Last Updated: March 14, 2023
Last Reviewed: March 14, 2023
Policy Statement
Weill Cornell Medicine supports the need for visitors of to have access to IT resources, including the internet.
Reason for Policy
Guest wireless networks further Weill Cornell Medicine’s missions of research, education, and patient care by providing a method for visitors to gain easy access to pertinent and topical information technology resources. This policy ensures guest networks are provisioned only by the Information Technologies & Services Department (ITS). This policy also establishes rules for proper management, security, and use of Weill Cornell Medicine’s guest network.
Entities Affected by this Policy
All units of Weill Cornell Medicine, including Weill Cornell Medicine-Qatar.
Who Should Read this Policy
All members of the Weill Cornell Medicine community utilizing Weill Cornell Medicine information technology resources.
All stewards and custodians of Weill Cornell Medicine data.
Web Address of this Policy
https://its.weill.cornell.edu/policies/
Contacts
Direct any questions about this policy, 11.04 – Guest Wireless Network, to Brian J. Tschinkel, Chief Information Security Officer, using one of the methods below:
- Office: (646) 962-2768
- Email: brt2008@med.cornell.edu
1. Overview
The following principles must be followed to ensure Weill Cornell Medicine’s guest networks are made reasonably secure and prohibit unauthorized access to internal Weill Cornell Medicine IT resources.
1.01 Guest Wireless Network Design Principles
Guest wireless networks may be provisioned only by ITS. In provisioning guest wireless networks, ITS must ensure users of these networks are unable to create or bridge network connections from guest wireless networks to internal Weill Cornell Medicine IT resources on non‐guest wireless networks.
Weill Cornell Medicine recognizes that users of guest networks expect a reasonable level of performance (e.g., responsive access to the internet). Managers and administrators of guest networks are required to provide a level of service consistent with these expectations but are not required to guarantee a particular quality of service.
Weill Cornell Medicine guest networks must be reasonably secure and restrictive while also providing necessary services. Reasonable restrictions include, but are not limited to, minimizing access to specific networks, ports, applications, systems, or other public and/or ITS resources.
Guest wireless networks may be monitored and reviewed for unauthorized, suspicious, or malicious activity.
ITS is not expected to ensure security for devices and/or data on guest wireless networks. ITS is responsible, however, for informing users of guest wireless networks that they should not expect a completely secure environment, and that use of the network is at their own risk.
When first connecting to Weill Cornell Medicine guest networks, users must be informed in writing (electronic or otherwise) of at least the following conditions:
- Access to the network is intended only for visitors to Weill Cornell Medicine,
- Communications may be monitored,
- Users should not have any reasonable expectation of security or privacy, and
- Users may be disconnected from the network if unauthroized, suspicious, or malicious activity is detected.
1.02 Unacceptable Use
Users of Weill Cornell Medicine guest networks may be disconnected for any reason. Disconnections may be ordered by any one or more of the following Weill Cornell Medicine officials or their designees:
- Associate Vice President, Deputy General Counsel and Secretary
- Chief Privacy & Clinical Compliance Officer
- Chief Information Security Officer
- Research Integrity Officer
- Senior Director, Human Resources Services
- Senior Associate Dean, Education
- Dean, Weill Cornell Graduate School of Medical Sciences
2. Individual Responsibilities
Informational text regarding the acceptable use of the Weill Cornell Medicine guest wireless networks must be posted and accepted by all users at the start of network usage. The text shall read as follows:
Thank you for choosing the Weill Cornell Medicine Guest Wireless Internet Access. This service was created to give visitors an easy way to browse the web. Before you connect, there are a few things you should know:
Clicking on the “I Agree” link below indicates you agree with the following Weill Cornell Medicine Guest Wireless Internet Access Terms and Conditions:
- This service provides limited wireless internet access for visitors to Weill Cornell Medicine.
- This wireless network is monitored. Computers suspected of distributing malicious software (spyware, malware, viruses, etc.), exhibiting malicious or suspicious behavior, or attempting to transmit data or other material that is considered offensive, illegal, in violation of copyright, or in violation of local, state, or federal law will be disconnected.
- Please do not attempt to use this service for high volume data transfers (e.g., hosting a web server, IRC server, or other server). Users found to be engaging in consistent, high volume data transfers will be disconnected.
- This wireless internet access is provided on an “as is” and “as available” basis. This service is not guaranteed to be uninterrupted, error‐free, or free of viruses or other malware. Browse at your own risk.
- Internal Weill Cornell Medicine information technology resources are not available from this wireless network. If you are a Weill Cornell Medicine student, faculty member, staff member, or long‐term affiliate in need of wireless access to internal Weill Cornell Medicine resources, please contact the Information Technologies and Services department by visiting https://its.weill.cornell.edu/get-help or calling +1 (212) 746-4878.
- Weill Cornell Medicine policy governs network use, including monitoring for the maintenance of operations, and obliges users to adhere to all applicable policies and laws, including fraud and abuse of network systems and copyright infringement.
If you agree with these terms and conditions, please click the box below. Thank you again for using the Weill Cornell Medicine Guest Wireless Internet Access.
