Enrollment System GETTING TO THE BOTTOM OF BYOD... AND COMING OUT ON TOP

Transcription

1 Enrollment System GETTING TO THE BOTTOM OF BYOD... AND COMING OUT ON TOP (01) Cloudpath Networks

2 XPRESSCONNECT ENROLLMENT SYSTEM GETTING TO THE BOTTOM OF BYOD AND COMING OUT ON TOP January 28, 2014 Copyright 2014 Cloudpath Networks, Inc. All rights reserved. Cloudpath Networks and XpressConnect are trademarks of Cloudpath Networks, Inc. Other names may be trademarks of their respective owners.

3 THE CHALLENGE FOR YOUR ENTERPRISE Remember when mobility s challenges to enterprise management were largely a numbers game? It seemed your biggest issue was being able to scale your bandwidth to handle the addition of laptops, then smartphones, then tablets. From those early days, mobility has come a long way. The spirit of mobility is that people do what they want to do, wherever they want to do it. They want to bring personal mobile devices to work. They want to check personal apps on their way to the conference room. They want to use their own device rather than simply accept whatever you choose to give them. In fact, more and more organizations are embracing this trend and paying employees a stipend to use their personal device for work. The way business is done in the 21 st century has also evolved. Outsourcing, virtual teams, distributed decision-making - these all contribute to a working environment that invites greater independence and less top-down control. The consequences, however, are increased vulnerability to security breaches and higher support costs. So, while allowing personal devices on the network, you still need to assert top-down Wi-Fi network security control. You just have to do it transparently so that your mobile users can get on your Wi-Fi network with no wasted time or effort. Cloudpath Networks Getting to the Bottom of BYOD and Coming Out on Top 1

4 YOU KNOW THOSE SOLUTIONS THAT TALK THE TALK, BUT DON T WALK THE WALK? So you ve looked for that transparent, top-down-control solution and what have you found? An onboarding system that promises ease-of-use for your mobile users - but doesn t really deliver and is like a Rubik s Cube on steroids for your IT department. A comprehensive solution that seems to do everything you want - but makes you pay for several dozen features that you don t need or want. A comprehensive solution that is so comprehensive it comes with its own enterprise network - which you must already have installed. A comprehensive solution that was perfect for the mobility universe of In a perfect world, you would not be saddled with a convoluted onboarding process that frustrates users, especially important visitors to your organization or institution. You would also be able to implement a vender-neutral solution that fits into your enterprise design and way of working rather than forcing you to adapt to it. Finally, you would be able to actually reduce total cost of operation (TCO), particularly at your help desk, rather than having the capital expense of your BYOD solution make the downstream economic assets dwindle. These things are possible. They re not hard to do. But they re only available from one BYOD solution provider: Cloudpath Networks. Cloudpath Networks Getting to the Bottom of BYOD and Coming Out on Top 2

5 WHAT MAKES CLOUDPATH DIFFERENT? Cloudpath delivers Automated Device Enablement Traditional network access solutions focus on denying access to the devices you don t want on your network. However, such an approach results in what is often a herculean effort for authorized users to gain even the lowest levels of access. Cloudpath s focus on Automated Device Enablement means authorized devices onboard simply and securely, with the appropriate level of access. Automated Device Enablement also means that, regardless of device type, ownership, or level of access, the user gets connected - not merely configured. Cloudpath s XpressConnect Enrollment System (ES) solution has been built from the ground up to adapt to your enterprise environment. It gives you exactly the BYOD security you need no more, no less. It s vendor-neutral and provides economic advantages both up front and long term. The solution delivers pain relief where you need it most by giving you: Easy onboarding Simple deployment and management Reduced help desk costs DELIVERING EASY ONBOARDING What you want for your users is for them to be able to easily sign onto your Wi-Fi network and go about their days. Your onboarding solution needs to be automated. It needs to be immediate. And it needs to be able to handle whatever type or model of device and operating system the user throws at it without compromising your network s security. XpressConnect brings personal devices onto an enterprise-grade wireless network without IT involvement. This enables us to embrace the opportunities presented by BYOD. Fairfax County Public Schools Winner of the 2013 Governor s Technology Award for Innovative Use of Technology in Education for its Bring Your Own Device (BYOD) initiative. Cloudpath s XpressConnect ES works entirely in the background as it delivers the most secure method of WPA2-Enterprise EAP-TLS to mobile devices. This is even the case for first-time guests. Through the use of non-intrusive native supplicant configuration, XpressConnect ES lets them use the same entry point as your regular users then automatically moves them to encrypted WPA2-Enterprise wireless networks. In fact, guests can sign in via Facebook, LinkedIn or Gmail, if you choose, along with other forms of traditional guest access like sponsorship. In other words, the user experience is no different than signing onto the Wi-Fi hotspot at your favorite coffeehouse but each user gets precisely the authorization for access that is appropriate for him or her with managed security that only WPA2-Enterprise can deliver. And the next time they are in your Wi-Fi zone, their devices will connect easily and securely with no need to re-issue one time passwords or enter login credentials with repeat visits. Cloudpath Networks What makes Cloudpath different? 3

