Expert insights on enterprise Wi-Fi security, captive portals, Passpoint, GDPR compliance, and network access management. https://www.ironwifi.com/blogs/ en-us Tue, 11 Aug 2026 00:00:00 +0000 https://www.ironwifi.com/ironwifi.png https://www.ironwifi.com/blogs/ https://www.ironwifi.com/blogs/federal-wifi-authentication-compliance-2026/ https://www.ironwifi.com/blogs/federal-wifi-authentication-compliance-2026/ FedRAMP's new certification classes, DFARS 7012, CMMC, and DoD impact levels explained plainly for teams buying or building federal WiFi authentication in 2026. Covers the Class A-D structure, the end of the sponsor requirement, Moderate equivalency vs certification, why CMMC is orthogonal to FedRAMP, and how impact levels work through a prime's authorization boundary. Tue, 11 Aug 2026 10:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Government FedRAMP RADIUS https://www.ironwifi.com/blogs/eduroam-campus-wifi-explained/ https://www.ironwifi.com/blogs/eduroam-campus-wifi-explained/ eduroam links thousands of campus networks into one federation built on 802.1X, EAP, and a hierarchical RADIUS architecture. How authentication is routed to a user's home institution, what campuses need to join, why logins are moving to EAP-TLS certificates, and how Internet2's support organizations are bringing eduroam to K-12 districts and libraries. Mon, 10 Aug 2026 10:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Education 802.1X RADIUS https://www.ironwifi.com/blogs/eset-connect-wifi-itdr-beta/ https://www.ironwifi.com/blogs/eset-connect-wifi-itdr-beta/ IronWiFi ITDR now integrates with ESET PROTECT in beta. Endpoint malware detections sync through the ESET Connect API, correlate with live WiFi sessions, and trigger automatic response: RADIUS CoA disconnect, network-wide MAC block, or quarantine VLAN - enforcement the compromised endpoint cannot tamper with. Tue, 04 Aug 2026 10:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) WiFi Security ITDR Integrations https://www.ironwifi.com/blogs/cmmc-wifi-requirements/ https://www.ironwifi.com/blogs/cmmc-wifi-requirements/ The Department of War paused CMMC's third-party certification rollout in July 2026 - but DFARS clauses and NIST SP 800-171 never paused. What defense contractor wireless networks still have to do: authorized wireless access, per-user 802.1X authentication, segmented guest WiFi, and audit logs - and why the pause is the best window to build it. Mon, 03 Aug 2026 10:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) CMMC NIST 800-171 Compliance https://www.ironwifi.com/blogs/ai-singularity-identity-threats/ https://www.ironwifi.com/blogs/ai-singularity-identity-threats/ Sam Altman declared the AI singularity has arrived - the same week an AI model reportedly escaped its sandbox, gained internet access, and attacked a third-party platform. Whether or not it's the singularity, it's an identity incident: an autonomous agent with unmanaged network access. What that means for AI agent identity, detection, and response on your network. Tue, 28 Jul 2026 10:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) AI Security ITDR AI Agents https://www.ironwifi.com/blogs/what-is-wifi-passpoint/ https://www.ironwifi.com/blogs/what-is-wifi-passpoint/ Passpoint (Hotspot 2.0) is the phone setting that connects you to trusted public WiFi automatically and securely - no login pages. How the profile matching and enterprise encryption work, whether it is safe, how to turn it off on Android and iPhone, and how venues offer it. Mon, 27 Jul 2026 10:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Passpoint Hotspot 2.0 WiFi Security https://www.ironwifi.com/blogs/what-is-captive-portal-login/ https://www.ironwifi.com/blogs/what-is-captive-portal-login/ The sign-in page on hotel and airport WiFi, explained: how the walled-garden redirect works behind a captive portal login, why the page sometimes never appears (HTTPS, VPNs, private DNS), how to force it open on iPhone, Android, Windows, and Mac, and how businesses set up their own branded guest WiFi login. Mon, 27 Jul 2026 08:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Captive Portal Guest WiFi WiFi Login WiFi Troubleshooting https://www.ironwifi.com/blogs/radsec-radius-over-tls-guide/ https://www.ironwifi.com/blogs/radsec-radius-over-tls-guide/ Most networks still move RADIUS