WI-FI FOR BUSINESS Wi-Fi for Business... 1 1. EXECUTIVE SUMMARY... 2 2. Monitoring and Management... 2 3. Verizon Service Desk... 3 4. Features and Benefits... 3 5. Recommended Markets and use Cases... 7 6. Security Tools... 7 7. Verizon Differentiation... 9 8. Typical Solution Bundles... 109 8. Pricing... 12 1
1. EXECUTIVE SUMMARY Wi-Fi for Business provides a secure Wireless LAN (WLAN) service that is managed from the cloud. The service includes a user friendly dashboard that provides centralized management for all devices and user analytics that can be used to improve customer service, customer loyalty and business processes. The solution includes: 1. Wireless Access Points (WAP) The equipment will vary based on the customer configuration requirements. In general the customer will receive an access point or an access point with an edge security device. There is also a teleworker solution available. The customer will be responsible for installation of the devices (plugging them in and placement of devices at each location). The Customer will purchase and pay the related Non Recurring Charge (NRC) for the Wireless Access Point shown in the Contract. 2. Verizon Management Portal All devices come with access to a Verizon Management Portal. This is a feature rich portal that will manage device configuration and changes through the cloud with zero touch provisioning. The portal is available to all devices and has embedded features such as analytics and reporting, cloud based security and access to customer information. 3. Verizon Service Desk The service desk will provide setup and on-boarding in the portal, device monitoring and proactive notification, level 1 and 2 support for IT administrators, change management updates and replacement of hardware under warranty. Optional Services 1. Wireless Site Assessment In the standard package, the Customer is responsible for placement of Wireless Access Points and the number of devices needed at each location is based on a remote assessment done with the Verizon Service Delivery team. The Customer may request a wireless site assessment via a separate agreement or provide a completed wireless assessment from a third party agreed to by Verizon. If Customer opts not to have a wireless assessment, Verizon will deploy and monitor Wi- Fi for Business service based upon the requirements provided by Customer. 2. On-Site Installation and Support In the standard package, the customer installs the Wireless Access Points according to the instructions provided by Verizon. The Service Desk provides assistance by phone as needed. A customer can purchase On-Site installation and the Verizon Service Desk will coordinate with the Customer to have a field technician dispatched to the Customer Site to install the wireless and wired devices, and assist while Verizon is implementing the device configurations. On-site installation, available at an additional cost as show in the Contract, includes basic installation (e.g. with a drop ceiling, raised floor, or easily accessible cable runs) of up to 100 feet of Ethernet cable. 2. MONITORING AND MANAGEMENT Wi-Fi for Business service includes on-going management, including: Wi-Fi Network Visibility. Unified visibility and control of the entire Wi-Fi for Business Service network Wireless Access Points via the Portal. Change Management. Customer must initiate a change via a written change request. Upon receipt of a change request, Verizon will analyze the request and determine how the change will impact the implementation dates and if any additional fees, terms and conditions, are required. If Customer agrees to the impacts of the change request, then the change will be implemented by Verizon.. 2
WAP Software Release Management. Wi-Fi for Business Service includes remote deployment of any new feature enhancement by the Wireless Access Point vendor during the Service Commitment. Guest Wi-Fi Access Privileges. Guest access and control is included on certain WAP models out-of-the-box without extra appliances or licenses. 3. VERIZON SERVICE DESK Tier 2 Service Desk (available Monday to Friday 9am 10pm eastern United States time, Verizon holidays excluded). Customer support will be provided through (i) Portal; (ii) telephone contact with the Verizon service desk; and (iii) email between Customer and Service Desk. Fault monitoring and alerting to Customer via email with remote fault restoration. Break/Fix Maintenance. Remote break/fix maintenance is included at no additional charge. However, Verizon will dispatch a technician if requested by Customer as a Customer initiated change (charges apply). Reporting. Reports include bandwidth usage by device. 