Educause Security Discussion mailing list archives

Re: Pervasive Campus Wireless


From: Timothy Payne <tpayne1 () MACALESTER EDU>
Date: Thu, 22 Jan 2009 14:57:26 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

We are currently dealing with this same issue.  Answers below:

1. Does your university provide an open access Wifi system for guests on campus?

 Totally open...but they only have access to our website, and to the
outside world via ports 80 and 443.  They cannot get to Macalester
internal services, or to our Google Apps website, so that registered
users aren't temped to use it rather than connecting to our WPA2
network.

2. If so, does it have encryption of any kind setup?

 No.  We encrypted our registered user network, but left public alone.

3.  Do you use a third-party subscription service such as Boingo, or
do you have your own subscription service, or no subscription
required?

 No sub required.  The user has to agree to our term of use every 4
hours.  We do not gather any information, simply require a click of
the 'I Agree' button.

4. If you don't require any authentication/subscription, how does your
University feel about the risk of providing an anonymous platform that
can be used for illegal activity?  Have they accepted the risk?  Do
they not feel the risk is great enough to mitigate?

We accept the risks in order to foster good will with our community.

Cheers!


- --
Tim Payne, CISSP, CCNA
Network Administrator
Macalester College




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFJeN2z/QtPr0ClP+0RApZlAJ9UqOILewv302bUdbqPfadTNbCn3ACfZFml
CPQoGUikFMb+IBanR4FjJII=
=D/Tm
-----END PGP SIGNATURE-----

Current thread: