Technical WiFi guides
Deep, expert-led technical guides on guest WiFi, analytics, captive portals, and venue technology.
Ready to move from research to rollout? See how Purple's captive portal software handles branded guest sign-in, analytics, and compliance in one platform.
482 guides
Three SSIDs to rule them all: guest, Passpoint, and IoT WiFi setup guide
This technical guide provides a definitive blueprint for implementing the three-SSID WiFi design across enterprise venues. It details the configuration of an open Guest WiFi portal, automated Passpoint onboarding, and per-device xPSK authentication to achieve complete VLAN segmentation and zero-trust network access.
Server RADIUS: a comprehensive guide for businesses
This guide provides IT managers, network architects, and CTOs with a definitive technical reference on server RADIUS authentication for enterprise WiFi. It covers the AAA framework, 802.1X architecture, EAP method selection, cloud versus on-premises deployment trade-offs, and dynamic VLAN assignment. Venue operators across hospitality, retail, events, and the public sector will find actionable implementation guidance, real-world case studies, and the decision frameworks needed to migrate from insecure pre-shared keys to a secure, identity-driven network access control architecture.
Aruba ClearPass vs. Purple WiFi: Comparing Features and Co-deployment
A comprehensive technical guide detailing the co-deployment architecture of Aruba ClearPass and Purple WiFi. It covers RADIUS proxy configuration, dynamic VLAN assignment, and best practices for delivering secure, analytics-driven guest networks alongside enterprise NAC.
Cisco ISE vs. Purple WiFi: How They Compare and Work Together
This guide explains how Cisco ISE and Purple WiFi serve distinct but complementary roles in enterprise networks. It details how to use Cisco ISE for secure 802.1X corporate access while leveraging Purple for CCPA/CPRA-compliant guest WiFi, marketing analytics, and CRM integration.
EAP-TLS vs EAP-TTLS: Which Certificate-Based WiFi Protocol Should You Choose?
This guide provides a definitive head-to-head comparison of EAP-TLS and EAP-TTLS for enterprise WiFi authentication under IEEE 802.1X. It explains the architectural difference between mutual certificate authentication and server-only certificate tunneling, and gives IT managers, network architects, and CISOs a clear decision framework based on device management capabilities and compliance requirements. Purple supports both EAP-TLS and EAP-TTLS authentication paths for Staff WiFi, and this guide helps organizations understand the infrastructure trade-offs before committing to either approach.
What is an 802.1X Supplicant? Client Types and Device Configuration
This guide explains the role of the 802.1X supplicant in enterprise WiFi authentication. It covers the technical architecture, compares native OS supplicants with third-party clients, and provides practical configuration guidance for IT teams deploying EAP-TLS and PEAP.
Managing Digital Certificates for EAP-TLS WiFi Authentication
This technical reference guide details the lifecycle management of digital certificates for EAP-TLS WiFi authentication. It provides actionable strategies for deploying, renewing, and revoking certificates at scale across enterprise networks using SCEP and MDM integrations.
Troubleshooting Public WiFi: Fixing 'Connected, No Internet' and Splash Page Redirection Failures
This authoritative technical reference guide explains the underlying mechanics of captive portal detection and details the six primary failure modes that prevent guest WiFi from connecting. It provides IT managers and network architects with a practical troubleshooting framework to resolve HTTP redirect issues, DNS conflicts, and MAC randomization challenges.
Captive Portal Architecture: Security, Redirection, and Best Practices
A definitive technical reference on enterprise captive portal architecture. This guide unpacks network isolation, DNS redirection, RADIUS authentication, and security compliance for IT leaders deploying secure, data-rich guest WiFi networks.
Optimizing B2B Captive Portals: Capturing Company Names and Professional Data
This guide explains how IT managers, network architects, and venue operations directors can configure B2B captive portals to capture professional data - company names, job titles, and business email addresses - at the point of WiFi login. It covers the full technical architecture from VLAN isolation and RADIUS authentication through to CRM integration with Salesforce and HubSpot, with CCPA/CPRA compliance built in. Venues that deploy this correctly turn their guest WiFi network into a first-party data engine and automated lead generation system.
Deploying SCEP for Secure Higher Education BYOD and WiFi Authentication
This technical guide provides network architects and IT managers with a vendor-neutral blueprint for deploying SCEP-based certificate enrollment to secure higher education WiFi. It details the transition from vulnerable password-based authentication to EAP-TLS, focusing on scalable BYOD onboarding and MDM integration.
The Security Benefits of RADIUS as a Service for Hybrid Workforces
This technical reference guide explains how RADIUS as a Service secures network access for hybrid workforces across distributed venues. It covers the architecture, security benefits, and deployment steps for replacing on-premises RADIUS infrastructure with a cloud-managed authentication service. For IT managers and network architects at hotels, retail chains, stadiums, and public-sector organizations, this guide provides the evidence needed to evaluate and act on a cloud RADIUS migration this quarter.