4. FEATURES AND BENEFITS Wi-Fi for Business lets you enjoy reliable and secure management of your network and devices to help you accelerate productivity without draining your internal resources or exposing yourself to undue security risks. The service desk will monitor and handle all change management on your behalf. Further, as a cloud-based management solution, Wi-Fi for Business provides a host of advantages, including: Guest Wi-Fi Access Flexible provisioning for rapid deployment Unified visibility and control of the entire WiFi network through a single dashboard Streamlines large WiFi networks with up to tens of thousands of endpoints Built-in multi-site network management tools Automated network monitoring and alerts Intuitive interface eliminates costly training or added staff Network tagging engine search and sync settings by tag Continuous feature updates delivered from the cloud Scales from small branches to large campuses Built-in multisite network management tools Control of operational Costs The Wi-Fi for Business devices come out of the box with centralized control, layer 7 devices and application visibility, web-based diagnostics, monitoring, reporting, and much more. Every device connects over the internet to the Wi-Fi for Business cloud management platform. These connections, secured via SSL, utilize a patented protocol that provides real time visibility and control, yet uses minimal bandwidth overhead (typically 1 kbps or less). In place of a traditional command-line based network configuration, you will have a rich web based dashboard, providing visibility and control over up to tens of thousands of Wi-Fi for Business devices, anywhere in the U.S. 3
4.1. Presence Analytics Understand foot traffic and presence-based user behavior The cloud Wireless Access Points come equipped with the ability to detect user presence based on probe request beaconing from Wi-Fi devices (e.g. smartphones, laptops, and tablets). By exporting this data to the Cloud for in-depth analytics, Verizon provides real-time analytics on the presence of Wi-Fi devices with intuitive and customizable graphs, facilitating useful insight into trends such as foot traffic by time of day, new vs. repeat visitors, and visitor dwell time. This visibility facilitates a deeper understanding of Wi-Fi hotspot visitors and provides insights such as capture rate for a retail outlet or dwell time for a hotel lobby or enterprise office. Key Features WAPs detect probe request from all Wi-Fi enabled devices Data sent to the Wi-Fi for Business cloud in real-time for aggregation and analysis Intuitive, customizable graphs; view graphs for specific days, weeks or months 4
Statistics on capture rate (clients passing by vs. visitors spending time), engagement (time spent within hotspot by visitors), and appeal (new vs. repeat visitors). Key Benefits Understand user behavior and foot traffic for specific time periods Use information to make decisions on staffing, storefront design, or employee BYOD policies Presence API for real-time output of raw data for integration with business Intelligence and analytics systems Included at no additional cost 4.2. Out-of-the-box analytics platform Presence Analytics are included and require no additional software, hardware, or licenses. By default, all WAPS gather data on probing clients from the surrounding environment and upload the data in real-time to the Wi-Fi for Business cloud for analysis, storage and presentation in aggregated views. 4.3. Customizable metrics and graphs Toggle between simple and detailed graphs to understand metrics such as the number of people passing by your site, time spent within your location, and the typical repeat visit rate for all users. A calendar function allows for customizable time periods; see daily, weekly or monthly fluctuations in client traffic to understand peak times of day or seasonal fluctuations in device presence. 4.4. Multi-site comparisons The Wi-Fi for Business cloud aggregates data from one of many Wireless Access Points endpoints and intelligently stitches together statistics from multiple logical sites; reports can then be run to present averages of data for one or more batches of sites. Generate comparisons between different networks within the same organization to analyse user behavior across different locations. 5
