We work at a courthouse, however, we manage the data for the entire county. We have them at the Sheriff's office. They use them in commissary purchases, which is a separate SSI and separate VLAN. That's to segregate wireless traffic for different groups of people per their needs.
We have lawyers that maybe need to reach back into the network and access their documents when they take a laptop to the courtroom with them. And so through that, we've done some radius authentication. Therefore, it's not just an SSI ID. They actually have to log in with credentials as well.
Then, we have a guest SSID just for general public access, and that's basically running wide open. We do have a simple password audit, however, everybody knows it, and that's separated by VLAN as well and run through Palo Alto. We also have a whole different SSID for patrol units for the Sheriff's office, where they upload car videos and update their car computers wirelessly. We use it broadly.