authentication traffic protected by a shared secret and MD5. After the BlastRADIUS disclosure (CVE-2024-3596) and with the IETF deprecating cleartext RADIUS transports, RadSec - RADIUS over TLS per RFC 6614 - is becoming the baseline. What it changes, where it is already mandatory (OpenRoaming, eduroam, cloud RADIUS), and a six-step migration plan. Mon, 27 Jul 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) RadSec RADIUS WiFi Security 802.1X Encryption https://www.ironwifi.com/blogs/airbnb-coworking-day-passes/ https://www.ironwifi.com/blogs/airbnb-coworking-day-passes/ Airbnb is testing coworking day-pass bookings in London with operators like Oneder and Work.Life. That is new walk-in revenue for coworking spaces - and a stream of unvetted visitors on networks built for trusted members. What drop-in-ready WiFi looks like: per-visitor credentials, automatic expiry, member isolation, and WiFi that follows your booking platform. Fri, 24 Jul 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Coworking WiFi Guest WiFi Captive Portal Day Pass https://www.ironwifi.com/blogs/mac-randomization-wifi/ https://www.ironwifi.com/blogs/mac-randomization-wifi/ iOS and Android now randomize WiFi MAC addresses by default. What breaks on guest and enterprise networks - captive portals, MAC allowlists, MAC authentication, analytics - what IEEE 802.11bh changes, and how to move to identity-based authentication with 802.1X certificates, Passpoint, and credential-based portals. Mon, 20 Jul 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) MAC Randomization WiFi Security Captive Portal Passpoint 802.1X https://www.ironwifi.com/blogs/hipaa-compliant-healthcare-wifi/ https://www.ironwifi.com/blogs/hipaa-compliant-healthcare-wifi/ A practical guide to offering guest Wi-Fi in hospitals and clinics without putting ePHI at risk: network segmentation, authentication tiers for guests, staff and medical devices, HIPAA audit logging, and privacy-first captive portal design. Mon, 20 Jul 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) HIPAA Healthcare Guest WiFi Compliance https://www.ironwifi.com/blogs/ironwifi-on-aws-marketplace/ https://www.ironwifi.com/blogs/ironwifi-on-aws-marketplace/ Subscribe to IronWiFi Cloud RADIUS and captive portals through AWS Marketplace: billed to your AWS account, counting toward committed AWS spend, with a free trial and free tier on the Cloud RADIUS listing. Tue, 07 Jul 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) AWS Marketplace Cloud RADIUS Product News https://www.ironwifi.com/blogs/captive-portal-setup-guide/ https://www.ironwifi.com/blogs/captive-portal-setup-guide/ How to set up a captive portal for guest WiFi, step by step: how the redirect and captive portal login app work, platform setup for UniFi, Aruba Instant On and Meraki, and how to fix a login page that won’t appear. Tue, 16 Jun 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Captive Portal Guest WiFi Captive Portal Login Captive Portal App WiFi Setup Cloud RADIUS https://www.ironwifi.com/blogs/wifi-conditional-access/ https://www.ironwifi.com/blogs/wifi-conditional-access/ WiFi conditional access decides whether an identity — on a given device, in a given context — should be on the network at all. How policy-based access control works on RADIUS: device posture, dynamic VLANs, compliance templates, and live risk scoring. Mon, 15 Jun 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Conditional Access Network Access Control RADIUS Device Posture Dynamic VLAN Zero Trust 802.1X Compliance https://www.ironwifi.com/blogs/entra-id-radius-wifi/ https://www.ironwifi.com/blogs/entra-id-radius-wifi/ Microsoft Entra ID has no first-party 802.1X RADIUS service. Cloud RADIUS plus Intune SCEP and EAP-TLS replaces on-prem AD and NPS. The three Microsoft-native paths compared with deployment overview. Sat, 09 May 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Entra ID Azure AD RADIUS 802.1X EAP-TLS Intune SCEP Microsoft NPS Cloud RADIUS Certificate-Based Authentication https://www.ironwifi.com/blogs/what-is-network-identity-security/ https://www.ironwifi.com/blogs/what-is-network-identity-security/ Network Identity Security secures every person, device, and AI agent on the physical network using certificate-based authentication, cloud PKI, identity-aware access control, guest identity, ITDR, and