Enrollment System
Getting to the Bottom of
BYOD... and Coming Out
on Top
+1 303.647.1495 | +44 (01) 161.261.1400 | www.cloudpath.net | info@cloudpath.net | ©2013 Cloudpath Networks
XPRESSCONNECT ENROLLMENT SYSTEM
GETTING TO THE BOTTOM OF BYOD AND COMING OUT ON TOP
March 18, 2016
Copyright © 2013 Cloudpath Networks, Inc. All rights reserved. Cloudpath Networks and
XpressConnect are trademarks of Cloudpath Networks, Inc. Other names may be
trademarks of their respective owners.
THE CHALLENGE FOR YOUR ENTERPRISE
Remember when mobility’s challenges to enterprise management were largely a numbers
game? It seemed your biggest issue was being able to scale your bandwidth to handle the
addition of laptops, then smartphones, then tablets.
From those early days, mobility has come a long way. The spirit of mobility is that people do
what they want to do, wherever they want to do it. They want to bring personal mobile
devices to work. They want to check personal apps on their way to the conference room.
They want to use their own device rather than simply accept whatever you choose to give
them. In fact, more and more organizations are embracing this trend and paying employees
a stipend to use their personal device for work.
The way business is
done in the 21st century
has also evolved.
Outsourcing, virtual
teams, distributed
decision-making - these
all contribute to a
working environment
that invites greater
independence and less
top-down control. The
consequences,
however, are increased
vulnerability to security
breaches and higher
support costs.
So, while allowing personal devices on the network, you still need to assert top-down Wi-Fi
network security control. You just have to do it transparently so that your mobile users can
get on your Wi-Fi network with no wasted time or effort.
Cloudpath Networks | Getting to the Bottom of BYOD and Coming Out on Top
1
YOU KNOW THOSE SOLUTIONS THAT TALK THE TALK, BUT DON’T WALK THE WALK ?
So you’ve looked for that transparent, top-down-control solution – and what have you
found?
An onboarding system that promises ease-of-use for your mobile users - but doesn’t
really deliver and is like a Rubik’s Cube on steroids for your IT department.
A comprehensive solution that seems to do everything you want - but makes you
pay for several dozen features that you don’t need or want.
A comprehensive solution that is so comprehensive it comes with its own enterprise
network - which you must already have installed.
A comprehensive solution that was perfect for the mobility universe of 2008.
IN A PERFECT WORLD …
You aren’t saddled with a convoluted onboarding process that frustrates users, especially
important visitors to your organization or institution.
You’re able to implement a vender-neutral solution that fits into your enterprise design and
way of working rather than forcing you to adapt to it.
You’re able to actually reduce total cost of operation (TCO), particularly at your help desk,
rather than have the capital expense of your BYOD solution make the downstream economic
assets dwindle.
These things are possible. They’re not hard to do. But they’re only available from one BYOD
solution provider: Cloudpath Networks.
Cloudpath Networks | Getting to the Bottom of BYOD and Coming Out on Top
2
WHAT MAKES CLOUDPATH DIFFERENT ?
Cloudpath delivers Automated Device Enablement™
Traditional network access solutions focus on denying access to the devices you don’t want
on your network. However, such an approach results in what is often a herculean effort for
authorized users to gain even the lowest levels of access. Cloudpath’s focus on Automated
Device Enablement means authorized devices onboard simply and securely, with the
appropriate level of access. Automated Device Enablement also means that regardless of
device type, ownership, or level of access, the user gets connected… not merely configured.
Cloudpath’s XpressConnect Enrollment System (ES) solution has been built from the ground
up to adapt to your enterprise environment. It gives you exactly the BYOD security you
need – no more, no less. It’s vendor-neutral and provides economic advantages both upfront and long-term.
The solution delivers pain relief where you need it
most by giving you:
Easy onboarding
Simple deployment and management
Reduced help desk costs
DELIVERING EASY ONBOARDING
What you want for your users is for them to be able to
easily sign onto your Wi-Fi network and go about their
days. Your onboarding solution needs to be
automated. It needs to be immediate. And it needs to
be able to handle whatever type or model of device
and operating system the user throws at it – without
compromising your network’s security.
“XpressConnect brings personal
devices onto an enterprise-grade
wireless network without IT
involvement. This enables us to
embrace the opportunities
presented by BYOD.”
Fairfax County Public Schools
Winner of the 2013 Governor’s
Technology Award for Innovative
Use of Technology in Education
for its “Bring Your Own Device”
(BYOD) initiative.
Cloudpath’s XpressConnect ES works entirely in the background as it delivers the most
secure method of WPA2-Enterprise – EAP-TLS – to mobile devices. This is even the case for
first-time guests. Through the use of non-intrusive native supplicant configuration,
XpressConnect ES lets them use the same entry point as your regular users then
automatically moves them to encrypted WPA2-Enterprise wireless networks. In fact, guests
can sign in via Facebook, LinkedIn or Gmail, if you choose.
In other words, the user experience is no different than signing onto the Wi-Fi hotspot at
your favorite coffeehouse – but each user gets precisely the authorization for access that is
appropriate for him or her with managed security that only WPA2-Enterprise can deliver.
