Securing Open Wi-Fi Hotspots
Public networks carry risks. Here is how operators protect users and the institution.
Public Wi-Fi hotspots serve many users the institution does not know. Without proper safeguards, users can be exposed to each other, attackers can impersonate the network and the institution's own systems can be put at risk.
Isolate clients from each other
Client isolation prevents devices on the hotspot from communicating directly, so one malicious user cannot scan or attack others on the same network.
Keep hotspots away from internal systems
Hotspot traffic should be completely separated from administrative, academic, exam and payment networks, with the firewall enforcing that separation.
Filter threats and harmful content
DNS filtering and firewall threat protection block malware sites, phishing pages and illegal content for every hotspot user.
Limit bandwidth per user
Rate limits prevent a single user from consuming the entire connection and reduce the impact of abuse.
Encrypt open networks
Wi-Fi Enhanced Open (OWE) encrypts traffic between devices and access points even when no password is required, protecting users from casual eavesdropping.
Detect rogue access points
Wireless intrusion detection identifies fake hotspots using the campus network name to trick users into connecting.
Monitor for abuse
Watch for scanning, attacks or unusual traffic volumes and block offending devices quickly.
Educate users
Remind users through the splash page to prefer secure websites and avoid sensitive transactions on public networks.
Keep compliant logs
Maintain session logs securely for compliance and investigations.
The bottom line
Secure hotspots protect users and the institution alike. UbiFi Campus Hotspot includes client isolation, filtering and monitoring as standard.
Learn more about Campus Hotspot from UbiFi, or talk to our team.
Public Wi-Fi hotspots for open areas, auditoriums, canteens and events — with OTP login, time limits and compliant logging.
