Security

Reply
Frequent Contributor I
Posts: 61
Registered: ‎01-18-2012

Forbid company owned devices to connect to neighbor SSID

Is there a way to forbid company owned devices (currently Windows/Domain, iOS and OSX) from connecting to a specific neighboring SSID? The location with this issue is a 9-12 High School with a college campus in the same building. Our network is filtered to the internet while the college's isn't with an open SSID which gives them access to material that they shouldn't while they are in our care.

 

We understand that we can't do anything about BYOD in this case, but we have try to limit options on our devices.

 

Would SSID containement work in this scenario?

Guru Elite
Posts: 19,958
Registered: ‎03-29-2007

Re: Forbid company owned devices to connect to neighbor SSID

You would use "Protect Valid Stations" in the IDS profile:  http://www.arubanetworks.com/techdocs/ArubaOS_64_Web_Help/Web_Help_Index.htm#ArubaFrameStyles/1CommandList/show_ids_unauthorized_de.htm

 

This requires the RF protect license.  It basically does not allow anyone who has successfully used encryption on your network to connect to a neighboring network.

 

And explanation of how it works is here:  https://arubanetworkskb.secure.force.com/pkb/articles/HowTo/R-1408

 

 

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Guru Elite
Posts: 7,829
Registered: ‎09-08-2010

Re: Forbid company owned devices to connect to neighbor SSID

You could also block the networks via group policy / profile manager.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Guru Elite
Posts: 19,958
Registered: ‎03-29-2007

Re: Forbid company owned devices to connect to neighbor SSID

Cappalli,

Is there a plugin for IOS and Mac OSX devices that allows that to with with them, too?
Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Guru Elite
Posts: 7,829
Registered: ‎09-08-2010

Re: Forbid company owned devices to connect to neighbor SSID

I believe you can do it with profile manager (free from Apple)

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Search Airheads
Showing results for 
Search instead for 
Did you mean: