Re: Do you need two Guest Wireless Networks? (Re: [SECURITY] Questions/thoughts around outsourcing guest wireless)

["Jones, Dan" <Dan.Jones () UMASSMED EDU>]

+1, with one delta... our sponsored guest accounts expire at a 90-day interval, and can be renewed by the sponsor. This 
essentially closes the gap that could be created if a sponsor is overly generous in the initially specified duration of 
the account.

Dan Jones
CISO, UMass Medical School

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of randy 
marchany
Sent: Monday, August 13, 2012 11:29 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Do you need two Guest Wireless Networks? (Re: [SECURITY] Questions/thoughts around outsourcing 
guest wireless)

Guests on our wireless network require a campus "sponsor" who basically approves their request to connect to our 
network. The sponsor is able to set the times/days of access, enable/disable their wireless "account". The guest 
account can be reactivated later if the guest comes back to campus, for instance, on a yearly basis. The guest creates 
their own userid/password, fills out demographic info and has to enter the university sponsor. We don't restrict  their 
access to the net.

See http://www.cns.vt.edu/data_guestAccess.html and  http://www.cns.vt.edu/data_guestFAQ.html for details.

-Randy Marchany
VA Tech IT Security Officer & Lab

On Sat, Aug 11, 2012 at 1:09 PM, Jeffrey Schiller <jis () mit edu<mailto:jis () mit edu>> wrote:
I have run into two interesting use cases. The first is the obvious,
providing access to people on campus who do not normally have access
to our "regular" wireless network (which will soon require
authentication, etc. etc.).

The second one is the use case where you need guests to interact
closely with faculty and staff. For example the laptop of a visiting
researcher who is collaborating closely with a particular faculty
member (or lab). For example in the lab they may need to be on the
same subnet as the affiliated people.

Now for a long term visitor, they can presumably be granted
credentials and become effectively a part of the community. But there
is also the short term (aka a weekend) case.

Another way to look at it is that some guests just need access to the
Internet while others need access to the network at the institutions
and these are subtly different.

-Jeff

On Mon, Aug 6, 2012 at 3:03 PM, Perry, Jeff <perry () ku edu<mailto:perry () ku edu>> wrote:
> I am writing to seek information from peer institutions regarding how you
> handle guest wireless access.
> ...

--
_______________________________________________________________________
Jeffrey I. Schiller
Information Services and Technology
Massachusetts Institute of Technology
77 Massachusetts Avenue  Room E17-110A
Cambridge, MA 02139-4307
617.253.0161<tel:617.253.0161> - Voice
jis () mit edu<mailto:jis () mit edu>
http://jis.qyv.name
_______________________________________________________________________