[{"data":1,"prerenderedAt":781},["ShallowReactive",2],{"cms-globals:en":3,"post:en:blog:the-protocol-gap-in-captive-portals":454,"cms-block:promotion":552,"blog-recent-https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json-10940":553},{"navigation":4,"chrome":347},{"header":5,"f1":193,"f2":315},{"items":6},[7,44,83,140,154],{"id":8,"title":9,"url":10,"target":11,"description":11,"xfn":11,"children":12},10815,"Products","#","",[13,19,24,29,34,39],{"id":14,"title":15,"url":16,"target":11,"description":11,"xfn":17,"parent":8,"children":18},10816,"What is the IACBOX?","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwhat-is-the-iacbox\u002F","highlight",[],{"id":20,"title":21,"url":22,"target":11,"description":11,"xfn":11,"parent":8,"children":23},10817,"Licenses","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Flicenses\u002F",[],{"id":25,"title":26,"url":27,"target":11,"description":11,"xfn":11,"parent":8,"children":28},10818,"Multi-Tenant","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fmulti-tenant\u002F",[],{"id":30,"title":31,"url":32,"target":11,"description":11,"xfn":11,"parent":8,"children":33},10819,"iacbox.cloud","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fiacbox-cloud\u002F",[],{"id":35,"title":36,"url":37,"target":11,"description":11,"xfn":11,"parent":8,"children":38},10820,"Modules","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fmodules\u002F",[],{"id":40,"title":41,"url":42,"target":11,"description":11,"xfn":11,"parent":8,"children":43},10821,"Hardware","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fhardware\u002F",[],{"id":45,"title":46,"url":10,"target":11,"description":11,"xfn":11,"children":47},10822,"Industries",[48,53,58,63,68,73,78],{"id":49,"title":50,"url":51,"target":11,"description":11,"xfn":11,"parent":45,"children":52},10823,"Hospitality","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fhospitality\u002F",[],{"id":54,"title":55,"url":56,"target":11,"description":11,"xfn":11,"parent":45,"children":57},10824,"Healthcare","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fhealthcare\u002F",[],{"id":59,"title":60,"url":61,"target":11,"description":11,"xfn":11,"parent":45,"children":62},10825,"Education","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Feducational-institutions\u002F",[],{"id":64,"title":65,"url":66,"target":11,"description":11,"xfn":11,"parent":45,"children":67},10826,"Retail & Shopping Centers","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fretail-shopping-centers\u002F",[],{"id":69,"title":70,"url":71,"target":11,"description":11,"xfn":11,"parent":45,"children":72},10827,"Corporate","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fenterprises\u002F",[],{"id":74,"title":75,"url":76,"target":11,"description":11,"xfn":11,"parent":45,"children":77},10829,"Maritime","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fmaritime\u002F",[],{"id":79,"title":80,"url":81,"target":11,"description":11,"xfn":11,"parent":45,"children":82},10830,"Public Sector","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fpublic-sector\u002F",[],{"id":84,"title":85,"url":10,"target":11,"description":11,"xfn":11,"children":86},10831,"Integrations",[87,126],{"id":88,"title":89,"url":10,"target":11,"description":11,"xfn":11,"parent":84,"children":90},11154,"Login Methods",[91,96,101,106,111,116,121],{"id":92,"title":93,"url":94,"target":11,"description":11,"xfn":11,"parent":88,"children":95},10833,"SMS & Email","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fsms-email\u002F",[],{"id":97,"title":98,"url":99,"target":11,"description":11,"xfn":11,"parent":88,"children":100},10834,"Online Payment","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fonline-payment\u002F",[],{"id":102,"title":103,"url":104,"target":11,"description":11,"xfn":11,"parent":88,"children":105},10835,"Social Logins","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fsocial-logins\u002F",[],{"id":107,"title":108,"url":109,"target":11,"description":11,"xfn":11,"parent":88,"children":110},10836,"PMS Integrations","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fpms-integrations\u002F",[],{"id":112,"title":113,"url":114,"target":11,"description":11,"xfn":11,"parent":88,"children":115},10837,"Shipboard PMS","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fshipboard-pms\u002F",[],{"id":117,"title":118,"url":119,"target":11,"description":11,"xfn":11,"parent":88,"children":120},10838,"HIS Integrations","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fhis-integrations\u002F",[],{"id":122,"title":123,"url":124,"target":11,"description":11,"xfn":11,"parent":88,"children":125},10839,"External