My university doesn't really have a concept of "The Network" being privileged or sensitive. It's just a route to the internet, like any other utility ISP. There

My university doesn't really have a concept of "The Network" being privileged or sensitive. It's just a route to the internet, like any other utility ISP. There's 802.1x authentication with your SSO credentials (both wired and wireless with WPA2 enterprise), so your actions are accountable, and if you're doing botnet/spam/blackhat things they can cut you off and come find you. WPA2 enterprise uses a certificate to authenticate the AP to the client, so pirate WiFi isn't a security issue either, just an interference problem. Services are all exposed to the internet (mostly as webapps) with Shibboleth CAS/SSO authentication. The only thing you need "The Network" for is IP whitelisting for journals. There's a web proxy you can use for that if you're off campus. We also have a separate guest SSID that's routed through non-whitelisted IPs. We have a distinction between "Managed Computer" and "other," where Managed Computers are required for data that's confidential or subject to regulation. I'm sure there are Managed Computers in finance/payroll/scary labs but your average professor or student doesn't need one.