Re: Personal printer WIFI connectivity policy in dorm rooms

[Curt Kappenman <ckappenman () ANDERSONUNIVERSITY EDU>]

You are welcome, Wilson.  As Frank stated in a separate post, I appreciate you reaching out to our group for input.  
The success of your industry and our institutions is only going to come via collaboration.

Curt Kappenman
Security Compliance Officer / Systems Technician

[cid:image002.png@01CE928D.7FDE1D30]<http://www.andersonuniversity.edu/it.aspx>


316 Boulevard, Anderson, SC 29621
Phone: (864) 231-2850
Help Desk: (864) 231-2457
ckappenman () andersonuniversity edu<mailto:ckappenman () andersonuniversity edu>
www.andersonuniversity.edu<http://www.andersonuniversity.edu/>

Note: This message contains information which may be confidential and privileged. Unless you are the addressee (or 
authorized to receive for the addressee), you may not use, copy or disclose to anyone this message or any information 
contained in this message. If you have received this message in error, please advise the sender by replying to 
ckappenman () andersonuniversity edu<mailto:ckappenman () andersonuniversity edu>, and delete the message. Thank you 
for your cooperation in this matter.

[Facebook]<https://www.facebook.com/pages/AU-Information-Technology/248016151900704>[Twitter]<https://twitter.com/#!/AUTechnology>

From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Wong, Wilson 
(HPS Global R&D)
Sent: Tuesday, July 10, 2018 9:18 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Personal printer WIFI connectivity policy in dorm rooms

Hello Frank, Curt, Rand and Andrew,

This gives me the boundary condition to define the solution space.

Thank you very much for sharing the insights and the implications of how solution must pivot to.

Wilson Wong
Master Program Manager
HP Inc.

From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Andrew Chiarello
Sent: Tuesday, July 10, 2018 10:10 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Personal printer WIFI connectivity policy in dorm rooms


I'd like to second making WiFi Direct off by default. Every semester, we go around teaching people how to turn it off, 
so that it stops broadcasting interfering networks.



In general, the support burden of getting printers working on the wireless network is higher than we can sustain, so we 
tell our students to use USB exclusively. While a few students manage to get their printers connected correctly, the 
vast majority of them just create problems.



Andrew J. Chiarello

Senior Network Engineer

Bryn Mawr College

achiarello () brynmawr edu<mailto:achiarello () brynmawr edu>

(610) 526-7966

________________________________
From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of Rand Hall <hallr () MERRIMACK EDU<mailto:hallr () MERRIMACK EDU>>
Sent: Tuesday, July 10, 2018 9:55:43 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Personal printer WIFI connectivity policy in dorm rooms

Most educational networks won't be much different from most corporate networks.

If you want to do higher-ed a solid, ship your devices to only use
standard channels and have WiFi Direct disabled by default. Bonus
points for making the WiFi On/Off button turn off WiFi Direct as well.

Rand

Rand P. Hall
Director, Network Services                 askIT!
Merrimack College
978-837-3532
rand.hall () merrimack edu<mailto:rand.hall () merrimack edu>

If I had an hour to save the world, I would spend 55 minutes defining
the problem and five minutes finding solutions. - Einstein

On Tue, Jul 10, 2018 at 2:44 AM Wong, Wilson (HPS Global R&D)
<wilson.wong () hp com<mailto:wilson.wong () hp com>> wrote:
> Hello everyone,
>
>
>
> I am a program manager for personal printers. I wish to understand the WIFI environment/policies in dorm rooms for 
> personal printers so we can design a solution that works well in these environment.
>
>
>
> I have the following list of questions. Appreciate insights.
>
>
>
> Is a Captive Portal used to access the Wi-Fi network?
>
> Is 802.1x used for secure access to the Wi-Fi network?
>
> Is "client isolation" enabled on your Wi-Fi network, so that one client on the network can't access other clients 
> directly?
>
> Do you have a policy against connecting personal printers to your Wi-Fi network?
>
> If 802.1x is used, what type of 802.1x authentication is used. We may need to think about the specific question a bit 
> more but I am thinking we could ask them two questions:
>
> Does your 802.1x authentication involve a password, a token (e.g. , USB key), or a certificate (multiple selections 
> allowed)
>
> Please provide the instructions you provide to students on how to configure access to your Wi-Fi network (e.g., a web 
> link)
>
>
>
>
>
> Wilson Wong
>
> Master Program Manager
>
> HP Inc.