4.5. Complements existing visibility and traffic analysis Wi-Fi for Business cloud platform comes equipped with rich visibility into user devices (OS, manufacturer), applications (e.g., Facebook, Spotify, YouTube) and unique websites and traffic flows (e.g., an internal e-mail server, a specific CDN, or VoIP protocols). The presence analytics complement this data and completes a 360 degree view of all devices and traffic by collecting and presenting data on unassociated devices based on their presence. 4.6. Share analytics reports with cross-functional teams Analytics reports can be generated and shared with departments outside of IT, such as marketing, facilities, and business intelligence terms, enhancing an understanding of user behavior and facilitating more effective decision making across an organization. 4.7. Presence API For those looking for a raw report of Presence data, Wi-Fi for Business includes a lightweight Presence API, which exports information on a user s presence, how much time they spend within the Wi-Fi area, and their approximate signal strength from each WAP. This information can be used for integration with third-party data CRM, warehousing, and analytics platforms. 6
5. RECOMMENDED MARKETS AND USE CASES Retail, hospitality Glean insights on capture rate (people passing by store vs. coming inside), engagement (visit times), and loyalty (new vs. repeat visitors) Make data available to marketing, business intelligence, and financial analyst teams within organization Export raw data for deeper analysis and statistical correlation Event Wi-Fi, public spaces, service providers Understand peak times for events and public areas, deploy staff accordingly Use data to display foot traffic for advertisers, justify cost structures for ads in certain areas Distributed enterprise Monitor foot traffic and BYOD trends across multi-site enterprise networks Track employee work hours and dwell times 6. SECURITY TOOLS Wi-Fi for Business provides a number of tools for administrators to improve the security of their WiFi network deployments. These tools provide protection, visibility and control over your Wi-Fi for Business network. 6.1. Two-Factor Authentication Two-factor authentication adds an extra layer of security to an organization s network by requiring access to the administrator s phone, in addition to her username and password, in order to log in to Wi-Fi for Business cloud services. The two factor authentication implementation uses secure, convenient, and cost effective SMS technology; after entering their username and password, an administrator is sent a one-time passcode via SMS, which they must enter before authentication is complete. In the event that a hacker guesses or learns an administrator s password, they will still not be able to access the organization s account, as the hacker does not have the administrator s phone which is required for the second factor authentication. This service is included at no additional cost. 6.2. Password Policies Organization-wide security policies for Wi-Fi for Business accounts help protect access to the dashboard. These tools allow administrators to: Force periodic password changes (e.g. every 90 days) Require minimum password length and complexity Lock users out after repeated failed login attempts Disallow password reuse Restrict logins by IP address 6.3. SSL Certificates Wi-Fi for Business accounts can only be accessed via https, with encryption of all communication between an administrator s browser and Wi-Fi for Business cloud services. 6.4. Idle Timeout 30 seconds before being logged out, users are shown a notice that allows them to extend their session. Once time expires, users are asked to log in again. 7
6.5. Auto VPN Site-to-site VPN: automatic routing table generation, provisioning and key exchange via Wi-Fi For Business s secure cloud Interoperates with standards-based IPsec VPNs Client VPN: L2TP IPsec support for native Windows, MAC OS X, IPAD and Android clients with no per-user licensing fees 6.6. Guest Access 8
Guest access is included out-of-the-box without extra appliances, licenses, or complex configurations. A built-in firewall and DHCP server provide a complete guest solution, enabling secure, Internet-only access that protects the customer s LAN. Features include: Cloud-hosted customizable or external web server-hosted splash pages Traffic shaping allowing the administrator to limit bandwidth and define policies based on different criteria Content filtering (advanced content filtering is only supported on the MX) Wi-Fi with Facebook Login allows guests user check-ins to connect Guest self-registration and guest billing is available to support environment in hospitality Guest ambassadors accounts can be set up so that ambassadors can create guest user accounts but cannot otherwise modify the system Note: If cloud-hosted splash pages are used, loss of internet connectivity at the site will cause new users not to be able to authenticate unless the configuration has been setup to override authentication via splash page 7. VERIZON BENEFITS With Verizon, you have choices, from the features you choose to the level of service and management. And whatever you choose, we will provide dedicated, expert support, embedded security, and a solution that work best for your business needs. If you re ready to explore your options, we re here to help. 9
