SIMPLIFIED SMB NETWORK - Today's corporate network has become more and more complicated, where stacks of equipments are required to achieve the expectations of security, speed, stability, and flow control. However, The 4ipnet Secure Wireless Office Controller series (MSG-series), by simplifying the business network deployment with an all-in-one device, which can replace a router, a switch, a load-balancing device, an account database server and a VPN server all at once. Therefore, it is the best option for small-to-medium businesses who are concerned about the Total Cost of Ownership and the complication of integrating different equipments.

SECURED NETWORK MANAGEMENT- Nowadays, corporate network is an indispensable resource that businesses rely on to run their day-to-day operations. Therefore, it is essential that companies ensure their networks are secure and used efficiently. MSG-series comes with a suite of security capabilities to protect office network from unauthorized access, prevent data from theft or interception as it travels over the air within the network. Powerful network management tools such as network segmentation via Service Zones, individual bandwidth control, role-based policy assignment, and QoS support guarantee that limited network resources are optimized for performance and reliability.

Capacity and Performance MSG100 MSG300 Local Accounts 200 500 Instant Guest Accounts 200 500 Local VPN Tunnels 50 120 Managed APs N/A 12 Monitored 3rd-party APs 40 40

Features and Benefits:

Reduced Complexity and Cost of Ownership

Simplified Business Network
Building a secure corporate network can be simple with the MSG-series Controllers. One Controller effectively replaces an average of 4 to 6 devices, dramatically simplifies network deployment and management. Maintenance is made easy with fewer total devices to manage. In addition, The Controller's future proof platform can be the easily scalable to meet evolving corporate needs.

Standalone Multi-service Network Solution
With built-in Local Accounts and Instant Accounts authentication database, MSG-series can be an authentication server all by itself. At the same time, it also supports multiple types of external authentication servers, including RADIUS, LDAP, Windows Active Directory, and POP3(S), which makes it easy to rapidly deploy MSG-series into existing network infrastructures.

Advanced Security and Reliability

Standards-based Wireless Security
Support standard-based data encryption and user authentication: WEP, WPA, and IEEE 802.1X. Built-in with DoS attack protection, user black list, and MAC access control list.

Local and Site-to-Site VPN
MSG-series establishes secure VPN tunnels for office users. The Controllers can construct secure site-to-site IPSec VPN tunnels for computers and devices communicating among remote branch offices without pre-installation of VPN-client software. Local VPN is used to encrypt the local traffic traveling in the air between wireless client devices and the Access Points.

Load-balancing and Fail-over
MSG-series supports two WAN links connected to external networks such as the Internet. It can be used for load balancing to improve the efficiency of network resource utilization. A failover mechanism is also implemented on these two links to enhance connection reliability.

Intelligent Network Management

Network Segmentation via Service Zones
MSG-series is capable of providing multiple virtual networks, called Service Zones. The solution is to partition a single physical network into multiple secure, virtual networks with VLAN technology. It cuts the complexity and cost to deploy multiple physical networks with customized services to meet the needs of diverse groups accessing the office network within the company.

Bandwidth Control
Per user bandwidth, session, and login schedule management enables flexible traffic control.

Role-based Access Control
MSG-series can manage user identity and assign access policy according to the group the user belongs to.

Centralized Access Point Management (MSG300 only)
Offer centralized remote control and monitoring of managed APs via web-based administration interface, including AP's system settings, online status, enabling/disabling, reset, and firmware upgrade. Periodically monitors APs and notifies the administrator when APs disconnect.

Ideal Mobile Office

Roaming
MSG-series enables user account roaming across different branch offices. The same account can be used to log into the system when used on different client devices. The Internet also stays connected when users roam between different APs.

Instant Guest Account
Certain users with pre-assigned privilege can generate instant guest accounts for visitors simply by clicking one button on the Successful Login page on their own computers.

Remote VPN Connections
MSG-series can provide client-to-site PPTP VPN tunnels for remote tele-workers to securely access office network through public Internet.

VoIP
By acting as a SIP Proxy, MSG-series can support VoIP calls, without the need to reconfigure VoIP devices such as SIP-based WiFi handsets. To ensure quality of service (QoS), MSG-series can further assign high-level of bandwidth utilization for voice and video packets. For call control, MSG-series can be set to only redirect SIP call requests to up to 4 trusted SIP Registrars.