[CWS] Hotspot capabilities

[Marcel van Dorp]

All,

Currently trying to build a simple solution allowing us to maintain control over browse behaviour without user agents or whatever. CWS can do that for us since we use ISR G2's and we could just push the traffic to the service cloud on gateway level. For internal employees we will not require authentication since they come from a certain know segment listed in an ACL. No worries so far.

However we also want to keep control over internet usage by external guests on site. Still no problem but the management would like the user to be presented a simple terms and agreements form which they have to agree upon to get access. 

Can this be done with CWS? Could not explicitly find it on cisco.com and that would life make a lot easier. I'm aware that there are a lot of solutions available but we really try to limit the amount of different stuff we need for to deploy this.

Thanks,

Marcel

[Edan Mudachi]

Hi Marcel,

   If you have the ability to separate your guest wireless into a separate subnet then you can create a custom group in the portal to adhere to that subnet. Thereafter you can create a filter for all categories, and apply a WARN rule action to specifically that filter and group. One thing that might be of issue is making sure persistent cookies are enabled. You may run into an issue where the users are consistently prompted by the warn page if they do not have persistent cookies enabled.

Sincerely,

Edan Mudachi

[Marcel van Dorp]

Hi Edan,

Sounds good. Yes, I've defined separate IP blocks for Guest and non-Guest users.

You might have any link with some sample config for a warn rule.

I'll request a trial and build a lab to play around.

Thanks.

[Edan Mudachi · Accepted solution]

Please see http://www.cisco.com/c/en/us/td/docs/security/web_security/scancenter/administrator/guide/b_ScanCenter_Administrator_Guide.pdf

Manging Policies starts on page 97.

Sincerely,

Edan Mudachi

[Marcel van Dorp]

Quickly glanced at that document, seems fairly simple.

Thanks Edan.