Jump to content

Recommended Posts

Posted (edited)
I'm curious, did you find a way of stopping phones from working through it whilst still allowing tablets and laptops? Edited by mrbios
Posted
I'm curious, did you find a way of stopping phones from working through it whilst still allowing tablets and laptops?

 

Nope, why would I want to do that?

 

I'm pretty sure the vast majority will be phones.

Posted (edited)
Nope, why would I want to do that?

 

I'm pretty sure the vast majority will be phones.

 

Fair enough, personally I'd like to block phones and only allow tablets and laptops, wouldn't want kids browsing the net in classes where they shouldn't be (seeing as they can be easily concealed, and as good as filtering is getting, it's still not perfect)

 

EDIT: That said, i guess they'll just use their 3G signal, i guess it's lose/lose on that front for me then.

Edited by mrbios
Posted
Fair enough, personally I'd like to block phones and only allow tablets and laptops, wouldn't want kids browsing the net in classes where they shouldn't be (seeing as they can be easily concealed, and as good as filtering is getting, it's still not perfect)

 

EDIT: That said, i guess they'll just use their 3G signal, i guess it's lose/lose on that front for me then.

 

Yeh I know what you mean but its a teacher control thing.

 

We already allow students to use their phones for specific tasks. Survey monkey is a good example. This will just make that access universal to all students if needed.

 

Will see how it goes anyway, byod is entirely new to me and may be a big success or a complete failure :) We will see....

Posted
Project is complete!!

 

Guest network SSID [complete]

Captive Portal [complete]

Acceptable usage policies [complete]

Portal branding [still to do]

New internet line installed and activated [complete]

Route VLAN to the new gateway and internet line [complete]

Set IP based filtering (thankyou talk talk for being innovative in this area) [complete]

 

So when I try to access a naughty site we now get this

[ATTACH=CONFIG]15989[/ATTACH]

 

And can manage it all on-line without any extra hardware like this:

[ATTACH=CONFIG]15988[/ATTACH]

 

So basically we are nearly there. The only question is do we create the users manually or link them to the active directory.

 

I'm in the middle of getting this put together at our place. Gone for a seperate line from talk talk as well although the guy never mentioned the filtering, I'll ask though. I know we need a captive portal but how do these work? I was hoping that rather than having a pre existing user account it could be done on the fly by email address or something like that with a code that lasts a day or so, a - la - hotel wi-fi. Reason being is that its more for public access as we let rooms out for conferencing etc, BYOD is just an added bonus. Which one are you using? Does it log sites visited or is that a different thing altogether?

 

Cheers

 

James

Posted
I'm in the middle of getting this put together at our place. Gone for a seperate line from talk talk as well although the guy never mentioned the filtering, I'll ask though. I know we need a captive portal but how do these work? I was hoping that rather than having a pre existing user account it could be done on the fly by email address or something like that with a code that lasts a day or so, a - la - hotel wi-fi. Reason being is that its more for public access as we let rooms out for conferencing etc, BYOD is just an added bonus. Which one are you using? Does it log sites visited or is that a different thing altogether?

 

"Worksafe" is included in all talk talk lines. It really is awesome! You just register for their "my account" and you can turn it on or off and choose blocks in there all online.

 

We use aruba for our managed wireless, one of its options is a captive portal (basically a web page with a login) when you connect to a seperate guest SSID.

You can create users manually using the admin console and give them an end date as well. Very easy to use from my experience.

We are just going to create users as they are needed.

  • Thanks 1
  • 7 months later...
Posted
At the time I couldn't afford one - looked seriously at Network Sentry 500VM Network Control and Application Server, but best part of 20k + ongoing so opted not to bother at the moment. Completely vlan'd off, devices unable to communicate with other devices, Ericom web connect solution used to allow any device to connect to a rdp session via a browser using html 5, so not overly concerned about updates and av at the moment.

 

forgot to say just about to trial aruba clearpass - will update post after trial.

 

NAC - the other way might just be to upgrade dhcp server to 2012 which allows you to filter ip's based on MAC for a specific vlan.

We are looking at installing Aruba with Clearpass - just wondering how are you getting on with it ? Anyone else using this as a BYOD solution ?

Posted
Couldn't afford clearpass - other pressing issues - so I dumped the trial idea in the end. Sixth Form still allowed to bring their own devices in, I have a Aruba 3600 controller with the additional PEF license to give a bit more control, hoping to revisit next financial.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...