There is a pattern: when companies choose web certification systems, they are easily attracted to the most fully functional item, but not necessarily the best one for you. This is based on the size of the enterprise and is viewed in four brackets.
First: small business——We'll get the foundation back to the authentication system.
If your network equipment (routing or AC) itself supports Portal authentication or WPA2 Enterprise, and there are few staff members and no visitor management needs, then use the devices for their own functions.
I've seen a case in which 12 people have started an enterprise, and the boss has heard that his peers are on a web-based certification system and thinks they should go on. As a result, over 20,000 people bought a system, IT spent three weeks deploying, finding that staff were not working together, complaining about WiFi losing passwords every time, and then quietly shut down the certification two months after coming online.
This is a scale where independent certification systems belong."The flowers are in the top."Not."Essentials"。 The basic network structure is first put in place, which is higher than the time-consuming research certification system.
Of course, if your business scene involves customer reception, conference room visitor WiFi, etc., the last light-weight certification system is necessary, but it is recommended that when a model is selected, a set of tools be used and not over-built.
Second: medium-sized enterprises——The need for an independent certification system is beginning to emerge
This size began with an increase in the number of accounts, faster mobility and a much more diverse visitors ' landscape.
The self-inflicted authentication function of the network equipment is more demanding in account management: there are no bulk imports, no self-service code changes, and no multiplaying privileges. A small company with 20 people can do less than frequently leaving and IT can handle manually; but a 200-300-man enterprise may enter or leave every day, so manual processing of accounts will not keep pace.
At this time, the last independent certification system, account management, strategy release, Log Audit can be handled uniformly and IT-vims can be much easier. However, the selection process will focus on the following:
- Yes.Can you get me a link to the existing AD or LDAP? If the enterprise is already using Windows domain controls, it would be better for the certification system to read AD accounts so that opening and withdrawing accounts can operate on the AD side without having to maintain two sets of account numbers.
Two.Can you get a link to the company's micro-letter or nail? Many medium-sized enterprises now use enterprise micro-letters or nails to do their daily business, and if the certification system can be accessed using an enterprise micro-mail sweep code, staff members will not need to write a password to WiFi, just to scan it directly.
Three.Whether the routine opening of accounts and cancellation processes can be done on a self-help basis at the back of management. This is critical and operating costs will increase rapidly if the vendor is contacted to re-configurate each personnel change.
Class III: Large enterprises——Certification system becomes a network security infrastructure
At this scale, the certification system is no longer a valid one."Do you want to go?"The problem is..."How do you get to the whole cyber security structure?"The problem.
Points to be considered include: a web-wide unified identification medium, connection with firewalls and access systems, independent control requirements of the various departments,7×24-hour capacity for support of the carrier……
I have approached a case in which a group has more than 30 subsidiaries, each with its own IT team and independent account system, and the group wants to be regulated uniformly, but the companies are reluctant to give up their account management rights. The final option is that there is a single certification platform at headquarters, where affiliates retain local regulatory authority, but all accounts are registered, and the group can see who is online and active, but specific account operations are handled by the subsidiary itself.
This level of selection usually moves to the POC stage where suppliers are present for real environment docking testing. The test cycle is usually one to two weeks, and the border scenes are simulated, confirming that there is no problem of re-contracting.
Class IV: Special scene——A chain of doors and schools.
These two types of scenarios are more specific, speaking alone.
LOCKED DOOR: The characteristics are wide distribution and large numbers, but each dot has a weak IT capability. In this case, the certification system must support cloud-side centralization, with local connections only, without local configurations. If every door is configured separately, it will be simply cost to go through the door. When you suggest a model, ask if there is zero configuration for local openings. Can any subsequent changes be done remotely?
School: The number of users is very high, the end types are extremely large and the certification landscape complex. Students use notebooks, mobile phones, tablets, computer computers for teaching staff, printers, projectors, temporary access to their phones.
School selection focuses on whether the system supports co-development of more than 10,000 people, can control bandwidth and access rights in detail by role, and whether the cycle management of accounts supports automation.
One sentence.
Small businesses first use equipment to carry their own functions; medium-sized enterprises have an independent system that focuses on account management; large enterprises plan for certification systems into the overall security architecture; chains and schools are special scenes, focusing on cloud control and role-based strategies. Different levels of focus vary, and selection strategies follow business size.