Re: NAC Guest Provisioning

[Roger A Safian <r-safian () NORTHWESTERN EDU>]

FWIW, our guest system does not require the SMS codes.  Users register, we do no verification, we have VERY few 
problems,.  We do only allow limited access and the registration is only good for a week.  Perhaps not doing the SMS 
won't be as bad as you fear?

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Knights, 
John
Sent: Tuesday, February 24, 2015 4:38 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] NAC Guest Provisioning

Good Afternoon All-

Last year, we implemented our NAC solution on our wireless segments. We've seemed to work out most of the kinks on our 
authenticated/secure segment, but are having issues with the Guest segment and hope to hear about what you are doing 
with guest provisioning.

We currently have implemented guest registration through our NAC solution, which requires that a guest provide us with 
their name, email, and phone number. We send them an SMS with a code that they then use on the device they are 
registering. We are experiencing issues with some folks not receiving the SMS codes. We are faced with having to 
reevaluate our approach and would like to gain your approach to registering, if at all, guest devices connecting to 
either your wired or wireless network segments.

I appreciate any feedback this group can provide.

Thanks,
John
______________________________________________
John Knights
Information Security Officer
Wentworth Institute of Technology