A lot of businesses are looking for it.Business Wireless Network CertificationBefore the plan, it was not clear what kind of problem you were going to solve. Some people said yes."Keep your visitors under control."Some say yes."Connect to AD domain"Some say yes."Compliance"——These needs are essentially different, and they can be easily encountered in the same package.
The need for Wireless Internet certification is broken down into three layers:
First floor is...Access ControlAnd so who can and cannot. That is the basic foundation, with an uncertified network being open to anyone, and a security risk is fundamental. Password access is not really authentication because control will be disabled once it has been leaked. Real effective access controls, by way of tying every Internet connection to a traceable identity.
Second floor is...Strategy TierThe management equipment is free of speed restrictions, with average staff having bandwidth ceilings and visitors being tighter. If this floor is not complete, visitors can access the enterprise’s internal systems when they are connected, and certification is done in vain.
Level three is...Record of conduct and audit, that's the log on the Internet. This layer is usually passive demand——Most businesses are not concerned about this until after the insurance assessment and industry regulatory inspection. But if there is no logbook, it is neither traceable nor proven that the business has fulfilled its compliance responsibilities.
NATSHEL_BRAD V7 Authentication & Billing is the three-tier demand. Access control is achieved through Portal authentication——The user will be reoriented to the authentication page after it is connected to WiFi. The strategy is classified by SSID and VLAN mechanisms, with staff walking one SSID, visitors taking another, backstage matching different certification pages, various bandwidth strategies, and different access rights. With respect to logs, the V7 built-in log system covers online records, failed authentication records, Portal push logs, etc., allows third party auditing systems to meet public security audit requirements, usually with log retention of not less than 180 days.
There's a common error to be made:Business Wireless Network CertificationIT infrastructure, not business. In fact, the certification page itself can carry corporate publicity and when it is successful, it can be forced to jump onto a network of business officials or a designated page, which is a brand touch without extra costs. Enterprises in the chain industry use this for secondary marketing.——After a visitor completes SMS certification, he jumps to the promotional page, which is much more transformative than SMS. Of course, it's value-added and not all businesses have this need.
With regard to the choice of certification methods, business scenes are common in these categories:
Text authenticationThe user is able to access the site.
Username Password Authentication: Fits for internal staff to set a fixed account. The account number is created by the administrator in the V7 backstage, and employees log on with assigned account codes. The advantage is that it is not dependent on text messages, but is suitable for poor cell phone signals such as factories or parks. The disadvantage is that accounts are maintained manually, and deleted in time after the employee leaves the office, otherwise the account number remains.
LDAP/AD Domain Consort: Fits the scene where an enterprise already has a Windows domain or LDAP directory service. Employees use domain accounts to certify without another account, and IT maintenance costs least. Staff entry accounts are synchronized, separation area accounts are disabled, certification systems are automatically effective and do not have to operate separately in both systems.
OA/CRM docking: Fits the enterprise with an OA or CRM system that it wants to be certified by its employees using existing accounts. V7 supports a real-time query of the API account status on employee certification. The advantage of this approach is that the account life cycle is managed entirely by the OAS system and the authentication system does not need to be maintained separately.
After you finish the authentication method, you will also find another frequently overlooked problem: access to dumb terminals.——This type of device does not support browser windows, and Portal certification is completely ineffective. The solution is MAC White List, which adds the MAC address to the white list, the authentication system automatically releases it, and the Portal process is avoided. If you do not expect this type of equipment to be online, you will find a lot of equipment that is offline, then you have to customize it for hours and effort.
NATSHEL_BRAND V7 supports Seamless Authentication _AUTH and secondary exemption in this regard. After the first authentication of equipment, the MAC addresses are tied up and access is automatically followed without each duplicate. For staff members bringing their own devices (BYOD) scenes, this function can significantly reduce the advisory capacity of the IT platform.
With regard to deployment modalities, V7 supports the three modes of bridge-bridgeing, NAT, and bypass roads, which are applicable to different network structures. The bridge-link model is minimally modified for the original network, with no side-way mode having to be joined into existing network links.
And one thing to say:Business Wireless Network CertificationThe Portal page supports WEB editing, uploading pictures, modifying text and setting jump links. The enterprise can put its own logo on the authentication page, current campaign announcements, attention, and visitors will see it when they certify that this is a brand touch point that does not require additional input but can be made. The authentication page also supports end-to-end adaptation, PC and mobile phone pushes pages in different formats to avoid scalding anomalies on the cellular side.
And finally, let's say a point of view:Business Wireless Network CertificationWithout a requirement for insurance, small-scale enterprises with limited visitors, SMS certification and basic logs are often sufficient to be able to pursue complex programs. If there is an additional requirement for security level II or if the inner network asset is highly secure, certification methods, retention of logs, and audit docking will need to be carefully designed.