Splash Pages/Captive Portals for Corporate Guest Wireless Networks
Authored By: Jennifer Friel
What is a Splash Page/Captive Portal?
A Splash Page/Captive Portal is a page which users are directed to prior to connecting to a Guest Wireless Network. On this page, the user is required to view and interact with the page prior to being allowed access to any other sites or web connections through the network.
Why a Splash Page /Captive Portal?
While there are currently no regulatory requirements to include a Splash Page for authentication to your guest wireless network, it is considered a best practice for many reasons.
- Legal
- When allowing access to a guest wireless network, you are providing users access to operate under your IP address, which could make you liable for their actions while accessing your network (additional preventative security measures would include web content filtering). In implementing a splash page and requiring users to accept the Terms of Service or agree to the Acceptable Use Policy, it can shift responsibility away from your Organization, in that the user acted out of your Terms of Service or Acceptable Use Policy.
- Preventing Imposters
- Bad actors have been known to set up fake wireless access points to collect end users’ information from their devices. A splash page can help a user know the network they are connecting to is legitimate, which could pose as a deterrent to many bad actors considering spoofing your guest wireless network.
- Usage/Bandwidth
- Some splash pages require authentication outside of just accepting the Terms of Service or Acceptable use policy, others can require a password and/or require personal information to be entered. In requiring this, the organization can prevent unnecessary access for users not associated with the organization who may be looking for a free connection- which could free up bandwidth for customers or members who need access for a business purpose.
- Branding
- When splash pages are required, they have 100% impression rates, requiring the user to remain on the page until interaction is complete. This is a chance to raise brand awareness and can be leveraged as a marketing tool in a variety of ways.
Setting up your Splash Page/Captive Portal
Many Firewall providers have resources available in assisting and directing the implementation of a Splash Page/Captive Portal. See below for examples:
Javier is a principal within the Cybersecurity Services Group at CLA. Prior to joining CLA, Javier spent ten years supporting the Department of Defense as well as a financial services company in the fields of insider threat, incident response, analytics, and systems engineering.
Comments are closed.