Integrating RADIUS as a Service with Cloud Directories (Azure AD & Google Workspace)
This technical reference guide details how to integrate RADIUS as a Service with cloud directories - Microsoft Entra ID and Google Workspace - for enterprise WiFi authentication. It covers the architectural shift from on-premise NPS to cloud-native RADIUS, the deployment of certificate-based EAP-TLS authentication, and the operational best practices for securing wireless access across hospitality, retail, and public-sector environments. For IT managers and network architects already invested in cloud identity, this guide bridges the gap between directory management and physical network security.
Designing WiFi Networks for Multi-Tenant Office Buildings
This guide provides IT managers, network architects, and CTOs with a vendor-neutral blueprint for designing scalable, secure, and isolated WiFi networks across multi-tenant office buildings. It covers VLAN segmentation under IEEE 802.1Q, Dynamic VLAN Assignment via 802.1X and RADIUS, RF planning for high-density environments, and compliance considerations under CCPA/CPRA and PCI-DSS. Venue operators and building managers will find actionable architecture guidance, real-world case studies, and configuration pitfalls to avoid before deployment.
How to Set Up a Captive Portal on Starlink: A Guide for Remote & Maritime Venues
This guide details how to bypass the native Starlink hardware and integrate a cloud-managed captive portal using enterprise routing equipment. You will learn how to overcome the CGNAT limitation, enforce VLAN segmentation, manage satellite bandwidth constraints, and ensure regulatory compliance.
Hotel Guest WiFi Management: Integrating PMS, Portals, and Brand Standards
This technical guide details how to architect enterprise-grade hotel WiFi networks, focusing on VLAN segmentation, PMS integration for automated session management, and captive portal optimisation for GDPR-compliant data capture.
Captive Portal Best Practices: Designing for High Conversion and Compliance
This technical guide gives IT managers, network architects, and venue operations directors a complete blueprint for deploying captive portals that balance network security with high user conversion. It covers the full architecture from VLAN segmentation and RADIUS authentication to CCPA/CPRA-compliant consent design and authentication method selection. Drawn from Purple's operational experience across 80,000+ venues and 440 million logins in 2024, every recommendation is grounded in real deployment data.
How to Optimize Captive Portals for Maximum Network Security and User Conversion
This guide provides a complete technical blueprint for optimizing captive portals across enterprise venues, covering network segmentation architecture, authentication method selection, CCPA/CPRA-compliant consent design, and conversion optimization. It is written for IT managers, network architects, and CTOs at hotels, retail chains, stadiums, and public-sector organizations who need to balance network security with first-party data capture. Purple operates captive portal infrastructure across 80,000+ venues with 440 million logins in 2024, and the frameworks here reflect that operational experience.
Hotel Guest WiFi Architecture: PMS Integration, Captive Portals, and Bandwidth Control
This guide provides a comprehensive framework for architecting enterprise-grade hotel WiFi networks. It details the technical requirements for VLAN segmentation, PMS integration via FIAS, captive portal design, and per-client bandwidth control to ensure security, compliance, and optimal performance.
How to Configure SCEP for Automated Enterprise WiFi Certificate Enrollment
This guide explains how to configure SCEP (Simple Certificate Enrollment Protocol) for automated enterprise WiFi certificate enrollment, covering the full architecture from PKI and NDES through to MDM profile deployment and RADIUS validation. It is aimed at IT managers, network architects, and CTOs at hotels, retail chains, stadiums, conference centres, and public-sector organisations who need to move beyond pre-shared keys and implement scalable, identity-based 802.1X EAP-TLS authentication. Purple's hardware-agnostic, cloud overlay platform integrates directly with this architecture, providing the guest and BYOD WiFi layer that sits alongside your certificate-authenticated staff network.
Mean time to innocence: how to prove it's not the WiFi
Mean time to innocence (MTTI) is the critical metric defining how long IT teams spend proving a network issue is not their fault. This guide details a five-step observability methodology to eliminate the blame game in multi-tenant environments, replacing finger-pointing with shared evidence to drive down mean time to resolution (MTTR).
The Enterprise Guide to SCEP: Deploying Simple Certificate Enrollment Protocol for Automated Campus WiFi Security
This technical reference guide provides a definitive architectural blueprint and step-by-step implementation strategy for enterprise WiFi certificate deployment using SCEP. It covers the critical differences between SCEP and PKCS, the exact deployment sequence required for success, and real-world risk mitigation strategies for IT leaders.
Why is my guest WiFi not connecting? Troubleshooting captive portal issues
This authoritative technical reference guide explains the underlying mechanics of captive portal detection and details the six primary failure modes that prevent guest WiFi from connecting. It provides IT managers and network architects with a practical troubleshooting framework to resolve HTTP redirect issues, DNS conflicts, and MAC randomization challenges.
How to Implement SCEP for Automated WiFi Certificate Enrollment
This guide explains how to implement SCEP (Simple Certificate Enrollment Protocol) for automated WiFi certificate enrollment across enterprise venues. It covers the full architectural blueprint - from PKI design and MDM integration to the mandatory three-step deployment sequence - and shows IT managers and network architects how to eliminate shared credentials, automate certificate lifecycle management, and satisfy PCI DSS and GDPR requirements at scale.
Got questions about your specific setup?
Our team works with venue operators, IT managers, and network engineers across 80,000 venues. Book a 20-minute call and we will show you how others like you solved it.
