Now you can finally rein in the guests connecting to your network. You don't want them anywhere near your production environment, and Safe Access® will ensure they don't get close.

As guests connect, Safe Access can immediately place them in a Blacklist with testing policy that allows internet access but keeps your internal network off limits. Once there, Safe Access can test them for compliance with basic security requirements. If a certain class of guest, such as contractors, need access to internal network resources, they can be placed in a "Guilty until proven innocent" policy where they must test compliant each time they connect before being granted access to the needed resources.

Guest-specific policies
Guests are a special case, and Safe Access handles them that way. Odds are guests aren't going to let you install a permanent agent on their machines, so you can test them using Safe Access' browser-based testing method. You can't require that they have a specific AV package, but you can verify that they at least have some kind of AV running and that it's up to date. Basically you can create specific access policies for the various categories of guests coming on and off your network.
Watch Engineer Matt create an access policy »

Safe Access automatically recognizes guest devices and places them into a guest VLAN, subnet, or quarantine, ensuring they can't cause harm. It will also detect any unauthorized network bridges and deny access to devices attempting to connect through them, stopping the storm before it begins.

Flexibility to control all devices and end users
How you control access for your senior executives is going to differ from how you control visitors, or how you control your road warriors, whose laptops are at a much higher risk for picking up something harmful.

The range of access control options in Safe Access ensures that productivity stays high (see graphic at left). Your relatively safe domain users, your IT staff, and your senior executives can be guaranteed network access with our "whitelist with testing" and "innocent until proven guilty" control options. Yet Safe Access will thoroughly test their devices and sound the alarm if they've been compromised or test non-compliant with your security policy.