Authentication","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fexternal-authentication\u002F",[],{"id":127,"title":128,"url":10,"target":11,"description":11,"xfn":11,"parent":84,"children":129},11155,"Technology & API",[130,135],{"id":131,"title":132,"url":133,"target":11,"description":11,"xfn":11,"parent":127,"children":134},10841,"APIs","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fapis\u002F",[],{"id":136,"title":137,"url":138,"target":11,"description":11,"xfn":11,"parent":127,"children":139},10842,"Custom Integrations","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fcustom-integrations\u002F",[],{"id":141,"title":142,"url":10,"target":11,"description":11,"xfn":11,"children":143},10843,"Partner",[144,149],{"id":145,"title":146,"url":147,"target":11,"description":11,"xfn":11,"parent":141,"children":148},10844,"Become a Partner","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fbecome-a-partner\u002F",[],{"id":150,"title":151,"url":152,"target":11,"description":11,"xfn":11,"parent":141,"children":153},10845,"Find a partner","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Ffind-a-partner\u002F",[],{"id":155,"title":156,"url":10,"target":11,"description":11,"xfn":11,"children":157},10846,"Resources",[158,163,168,173,178,183,188],{"id":159,"title":160,"url":161,"target":11,"description":11,"xfn":11,"parent":155,"children":162},10847,"Updates","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fupdates\u002F",[],{"id":164,"title":165,"url":166,"target":11,"description":11,"xfn":11,"parent":155,"children":167},10848,"Security Advisories","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fsecurity-advisories\u002F",[],{"id":169,"title":170,"url":171,"target":11,"description":11,"xfn":11,"parent":155,"children":172},10849,"Training","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Ftraining\u002F",[],{"id":174,"title":175,"url":176,"target":11,"description":11,"xfn":11,"parent":155,"children":177},10850,"Downloads","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fdownloads\u002F",[],{"id":179,"title":180,"url":181,"target":11,"description":11,"xfn":11,"parent":155,"children":182},10851,"Blog","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fblog\u002F",[],{"id":184,"title":185,"url":186,"target":11,"description":11,"xfn":11,"parent":155,"children":187},10852,"FAQ","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Ffaq\u002F",[],{"id":189,"title":190,"url":191,"target":11,"description":11,"xfn":11,"parent":155,"children":192},10854,"Contact","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fcontact\u002F",[],{"items":194},[195,213,238,268,277,301],{"id":196,"title":9,"url":10,"target":11,"description":11,"xfn":11,"children":197},10855,[198,201,204,207,210],{"id":199,"title":21,"url":22,"target":11,"description":11,"xfn":11,"parent":196,"children":200},10856,[],{"id":202,"title":26,"url":27,"target":11,"description":11,"xfn":11,"parent":196,"children":203},10857,[],{"id":205,"title":31,"url":32,"target":11,"description":11,"xfn":11,"parent":196,"children":206},10858,[],{"id":208,"title":36,"url":37,"target":11,"description":11,"xfn":11,"parent":196,"children":209},10859,[],{"id":211,"title":41,"url":42,"target":11,"description":11,"xfn":11,"parent":196,"children":212},10860,[],{"id":214,"title":46,"url":10,"target":11,"description":11,"xfn":11,"children":215},10861,[216,220,223,226,229,232,235],{"id":217,"title":218,"url":51,"target":11,"description":11,"xfn":11,"parent":214,"children":219},10862,"Hotel & Hospitality",[],{"id":221,"title":55,"url":56,"target":11,"description":11,"xfn":11,"parent":214,"children":222},10863,[],{"id":224,"title":60,"url":61,"target":11,"description":11,"xfn":11,"parent":214,"children":225},10864,[],{"id":227,"title":65,"url":66,"target":11,"description":11,"xfn":11,"parent":214,"children":228},10865,[],{"id":230,"title":70,"url":71,"target":11,"description":11,"xfn":11,"parent":214,"children":231},10866,[],{"id":233,"title":75,"url":76,"target":11,"description":11,"xfn":11,"parent":214,"children":234},10868,[],{"id":236,"title":80,"url":81,"target":11,"description":11,"xfn":11,"parent":214,"children":237},10869,[],{"id":239,"title":85,"url":10,"target":11,"description":11,"xfn":11,"children":240},10870,[241,244,247,250,253,256,259,262,265],{"id":242,"title":93,"url":94,"target":11,"description":11,"xfn":11,"parent":239,"children":243},10871,[],{"id":245,"title":98,"url":99,"target":11,"description":11,"xfn":11,"parent":239,"children":246},10872,[],{"id":248,"title":103,"url":104,"target":11,"description":11,"xfn":11,"parent":239,"children":249},10873,[],{"id":251,"title":108,"url":109,"target":11,"description":11,"xfn":11,"parent":239,"children":252},10874,[],{"id":254,"title":113,"url":114,"