We have an on-premise firewall that is CIPA compliant and updates its definitions daily. We also provide AV and Endpoint firewalls on each student laptop that performs additional filtering while off campus.