The internationally active Helbling Group was seeking a multi-tenant system for network access control (NAC) across all its global sites. The NAC architecture sought was required to meet the following needs:

• Customised access control for different devices with varying security and zoning requirements across distributed locations.
• Each Helbling site should function autonomously and independently despite the central infrastructure, meaning it should be able to manage itself.
• Redundancy had to be solved across sites – for example, if a RADIUS server fails in San Diego, other sites must automatically bridge the gap. Multiple RADIUS servers are specified on the switches for this purpose.
• Different device types – such as internal devices, IoT devices, lab equipment, and guest devices – needed to be integrated into the solution.
• Device types had to be managed on a tenant basis. Power users should only be able to manage devices at their own site, not across multiple locations. An exception is made for administrators at the main site, who must be able to capture, edit, and delete devices across all locations.

Helbling chose the onway solution because it efficiently covered all of the above requirements. Additional convincing factors included:

• A one-stop service: from engineering through basic configuration to management and maintenance, onway handles everything.
• Systems can be updated worldwide without interruptions. Updating the entire system landscape takes less than 1–2 hours.
• onway provides high redundancy: each site is protected by backup servers, minimising downtime.
• The onway solution also offers an attractive price/performance ratio.

To meet the requirements outlined in the initial situation, onway implemented an integrated solution consisting of three components: onway director, macman, and mpp. These work seamlessly together to enable both local management at each site and central control by global administrators.

The RADIUS server macman distinguishes between internal devices with certificates and IoT devices such as telephones, printers, or lab equipment, enabling different security requirements depending on device type.

mpp ensures secure guest access – all within a protected and flexible, site-specific system.

Founded in 1963, the internationally active Helbling Group positions itself as an interdisciplinary alliance of engineering and consulting expertise. The group employs over 600 professionals across its locations in Switzerland, Germany, Poland, the USA, and China. Its focus is on selected services for technological innovation and business consulting.

onway is the leading provider of tailored communication solutions for all areas of modern network infrastructure. We support over 100 customers from various industries with the design, implementation, operation, and support of secure ICT infrastructures. Our own products include a multi-tenant smart access solution, public hotspots, and mobile solutions for public transport vehicles. In addition, we integrate communication solutions from established manufacturers, creating seamless, future-proof networks. The onway Group is fully certified according to ISO 9001:2015, ISO 14001:2015, and ISO/IEC 27001:2022.