Guest Visitors and WiFi Access

[ITGURU]

We have a secure guest WiFi for external guest users, however we find more and more laptops locked down so we cannot install the certificate. They seem to expect to be able to come in, enter a password to a guest network and access.

What does everyone else have setup in this situation?

I could get a business standard line installed, VLAN it off as another SSID , but wondered if anyone else does this , or how you get around certificate issues.

[snagrat]

Surely if you have vlans already you can just set the subnet to not require SSL?

[ITGURU]

Surely if you have vlans already you can just set the subnet to not require SSL?

 

Our web filter has a captive portal page built in to download the certificate before logging in with credentials. Disabling SSL interception will limit the visibility and filtering capability of the gateway, however are schools required to provide filtered guest WiFi or can it be clean open?

Edited April 1, 2023 by ITGURU

[snagrat]

Our web filter has a captive portal page built in to download the certificate before logging in with credentials. Disabling SSL interception will limit the visibility and filtering capability of the gateway, however are schools required to provide filtered guest WiFi or can it be clean open?

 

Whilst removing SSL will reduce the capabilities you should still be able to provide a level of filtering, it shouldn’t have to be open.

 

For Guest, I believe this is the best option. The requirement to install a certificate is always going to hamper the use of the WiFi.

 

For Staff, it’s a different matter.

[Rob_D]

We've always had very light touch filtering on the visitor wifi, and don't require a certificate installed. Students would never be allowed on and everything is VLANed off, so there's less requirement for filtering.

[FN-GM]

Our web filter has a captive portal page built in to download the certificate before logging in with credentials. Disabling SSL interception will limit the visibility and filtering capability of the gateway, however are schools required to provide filtered guest WiFi or can it be clean open?

 

With SSL the internet can be filtered. For example you can block adult sites. You looks the ability to sections of certain domains eg “site.com/example”. You also reduce you’re monitoring capability. If things haven’t changed you’re not required to do this anyway for guests.