Which Access zone should be used for my devices?

February 27, 2024

All Access zones have Internet access, although the local access requirements and your business needs will ultimately determine which zone should be used for each device. 

Secure zone 

Devices connected to this zone cannot be accessed from devices connected to either the Employee or Guest zones. All Ethernet-connected devices are also automatically placed in this zone. This is ideal for devices that require extra protection, such as:  

  • Point of sale (POS)
  • File servers and network-attached storage (NAS)
  • Security cameras and other security equipment
  • IoT devices
  • Smart displays

Devices in the Secure zone can access each other over the local network; however, you can block new devices connecting to this zone from all local access without manual authorization. 

If you have resources on the network that you wish to share over the network with select employees, they can also be placed in this zone: 

  • Printers
  • File servers and network-attached storage 
  • Smart Displays and other network-attached media devices
  • Secure zone devices can even be grouped to make access sharing easier.

 

Employee zone

All employee devices should be using this zone. This will allow you to manage their access to any shared resources in the Secure zone. Best of all, you can use Keycard to access device-usage analytics, review timecard data to help with future scheduling and increase workplace productivity. 

  • Employee laptops
  • Employee mobile phones and tablets

You can also block all local network access to any new devices connecting to this zone until you manually approve access.

 

Guest zone 

This zone is meant strictly for your guests.

Devices connecting to this zone have Internet access with no local network access. It is not possible to share any local network resources such as printers or media players with guests.

Only screen-enabled devices such as mobile phones, tablets, and laptops can connect to this zone because they need to sign-in using the Guest captive portal, which is also required every 24 hours.