Expert insights on enterprise Wi-Fi security, Passpoint, OpenRoaming, captive portals, and network access management.
The October 2026 Windows updates block PEAP-MSCHAPv2 single sign-on on many domain-joined Windows 11 devices. How to confirm it, the temporary exception, and the move to EAP-TLS.
Read full articleThe October 2026 Windows updates block PEAP-MSCHAPv2 single sign-on on many domain-joined Windows 11 devices. How to confirm it, the temporary exception, and the move to EAP-TLS.
Guests rank WiFi among what decides their next booking - and most still hit friction. One-step stay verification, Passpoint auto-connect for returning guests, and segmentation that keeps guests, staff, and payments apart.
Stop putting a shared password on a slide. IronWiFi checks Cvent at login so cancelled attendees stay off. Exhibitors get an isolated SSID. Passpoint skips the splash.
Districts run some of the most attacked WiFi anywhere on a single shared password. What CIPA actually requires from the network, and how Chromebook fleets move to certificate-based 802.1X.
Renters rank internet alongside air conditioning, and per-unit ISP accounts or one shared password can't keep up. How managed MDU WiFi gives every resident a private network on shared infrastructure.
Quantum computers will eventually break the RSA and ECC behind EAP-TLS and RADIUS, and NIST's 2030/2035 deadlines are published. Which parts of your WiFi stack are exposed, and how to build crypto-agility now.
WPA2-Enterprise has quietly become the legacy option. What changes at the radio layer, where transition mode bites, what 6 GHz and Wi-Fi 7 require, and how to migrate without stranding a single client.
PCI DSS 4.0.1 is fully enforced, and its wireless rules reach every store, hotel, and restaurant - even where payments never touch WiFi. Rogue AP scans, guest segmentation, and key rotation explained.
The rules changed in 2026: no sponsor requirement, a SOC 2-based entry class, and a progressive path upward. The current map of FedRAMP classes, DFARS 7012, CMMC, and impact levels.
One SSID, thousands of campuses, and a password that never leaves home. How eduroam's federated RADIUS hierarchy works, what joining requires, and why logins are moving to certificates.
When ESET flags a device as infected, IronWiFi can disconnect it or move it to a quarantine VLAN - automatically, even if the malware kills the endpoint agent.
The Pentagon paused CMMC's certification rollout - but DFARS clauses and NIST SP 800-171 never paused. What defense contractor WiFi still has to do.
The same week Altman declared the singularity, an AI model reportedly escaped its sandbox and attacked a third-party platform. Skip the philosophy - it's an identity threat.
The phone setting that joins airport and stadium WiFi by itself, explained: how Passpoint works, why it is safer than normal public WiFi, and when to turn it off.
The sign-in page on hotel and airport WiFi, explained: how the walled-garden redirect works, why the login page sometimes never appears, and how to force it open on any device.
BlastRADIUS showed that RADIUS/UDP fails against a modern attacker, and the IETF is deprecating cleartext transport. What RadSec changes - and how to migrate without disrupting users.
Airbnb is testing coworking day-pass bookings - new walk-in revenue, and a stream of unvetted visitors on networks built for trusted members. How to say yes to booking platforms safely.
Phones now change their WiFi MAC address by default, and captive portals, MAC allowlists, and visitor analytics quietly break. Here's how to build authentication that survives.
Guest Wi-Fi in hospitals without putting ePHI at risk: network segmentation, three-tier authentication, audit logging, and privacy-first captive portal design.
Subscribe through your AWS account: no new vendor onboarding, one AWS bill, and your committed AWS spend pays for WiFi authentication.
The guest-WiFi login page you meet at hotels, cafés, and airports - how the redirect and captive portal app work, how to set one up step by step, and how to fix a splash page that won't appear.
802.1X proves who you are. Conditional access decides whether that identity, on that device, in that context, belongs on the network - and routes it accordingly.
Microsoft Entra ID has no native RADIUS endpoint. Cloud RADIUS plus Intune SCEP and EAP-TLS replaces NPS and Active Directory. The three Microsoft-native paths compared.
Certificates replace passwords. Identity replaces the perimeter. The six layers that secure every person, device, and AI agent on your physical network.
ITDR is the category built to catch credential attacks, insider abuse, and AI agent compromise on RADIUS and captive portals - threats EDR and NDR can't see.
Network access control can't see individual AI agents, but it can make sure the machines they run on prove who they are before they connect. Here is the honest scope.
Why WiFi networks need intelligence, the four AI capabilities already working in IronWiFi, and what's coming next for ML-powered networking.
Step-by-step guide to configuring Cloud RADIUS on CommScope Ruckus SmartZone, ZoneDirector, and Unleashed access points.
Configure Cloud RADIUS with FortiGate and FortiAP including RADIUS server setup, WPA2-Enterprise SSID, and firewall policies.
Configure Cloud RADIUS with Cambium cnMaestro, cnPilot, and XV series APs for WPA2-Enterprise 802.1X authentication.
Starlink delivers internet to places fiber can't reach. IronWiFi turns that raw connection into managed, secure Wi-Fi with captive portals, RADIUS authentication, and bandwidth control.
Complete comparison of EAP methods for enterprise Wi-Fi including security ratings, deployment complexity, and WPA3 requirements.
Comprehensive comparison of the best captive portal software platforms including setup guides and compliance requirements.
Why enterprises are moving authentication online: faster deployment, lower TCO, global redundancy, and built-in identity provider integration.
Complete implementation guide for Hotspot 2.0 (Passpoint) covering 802.11u, ANQP, RADIUS, and OpenRoaming integration.
Compare IronWiFi, Cisco Meraki, Aruba Central, Juniper Mist, and more. Learn how cloud-managed wireless works and migration strategies.
Transform guest WiFi into a customer insights engine with captive portal analytics, first-party data collection, and CRM integration.
A battle-tested, phased approach to migrating enterprise wireless from PSK to 802.1X without bringing the building to a standstill.
How enterprise networks enable VoWiFi with Passpoint, RADIUS authentication, and QoS infrastructure for carrier-grade connectivity.
Learn how to use network segmentation, RADIUS-driven policies, and device profiling to contain IoT risk without blocking innovation.
Implement Zero Trust principles for enterprise Wi-Fi with identity-centric authentication, micro-segmentation, and continuous verification.
Learn about Multi-Link Operation, 320 MHz channels, 4K-QAM, and how to plan your network upgrade strategy for 802.11be.
Discover how OpenRoaming eliminates captive portal friction with automatic, secure Wi-Fi authentication across a global federation.
Shared Wi-Fi passwords are a relic. Learn why certificate-based 802.1X EAP-TLS is the foundation of zero-trust wireless access.
The in-flight connectivity market is reaching $8.4B by 2028. Learn why multi-tenant platforms cut airline costs by 60-75%.
A practical guide to guest Wi-Fi that respects privacy while meeting GDPR requirements with consent management and data minimization.
Learn what data your network collects, your legal obligations, and how to protect customer information while delivering great connectivity.
An in-depth comparison exploring differences in user experience, security, and implementation complexity.