The company Portal certified that the employee is in the personnel system because of his identity. The difficulty is to visit: visitors who come to talk about business, to repair, to interview, to have no ID data, to press for identification, to pick up a card from their staff, to get tired of visitors, to be tired at the front desk, to give them a permanent account and to bury it behind them. Visitors’ accounts are light, short-lived, retroactive, three things to do, convenience and safety, otherwise the visitors’ area becomes the most neglected entry point for the enterprise’s network.
Visitors with light real names
A visitor has no registered identity, a real name is usually used or the host guarantees are available. A light name can be traced back to whom it is brought, and over-collecting is both a privacy burden and a card for visitors.
The account must expire short-lived.
The visitor’s account is always large and has a shorter validity than the employee’s. The short-term expiry period automatically expires, the pool does not have zombies and there is no permanent access to the net.
The receptionist's guarantee is retroactive.
The security is limited: the number of visitors that a host can sponsor at the same time, and the cumulative period is manageable. The number of visitors in the company is a risk face, with the guarantor being the first gate, which is free of any internal risk.
Access is limited.
Visitors should not be allowed to share their rights with their staff. Speed restrictions, access limits, isolation to the visitors' network are a visitor’s account. No limit is given to a visitor who can eat his bandwidth and card his employees, and it is more dangerous for visitors to have access to an Intranet business system. Restricted limitations are reasonable, adequate, undisturbed, and safe and convenient.
Make sure the certification is done.
Visitors are patient and have the least to do: sweep or take a step, and don't play long forms. We lose a few of them, and business front-side experience drops. Fast and steady: proof pages can be loaded quickly, weak nets can be tested again, visitors can be retested if they fail to do so, visitors will not be patient enough to try again, failure is abandoned or the front desk is repeated, and visitor certification success rates are more sensitive than staff areas because visitors have no reason to be bound up.
Failures give a clear way out.
The doorsteps fail, the code is not received, and visitors must give a clear sign of change. Visitors do not check their own way, but they are stuck or give up or complain. Many ways to get a clear tip that a single failure does not turn into a complete break in the guest area. The bottom line is close: the tip says where the host is, what's a two-dimensional code sticker, don't just say system error, what the visitor wants is to be connected immediately, not knowing the technical reasons, but the path.
The real name data is to be isolated from misuse.
The identity collected by visitors is subject to online compliance and retroactive use. The border is blurred, and the visitors feel that they are being bombarded by marketing to talk about a business.
Visitors are also required to be retained in the audit.
The number of visitors is small, the number of visitors is low, and the number of visitors on the Internet is not internal or external.
Configure the corporate strategy to be included
Visitors certification is not a stand-alone piece, but it should be integrated into the corporate network strategy: identity templates, archive, wind control, audit. Break management is most dangerous, the visitors' area is loose and then surrounded, and the visitors’ area becomes the back door of compliance. It must also be connected: visitors ' anomalies trigger overall warnings, staff area risks reverse and tighten visitor privileges, both sides reinforce each other, security is not a few puzzles, the puzzle is leaked, and the visitors ' area is the most vulnerable piece in the puzzle.
The effect is to see the usage rate.
Visitors are on-line: number of people connected, certification success rate, and distribution of failures. Low usage is either deep in the entrance or too much validation, with data being spoken early. A comparison may be made between the staff area and the visitors area, which has a large difference in success rates, indicating that the visitor's configuration is problematic.
The company Portal certifies the visitor profile, leaving no long-term back door. A light real name, short-term account, reception guarantee, limited scope, fast certification, clear bottom line, data isolation, audit coverage, overall, and view usage rates.