Re: student wireless security model

[Randall C Grimshaw <rgrimsha () SYR EDU>]

I am not sure how you are planning to tabulate this, but I for one would appreciate it if you would post the results 
back to the list.

At Syracuse we use
Encrypted
Authenticated 802.1x   WPA2, AES, PEAP, MSCHAPv2 against radius with an AD backend.
NAC Compliance Checks using an active agent on the client where supported (Windows, [Mac]) specifically Firewall, AV, 
OS updates se to auto.

We also offer unencrypted captive portal for guests, self registered using cell phone numbers, maximum 5 days.

Randy


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mayne, 
Jim
Sent: Monday, August 30, 2010 11:05 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] student wireless security model

I am curious what security model other universities are now using for their student wireless networks.


-      Encrypted or unencrypted

-      Authentication (mac, 802.1x, web portal etc.)

-      Any NAC security checks on the client

Thanks,
Jim