9
DEPLOYMENT GUIDE:
Secure Cloud-managed Wireless LAN Solution
Complete Security with Exceptional
Value
Aside from simplified deployment and management, one of the
value propositions of Cloud Wi-Fi is the shift from CAPEX to OPEX.
While this might seem attractive, some vendors are gouging 15%-
20% of the AP hardware price as an annual cloud-management
subscription fee for each managed AP. That’s a high premium to
pay for management services that don’t change substantially from
year to year.
In contrast, cloud-management through FortiCloud is free. There
are no per AP subscription fees at for management at all. Fortinet
only charges per AP subscriptions for the real-time application
security capabilities provided through regular updates from
FortiGuard Labs – a capability that no other vendor offers.
So, for roughly the same overall OPEX you get world-class security,
without any CAPEX investment in security appliances, no latency
penalties, and no WAN upgrade costs. No matter what happens
out there in cyber-space, or to guest and employee owned devices
connected to your network, you have up-to-date protection against
the very latest cyber-threats. No other vendor delivers this value.
FortiCloud / FortiAP-S Series
Deployment
Fortinet’s secure cloud-managed Wi-Fi is suitable for single office
SMBs all the way to large distributed enterprises with thousands
of locations, and it is especially attractive in small locations, where
oftentimes there simply is no physical space for additional local
security appliances, regardless whether such an option would be
economically viable. With Wi-Fi access and security combined in
the footprint of a single AP, secure wireless has never been more
compact. Here are some common deployment scenarios and
use cases for some of the FortiAP-S series security capabilities in
different industries.
Hospitality:
Hoteliers want to monetize Wi-Fi and other high margin
services while ensuring their patrons have an all-round pleasant
experience on or off the Internet!
In order to maximize revenue from video entertainment in rooms,
they can use Web Filtering or Application Control features on
FortiAP-S series APs to block access to OTT video services such
as Netflix, and preserve capacity on their Internet connection for
vital applications such as email for business guests. Similarly they
can restrict Internet access in the lobby, to drive Internet access
sign-up in rooms, and to prevent age-inappropriate content being
viewed in public areas, while permitting it in the privacy of one’s
room.
In recent years, hotels have endured backlash against blocking
of personal Wi-Fi hotspots, which resulted in the 2014 FCC ruling
and January 2015 advisory that Wi-Fi blocking is prohibited. This
leaves hospitality with a fine line to tread between FCC compliance
and protection from Rogue APs and malicious use. Fortinet’s
Secure Cloud Wi-Fi solution provides the Rogue AP information,
threat protection and threat analysis, to enable establishments to
instantly thwart malicious use, while remaining FCC compliant, and
auditable.
K-12 Education:
School districts continually struggle with
insufficient funds and a shortage of IT resources. Computers are
few. Internet pipes are small, and network infrastructure is limited.
One way to alleviate the funding dilemma is to spend less on
computers and more on infrastructure by encouraging BYOD. Yet
this is a double-edged sword, as it increases the security risks,
and opportunity for network abuse by students. Furthermore, they
have a moral if not legal obligation to protect students from age-
inappropriate content.
Fortinet’ secure Cloud Wi-Fi provides an elegant solution to meet all
of these requirements in one fell swoop: It frees up capital expense
from security appliances, WLAN controllers and management for
more APs. It allows blocking of inappropriate or malicious sites,
neutralizes infected devices and protects the network from all
cyber-threats. All while conserving precious Internet bandwidth
and even more precious IT staff resources through centralized
management.
