Access Control And Authentication; Security; 5-Step Service Branding - Nomadix Access Gateways User Manual

A G
CCESS ATEWAY
the billable event on a number of different parameters such as time, volume, IP address type, or
bandwidth.

Access Control and Authentication

The Access Gateway ensures that all traffic to the Internet is blocked until authentication has
been completed, creating an additional level of security in the network. Also, the Access
Gateway allows service providers to create their own unique "walled garden," enabling users
to access only certain predetermined Web sites before they have been authenticated.
Nomadix simultaneously supports the secure browser-based Universal Access Method
(UAM), IEEE 802.1x, and Smart Clients for companies such as Adjungo Networks, Boingo
Wireless, GRIC and iPass. MAC-based authentication is also available.

Security

The patented iNAT™ (Intelligent Network Address Translation) feature creates an intelligent
mapping of IP Addresses and their associated VPN tunnels—by far the most reliable multi-
session VPN passthrough to be tested against diverse VPN termination servers from
companies such as Cisco, Checkpoint, Nortel and Microsoft. Nomadix' iNAT feature allows
multiple tunnels to be established to the same VPN server, creating a seamless connection for
all users on the network.
The Access Gateway provides fine-grain management of DoS (Denial of Service) attacks
through its Session Rate Limiting (SRL) feature, and MAC filtering for improved network
reliability.

5-Step Service Branding

A network enabled with the Nomadix Access Gateway offers a 5-Step service branding
methodology for service providers and their partners, comprising:
Initial Flash Page branding.
1.
Initial Portal Page Redirect (Pre-Authentication). Typically, this is used to redirect the user
2.
to a venue-specific Welcome and Login page.
Home Page Redirect (Post-Authentication). This redirect page can be tailored to the
3.
individual user (as part of the RADIUS Reply message, the URL is received by the NSE)
or set to re-display itself at freely configurable intervals.
The Information and Control Console (ICC) contains multiple opportunities for an
4.
operator to display its branding or the branding of partners during the user's session. As an
alternative to the ICC, a simple pop-up window provides the opportunity to display a
single logo.
Introduction 5