Captive Portal - How are you using it?

[Art]

Hello All,

   I am configuring our Captive Portal and was wondering how other sites are using Captive Portal?

   We have 2 primary use cases -

      - Shared Workstations

      - Unidentified Devices (Macs, Mobile Devices)

   How successful has your Captive Portal implementation been?

Thanks

Art

[HITSSEC]

Art,

We are using captive portal to identify internal users using devices that do not log into the domain.  This is for two purposes: one to identify individuals on the network and secondly to provide access to resources that we control via AD group membership.  We also use captive portal externally to force an AD authentication before an internet based user is allowed to connect to specific resources we host on our public internet presence.  We have been quite successfully doing this for quite some time.  Pay attention to the Captive Portal settings to ensure they are appropriate for your use case.  For internal use don't set an expiry time greater than your DHCP lease period or you may have the incorrect person mapped to the user identified.

Phil