Guest Access

Overview

Ivanti Policy Secure(IPS) provides guest access management solution through which you can manage and secure your guest network access.

Ivanti Policy Secure(IPS) supports the following mechanisms for guest access management:

  • Guest Access through Guest User Account Manager (GUAM)
  • Self-Registration
  • Sponsor Approved Guest Access

Guest User Account Manager (GUAM)

The guest users use their own devices to access internet. A guest account can be created by a guest admin (GUAM) such as a receptionist. The GUAM user has below guest administration capabilities:

  • Create temporary guest access accounts for guest users
  • Create bulk accounts for numerous guest users
  • Notify guest user credentials through email or text message.

Self-Registration

The guest self-registration enables a guest to access a Self–Registration URL and create their own guest account for internet access. The username and password for a self-provisioned guest account is delivered directly to the guest’s web browser, or sent via SMS or email.

The self-registration workflow is described below:

  1. The user connects to wireless network through guest SSID.
  2. The user tries to access internet.
  3. WLC redirects the user to IPS guest sign-in URL.
  4. The user performs self-registration and signs-in through the credentials.
  5. If the authentication is successful, the guest user can access internet.

Sponsor Approved Guest Access

The sponsor approved guest access provides access to the guest user only if it is approved by the Guest Sponsorer. The Sponsorer validates the guest user before giving the required access. This feature provides additional security by providing access only to valid guest users. The Sponsor takes the responsibility for the actions of the Guest and thus it brings accountability for the network usage and enhances the security of the network.

The sponsored guest access workflow is described below:

  1. The Guest user connects to wireless network through guest SSID.
  2. The Guest user performs the self-registration and the guest account will be created in disabled state and the access request is sent to the Sponsor (Employee/GUAM).
  3. The Sponsorer will receive an email notification about the new guest access request.
  4. The Sponsorer logins to the Sponsor portal and approves/denies the guest user.
  5. If the Sponsor approves the request the guest account becomes active and an email/SMS notification is sent to guest about activation of the account. If sponsor denies the request, the guest account will be deleted and an email/SMS notification is sent to guest about deny access.