6 DELIVERING SIMPLE DEPLOYMENT AND MANAGEMENT How simple is it to deploy Cloudpath s XpressConnect ES? It can often be done in a matter of hours not months, not weeks - but in one day or less. Yet it provides a scalable, standards-based security solution that greatly reduces management demands even in the face of the skyrocketing growth in the numbers and diversity of devices requiring varied levels of access to your network. XpressConnect ES also serves as an integral piece in protecting your organization from the increasing sophistication of cyber-attacks attempting unauthorized access and data theft, destruction or corruption. Unprecedented levels of automation and flexibility make XpressConnect ES unexpectedly easy for your network administrators to manage as well. Configuration for all major mobile operating systems - including Windows, Mac OS X, Android, ios, and more automated. Segregation of personal devices from IT-owned assets is automated, but without ceding control; network administrators retain device-by-device visibility and control. Automated Device Enablement is key to management simplicity and effectiveness. Cloudpath s XpressConnect ES integrates with traditional authentication and policy management using Microsoft Active Directory, Microsoft Certificate Authority, and Microsoft Network Policy and Access Server. Additionally, with powerful standalone capabilities such as Onboard PKI/Certificate Authority and RADIUS, XpressConnect ES has the ability to manage virtually any authentication and authorization scenario that an organization may require. Automated Device Enablement means no more guest servers and no need to provision a new account or generate a separate set of credentials. It also means no unauthorized Layer 2/3 connectivity, no drive-by associations, and no sniffers, snoopers, evil twins, or MAC spoofing. Cloudpath Networks What makes Cloudpath different? 4

7 DELIVERING REDUCED HELP DESK COSTS What percentage of your wireless help desk calls begin with I can t get on the Wi-Fi network? How steep is the spike in calls the week after Apple releases their latest iphone or Samsung, their newest Galaxy? How many FTE help desk employees does it take to answer just those calls? Simply put, what does it cost you to support onboarding to your Wi-Fi network? Consider this: Cloudpath s XpressConnect ES is able to onboard thousands of devices simultaneously to a secure SSID without requiring a single call to your help desk. Built upon standards-based technology with unparalleled device support, XpressConnect ES delivers the performance required to keep up with configuring and managing the wireless universe of continually evolving operating systems and a parade of new devices so that your help desk doesn t have to. BENEFITS THAT GO BEYOND THE OBVIOUS If Cloudpath s XpressConnect ES benefits only extended as far as easy onboarding, simple deployment and management, and reduced help desk costs, it would be enough. But there s a ripple effect at work here, and the benefits that accrue range far beyond operating logistics and onboarding: Enhanced engagement with visitors to your location Successful organizations are built upon relationships. So, whether your visitors are partners, vendors, contractors, customers, visiting academics, foreign dignitaries, or guests, you can make their wireless experiences easy, painless and productive a great foundation for a solid working relationship. Higher workforce productivity The less time your people are on the phone to your help desk, trying to work without reliable access to the network and its data, or unable to work on their preferred mobile device, the more they will be able to accomplish. Heightened strategic productivity for IT department The less time your IT people have to spend managing and troubleshooting your Wi-Fi network, the more time they have to devote to strategic business initiatives. Cloudpath Networks Benefits that go beyond the obvious 5

8 Increased revenues When you enhance the productivity of the people in your organization, you enhance production in their prime activities, which means your organization will be able to access critical data more efficiently and get down to the business of the day more readily. Improved regulatory compliance As sensitive data inevitably makes its way onto their networks, organizations become increasingly subject to privacy mandates and regulations. Extending the highest level of security to your Wi-Fi network is a preemptive means of regulatory compliance. ABOUT CLOUDPATH NETWORKS, INC. Cloudpath Networks, Inc. provides software solutions and services that simplify the adoption of standards-based security, including WPA2-Enterprise, 802.1X and X.509, in diverse BYOD environments. Cloudpath was the originator of the secure, automated onboarding model for personal and unmanaged devices, and our XpressConnect Enrollment System won the Best of Interop - Wireless & Mobility award. From educational institutions, to enterprise, to service providers, to government agencies, Cloudpath services have been deployed worldwide for more than 15 million devices a year. CONTACT INFORMATION Web: General Inquiries: info@cloudpath.net Support: support@cloudpath.net Sales: sales@cloudpath.net Media: media@cloudpath.net Marketing: marketing@cloudpath.net Phone: (US) (US) +44 (01) (UK) Fax: Cloudpath Networks About Cloudpath Networks, Inc. 6