Xirrus has built Guest Services into its solution offering for easy integration with and minimal impact on existing network infrastructure, simplifying implementation for both existing or new wireless networks.
Captive Portal
The ArrayOS captive portal functionality, called Web Page Redirect (WPR), allows a guest to be presented with a web browser welcome screen before gaining access to the wireless network. The welcome screen can simply state the Terms and Conditions for use of the network, or can be used to control access to the network by prompting for a username/password tied to an authentication scheme. Visitor management for control of specific user access can be controlled on the Array itself or hosted on an external server.
Directory Integration
Many wireless networks require that the guest services be configured on the Wi-Fi network system itself with wired users using a separate system. The Xirrus Guest Services solution simplifies guest setup by integrating with the same systems used for the wired network. Rather than configuring multiple systems, changes can be made in one place with Xirrus Arrays enforcing the changes like a traditional wired Layer 2 switch at the network edge. Integration with existing user information via Active Directory and LDAP services are greatly simplified lowering equipment and support costs.
Policy Management
The Xirrus Guest Services solution allows customization to fit the specific requirements of the network. Bandwidth limits can be configured to ensure guest users do not overrun employee traffic usage. Restrictions can be placed on time of day access and day of the week access. Policies can be set to enforce use policies for different device types. For instance, a guest on an iPad may be given access to some types of data, but a guest on a laptop may be given broader data access. Policies can be set and enforced on a user, role, device, and time basis.
An advantage of the multi-radio design of the Xirrus Array is the ability to allocate different modular APs to different uses. Modular APs can allocated to specific SSIDs to give a more fair balance of the network resources. For instance with an 8-radio Array configured for Guest and Employee SSIDs, two of the modular APs could be mapped to the Guest SSID and the other six mapped to the Employee SSID. In this way, the majority of the Wi-Fi resources are reserved for employee use.
Flexible Policy Enforcement
Securing key business applications and data while still enabling mobility and guest access is a top priority for network administrators. The flexibility of Guest Services within the Xirrus solution allow a wide range of policies to be implemented and enforced. The Array allows user, role, device, and time-based policies and enforcement. The policies can be centrally implemented and are enforced at the network edge with Xirrus’ embedded controller in each Array.
Better Resource Allocation
Providing Guest Services is crucial with today’s mobile workforce; however providing it should not come at the expense of employee access to the network. By allocating network resources in a fair manner, network administrators can provide guests the network access they need without compromising the performance or security of company employees and data. The ability to allocate Array resources to specific uses ensures guests do not overrun the network. By restricting bandwidth, time of day, and day of week access, guest access can be even further confined to fit the network’s requirements.
Simplified Network Integration
Xirrus integrates seamlessly with existing network infrastructure such as RADIUS and Network Access Control systems. By integrating with the same systems used for wired infrastructure, policy enforcement is greatly simplified and network deployment cost is lowered. When new guest services need to be implemented, managing a single system is much simpler than managing two.
Highly Scalable BYOD Support
Xirrus multi-radio, distributed architecture ensures the ability to handle large numbers of users. As more guests access the network and bring in their own Wi-Fi devices, wireless networks will need to flexibly scale to handle the increased data traffic. Distributed enforcement, along with Xirrus high performance hardware, creates unparalleled support for Bring Your Own Device (BYOD) initiatives.
Xirrus Guest Access features are included in the Xirrus RF Security Manager (RSM) Network Services package.
Click here for ordering information.