Wireless network access for students and staff

[Dragon]

For those who have a wireless infrastructure, do you allow students and staff access to your wireless network using their own personal devices?

 

How are you controlling access?

 

Are you enforcing a minimum requirement in terms of AV and updates?

 

How are you allowing internet access without getting them to enter the proxies details?

[SYNACK]

We have a guest network for devices that is isolated in its own VLAN, it is setup as an extra network off ISA which runs as a transparent proxy. Staff and consultants only at this point though, primary school so less of the kids have such devices.

[ITGURU]

Guest Wireless VLAN, separate DHCP server, On-site web filter has a second interface which is the gateway, they are prompted for credentials we give visitors to get online.

 

Can pick and choose AD users who can log in to the Guest WIFI Portal page, or for staff I just create them a permanent login.

 

No student access using personal devices.

[AlanD]

We have a separate VLAN running off a smoothwall firewall/filter. Uses AD credentials with a RADIUS and DHCP running on smoothwall - so smoothwall "knows" who they are without using captive portal - or even needing a wireless key. And we advertise the fact that users need to install a certificate to use https (although its kind of surprising how many fail to do this and then moan it doesn't work).

 

My current moan is that smoothwall is not friendly when it comes to "apps"..and its a nightmare even trying to get common ones to work - without bypassing the interception - and not being able to see anything...in which case you wonder what smoothwall is there for. I'm not sure other filters are much better though....

 

I'd rather have students and staff using our WiFi - and I can see (to some extent) what they are using and doing - and when and how much time they are using it - rather than force them on to 4G where I get to know nothing.