Service Provider (SP) Policies

Service Providers are required to provide the eduroam service to all eligible users from recognized participating institutions without imposing any fees on visiting users or their home institutions.

Service Providers are required to broadcast the wireless network with the SSID “eduroam” and deliver it via an 802.1X infrastructure integrated with approved authentication mechanisms. Alternatives such as Captive Portals shall not be used.

Service Providers are required to enforce strict separation (logical via VLANs or physical) between eduroam users and the institution’s sensitive internal networks, ensuring protection of the internal infrastructure without impacting service availability.

Local security controls (such as firewall policies, bandwidth management, and prevention of malicious activities) may be applied, provided they do not affect the authentication mechanism or discriminate among eligible users.

It is required to ensure that university systems are not used to distribute any malicious, destructive, or fraudulent code or information, or to introduce or enable computer viruses or virus code, or to engage in any hacking activities within or outside the university environment.

Commitment is required to ensure that communication ports are deactivated when not in use and that activation is performed exclusively by the institution’s Information Technology personnel.

A maximum limit of four (4) devices per user operating simultaneously shall be enforced.

Service Providers are required to retain sufficient logs to link connection sessions to technical trace elements, such as Access Point data and MAC addresses, and to correlate IP addresses where necessary. Retention shall be for the locally mandated period (six months) or any longer period required by law or eduroam obligations.

Commitment is required to connect these networks to the Internet solely through companies licensed by the National Telecommunications Regulatory Authority (NTRA).

Service Providers are required to report major incidents and faults and to cooperate with the Egyptian Universities Network in technical investigations through approved channels.

Compliance is required regarding the conformity of equipment used in these networks with the technical specifications, coverage areas, and frequencies approved by the National Telecommunications Regulatory Authority (NTRA).

The National Telecommunications Regulatory Authority (NTRA) shall be enabled to conduct inspections and audits of the university networks participating in the system to ensure compliance with all controls and stipulations in accordance with local policies and laws.