The WiFi network is connected not only to people and computers, but also to visitors' phones, IOT smart devices, printers, cameras. Different accessors have different identity features, risk levels and security requirements, either because WiFi access security certifications are the same standard for all people, or they can't handle risks or experience extremes.
Staff access: Credible identity, clear clearance
The employee is the owner of WiFi, with many and frequent connections and needs for experience and safety. The staff member ' s WiFi access security certification is centred on matching identity and rights: certification by an enterprise account or certificate, which then sends a network-specific privileges to each department and post.
Visitors ' access: retroactive, isolated Internet access
Visitors are in WiFi's access."External personnel"The visitors' WiFi access security certificate, which is a live and isolated access: identification of visitors through SMS authentication code, micro-mail authorization or temporary account number, access to an independent visitor network, isolation from the office Intranet, and only access to the Internet and designated resources. Visitors' accounts must be valid and automatically recovered. Visitors ' certification should be easy to experience without repeated visits at the door."Retroactivity"and"Isolation"These two things.
IOT device access: device identity, minimum permission
IOT devices (printers, cameras, sensors, door closures, etc.) are increasingly connected to WiFi and their identity features and ordinary terminals vary widely: there is no user interface, no account passwords can be entered, a large number of numbers and wide distribution. The IOT device WiFi access security authentication, suitable for equipment certification: the identification of each IOT equipment registration device (e.g. MAC, certificate), the identification of the equipment when authenticated, rather than simulation of the user certification. IOT equipment is not safe and can easily be a springboard for the attackers to penetrate the inner net.
Tier by object: let strategy match risk
The WiFi of the staff, visitors, Iot equipment is managed in a hierarchy rather than one set. The network of employees, visitors, IOT networks can be separated through multiple SSIDs and multiVLANs, WiFi access security certification identifies the type of user when it comes to authentication, and corresponding authentication methods and permission strategies are issued: employee identity plus office privileges, temporary visitor accreditation plus isolation, IOT equipment identification plus minimum rights for each type of access."Matching risk"Security strategies do not overmanage experiences or leave behind risks.
Integrated management: accounts, audits and linkages
Staff, visitors, IOT equipment are managed uniformly, although they have different strategies. A single access desk is needed to see who (who/what) gets into which network at what time; a unified authentication log is required and the access is traceable; and a consolidated management system is linked to asset management, account numbers, visitor accounts, Iot devices. The benefits of this unified management are that no one type of access has problems can be quickly located, disposed of, security management will not occur."The staff is tight, Iot is empty."Such a dead end.
WiFi access security certifications that balance staff, visitors and Iot devices are at the core of"Classification by object, risk-based strategy, unified management audit"The three categories of accessors are given their own rights, with heavy privileges, retraced visitors, IOT's identity and minimum privileges.