In Germany, school IT is not managed by the schools themselves. It is managed by the city. When the City of Nordhorn set out to better protect students across its growing digital school environment, the project quickly became about more than content filtering. The city needed a scalable, centrally managed network security platform that could support multiple schools, hundreds of student devices, lean IT staffing, and long-term municipal infrastructure planning, all without adding operational complexity or requiring new hardware investments.
Zenarmor helped Nordhorn modernize its school network security using infrastructure the city already owned, replacing an aging filtering product and laying the foundation for broader next-generation network security across the municipal environment.
Customer: City of Nordhorn, school IT (Schulträger)
Sector: Public sector / municipal education
Location: Nordhorn, Lower Saxony, Germany
About the Customer
Nordhorn is a city of around 54,000 people in Lower Saxony, close to the Dutch border. Like every municipality in Germany, the city is the Schulträger for its public schools. That role carries a specific responsibility: the school authority does not set the curriculum, but it does own and operate the buildings, the networks, the servers, and the devices that schools depend on every day.
Nordhorn’s school landscape is sizeable. The city is responsible for more than a dozen primary schools, several secondary schools, and special-needs schools that serve students across a main location and a number of branch sites. A small municipal IT team supports all of them.
In recent years, that team’s workload has grown sharply, driven by national and state digitalization programs that introduced tablets into classrooms and transformed schools into fully managed network environments rather than isolated computer labs.
For municipal IT departments in Germany, school infrastructure is not simply an education issue, it is a city responsibility involving procurement oversight, child protection obligations, data privacy requirements, operational continuity, and long-term budget accountability. Technology decisions must also align with public procurement processes and long-term operational sustainability expectations common within German municipalities.
That challenge becomes even more difficult as cities are asked to support growing numbers of student devices, distributed school locations, public networks, and increasingly complex cybersecurity requirements with relatively small IT teams.
The Challenge: Protecting Students While Managing a Growing Municipal Network
As tablets reached classrooms across Nordhorn, a clear risk came with them. Hundreds of school-owned iPads were now in the hands of underage students, and every one of them represented a potential path to harmful or inappropriate online content including violence, gambling, adult material, and malicious websites.
For a public school authority, protecting minors online is not optional. It is a duty.
Nordhorn already used a filtering product called Time for Kids, but the existing solution was no longer keeping pace with the city’s operational and security needs.
As the number of managed devices increased across multiple schools, maintaining consistent filtering policies became increasingly difficult. The city needed stronger visibility, easier administration, and more scalable policy management across a distributed environment.
The existing product also created operational silos. Content filtering was handled separately from broader network security, forcing the IT team to manage multiple layers independently while still lacking meaningful visibility into overall network activity and application usage.
The city also wanted greater visibility into application usage and network activity across school environments.
At the same time, the city faced familiar public-sector pressures:
- Limited municipal IT staffing
- Tight budget constraints
- Growing cybersecurity expectations
- Increasing device counts across schools
- The need to standardize security policies across distributed locations
- Pressure to modernize infrastructure without adding complexity
The city needed more than another standalone filter. The team also wanted a platform capable of improving broader municipal network security without introducing another layer of infrastructure complexity.
Why Zenarmor?
The decisive factor was that Zenarmor solved the city’s immediate child-protection requirement without forcing Nordhorn to purchase and maintain additional hardware.
Zenarmor installs directly on the firewall infrastructure the city already operated, allowing the team to deploy advanced web filtering and next-generation security capabilities without additional appliances, a lengthy procurement cycle, or major infrastructure redesign.
For a public-sector organization, avoiding additional appliances significantly reduced both deployment friction and long-term operational overhead.
Several capabilities made Zenarmor the right fit:
- Granular web content filtering with precise category enforcement
- Safe Search enforcement for student devices
- Plugin-based deployment on existing firewall infrastructure
- Centralized policy management across school locations
- Application visibility and control
- Threat intelligence and network traffic visibility
- Reporting and centralized administration
- Next-generation firewall capabilities extending beyond simple filtering
That final point became increasingly important during evaluation.
Nordhorn was not simply replacing a content filter. The city was moving from a standalone filtering product toward a broader municipal security platform capable of supporting future network security requirements without requiring additional products or infrastructure later.
Rather than deploying separate tools for filtering, visibility, reporting, and application control, Zenarmor allowed the city to consolidate these functions into one centrally managed network security platform running on infrastructure already in place.
“We can recommend Zenarmor without restrictions. The solution not only met our expectations, it exceeded them. It provides a simple, effective, and cost-effective way to implement web filtering for schools and protect students from harmful content. We would recommend Zenarmor to other organizations looking for a reliable and scalable solution.”
— IT team responsible for schools, City of Nordhorn
For municipal IT departments responsible not only for schools, but often also libraries, municipal offices, administrative systems, and public networks, reducing operational complexity matters just as much as improving network security.
The Evaluation Process
Nordhorn’s evaluation initially focused on child-protection requirements. The team carefully assessed filtering quality, Safe Search enforcement, ease of administration, and the ability to consistently apply policies across distributed school environments.
However, the assessment quickly expanded beyond filtering alone.
The team also evaluated Zenarmor’s broader next-generation firewall capabilities, recognizing that the same deployment could support wider municipal network security initiatives in the future.
Several competing plugins and filtering tools were tested during the process. While some offered overlapping filtering functionality, none matched Zenarmor in terms of deployment simplicity, usability, centralized management, and overall effectiveness.
