Ports/applications permitted for Guest Access

[Roger A Safian <r-safian () NORTHWESTERN EDU>]

Greetings,

We are looking at modifying and expanding our current guest access policy.  Currently guests have the same access as 
everyone else, but, they also need to have a guest ID provided to them.  This is a somewhat cumbersome process.  We 
would like relax the policy, but, at the same time, we don't want to just allow anyone to do anything on our network.

We are considering offering guest access for specific ports or applications.  Guests might not even be considered part 
of "our" network.  My question, for those of you who do have guest access is, what exactly do you allow your quests to 
do?  Our initial thought is something like web, email, vpn.  I especially am concerned that we limit P2P on the guest 
network.

Thanks.