Upload
nasim-randolph
View
18
Download
0
Tags:
Embed Size (px)
DESCRIPTION
Duke Heaton, Network Engineer, UVU September 25, 2013. Introduction. From Moccasin, Arizona My history with this school started before it was UVU School: Utah Tech (1980) Welding Engineer, UVCC (1991) Electronics and Computer Technology - PowerPoint PPT Presentation
Citation preview
Duke Heaton, Network Engineer, UVU
September 25, 2013
Introduction
• From Moccasin, Arizona• My history with this school
started before it was UVU– School: Utah Tech (1980)
Welding Engineer, UVCC (1991) Electronics and Computer Technology
– Work: UVSC (1994) Electronic Maintenance Specialist , UVU (2011) Network Engineer
Utah Valley University: Home of the Wolverines
• 2nd largest institution of higher learning in Utah
• Nearly 33,000 students and 5,000 faculty members
• Explosive growth over last decade (number of students doubled in five years)
UVU Networking/Wireless (“Wolverine-WiFi”)
From BYOD to BYOE:• Replaced wireless with Cisco in 2009
– Designed for most coverage with least # of access points
• NAC system outdated– Slow, intrusive, semi manual login process for
smartphones and tablets– 50% of Helpdesk calls were related to wireless
network access
NAC: What We Wanted
• Reduce load on help desk• Quick, easy, secure automated access using any
device • Self remediation for non-compliant devices• Flexible NAC policies• Help us comply with the regulations
The Selection Process
• Approached wireless vendors first• Switched gears to look at wireless/network
independent NAC solutions– Bradford Networks’ Network Sentry jumped to the
top
Why we Selected Bradford Networks
• Quick, automated onboarding for tens of 1000s of devices • 100% visibility across the networks• Enables flexible access policies for each group type (students,
faculty, contractors, guests, conference attendees) based on user role, device status, location, and time
• Intuitive and fast: click or unclick checkboxes to create policies• Automatically checks and confirms that devices are compliant
before they gain access to the network, and enables self remediation
• Supports content filtering for high-school students to comply with CIPA
• Price
And …
Significantly cuts IT overhead and calls to helpdesk!
Implementation Process
• Installed Network Sentry servers• 3 day on-site tech support to get initial configuration
working• Tested on IT department• Enlisted help to start advertising • Rolled out live over Thanksgiving weekend• Shut down old system over Christmas break• Everyone forced over to new system January 1st• First semester help desk numbers as expected
End-Users Experience: Simple , Fast On-boarding
• First-time users enter their credentials to download the agent
• The agent links the device with the user and checks for up-to-date OS and AV software If up to date, user gets network access according to access
policy permissions
If out of date, user clicks a link to launch the update. Once compliant, they get immediate network access.
The next time they log in, network connection is automatic
• Simple, automated internet access for transient guests (conference attendees, visitors, contractors)
One Year Later
• Help desk calls reduced by half• More than 31,000 users and 33,000 unique
devices safely registered on the network • UVU has a network experience worthy of a major
university
What’s Next?
• Access point in every class room• New Student Life and classroom buildings will be
built for BYOD, and new opportunities to improve the classroom experience
• Extend NAC to wired networks and support 1000s of IP infrastructure devices ( security cameras, printers, scanners etc.)
Tips and Advice
• Allow plenty of time to test the policies you plan to enforce
• Advertise, get the word out early and in as many ways as you can
• Use phased-in approach if possible (not everyone at once)
• Hold a Wireless Open House at the beginning of each semester for new students
• Demand will grow — provide a wireless infrastructure able to keep up
Questions?
• Copy of this presentation or to contact me: [email protected]
• Hear me at Educause, Wednesday, October 16 @ 3:40 pm
• Meet me at Bradford Networks’ booth during the show (1518)