iPads through Smoothwall

[alfatec]

Hi, Just wondering what authentication methods schools are using for their iPads through Smoothwall. We have a mixture and some are just used for Staff but some are

used for Staff and Students. Any suggestions will be most welcome.

[tom_newton]

Shared IPads or 1:1?

Ideally, for 1:1 you want to use Radius accounting with your Wifi APs.

NTLM should work for 1:1, but can be hard to "clear off", and does need global proxy setting.

For shared, SSL login is probably the best (only?) method.

[ass17]

Our students use their own personal devices with SSL login which is applied to a virtual wifi network interface. Staff devices that go through a different wifi interface which goes straight out to the Internet with limited filter categories applied like pornography.

 

If we did have devices that had the possibility of being shared between staff/pupils then we would keep them on a wifi network that uses SSL login for all.

[caffrey]

I'm holding off on the authentication until the MITM certificate installation is easier especially for BYOD, can't roll it out till then

[KCJeff]

We use a .pac file that prompts for 'Per Session' SSL authentication within the browser, this was useful on our old flat WiFi network and is still used now for shared devices.

 

As we're now on the Eduroam network, personal devices are authenticated through there.