleshooting - Authorization fails: Ensure you're signing in with a Super Admin account, not a regular teacher or student account - Missing users after sync: Check that the correct OUs are selected in sync settings. Suspended Google accounts are imported but marked inactive - Classroom rosters not appearing: Verify Google Classroom sync is enabled and that teachers have active Google Classrooms with enrolled students - Sync errors: Check Settings → Integrations → Sync Log for detailed error messages Related Articles - Clever SSO Integration - Managing Team Members and Roles - Managing Device Groups and Assignments

Last updated on Apr 17, 2026

Clever SSO Integration

Clever SSO Integration Connect KyberGate with Clever to enable single sign-on (SSO) and automatic roster syncing for your district. Clever integration lets students and teachers log in with their existing school credentials and keeps user data synchronized. Before You Begin - Your district must have an active Clever account - You need District Admin access in Clever - You need Admin role or higher in KyberGate - Know which schools and sections you want to sync Setting Up Clever SSO Step 1: Connect in KyberGate 1. Navigate to Settings → Integrations in your KyberGate dashboard 2. Click Connect Clever 3. You'll be redirected to Clever's authorization page Step 2: Authorize in Clever 1. Sign in with your Clever District Admin credentials 2. Review the data KyberGate is requesting access to: - Student names, emails, and school assignments - Teacher names, emails, and sections - School and district information 3. Click Approve to grant access Step 3: Configure Data Sharing 1. In your Clever dashboard, go to Applications → KyberGate 2. Select which schools to share data with KyberGate 3. Choose data sharing rules: - Students: Share all or selected grades - Teachers: Share all or selected roles - Staff: Optional — share district admins and school staff 4. Click Save Step 4: Verify in KyberGate 1. Return to Settings → Integrations in KyberGate 2. Click Sync Now to pull data from Clever 3. Verify users and schools appear in your Users section How SSO Login Works Once connected, users can log in to KyberGate using Clever: 1. On the KyberGate login page, click Log in with Clever 2. If already signed into Clever, the user is automatically authenticated 3. If not, they'll sign in through Clever's portal first 4. KyberGate maps their Clever role (student/teacher/admin) to the appropriate KyberGate permissions Tips - Clever syncs data automatically — roster changes in your SIS flow through Clever to KyberGate within 24 hours - Use Clever's Secure Sync for the most reliable data sharing (vs. CSV upload) - Test with a single school before rolling out district-wide - Clever events (enrollment changes, new students) are processed automatically Troubleshooting - Authorization denied: Ensure you're signing in with a District Admin account. School-level admins cannot approve applications - Missing students or teachers: Check Clever's data sharing rules — the school or grade may not be shared with KyberGate - SSO login redirect fails: Verify the redirect URI is correctly configured in your Clever app settings. Contact KyberGate support if the issue persists - Stale data: Force a manual sync from Settings → Integrations → Clever → Sync Now Related Articles - Google Workspace Integration - Managing Team Members and Roles - Quick Start Guide: Setting Up KyberGate for Your School

Last updated on Apr 17, 2026

E-Rate Funding for KyberGate

E-Rate Funding for KyberGate KyberGate is an E-Rate eligible solution under the federal Universal Service Fund. Schools and libraries can use E-Rate Category 2 funding to offset the cost of KyberGate's web filtering, content security, and student safety tools. Before You Begin - Your school or district must be registered with USAC (Universal Service Administrative Company) - You need an active E-Rate application (Form 470/471) or be preparing one - Familiarize yourself with Category 2 budget guidelines for your funding year KyberGate E-Rate Eligibility KyberGate qualifies under E-Rate Category 2: Internal Connections as a content filtering and network security solution. Eligible components include: - KyberFilter — AI-powered web content filtering - KyberPulse — Student safety monitoring and alerts - SSL/HTTPS inspection — Deep packet inspection for encrypted traffic - Proxy infrastructure — Cloud-based filtering proxy service KyberGate E-Rate Details - SPIN Number: 143055219 - Service Provider: Kyber Systems LLC - Service Type: Internet Content Filtering / Network Security - Category: Category 2 — Internal Connections - Available on: Form 470 Item 21 — Basic Maintenance of Internal Connections How to Apply for E-Rate with KyberGate Step 1: File Form 470 1. Log in to the EPC Portal at https://forms.universalservice.org 2. File a Form 470 for Category 2 services 3. Include "Content Filtering" and "Network Security" in your service descriptions 4. Post the form and wait the required 28-day competitive bidding period Step 2: Request a Quote from KyberGate 1. Contact KyberGate sales at sales@kybergate.com or through your dashboard 2. Provide your Billed Entity Number (BEN), Form 470 number, and device count 3. KyberGate will provide an E-Rate compliant quote referencing SPIN 143055219 Step 3: File Form 471 1. After the 28-day window, file Form 471 in the EPC Portal 2. Enter KyberGate's SPIN number: 143055219 3. Attach the KyberGate quote as supporting documentation 4. Submit for USAC review Step 4: Receive Funding Decision 1. USAC reviews your application (typically 3-6 months) 2. Once approved, you receive a Funding Commitment Decision Letter (FCDL) 3. Proceed with KyberGate deployment 4. File Form 486 to confirm services have started Tips - File your Form 470 early in the E-Rate filing window (usually opens in January) - KyberGate's per-device pricing model aligns well with Category 2 budgets - Keep records of all quotes, contracts, and correspondence for USAC audits - E-Rate discounts range from 20% to 90% based on your school's free/reduced lunch percentage - Multi-year contracts (up to 3 years) can be filed on a single Form 471 Troubleshooting - Can't find KyberGate in USAC search: Search by SPIN number 143055219 or company name "Kyber Systems LLC" - Quote format questions: KyberGate provides E-Rate compliant quotes with all required fields (SPIN, service dates, per-unit pricing) - Need CIPA compliance documentation: KyberGate includes a CIPA compliance letter upon request — contact support Related Articles - How Web Filtering Works in KyberGate - Network and Proxy Settings - System Requirements and Supported Devices

Last updated on Apr 17, 2026