Nokia IP60 User Manual page 252

Using Secure HotSpot
Note: HotSpot users are automatically logged out after one hour of inactivity. If you
are using RADIUS authentication, you can change the Secure HotSpot session
timeout by configuring the RADIUS Session-Timeout Attribute. See Using RADIUS
Authentication on page 404.
Nokia IP60 Secure HotSpot is useful in any wired or wireless environment where Web-based user
authentication or terms-of-use approval is required prior to gaining access to the network. For example,
Secure HotSpot can be used in public computer labs, educational institutions, libraries, Internet cafés, and
so on.
The IP60 appliance allows you to add guest users quickly and easily. By default, guest users are given a
username and password that expire in 24 hours and granted HotSpot Access permissions only. For
information on adding quick guest users, see Adding Quick Guest Users on page 402.
You can choose to exclude specific network objects from HotSpot enforcement. Excluded network objects
will be able to access the network without viewing the My HotSpot page. Furthermore, users will be able to
access the excluded network object without viewing the My HotSpot page. For information on excluding
network objects from HotSpot enforcement, see Using Network Objects on page 134.
Important: SecuRemote/SecureClient VPN software users who are authenticated by
the Internal VPN Server are automatically exempt from HotSpot enforcement. This
allows, for example, authenticated employees to gain full access to the corporate
LAN, while guest users are permitted to access the Internet only.
Note: HotSpot enforcement can block traffic passing through the firewall; however, it
does not block local traffic on the same network segment (traffic that does not pass
through the firewall).
Setting Up Secure HotSpot
To set up Secure HotSpot
1. Enable Secure HotSpot for the desired networks.
See Enabling/Disabling Secure HotSpot on page 253.
2. Customize Secure HotSpot as desired.
See Customizing Secure HotSpot on page 253.
3. Grant HotSpot Access permissions to users on the selected networks.
See Adding and Editing Users on page 399.
4. To exclude specific computers from Secure HotSpot enforcement, add or edit their network
objects.
See Adding and Editing Network Objects on page 135.
You must select Exclude this computer/network from HotSpot enforcement option.
5. Add quick guest users as needed.
See Adding Quick Guest Users on page 402.
252 Nokia IP60 Security Appliance User Guide