8. TYPICAL SOLUTION BUNDLES The selection of WAPS is determined based on: Indoor or Outdoor deployment Guest WLAN access requirement Number of clients Application performance requirements (WAP density) The table below summarizes the capabilities of the Meraki WAP models: Model Description Performance Specifications Z1 Single device for Remote WAP, 4 LAN ports and firewall Office or Teleworker. No guest wireless access MR16 High performance WLAN 600Mbps Dual-Radio 802.11a/b/g/n MR24 Premium performance 900Mbps 3 Stream Dual-Radio 802.11 a/b/g/n WLAN MR66 High performance, 600Mbps Dual-Radio 802.11a/b/g/n ruggedized for harsh outdoor and industrial indoor MX60W Security Appliance with Wi- WAP, LAN ports, firewall, IDS/IPS and Fi support for up to 20 content filtering. users. No guest wireless access. Operates in either 2.4GHz or 5GHz frequency. 8.1. Remote Office/Tele-worker:Z1 Location that requires VPN access with firewall and 5 or less wireless clients where a single device is needed (no additional infrastructure) to act as a router, wireless WAP and switch ports for wired devices. Wireless guest access is not supported. Z1 Wi-Fi Wired LAN Typical site deployment with Cisco Meraki Z1. 8.2. Small Office/Retail/Branch Location that requires VPN access with firewall and additional security features such as IDS/IPS and content filtering. Designed for 20 or less wireless clients where a single device is needed to 10
act as a wireless WAP, switch ports for wired devices, as well as a security appliance (no additional infrastructure). Wireless guest access is not supported. Note: The MX60W cannot simultaneously operate in both the 2.4GHZ and 5GHz frequencies and therefore a choice must be made based on the wireless client population. 8.3. Medium to Large WLAN, Guest Wi-Fi Access or BYOD Multiple MR16/MR24/<R66 Medium to large WLANs can be built using either the high performance MR16 or premium performance MR24 WAPs for indoor deployments, and ruggedized MR66 for industrial or outdoor deployments. Scalability is supported as multiple WAPs can be added as required to support varying number of clients and application performance requirements. The MR16 or MR24 can be deployed with MX60 or MX80 security appliances to meet additional security requirements. 8.4. Indoor Medium to Large Low Density Use MR 16 can support up to 10 wireless clients for high throughput traffic such as video streaming or video chat, or it can support up to 40 wireless clients per AP with less demanding traffic such as email and web. Scales as multiple APs can be used in each site. 8.5. Indoor to Medium to Large High Density Use, and BYOD MR 24 can support up to 20 wireless clients for high throughput traffic such as video streaming or video chat, or it can support up to 60 wireless clients per AP with less demanding traffic such as email and web. Scales as multiple APs can be used in each site. 8.6. Industrial or Outdoor Coverage Requirements MR66 is a high performance, ruggedized WAP for harsh outdoor and industrial indoor WLANs. It performs at 600Mpbs (similar to the MR16) and has Dual-Radio 802.11a/b/g/n. The WAP 11
supports mesh and point-to-point designs and accommodates external omni-directional or sector antennas. 8. PRICING Customers incur monthly recurring charges ( MRC ), which are fixed for the Service Commitment, and non-recurring charges ( NRC ) for Wi-Fi for Business ( WFB Service ) as specified in the contract. Customer will pay the applicable MRCs for Wi-Fi for Business (as set forth in contract) based on the Service Commitment and type of wireless LAN access points and security appliances ( WAP ) as shown in the contract. The MRC includes management of the WAP, access to the Portal, and reporting. The MRC in the Contract applies per WAP. verizonenterprise.com 2013 Verizon. All Rights Reserved. XX/13 The Verizon name and logo and all other names, logos, and slogans identifying Verizon s products and services are trademarks and service marks or registered trademarks and service marks of Verizon Trademark Services LLC or its affiliates in the United States and/or other countries. All other trademarks and service marks are the property of their respective owners. 12