Netsweeper Filter on MAC Address

[Jobos]

Moved to a school that uses Netsweeper that I’m totally unfamiliar with having previously used Sophos XGS.

 

Windows devices are working fine and I can change policies based on AD group but the school also has Chromebooks used by students and iPads for staff.

 

With Netsweeper can filtering be set based on MAC address? It would only be for iPads as Chromebooks would get the default policy.

[eddyc]

Moved to a school that uses Netsweeper that I’m totally unfamiliar with having previously used Sophos XGS.

 

Windows devices are working fine and I can change policies based on AD group but the school also has Chromebooks used by students and iPads for staff.

 

With Netsweeper can filtering be set based on MAC address? It would only be for iPads as Chromebooks would get the default policy.

 

We’ve used Netsweeper for many years via our LEA.

 

There is a Chrome store extension for Chromebooks to tie the filtering back to the user and their access levels to match windows.

 

I believe the same exists for iPads but we’ve not got that yet. We currently use the captive portal from Netsweeper on our iPad subnet.

 

Hope this helps

 

eddyc

[Jobos]

Thanks, that’s something to think about.

 

I always thought Sophos was over complicated but I take it all back and I know it’s early days but it was so much easier with Sophos.

 

Also, where do I find the logs on Netsweeper? It would be great to filter by blocked and not blocked requests.

[sigma]

Not sure what version you might be running, but you should be able to find your version's documentation here:

 

https://helpdesk.netsweeper.com/docs/main_page/Content/index.html

[PaddyNewman]

Biased but Netsweeper is the easiest filtering platform to use, I've found all the others remarkably complex or too basic.

 

Wondering when you would need to filter on MAC address though.

 

What's your aim, as you can definitely do what you need in Netsweeper, and happy to help if you want to reach out directly.

[Jobos]

It was just for the staff iPads really so iPads get the staff policy leaving the Chromebooks get the default policy.

[PaddyNewman]

Either reserve/VLAN off those devices... or consider going sort of the other way. Authenticate your Chromebooks, get them audited instantly and move them from a default policy, can decrypt them properly then.

 

Can't authenticate iPads with ease, but Chromebooks are 2 second job (as long as the Netsweeper service is exposed correctly)