User manual JUNIPER NETWORKS ENTERPRISE GUEST ACCESS OVERVIEW

[. . . ] Purpose-built for small to medium sized businesses (SMBs) as well as enterprises and agencies with many guests or visitors, the Enterprise Guest Access appliance delivers wired and wireless guest network access control (NAC) seamlessly through a single, small, inline network appliance and license, without any agents to deploy or maintain. The Enterprise Guest Access appliance delivers two separate functions--guest user provisioning and authentication, and guest user access enforcement. Enterprise Guest Access Architecture and Key Components All-In-One Appliance Enterprise Guest Access is an all-in-one, inline appliance that delivers role-based access control for guests, partners, and contractors. The Enterprise Guest Access appliance delivers agentless (browser-based) wired and wireless NAC for guest users seamlessly from a single appliance. The slim, sleek, small form-factor Enterprise Guest Access appliance supports secure, authorized network resource access, manages network use, and reduces the threat of unauthorized users and compromised devices. [. . . ] The Enterprise Guest Access appliance will first serve the guest user a web-based captive portal page when access is attempted. Users will use their guest credentials, which include the user name and password provided to them by your guest access administrator. During the deployment of Enterprise Guest Access, you will have created resource access policies on the appliance which direct guest users to resources that are provisioned on the network and to which they have authorized access (for example, the Internet). User traffic has no other route to the corporate network except through the Layer 2 Enterprise Guest Access appliance bridge. Users and guests are connected to the external interface, and protected resources are connected to the internal interface. Time-Based Network Access Policies The Enterprise Guest Access appliance enables guest user accounts to be created based on flexible, time-based network access policies. Guest user accounts may be created with a specific start and end time. Guest user accounts may also be created for a specific hourly duration, such as guest user network access being allowed for 8 hours. Guest user access can also be limited by the administrator to a specific number of days, in an hours-based format, such as for 24 hours, 48 hours, or up to 72 hours. Enterprise Guest Access affords you flexibility and control in the management of guest user network access. Provisioning and Management The Enterprise Guest Access appliance also simplifies guest user network access provisioning and management. Access is controlled through an enterprise customizable web-based captive portal, directing users to input their guest access credentials-- created and provided to the guest user by your receptionist or any corporate sponsor--to gain authenticated, authorized access to your network and resources. Guest user access credentials are as simple as a user name and password. Guest user network access may be provisioned for up to 200 guest users on a single Enterprise Guest Access appliance. And, identity information of guest users is stored in a database on the appliance, which is perfect for addressing regulatory compliance audits. Network Access Control The Enterprise Guest Access appliance also provides a simple to deploy, easy to administer way of addressing NAC, while providing an upgrade path to Juniper's comprehensive network and application access control solution, Unified Access Control, at any time by leveraging the access and security policies already created and instituted by the SMB or enterprise with the Enterprise Guest Access appliance. This saves both time and cost. 2 Enterprise Guest Access Network Diagram L2 Wired or Wireless Environment Firewalling and DHCP Services Wireless Guest Guest SSID Enterprise Guest Access appliance External Port 192. 168. 10. 90 Internal Port 192. 168. 10. 10 Internet Firewall INTERNET Wired Guest Figure 1: Juniper Networks Enterprise Guest Access Figure 1 provides a high-level view of Juniper Networks Enterprise Guest Access. In this diagram, the Enterprise Guest Access appliance is connected inline between the wireless and wired guest users, and the Internet firewall. The Enterprise Guest Access appliance, as the inline enforcement point, blocks guest traffic until users have typed their credentials into the captive portal served to them by the Enterprise Guest Access appliance and have been authenticated for network access. 2. Guest access administrator provides credentials to the guest user, typically via hard copy printout. Enterprise Guest Access Sample Workflow 1. Guest access administrator creates a guest user account on the Enterprise Guest Access appliance. [. . . ] The list of guest administrators, stored in a database local to the Enterprise Guest Access appliance as determined by the organization, can be used to address regulatory compliance requirements. The list of guest users passing policy checks and receiving guest access rights and credentials to access the network is stored in a database on the Enterprise Guest Access appliance, helping to address regulatory compliance needs. From devices to data centers, from consumers to cloud providers, Juniper Networks delivers the software, silicon and systems that transform the experience and economics of networking. Additional information can be found at www. juniper. net. Operating temp · 41° through 104° F (5° through 40° C) Storage temp · -40° through 158° F (-40° through 70° C) RH (operating) · 8% - 90% noncondensing RH (storage) · 5% - 95% noncondensing Altitude (operating) · 10, 000 ft maximum Altitude (storage) · 40, 000 ft maximum Safety certifications · EN 60950-1: 2006 (2nd Edition) Emissions certifications · EN 55022 Class B: 2006, EN 55024+A1+A2: 1998, EN 300 386 v1. 4. 1: 2008 Warranty · 90 days · Can be extended with support contract 5 Corporate and Sales Headquarters Juniper Networks, Inc. [. . . ]