Hi Hunter, I’d have to know what “security concerns” mean in this context, as that’s a pretty broad and variable phrase.
DMCA is no different than anywhere else on campus- we track down who offended (and we get very few to begin with). We have yet to have one that is untraceable, and have an acceptable (to our security officer and CIO) action plan if one ever was untraceable. I know this is vague, but easier to explain verbally rather than typing out a book. Same goes for Law Enforcement (who we have a great working relationship with in a number of directions). Even on an open network, we have several ways of identifying either the person behind the device in our ecosystem, or minimally the device itself and using that to find the offender (in the worst cases) or simply blocking that device from further activity if it doesn’t rise to the level of absolutely needing to identify the user. -Lee From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hunter Fuller Sent: Tuesday, March 28, 2017 9:42 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Dorm Wireless Authentication How do you handle security concerns, DMCA, and law enforcement requests for this ESSID? On Tue, Mar 28, 2017 at 8:23 AM Lee H Badman <lhbad...@syr.edu<mailto:lhbad...@syr.edu>> wrote: After kicking tires on leading classification engines and weighing solution dollars and support costs, we opted to pilot a wide open "gadget and games" SSID in the dorms that only have Internet access for all the oddballs. With almost a full year in, it's been very well used and received and we've been able to answer all of our own security questions that anyone would be contemplating. I think we'll be moving forward with this model. Lee Badman (mobile) On Mar 28, 2017, at 7:48 AM, Osborne, Bruce W (Network Operations) <bosbo...@liberty.edu<mailto:bosbo...@liberty.edu>> wrote: Here is another vote for ClearPass with Aruba wireless. When an Apple TV is registered, it is also registered as an AirGroup personal device so the owner’s 802.1X Apple device can use AirPlay to display content on the device. We also use Aruba’s Dynamic Multicast Optimization to provide multicast IPTV over wireless. Bruce Osborne Senior Network Engineer Network Operations - Wireless (434) 592-4229<tel:(434)%20592-4229> LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Robert Spellman [mailto:rsp...@bates.edu] Sent: Monday, March 27, 2017 9:33 AM Subject: Re: Dorm Wireless Authentication We use Aruba Clearpass, and have two SSID's on campus, one which is 802.1X, and the other open, doing MAC based authentication. Clearpass allows users to register their own devices for MAC authentication by logging into the Clearpass guest portal. Students can register devices for a year, while guests can register devices for 2 days. Rob Robert Spellman Bates College Information and Library Services On Mon, Mar 27, 2017 at 9:16 AM, Chris Brezil <brez...@newschool.edu<mailto:brez...@newschool.edu>> wrote: Good morning everyone, We are planning a larger scale roll out of wireless in our dorms. Currently we mainly just cover some of the common areas and students for the most part bring in their own routers. As most folks can appreciate, this has caused years of technical problems and is also not seen as great customer service. On our main campus wifi, we have people authenticate using 802.1x radius authentication using their university username and password. We have some concerns about doing this in the dormitories however. We know that students bring all sorts of consumer grade devices that require network access into their rooms, such as Apple TV, Amazon Echos, etc. Many of these devices will not work with username and password authentication and we are not looking to Mac exclude these devices on the network, given the overhead of setting this up. So we are looking possibly at doing WPA Personal with a passphrase that would be given to students. What are others doing? Has this come up as an issue for any of you? Best, Chris -- CHRIS BREZIL ASSISTANT VICE PRESIDENT, ENTERPRISE OPERATIONS INFORMATION TECHNOLOGY<http://www.newschool.edu/information-technology> 71 FIFTH AVENUE, 9th FLOOR, NEW YORK, NY 10003 brez...@newschool.edu<http://www.newschool.edu/marketing-communication/email-signature.html> | 212.229.5300 x4512<tel:(212)%20229-5300> [https://docs.google.com/uc?export=download&id=0Bz9BzY1rvKW_bDQ4SU1RUmpfMTQ&revid=0Bz9BzY1rvKW_cWtOekJTQ2RIdFFhQ3h1T0h3a3p3Vk9KT2pVPQ] ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
