It’s a school project. And I hate it (not only is our school much bigger than a couple hundred clients, we have a tech staff of 3 people, and they also have other responsibilities (teacher, sports coach, etc). Our Clean Access NEVER works. And it can be completely circumvented fairly easily (w/o a username and password, and not a hack)...it is a huge bother.
The idea of it seems solid, but in practice? No. For example, I use linux and am completely unable to use the internet at all (no, the admins do not allow MAC address workaround). Same thing with game consoles, etc.