You may want to give your school guests – parents, visiting teachers, visiting students, etc. – Limited access to the school’s internet. But guest network access would need to be governed by the school’s web filtering policies and block access to inappropriate content and malicious websites.
To start, you need to set up a Guest Network Policy on a separate IP address. It is important that this public IP address is not shared by other regular members of the school such as students, staff, etc. This is because the Guest Network Policy will override any other filtering policy set up for that IP address and become applicable for all users. To avoid such conflicts of interest, it is recommended that schools with at least two different public IP addresses set up Guest Network Policies.
1. All guest network DNS and HTTP/S traffic will need to use this same public IP address.
2. All guest network traffic cannot be used with the same public IP address as non-guest traffic.
3. Set DHCP scope for the guest network to use Securly DNS servers IP addresses only.
Note that guest network DNS traffic cannot be mixed with internal DNS servers using non-guest traffic.
To set up a Guest Network Policy:
- Contact Securly Support at firstname.lastname@example.org and request for the Guest Network Policy to be enabled. Please include the public IP addresses that you would like to use for this service.
- Once the Guest Network Policy is enabled, it will show up on the admin dashboard under the Policy Editor tab.
- The school admin can change the blocked categories by navigating to Policy Editor >> Guest Network Policy.
- If you are a Nucleus UI user, you can also delete the Guest Network Policy by clicking the "More" icon at the top right hand of the page.
- Also, Nucleus UI users can add and remove IPs for their schools, and also update the type of GNP (Static/DHCP/Both).
How it works
- Guest Network Policy does not require any certs to be deployed for web filtering to work for guests. All traffic will be filtered and blocked according to the Guest Network Policy and Global Allow/Block list.
- Under the Reports tab, the Guest Network Policy will only log in and display the blocked content that a user attempted to visit.
- You can whitelist and blacklist websites for the Guest Network Policy as and when required. However, wildcards are not supported.
- YouTube Restricted Mode is enabled for all guest users
- .Guest Network Policy defaults to a safe search for Google and Bing search engines.
Please note that the Guest Network Policy will not support:
- User-based policies
- Keyword scanning
- Yahoo search
- Forced login
- Mapping OUs
- Display of devices signed in under GNP on the geolocation map
- Restrict Google logins to personal accounts
- Image results are filtered using the Restricted Image Search for Creative Commons functionality.