E-Rate Eligible Services List (ESL): What Qualifies for Funding Each Year

What the Eligible Services List Is

USAC publishes the Eligible Services List annually, before each new funding year’s application window opens. The ESL is a formal FCC-approved document that classifies every E-Rate-eligible service into one of three buckets: Category 1 (wide-area connectivity), Category 2 (internal connections), or ineligible. The ESL also specifies cost-allocation rules for services that bundle eligible and ineligible components, and it notes where special eligibility conditions apply.
The ESL is not a product catalog — it describes service categories and characteristics, not specific vendor offerings. Determining whether a specific vendor’s product qualifies requires applying the ESL’s category definitions to the product’s technical specifications and how it is priced and delivered. This is where applicants most frequently make mistakes, and where Armorstack’s technical team adds direct value by working through the ESL classification before a proposal is finalized.

Category 1 Eligible Services

Category 1 services deliver connectivity from the internet or a wide-area network to the point of demarcation at an eligible building. Eligible services include:

• Dedicated internet access (DIA): A symmetrical or asymmetrical broadband circuit delivered directly to the building. Eligible whether delivered via fiber, coax, or fixed wireless — as long as the circuit is dedicated to the applicant (not shared public internet).
• Fiber transport and metro Ethernet: Leased fiber circuits connecting buildings within a district’s WAN, or connecting a building to a carrier’s point of presence.
• Dark fiber: Leased unlit fiber strands. The fiber itself is eligible; the electronics that light the fiber (transponders, amplifiers) are generally ineligible unless specifically listed.
• Wide-area network services: Managed WAN services connecting multiple eligible entities — including MPLS, SD-WAN transport, and similar carrier-managed WAN constructs.
• SIP trunks (data component only): The data transport portion of SIP-based voice services is eligible; the voice minutes and telephone equipment components are not.
• Ethernet local loops: The last-mile access circuit from the carrier network to the building demarc.

As an FCC-licensed wholesale telecommunications carrier, Armorstack delivers Category 1 services and invoices USAC directly as a SPIN-registered provider. This is the same pathway that major national carriers use — not a reseller arrangement.

Category 2 Eligible Services

Category 2 services install and maintain the internal network infrastructure that carries connectivity from the building demarc to students, staff, and patrons. Eligible services include:

• Managed and unmanaged switches: Layer 2 and Layer 3 Ethernet switches for distributing wired network access inside buildings.
• Wireless access points and controllers: Wi-Fi access points and the wireless LAN controllers or cloud management platforms that manage them.
• Structured cabling: Horizontal and vertical cable runs, patch panels, and associated termination equipment when installed to support eligible network equipment. Electrical wiring is not eligible.
• Firewalls: Hardware firewalls and hardware-based managed firewall services are eligible under Category 2. This is the primary cybersecurity-adjacent service currently eligible under the standard E-Rate program outside the pilot.
• Uninterruptible power supplies (UPS): Network-connected UPS units providing power protection for eligible network equipment — not general building power backup.
• Network management software: Software for managing eligible network equipment, when bundled with eligible hardware purchases. Standalone software licenses require case-by-case ESL analysis.
• Installation and basic maintenance: Labor for installing and configuring eligible equipment is eligible up to the limits defined in the ESL. Ongoing managed service fees require careful cost allocation to separate the eligible maintenance component from ineligible services.

Services That Are Not Eligible

Understanding what is not on the ESL prevents the cost-allocation errors that trigger PIA review. Consistently ineligible services include:

• End-user devices: laptops, tablets, desktop computers, Chromebooks, projectors, interactive whiteboards, and displays
• General-purpose software: learning management systems, productivity suites, student information systems
• Telephone equipment: handsets, PBX systems, analog adapters, and voicemail systems
• Physical security: surveillance cameras, access control systems, door hardware, badge readers, and intrusion detection sensors
• Electrical infrastructure: conduit, electrical panels, power outlets (as distinct from structured data cabling)
• Staff training and professional development (except within the FCC Cybersecurity Pilot for selected participants)
• Help desk and end-user support services not directly tied to eligible network equipment maintenance
• Most cybersecurity services beyond firewalls — subject to potential expansion based on the FCC Cybersecurity Pilot outcome

Cost Allocation: When Eligible and Ineligible Services Are Bundled

Managed service contracts frequently bundle eligible and ineligible components — a managed network service might include eligible switch management alongside ineligible help desk support, for example. The ESL includes cost-allocation rules that specify how applicants must separate the eligible from the ineligible portion and what methodology is acceptable.
USAC’s PIA reviewers pay close attention to cost allocation. Common errors include:

• Failing to exclude the ineligible voice component of SIP trunk contracts from the Category 1 FRN
• Treating the full cost of a managed network services contract as Category 2 eligible without allocating for ineligible management labor components
• Including installation labor that exceeds the ESL’s percentage-of-equipment-cost ceiling for eligible labor costs
• Allocating firewall costs as Category 2 when the firewall also provides non-eligible security services not separately priced

Armorstack structures every engagement proposal to separate eligible and ineligible line items at the initial quote stage, before any Form 470 is filed. This prevents post-selection renegotiation of contract pricing that USAC would view as inconsistent with the competitive bidding process.

How the ESL Changes Year to Year

USAC releases a draft ESL for comment before each funding year, then issues a final ESL based on FCC guidance and public comment review. Year-to-year changes are typically modest — a new technology category added, a deprecated service removed, or a clarification of cost-allocation rules for a service type that generated ambiguous applications in prior years.
The most consequential potential near-term ESL change is the addition of cybersecurity services if the FCC’s Cybersecurity Pilot demonstrates positive outcomes. Armorstack monitors FCC proceedings and USAC announcements throughout the year and alerts clients to ESL changes that affect their planned service mix before they become binding on a filed application.
For the full E-Rate program context, see the E-Rate program overview. For how eligible services map to specific funding requests, see the Form 471 guide and the Category 1 vs. Category 2 comparison. Ready to verify that your planned services qualify? Contact Armorstack for an ESL pre-check before your Form 470 window opens.