Re: guest access to athletic events like baseball, soccer

[Ronald King <ronald.king () MORGAN EDU>]

We use ClearPass with a captive portal. The guest enters their legit
personal email address and is granted access for 5 minutes to check said
address. That address receives an email asking them to confirm. Once
confirmed they are on for 8 hours and can use a random weak password with
their email for other devices.

*Ronald A. King, CISSP*
Chief Information Security Officer
Morgan State University Office: (443) 885-3372
1700 E. Cold Spring Ln. Email: ronald.king () morgan edu
Baltimore, MD 21251 URL: http://www.morgan.edu

*Growing the future ... Leading the world*
<http://www.morgan.edu/Documents/ABOUT/StrategicPlan/StrategicPlan2011-21_Final.pdf>


On Tue, Dec 5, 2017 at 3:09 PM, Michael Cole <mcole () clarku edu> wrote:

> We use Aruba’s clearpath as a captive portal, and guest can auth with
> their social media creds, to get basic internet access,  that gives law
> enforcement a chance to subpoena for a real name if something happens that
> is serious enough that they want to track them down.
>
>
>
> *From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
> SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *randy
> *Sent:* Tuesday, December 05, 2017 3:05 PM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* [SECURITY] guest access to athletic events like baseball,
> soccer
>
>
>
> Question on net access at athletic events: For sports like basketball,
> baseball or soccer (smaller than football size crowds), do you allow the
> general public to connect to your campus net? If so, what method do you
> use? A) use a commercial NAC tool B) use a tool that sends a txt to their
> smartphone C) attendees connect with browser, get a splash screen, check
> the "I will obey your rules" box and proceed D) other method like
> outsourcing using something like Wandering Wifi?
>
> Is it sufficient to just log IP/MAC address?
>
> -Randy Marchany
>
> VA Tech IT Security Office and Lab