The Internet of Things (IoT) is expected to nearly double in size to more than 29 billion connected devices by 2030 (Statista). While the numbers may be hard to visualize, one thing is clear: IoT is having a massive impact on the world’s enterprise communications networks.From smart cities to predictive maintenance on factory floors, IoT can transform the way your business operates by delivering unprecedented levels of data visibility. IoT-driven insights, context, and automation allow you to reinvent your operational processes for cost-saving efficiencies and positive customer experiences that foster brand loyalty and help you increase revenues.

The Juniper Mist IoT Assurance cloud service streamlines IT operations while securing network connections for headless IoT and BYOD devices. It uses Multi Pre-Shared Key (MPSK) or Private Pre-Shared Key (PPSK) as new types of identity and policy vectors to provide a simple yet comprehensive way to onboard client devices without relying on client MAC addresses.

Key Features

Simplified onboarding:MAC-less client device onboarding

Onboard client devices without relying on MAC addresses for seamless experiences and the same secure segmentation and policy control you get with traditional 802.1X authentication.

No need to associate a particular PSK with a client MAC address ahead of time
Automatically avoids challenges associated with MAC randomization

PSK Life Cycle Management:

Simplify Day 2 operations at scale with automatic PSK expiration. A simple, effective key migration technique allows IT to keep PSKs regularly rotated while onsite personnel avoid any disruption in service.

Ability to create, rotate and auto-expire PSKs
In case a single PSK is compromised, it is simple to identity the blast radius, revoke the PSK without affecting other clients

Dynamic traffic engineering

Based on MPSK identity, IoT traffic can be forwarded locally to an upstream access switch with a specified VLAN tag or tunneled to a Juniper Mist Edge in the data center for secure transport to the application server. In both scenarios, traffic remains isolated from the rest of the network.

Assign VLAN to a given PSK
Ability to assign a Role to a PSK for dynamic per-user WxLAN policies

Personal WLAN:PSK role-based WxLAN policy

Assign network policy restrictions to client devices based on PSK role using the Juniper Mist cloud-based WxLAN policy framework. IT admins can easily allow IoT devices to access only required resources and block access to everything else.

Creates virtual broadcast domain per PSK

User level accountability with PSK simplicity: Automated User-Based PSK Generation

Create self-provisioning PSK portals with Juniper Mist to automate PSK generation based on user identity. This supports BYOD workflows leveraging native SAML connectors for SSO (single sign-on) experiences. Enables seamless client device onboarding via mobile QR code or entering a personalized passphrase without installing any client software.

PSK Name is used as a new identity vector
PSK Name is reported in the Mist UI
PSK Name is reported in client-sessions or client-join webhooks for 3rd party audit integration

Automated PSK provisioning and rotation

PSK Portals allow simple end-user onboarding via authenticated SSO login.
Based on SSO login, an end-user email id is automatically associated with a generated PSK and used as an identity.

100% programmable APIs

Easily integrate IoT Assurance into any mobile device management solution to streamline IoT device provisioning or into any user self-provisioning portal.

Microsoft Technology: Microsoft Azure Cloud Platform,Microsoft Intune Endpoint Management, Microsoft Azure Private 5G Core, Azure private multi-access edge compute (MEC) Platform

Juniper Mist IoT Assurance and Access ControlMarconi Wireless Inc

Juniper Mist IoT Assurance and Access Control

Marconi Wireless Inc

Juniper Mist IoT Assurance and Access Control

Marconi Wireless Inc

Juniper Mist IoT Assurance and Access Control
Marconi Wireless Inc