Proxy/Guest Networks/Ruckus

[Tesla]

Hi All

 

Bit long winded this.

 

We've just had a new Ruckus network installed, on this, there is a setup for guests (Which is new to us)

 

What's the best way to set this up with regards to using WPAD etc (we've never explored wpad or PAC files)

 

We've always installed a small scirpt on logon that allows us to choose location on logon, but we have had a big increase on the amount of pople coming in and requiring WIFI, and me manually entering Proxy/installing scirpt on each device clearly isn't the best set up.

 

We Also use Protex for filtering, this has a wpad section but as yet i've been unable to get it to work ( I have set up a DNS record as per its instructions) but have had no success.

 

Thanks

[derf]

proxy pac files are utterly pointless with BYOD as the end user can just choose to go direct and you can't enforce it. You'd need a transparent proxy and no proxy pac file.

[IrritableTech]

proxy pac files are utterly pointless with BYOD as the end user can just choose to go direct and you can't enforce it. You'd need a transparent proxy and no proxy pac file.

 

You can setup your firewall to only allow BYOD web traffic to go to your proxies IP... Or in fact on Ruckus you can setup an access list to do the same.

 

It is tricky however with BYOD and wpad it seems intermittent - and then there is the certificate you need to inspect secure traffic.

[Tesla]

proxy pac files are utterly pointless with BYOD as the end user can just choose to go direct and you can't enforce it. You'd need a transparent proxy and no proxy pac file.

 

Transparent proxy is available in the next Protex update, so what would that entail in our scenario to allow people on the guest SSID to access the web? Is this more a filtering setup or Ruckus?

 

Sorry, haven't done much with proxies/byod in the past, only manually setting them.

[derf]

Not a great experience when they tell you the internet isn't working, and the time needed to check "connect using a proxy" or equiv. Best to leave BYOD devices well alone and handle it somewhere else