AI agent identity. The six layers explained. Sat, 18 Apr 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Network Identity Security Zero Trust Cloud PKI Certificate-Based Authentication 802.1X RADIUS Conditional Access AI Agent Identity ITDR https://www.ironwifi.com/blogs/what-is-wifi-itdr/ https://www.ironwifi.com/blogs/what-is-wifi-itdr/ WiFi ITDR catches credential attacks, impossible travel, insider misuse, MAC spoofing, AI agent compromise, and captive portal fraud that EDR and NDR tools can't see. Thu, 16 Apr 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) ITDR Identity Threat Detection RADIUS Security MITRE ATT&CK Credential Attacks AI Agent Security Captive Portal https://www.ironwifi.com/blogs/ai-agents-network-identity/ https://www.ironwifi.com/blogs/ai-agents-network-identity/ Every AI agent on your network needs a verified identity. Learn why certificate-based authentication at the RADIUS layer is the answer. Sun, 15 Mar 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) AI Agents Network Identity Certificate Authentication RADIUS Zero Trust Wi-Fi Security https://www.ironwifi.com/blogs/best-eap-methods-wifi/ https://www.ironwifi.com/blogs/best-eap-methods-wifi/ Complete comparison of EAP methods for enterprise Wi-Fi: EAP-TLS, PEAP, EAP-TTLS, and EAP-FAST. Security ratings, deployment complexity, and WPA3 requirements. Fri, 13 Feb 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) EAP-TLS PEAP EAP-TTLS WPA3 802.1X Wi-Fi Security https://www.ironwifi.com/blogs/captive-portal-software-guide/ https://www.ironwifi.com/blogs/captive-portal-software-guide/ Comprehensive comparison of captive portal software platforms for business including setup guides, authentication methods, and compliance requirements. Fri, 13 Feb 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Captive Portal Guest WiFi WiFi Software Authentication https://www.ironwifi.com/blogs/cloud-radius-server-benefits/ https://www.ironwifi.com/blogs/cloud-radius-server-benefits/ Discover the key benefits of a cloud RADIUS server over on-premise alternatives. Learn how online RADIUS delivers faster deployment, lower TCO, and global redundancy. Fri, 13 Feb 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Cloud RADIUS RADIUS Server Enterprise Authentication FreeRADIUS NPS https://www.ironwifi.com/blogs/hotspot-2-0-wifi-guide/ https://www.ironwifi.com/blogs/hotspot-2-0-wifi-guide/ A comprehensive guide to Hotspot 2.0 (Passpoint) for public Wi-Fi networks covering 802.11u, ANQP, RADIUS, and OpenRoaming. Fri, 13 Feb 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Hotspot 2.0 Passpoint Public Wi-Fi 802.11u OpenRoaming https://www.ironwifi.com/blogs/cloud-wifi-management-guide/ https://www.ironwifi.com/blogs/cloud-wifi-management-guide/ A comprehensive guide to cloud WiFi management platforms. Compare IronWiFi, Cisco Meraki, Aruba Central, Juniper Mist, and more. Fri, 13 Feb 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Cloud WiFi WiFi Management Cisco Meraki Aruba Central Juniper Mist https://www.ironwifi.com/blogs/retail-wifi-customer-insights/ https://www.ironwifi.com/blogs/retail-wifi-customer-insights/ A comprehensive guide to retail WiFi solutions that transform guest WiFi into a customer insights engine with captive portal analytics and CRM integration. Fri, 13 Feb 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Retail WiFi Customer Insights Captive Portal Analytics First-Party Data https://www.ironwifi.com/blogs/starlink-ironwifi-satellite-wifi/ https://www.ironwifi.com/blogs/starlink-ironwifi-satellite-wifi/ Learn how to deploy managed guest Wi-Fi, captive portals, and RADIUS authentication over Starlink satellite internet using IronWiFi. Ideal for remote sites, events, and rural deployments. Thu, 12 Feb 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Starlink Satellite Wi-Fi Captive Portal RADIUS Guest Wi-Fi Remote Connectivity https://www.ironwifi.com/blogs/psk-to-802.1x-migration/ https://www.ironwifi.com/blogs/psk-to-802.1x-migration/ A step-by-step guide for migrating enterprise Wi-Fi from shared PSK passwords to 802.1X individual authentication. Covers planning, phased rollout, legacy device handling, and minimizing user disruption. Tue, 10 Feb 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) 802.1X PSK WPA-Enterprise RADIUS Wi-Fi Migration EAP-TLS EAP-PEAP