Re: Allowing Student Laptops to Connect to School Network

[Dean Johnson <dean.johnson () LETHBRIDGECOLLEGE AB CA>]

We allow students and faculty to connect their personal laptops to our
wireless and wired network. I also believe that this is our biggest
vulnerability to worm and virus problems...



We currently force all wireless users to authenticate to our LDAP. At that
point they only get access to the Internet (no Domain services). We use a
product from Vernier
<http://www.verniernetworks.com/products/integrated_system.php>  Networks
with these procedures
<http://www.lethbridgecollege.ab.ca/evolution/network_access.shtml> .



Laptops can connect in all classrooms and other "docking" spots. We are
moving all of these "unsecured" ports to a separate vlan that only has
Internet access (and I am contemplating the purchase of a separate ISP
agreement for this network).



We are in the process of replacing our Portal and this is where these types
of users can remotely (or locally) access their network files.



Good luck,



Dean Johnson

Lethbridge Community College





-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Michelle Mueller
Sent: Wednesday, October 20, 2004 1:16 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Allowing Student Laptops to Connect to School Network



We've been asked to come up with a proprosal for allowing students to

bring their personal laptops on campus and connect to our network.  At

best we're looking at simply Internet access.  At worst we're looking at

access to their network drive, printing, and wireless access.  Currently,

students need to log into a Microsoft domain on a school computer to get

their network drive, Internet access, and to print.



Do any of you have to provide Internet and/or network access to your

students personal computers?  How did you go about this?  What security

issues have you encountered?



**********

Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.


**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.