Duke Heaton, Network Engineer, UVU September 25, 2013

1. Duke Heaton, Network Engineer, UVU September 25, 2013

2. Introduction • From Moccasin, Arizona • My history with this school started before it was UVU • School: Utah Tech (1980) Welding Engineer, UVCC (1991) Electronics and Computer Technology • Work: UVSC (1994) Electronic Maintenance Specialist , UVU (2011) Network Engineer

3. Utah Valley University: Home of the Wolverines • 2nd largest institution of higher learning in Utah • Nearly 33,000 students and 5,000 faculty members • Explosive growth over last decade (number of students doubled in five years)

4. UVU Networking/Wireless (“Wolverine-WiFi”) From BYOD to BYOE: • Replaced wireless with Cisco in 2009 • Designed for most coverage with least # of access points • NAC system outdated • Slow, intrusive, semi manual login process for smartphones and tablets • 50% of Helpdesk calls were related to wireless network access

5. NAC: What We Wanted • Reduce load on help desk • Quick, easy, secure automated access using any device • Self remediation for non-compliant devices • Flexible NAC policies • Help us comply with the regulations

6. The Selection Process • Approached wireless vendors first • Switched gears to look at wireless/network independent NAC solutions • Bradford Networks’ Network Sentry jumped to the top

7. Why we Selected Bradford Networks • Quick, automated onboarding for tens of 1000s of devices • 100% visibility across the networks • Enables flexible access policies for each group type (students, faculty, contractors, guests, conference attendees) based on user role, device status, location, and time • Intuitive and fast: click or unclick checkboxes to create policies • Automatically checks and confirms that devices are compliant before they gain access to the network, and enables self remediation • Supports content filtering for high-school students to comply with CIPA • Price

8. And … Significantly cuts IT overhead and calls to helpdesk!

9. Implementation Process • Installed Network Sentry servers • 3 day on-site tech support to get initial configuration working • Tested on IT department • Enlisted help to start advertising • Rolled out live over Thanksgiving weekend • Shut down old system over Christmas break • Everyone forced over to new system January 1st • First semester help desk numbers as expected

10. End-Users Experience: Simple , Fast On-boarding • First-time users enter their credentials to download the agent • The agent links the device with the user and checks for up-to-date OS and AV software If up to date, user gets network access according to access policy permissions If out of date, user clicks a link to launch the update. Once compliant, they get immediate network access. The next time they log in, network connection is automatic • Simple, automated internet access for transient guests (conference attendees, visitors, contractors)

11. One Year Later • Help desk calls reduced by half • More than 31,000 users and 33,000 unique devices safely registered on the network • UVU has a network experience worthy of a major university

12. What’s Next? • Access point in every class room • New Student Life and classroom buildings will be built for BYOD, and new opportunities to improve the classroom experience • Extend NAC to wired networks and support 1000s of IP infrastructure devices ( security cameras, printers, scanners etc.)

13. Tips and Advice • Allow plenty of time to test the policies you plan to enforce • Advertise, get the word out early and in as many ways as you can • Use phased-in approach if possible (not everyone at once) • Hold a Wireless Open House at the beginning of each semester for new students • Demand will grow — provide a wireless infrastructure able to keep up

14. Questions? • Copy of this presentation or to contact me: duke.heaton@uvu.edu • Hear me at Educause, Wednesday, October 16 @ 3:40 pm • Meet me at Bradford Networks’ booth during the show (1518)