User manual JUNIPER NETWORKS ENTERPRISE GUEST ACCESS OVERVIEW

[. . . ] Purpose-built for small to medium sized businesses (SMBs) as well as enterprises and agencies with many guests or visitors, the Enterprise Guest Access appliance delivers wired and wireless guest network access control (NAC) seamlessly through a single, small, inline network appliance and license, without any agents to deploy or maintain. The Enterprise Guest Access appliance delivers two separate functions--guest user provisioning and authentication, and guest user access enforcement. Enterprise Guest Access Architecture and Key Components All-In-One Appliance Enterprise Guest Access is an all-in-one, inline appliance that delivers role-based access control for guests, partners, and contractors. The Enterprise Guest Access appliance delivers agentless (browser-based) wired and wireless NAC for guest users seamlessly from a single appliance. The slim, sleek, small form-factor Enterprise Guest Access appliance supports secure, authorized network resource access, manages network use, and reduces the threat of unauthorized users and compromised devices. [. . . ] They will log in and be provided with a network session. During the deployment of Enterprise Guest Access, you will have created resource access policies on the appliance which direct guest users to resources that are provisioned on the network and to which they have authorized access (for example, the Internet). User traffic has no other route to the corporate network except through the Layer 2 Enterprise Guest Access appliance bridge. Users and guests are connected to the external interface, and protected resources are connected to the internal interface. Time-Based Network Access Policies The Enterprise Guest Access appliance enables guest user accounts to be created based on flexible, time-based network access policies. Guest user accounts may be created with a specific start and end time. For example, guest user network access might start at 9:00 a. m. Guest user accounts may also be created for a specific hourly duration, such as guest user network access being allowed for 8 hours. Guest user access can also be limited by the administrator to a specific number of days, in an hours-based format, such as for 24 hours, 48 hours, or up to 72 hours. Enterprise Guest Access affords you flexibility and control in the management of guest user network access. Provisioning and Management The Enterprise Guest Access appliance also simplifies guest user network access provisioning and management. Access is controlled through an enterprise customizable web-based captive portal, directing users to input their guest access credentials-- created and provided to the guest user by your receptionist or any corporate sponsor--to gain authenticated, authorized access to your network and resources. Guest user access credentials are as simple as a user name and password. Guest user network access may be provisioned for up to 200 guest users on a single Enterprise Guest Access appliance. And, identity information of guest users is stored in a database on the appliance, which is perfect for addressing regulatory compliance audits. Network Access Control The Enterprise Guest Access appliance also provides a simple to deploy, easy to administer way of addressing NAC, while providing an upgrade path to Juniper's comprehensive network and application access control solution, Unified Access Control, at any time by leveraging the access and security policies already created and instituted by the SMB or enterprise with the Enterprise Guest Access appliance. This saves both time and cost. 2 Enterprise Guest Access Network Diagram L2 Wired or Wireless Environment Firewalling and DHCP Services Wireless Guest Guest SSID Enterprise Guest Access appliance External Port 192. 168. 10. 90 Internal Port 192. 168. 10. 10 Internet Firewall INTERNET Wired Guest Figure 1: Juniper Networks Enterprise Guest Access Figure 1 provides a high-level view of Juniper Networks Enterprise Guest Access. In this diagram, the Enterprise Guest Access appliance is connected inline between the wireless and wired guest users, and the Internet firewall. The Enterprise Guest Access appliance, as the inline enforcement point, blocks guest traffic until users have typed their credentials into the captive portal served to them by the Enterprise Guest Access appliance and have been authenticated for network access. 2. Guest access administrator provides credentials to the guest user, typically via hard copy printout. Enterprise Guest Access Sample Workflow 1. Guest access administrator creates a guest user account on the Enterprise Guest Access appliance. Guest user attempts to access the network, and access is redirected to the Enterprise Guest Access appliance, which serves the guest user a customized web-based captive portal page in which the guest user types in credentials. Enterprise Guest Access appliance Redirect Enterprise Guest Access appliance 4. When authentication is successful and the device being used meets the predefined security and access control policies, guest user is allowed to access the areas of the network to which authorization has been granted. INTERNET Enterprise Guest Access appliance 3 5. When guest user's account expires, the Enterprise Guest Access appliance automatically logs the user off of the network and does not allow network access until the guest receives new, updated guest user credentials. Enterprise Guest Access appliance Features and Benefits Enterprise Guest Access offers a number of important features and benefits. FEATURE BENEFIT Sleek, small form-factor appliance design The Enterprise Guest Access appliance takes up less space and is not meant to be hidden away in a networking closet, making it easier to deploy and use. No agent to deploy on a guest user's endpoint device means the Enterprise Guest Access appliance is a zero configuration solution, simple to deploy and maintain, and for a guest user to operate, minimizing guest-related help desk or support calls. [. . . ] From devices to data centers, from consumers to cloud providers, Juniper Networks delivers the software, silicon and systems that transform the experience and economics of networking. The company serves customers and partners worldwide. Additional information can be found at www. juniper. net. Operating temp · 41° through 104° F (5° through 40° C) Storage temp · -40° through 158° F (-40° through 70° C) RH (operating) · 8% - 90% noncondensing RH (storage) · 5% - 95% noncondensing Altitude (operating) · 10, 000 ft maximum Altitude (storage) · 40, 000 ft maximum Safety certifications · EN 60950-1: 2006 (2nd Edition) Emissions certifications · EN 55022 Class B: 2006, EN 55024+A1+A2: 1998, EN 300 386 v1. 4. 1: 2008 Warranty · 90 days · Can be extended with support contract 5 Corporate and Sales Headquarters Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA Phone: 888. JUNIPER (888. 586. 4737) or 408. 745. 2000 Fax: 408. 745. 2100 www. juniper. net APAC Headquarters Juniper Networks (Hong Kong) 26/F, Cityplaza One 1111 King's Road Taikoo Shing, Hong Kong Phone: 852. 2332. 3636 Fax: 852. 2574. 7803 EMEA Headquarters Juniper Networks Ireland Airside Business Park Swords, County Dublin, Ireland Phone: 35. 31. 8903. 600 EMEA Sales: 00800. 4586. 4737 Fax: 35. 31. 8903. 601 To purchase Juniper Networks solutions, please contact your Juniper Networks representative at 1-866-298-6428 or authorized reseller. Copyright 2010 Juniper Networks, Inc. [. . . ]