Public Wireless with filtering

[zbjsy]

What solutions do you use? Want to have a captiv portal, which hooks up with active-directory username/password to stop freeloaders using our public wifi. Also needs to be filtered, ideally with websense (what we currently use

 

Any recommendations?

[plexer]

You have a public wifi setup? how is it seperated from your normal network?

 

Ben

[CyberNerd]

We have a student VLAN network, through a Meru controller. Students get internet access (only) via a smoothwall box that authenticates with Active Directory

[zbjsy]

You have a public wifi setup? how is it seperated from your normal network?

 

Ben

 

Currently we have wireless access points which go back to two Cisco POX 515e firewalls, which change from one vlan to another, before passiing onto a isa /websense box that goes out to the internet. It is filtered, but all traffic comes from the second firewall address, and thus captiv portal addons for isa will not work, as doesn't see the client ip address. It's a complicated solution that was inherited.

Ideally we are looking for a new solution that does web filtering, or that can link/talk to websense.

 

Cybernerd, whats a meru controller?

[Edu-IT]

Ruckus with VLANs and Smoothwall?

[CyberNerd]

Cybernerd, whats a meru controller?

 

Meru Networks | MC4100

[zbjsy]

i cant see that it works with websense or does web content filtering?

[CyberNerd]

i cant see that it works with websense or does web content filtering?

 

No, it is a controller for the Access points - it puts them onto a VLAN. Smoothwall provides our content filtering for the public network.

The Meru does work with the AD RADIUS server though, but we only use this for school owned domain computers.

[m25man]

I have a bunch of ZyXel Hybrid APs on a dedicated VLan, this LAN is delivered to it's own port on our Sonicwall which has a Content filter setup along with the usual IPS and AV rules, just for good measure this LAN also uses opendns with a custom config.

As we never know who will be using the system we just change the WPA key every now and again and print it on the Press Passes.