+ Post New Thread
Results 1 to 7 of 7
Windows Thread, Student Laptop Internet Access in Technical; Hi, We are looking at the idea in September of having a wifi hopsport area for the pupils. Our proxy ...
  1. #1

    Join Date
    Apr 2007
    Location
    York
    Posts
    561
    Thank Post
    10
    Thanked 4 Times in 4 Posts
    Rep Power
    20

    Student Laptop Internet Access

    Hi,
    We are looking at the idea in September of having a wifi hopsport area for the pupils.
    Our proxy server is at the ISP (Redstone) and we don't have ISA.
    At present I monitor pupils activity by running a logoff script that copies the history into a html file on the server - but this is on machines that are on the domain.
    Is there a way to monitor there laptops when using the internet when they are on the domain. As they need to know Redstone's proxy, they will still get filtered internet access.

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,311
    Thank Post
    681
    Thanked 1,649 Times in 1,471 Posts
    Rep Power
    425
    So you allow a students personal machine over which you have no control and no way of knowing if it has av, if it does have av if it's up to date, if windows is patched up to date and no idea what other spy ware or nastys may be installed to be plugged into your network or connected via wireless just so they can surf the net?

    Ben

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,090
    Thank Post
    891
    Thanked 1,738 Times in 1,501 Posts
    Blog Entries
    12
    Rep Power
    455
    Quote Originally Posted by plexer View Post
    So you allow a students personal machine over which you have no control and no way of knowing if it has av, if it does have av if it's up to date, if windows is patched up to date and no idea what other spy ware or nastys may be installed to be plugged into your network or connected via wireless just so they can surf the net?

    Ben
    We do....

    But they are on another VLAN and have no communication with the main network at all.

  4. #4
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Hi

    You are a very brave techie thinking of this. I have seen it done in a few places including colleges but it will need careful planning. They have had it on a demilitarized vlan with a transparent proxy server that will monitor activity. You will need all sorts of disclaimers to protect you establishment otherwise if someones machine gets infected or broken into you could be held responsible.

    "Perfect planning makes perfect presentation" and "Watch the minefield" come to mind as phrases when I think about this.

    Richard

  5. #5

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,311
    Thank Post
    681
    Thanked 1,649 Times in 1,471 Posts
    Rep Power
    425
    Quote Originally Posted by FN-GM View Post
    We do....

    But they are on another VLAN and have no communication with the main network at all.
    Exactly. NAC is the way to go a as well I think.

    Ben

  6. #6

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,846
    Thank Post
    3,358
    Thanked 1,061 Times in 981 Posts
    Rep Power
    366
    Just as a free work around you can use Internet Junk Buster

    The Internet Junkbuster Proxy on Windows

    works on windows and linux and you can specify *.* to block all the internet and on the exceptions list only add websites which you want to give them access to including local intranet sites if any or you could just give them access and block sites as you need to and get AB Tutor ( pretty good pricing and monitor them that way )

  7. #7

    NikChillin's Avatar
    Join Date
    Nov 2007
    Location
    on the sofa
    Posts
    946
    Thank Post
    60
    Thanked 122 Times in 86 Posts
    Rep Power
    124
    We have a DMZ server and tow separate wirless networks to connect to, on is on the domain and the other is open access. We set the encryption on laptops for connecting to the domain so nobody knows the passphrase. There is no passphrase to the open access wireless and filtering is from County. (Primary level). Mac address filtering is set up on the server using Radius and all ports throughout the site is buttoned down by strict mac filtering too on the switches. The wireless access points we use are 3com and enable access with a, b and g connections.
    All seems to work well.... I shouldn't have said that!

SHARE:
+ Post New Thread

Similar Threads

  1. If every student had a laptop......
    By broc in forum Hardware
    Replies: 27
    Last Post: 24th July 2012, 12:36 PM
  2. student laptop proxy
    By browolf in forum *nix
    Replies: 4
    Last Post: 2nd February 2009, 03:10 PM
  3. Student proof laptop?
    By MGSTech in forum BETT 2014
    Replies: 22
    Last Post: 16th January 2009, 09:01 PM
  4. Providing wireless internet access for student laptops
    By meastaugh1 in forum How do you do....it?
    Replies: 9
    Last Post: 2nd February 2008, 02:39 PM
  5. Locking down student laptop
    By richard.thomas in forum How do you do....it?
    Replies: 17
    Last Post: 1st December 2007, 08:54 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •