Wireless certified employees are in the personnel system, and it is difficult for visitors: to talk about business maintenance, there is no ID data, and the hard work of checking their clients' papers is too much for the front desk, so that they can get a permanent account and bury it at the back. Visitors’ accounts should be light, short-lived, retroactive, easy and safe, or the visitors’ area becomes the most neglected entry point for the company’s inner network.
Visitors with light real names
The visitors have no registered identity, the real name is usually sufficient or the recipient guarantees it. A light name can be traced back to whom you bring in, and over-collecting is both a privacy burden and a card for visitors.
The account must expire short-lived.
The short-term period expires automatically, the pool is not full of zombies, and there are no long-term entry points for the net.
The receptionist's guarantee is retroactive.
The security is limited: the number of visitors that a host can guarantee at the same time, and the cumulative period is manageable.
Access is limited.
Visitors should not be allowed to share their rights with the staff. The limit on speed, access, and isolation to the visitors’ network is a visitor’s account. A visitor may not be allowed to eat bandwidth in full, but it is more dangerous that he or she can touch the Intranet business system.
Make sure the certification is done.
Visitors are patient and have minimal certification steps: they can sweep or take the code one step at a time, so don't play long forms. We lose a few of them, and business front-side experience is falling. Fast and steady: proof page loads are fast and weak net-bound to try again, not overtime to let them get back in, visitors will not be patient to retest, they will drop or go to front desk once they fail, and the success rate of visitor certification is more sensitive than that of staff areas.
Failures give a clear way out.
The search failed, and visitors were asked to give a clear-cut entry or to find a host. Visitors did not check out, stuck or give up or complain. Many ways of making a clear tip, so that the single failure did not break down the visitor area.
The real name data is to be isolated from misuse.
The identity collected by visitors is used online and retroactively. At the border, it is blurred that a visitor feels that he or she is being bombarded by marketing to talk about a business and has negative experiences.
Visitors are also required to be retained in the audit.
The number of visitors is small, and the number of visitors who have access to the Internet is not limited to internal or external audit.
Configure the corporate strategy to be included
Visitors certification is not a stand-alone component, but it should be integrated into the corporate network strategy: identity templates, archive, wind control, audit. Break management is most dangerous, staff areas are loose and tight, and visitors ' areas become backdoors of compliance.
The effect is to see the usage rate.
Visitors are on-line to see the usage rate: number of people connected, certification success rates, and distribution of failures. Low usage is either deep in the entrance or certified too much, with data being changed early.
The due cleanup rate is to be tested.
The rate of clearance due to the visitor's account is subject to a review, and the low rate of clean-up indicates that the short-term life mechanism has not been put into effect and that zombies are in piles. Low rates warn you to operate and why.
The wireless certification system is configured to be a visitor without leaving a long back door. A light real name, short-term account, reception guarantee, limited scope, fast authentication, clear bottom line, data isolation, audit coverage, overall coverage, and view usage rates.