https://www.ironwifi.com/blogs/wifi-calling-offload/ https://www.ironwifi.com/blogs/wifi-calling-offload/ Learn how WiFi calling and WiFi offload work in enterprise networks. Covers VoWiFi architecture, Passpoint-based carrier offload, QoS requirements, and RADIUS authentication. Thu, 29 Jan 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) WiFi Calling VoWiFi WiFi Offload Passpoint Enterprise WiFi QoS https://www.ironwifi.com/blogs/iot-wifi-security/ https://www.ironwifi.com/blogs/iot-wifi-security/ Learn how to secure IoT devices on enterprise Wi-Fi networks using network segmentation, RADIUS authentication, and device profiling to prevent lateral movement and data breaches. Tue, 27 Jan 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) IoT Security Enterprise Wi-Fi Network Segmentation RADIUS Device Profiling 802.1X https://www.ironwifi.com/blogs/zero-trust-wireless-security/ https://www.ironwifi.com/blogs/zero-trust-wireless-security/ Learn how to implement Zero Trust Network Access (ZTNA) for enterprise Wi-Fi. This guide covers identity-centric authentication, micro-segmentation, continuous verification, and practical deployment strategies. Mon, 19 Jan 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Zero Trust ZTNA 802.1X Wi-Fi Security Network Segmentation RADIUS https://www.ironwifi.com/blogs/wifi-7-enterprise-guide/ https://www.ironwifi.com/blogs/wifi-7-enterprise-guide/ A comprehensive guide to Wi-Fi 7 (802.11be) for enterprise deployments. Learn about Multi-Link Operation, 320 MHz channels, 4K-QAM, and how to plan your network upgrade strategy. Tue, 13 Jan 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Wi-Fi 7 802.11be Multi-Link Operation MLO Enterprise Wi-Fi 6 GHz https://www.ironwifi.com/blogs/openroaming-enterprise-wifi-guide/ https://www.ironwifi.com/blogs/openroaming-enterprise-wifi-guide/ Discover how OpenRoaming eliminates captive portal friction with automatic, secure Wi-Fi authentication. Learn about the WBA-governed global Wi-Fi federation. Tue, 13 Jan 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) OpenRoaming Passpoint Hotspot 2.0 Wi-Fi Roaming Enterprise Wi-Fi WBA https://www.ironwifi.com/blogs/certificate-based-wifi-authentication/ https://www.ironwifi.com/blogs/certificate-based-wifi-authentication/ Learn why certificate-based authentication (802.1X EAP-TLS) is essential for modern enterprise Wi-Fi security. Discover the risks of shared PSK passwords and how to implement zero-trust wireless. Tue, 13 Jan 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Certificate-Based WiFi 802.1X EAP-TLS WPA-Enterprise Wi-Fi Security Zero Trust https://www.ironwifi.com/blogs/multi-tenant-wifi-aviation/ https://www.ironwifi.com/blogs/multi-tenant-wifi-aviation/ The global in-flight connectivity market is projected to reach $8.4 billion by 2028. Learn why multi-tenant platforms cut airline costs by 60-75%, enable faster brand launches, and provide unified analytics. Fri, 02 Jan 2026 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Engineering Team) Aviation Technology In-Flight Connectivity Multi-Tenant WiFi https://www.ironwifi.com/blogs/wifi-data-privacy-guide/ https://www.ironwifi.com/blogs/wifi-data-privacy-guide/ A comprehensive guide to Wi-Fi data privacy for businesses. Learn what data your network collects, your legal obligations, and how to protect customer information. Sun, 07 Dec 2025 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Data Privacy Wi-Fi Security Compliance GDPR https://www.ironwifi.com/blogs/gdpr-compliant-guest-wifi/ https://www.ironwifi.com/blogs/gdpr-compliant-guest-wifi/ A practical guide to creating guest Wi-Fi networks that respect user privacy while meeting GDPR requirements. Learn about consent management, data minimization, and privacy-first captive portal design. Thu, 11 Dec 2025 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) GDPR Compliance Captive Portal Guest WiFi Privacy https://www.ironwifi.com/blogs/passpoint-vs-captive-portals/ https://www.ironwifi.com/blogs/passpoint-vs-captive-portals/ An in-depth comparison of Passpoint (Hotspot 2.0) and traditional captive portals for enterprise Wi-Fi. Explore the differences in user experience, security, and implementation complexity. Wed, 03 Dec 2025 00:00:00 +0000 noreply@ironwifi.com (IronWiFi Team) Passpoint Captive Portal Enterprise Wi-Fi Hotspot 2.0