The Zenarmor deployment integrated cleanly into the city’s existing infrastructure and could be tailored to Nordhorn’s operational requirements without introducing additional infrastructure complexity.
After comparing the available options on functionality, ease of use, scalability, and cost efficiency, the city concluded that Zenarmor offered the strongest overall balance.
Confidence in the platform shaped the city’s long-term decision. Rather than implementing another short-term filtering solution, Nordhorn selected a multi-year Zenarmor deployment capable of growing alongside future municipal security requirements.
Fast Deployment Without Infrastructure Changes
One of the project’s biggest operational advantages was deployment simplicity.
Because Zenarmor integrated directly into Nordhorn’s existing firewall infrastructure, the city avoided a lengthy hardware procurement process and did not need to redesign the network environment.
Initial rollout was completed quickly across the school environment, allowing the IT team to begin enforcing filtering and security policies without major disruption to existing operations.
The deployment required:
- No dedicated filtering appliances
- No major network redesign
- No infrastructure replacement
- No additional per-site hardware rollout
Policies could be centrally managed while network security enforcement remained distributed across school locations.
For a lean city IT staff managing multiple environments simultaneously, reducing deployment complexity was a major operational benefit.
Benefits and Advantages with Zenarmor
With Zenarmor in place, Nordhorn now operates a centrally managed, professional-grade web filtering and network security environment across its student devices and school infrastructure.
The city gained significantly more control over web access policies while simplifying day-to-day management for the Nordhorn IT staff.
Key benefits include:
- Professional, enforceable web filtering across student devices
- Centralized policy management across multiple school locations
- Safe Search enforcement and targeted category blocking
- Improved application visibility and traffic awareness
- Simplified administration for a lean municipal IT team
- Reduced operational complexity through platform consolidation
- No additional hardware footprint
- Lower infrastructure and maintenance overhead
- A future-ready next-generation network security foundation
Because Zenarmor runs directly on existing firewall infrastructure, the city also reduced hardware overhead at the same time it improved protection.
For municipal IT teams, fewer dedicated appliances directly translates into lower operational effort, lower maintenance requirements, and lower long-term costs.
More Than a Filter: A Security Platform for Municipal IT
It would be easy to describe this project as a filtering replacement. In reality, the story is much broader.
Content filtering was the city’s immediate requirement, but Zenarmor provided Nordhorn with a broader next-generation network security platform capable of supporting future municipal IT initiatives far beyond student filtering alone.
The same deployment already supports capabilities including:
- Application control
- Threat intelligence and threat protection
- Network traffic visibility
- Centralized reporting
- Policy management
- Next-generation firewall functionality
For municipal IT departments, that breadth matters enormously.
Cities rarely manage only schools. The same small IT teams are often responsible for municipal offices, administrative systems, public libraries, guest networks, and public Wi-Fi infrastructure across distributed locations.
Maintaining separate security products for each function quickly becomes operationally unsustainable.
Zenarmor gives municipal teams the ability to consolidate filtering, visibility, reporting, application control, and broader network security enforcement into one centrally managed platform without requiring additional infrastructure at every site.
Nordhorn has not yet enabled every capability available within the platform, and it does not need to. The important point is that the foundation is already deployed.
As future requirements emerge, the city can expand into additional capabilities without purchasing another product, launching another procurement cycle, or rebuilding infrastructure again.
Success and ROI
The most immediate measurable benefit was cost reduction.
By replacing the previous filtering solution and leveraging existing firewall infrastructure, Nordhorn avoided both recurring licensing inefficiencies and the capital expense associated with deploying additional filtering appliances.
The city reduced overall infrastructure overhead while simultaneously improving network security and operational visibility.
Just as importantly, deployment efficiency protected the project’s return on investment.
Because Zenarmor deployed directly into the city’s existing environment, rollout was completed significantly faster than a traditional appliance-based security deployment would have required.
The municipal IT team avoided:
- New hardware procurement cycles
- Appliance installation projects
- Rack space expansion
- Additional infrastructure management overhead
- Long specialist training requirements
The intuitive management interface also reduced administrative burden for less experienced staff members, which is particularly valuable for smaller municipal IT teams operating with limited resources.
For Nordhorn, the project delivered more than improved filtering. It delivered a more scalable operational model for school network security.
What is Next
Nordhorn’s immediate focus is completing deployment across the remaining firewall infrastructure and ensuring consistent policy enforcement across the full school environment.
Beyond that, the city now has a security platform capable of supporting future requirements as they emerge.
Potential future expansion areas include:
- Broader application control policies
- Expanded reporting and analytics
- Additional threat protection capabilities
- Wider municipal network security standardization
Because the platform foundation is already deployed, future expansion can happen incrementally without major operational disruption.
Would the City Recommend Zenarmor?
Without restrictions.
Nordhorn’s school IT team says it would recommend Zenarmor to other organizations looking for a reliable, scalable, and cost-effective way to secure distributed environments and protect users online.
For municipalities across Germany and Europe, the broader lesson is clear.
School IT is now municipal infrastructure. Device counts continue to grow, cybersecurity expectations continue to rise, and small public-sector IT teams are being asked to manage increasingly complex environments with limited resources.
Nordhorn addressed an immediate child-protection requirement while also simplifying infrastructure, reducing operational complexity, lowering costs, and establishing a future-ready next-generation network security foundation, all without replacing the infrastructure it already owned.
That is a model many municipal IT departments can realistically follow.
