ID Series: Guest Access & Authenticated DHCP

Ensure users provide logon credentials before gaining network access

Often organizations allow a person to plug a computer into an outlet or maybe connect to a corporate wireless access point without validating the person’s identity.

The ID Series enables organizational controls, whether for temporary guest users or full-time employees, to ensure access to production business networks is by a known, authorized user.

Guest Access Functionality

The ID Series Guest Access functionality includes a user-facing Web portal and Web administration portal. The administration portal allows front desk staff to add guest users on demand from a dedicated portal, separate to the main ID Series administration area.

Likewise a user facing login Web portal is a landing pad for unauthorized users, ensuring users can simply log in with guest credentials, or simply be able to know where to apply for them from informational text. Highlights include:

• Apply guest access control based on guest groups
• Separate Guest Admin portal allows assigning guest name/password, access duration
• Easy-to-use GUI to add/delete/edit guest groups and guest users
• Segregate guest users and groups, limiting access only to Internet and guest sub-networks
• Comprehensive guest access reports for compliance

Authenticated DHCP

Authenticated DHCP shares characteristics with NAC (Network Access Control) technologies but differs in various ways; it is sometimes considered NAC-light.

Authenticated DHCP ensures with the current IP scheme or a quarantined DHCP range, which a user must authenticate on a captive Web portal before being granted access to any other portion of the network.

As the functionality is powerful and client-less on the remote host, it does not incorporate the complexities of host checking and other procedures. The resulting implementation, training and rollout time are vastly reduced.

Selected Feature Highlights

• Authenticated DHCP
• Full high-performance DHCP server
• Microsoft Network Access Protection (NAP) Enforcement Point
• Web-based Guest Access Portal
• User Login Web Portal
• Customizable Web page logo and title
• Detailed lease reports
• Integrated with ID correlation
• Authentication to many back-end user account data stores, not only the local RADIUS database
• Blacklist notification
• Full DHCP server or DHCP relay
• Flexible allocating policies, RADIUS policies defined in RADIUS groups to change the outcome of DHCP allocation
• Black lists and white lists based on client MAC address or user ID
• Quarantine DHCP service
• Lease storage and scheduled backups of leases to a user-defined host
• Support for searching leases based on the following criteria: specific IP address, time, user name, MAC address, DHCP scope