And the next time they are in your Wi-Fi zone, their devices will connect easily and securely
with no need to re-issue one time passwords or enter login credentials with repeat visits.
Cloudpath Networks | What makes Cloudpath different?
3
DELIVERING SIMPLE DEPLOYMENT AND MANAGEMENT
How simple is it to deploy Cloudpath’s XpressConnect ES? It can often be done in a matter
of hours – not months, not weeks - but in one day or less. Yet it provides a scalable,
standards-based security solution that greatly reduces management demands even in the
face of the skyrocketing growth in the numbers and diversity of devices requiring varied
levels of access to your network. XpressConnect ES also serves as an integral piece in
protecting your organization from the increasing sophistication of cyber-attacks attempting
unauthorized access and data theft, destruction or corruption.
Unprecedented levels of automation and flexibility make XpressConnect ES unexpectedly
easy for your network administrators to manage as well. Configuration for all major mobile
operating systems, including Windows, Mac OS X, Android, iOS, and more – automated.
Segregation of personal devices from IT-owned assets – automated, but without ceding
control; network administrators retain device-by-device visibility and control.
Automated Device Enablement is key to management simplicity and effectiveness.
Cloudpath’s XpressConnect ES integrates with traditional authentication and policy
management using Microsoft Active Directory, Microsoft Certificate Authority, and Microsoft
Network Policy and Access Server. Additionally, with powerful standalone capabilities such
as Onboard PKI/Certificate Authority and RADIUS, XpressConnect ES has the ability to
manage virtually any authentication and authorization scenario that an organization may
require.
Automated Device Enablement means no more guest servers, and no need to provision a
new account, or generate a separate set of credentials. It also means no unauthorized Layer
2/3 connectivity, no drive-by associations, and no sniffers, snoopers, evil twins, or MAC
spoofing.
Cloudpath Networks | What makes Cloudpath different?
4
DELIVERING REDUCED HELP DESK COSTS
What percentage of your wireless help desk calls begin with “I can’t get on the Wi-Fi
network”? How steep is the spike in calls the week after Apple releases their latest iPhone or
Samsung, their newest Galaxy? How many FTE help desk employees does it take to answer
just those calls?
Simply put, what does it cost you to support onboarding to your Wi-Fi network?
Consider this: Cloudpath’s XpressConnect ES is
able to onboard thousands of devices
simultaneously to a secure SSID without
requiring a single call to your help desk. Built
upon standards-based technology with
unparalleled device support, XpressConnect ES
delivers the performance required to keep up
with configuring and managing the wireless
universe of continually evolving operating
systems and a parade of new devices – so that
your help desk doesn’t have to.
BENEFITS THAT GO BEYOND THE OBVIOUS
If Cloudpath’s XpressConnect ES benefits only extended as far as easy onboarding, simple
deployment and management, and reduced help desk costs, it would be enough. But there’s
a ripple effect at work here, and the benefits that accrue range far beyond operating
logistics and onboarding:
Enhanced engagement with visitors to your location – Successful organizations are
built upon relationships. So, whether your visitors are partners, vendors, contractors,
customers, visiting academics, foreign dignitaries, or guests, you can make their
wireless experiences easy, painless and productive – a great foundation for a solid
working relationship.
Higher workforce productivity – The less time your people are on the phone to your
help desk, trying to work without reliable access to the network and its data, or unable
to work on their preferred mobile device, the more they will be able to accomplish.
Heightened strategic productivity for IT department – The less time your IT people
have to spend on managing and troubleshooting your Wi-Fi network, the more time they
have to devote to strategic business initiatives.
Cloudpath Networks | Benefits that go beyond the obvious
5
Increased revenues – When you enhance the productivity of the people in your
organization, you enhance production in their prime activities, which means your
organization will be able to access critical data more efficiently, and get down to the
business of the day more readily.
Improved regulatory compliance – As sensitive data inevitably makes its way onto
their networks, organizations become increasingly subject to privacy mandates and
regulations. Extending the highest level of security to your Wi-Fi network is a
preemptive means of regulatory compliance.
ABOUT CLOUDPATH NETWORKS, INC.
Cloudpath Networks, Inc. provides web-based software solutions and
services that simplify the adoption of standards-based security, including
WPA2-Enterprise and 802.1X, in diverse BYOD environments. Cloudpath
was the originator of the secure, automated onboarding model for
personal and unmanaged devices, and our XpressConnect Enrollment
System won the 2012 Best of Interop - Wireless & Mobility award.
From educational institutions, to enterprise, to service providers, to
government agencies, Cloudpath services have been deployed worldwide for more than 10
million devices a year.
CONTACT INFORMATION
General Inquiries:info@cloudpath.net
Support:support@cloudpath.net
Sales:sales@cloudpath.net
Media:media@cloudpath.net
Marketing:marketing@cloudpath.net
Phone:+1 303.647.1495 (US)
+1 866.472.6053 (US)
+44 (01) 161.261.1400 (UK)
Fax:+1 760.462.4569
Address:1120 W 122nd Ave, Suite 302
Westminster, CO 80234 USA
Cloudpath Networks | About Cloudpath Networks, Inc.
6