target":11,"description":11,"xfn":11,"parent":239,"children":255},10875,[],{"id":257,"title":118,"url":119,"target":11,"description":11,"xfn":11,"parent":239,"children":258},10876,[],{"id":260,"title":123,"url":124,"target":11,"description":11,"xfn":11,"parent":239,"children":261},10877,[],{"id":263,"title":132,"url":133,"target":11,"description":11,"xfn":11,"parent":239,"children":264},10878,[],{"id":266,"title":137,"url":138,"target":11,"description":11,"xfn":11,"parent":239,"children":267},10879,[],{"id":269,"title":142,"url":10,"target":11,"description":11,"xfn":11,"children":270},10880,[271,274],{"id":272,"title":146,"url":147,"target":11,"description":11,"xfn":11,"parent":269,"children":273},10881,[],{"id":275,"title":151,"url":152,"target":11,"description":11,"xfn":11,"parent":269,"children":276},10882,[],{"id":278,"title":156,"url":10,"target":11,"description":11,"xfn":11,"children":279},10883,[280,283,286,289,292,295,298],{"id":281,"title":160,"url":161,"target":11,"description":11,"xfn":11,"parent":278,"children":282},10884,[],{"id":284,"title":165,"url":166,"target":11,"description":11,"xfn":11,"parent":278,"children":285},10885,[],{"id":287,"title":170,"url":171,"target":11,"description":11,"xfn":11,"parent":278,"children":288},10886,[],{"id":290,"title":175,"url":176,"target":11,"description":11,"xfn":11,"parent":278,"children":291},10887,[],{"id":293,"title":180,"url":181,"target":11,"description":11,"xfn":11,"parent":278,"children":294},10888,[],{"id":296,"title":185,"url":186,"target":11,"description":11,"xfn":11,"parent":278,"children":297},10890,[],{"id":299,"title":190,"url":191,"target":11,"description":11,"xfn":11,"parent":278,"children":300},10891,[],{"id":302,"title":303,"url":10,"target":11,"description":11,"xfn":11,"children":304},10892,"Company",[305,310],{"id":306,"title":307,"url":308,"target":11,"description":11,"xfn":11,"parent":302,"children":309},10893,"Asteas","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fasteas\u002F",[],{"id":311,"title":312,"url":313,"target":11,"description":11,"xfn":11,"parent":302,"children":314},10894,"Jobs","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fjobs\u002F",[],{"items":316},[317,322,327,332,337,342],{"id":318,"title":319,"url":320,"target":11,"description":11,"xfn":11,"children":321},10895,"Newsletter","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fnewsletter\u002F",[],{"id":323,"title":324,"url":325,"target":11,"description":11,"xfn":11,"children":326},10896,"Terms and Conditions","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fterms-and-conditions\u002F",[],{"id":328,"title":329,"url":330,"target":11,"description":11,"xfn":11,"children":331},10897,"Terms of Service","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fterms-of-service\u002F",[],{"id":333,"title":334,"url":335,"target":11,"description":11,"xfn":11,"children":336},10898,"Legal notice","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Flegal-notice\u002F",[],{"id":338,"title":339,"url":340,"target":11,"description":11,"xfn":11,"children":341},10899,"Accessibility","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Faccessibility\u002F",[],{"id":343,"title":344,"url":345,"target":11,"description":11,"xfn":11,"children":346},10900,"Data Protection","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fdata-protection\u002F",[],{"login_links":348,"reseller":357,"socialmedia":359,"phone":366,"email":367,"version":368,"logos":369,"integrations":408,"productNames":453},[349,354],{"link":350},{"url":351,"title":352,"target":353},"https:\u002F\u002Fmy.iacbox.com\u002F","my.iacbox","_blank",{"link":355},{"url":356,"title":31,"target":353},"https:\u002F\u002Fdashboard.iacbox.cloud",{"url":147,"title":358,"target":11},"Reseller",[360,363],{"url":361,"icon":362},"https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fiacbox\u002F","linkedin",{"url":364,"icon":365},"https:\u002F\u002Fwww.facebook.com\u002FIACBOX-519953261540603","facebook","+43 5442 62877","service@iacbox.com","24.0",[370,380,387,395,401],{"image":371,"url":11,"size":377,"display":378,"id":379},{"url":372,"width":373,"height":374,"alt":11,"subtype":375,"mime_type":376},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002Flogo_intercityhotel.svg",134,20,"svg+xml","image\u002Fsvg+xml","145",[],0,{"image":381,"url":11,"size":377,"display":385,"id":386},{"url":382,"width":383,"height":384,"alt":11,"subtype":375,"mime_type":376},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002Flogo_robinson.svg",159,22,[],1,{"image":388,"url":11,"size":392,"display":393,"id":394},{"url":389,"width":390,"height":391,"alt":11,"subtype":375,"mime_type":376},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002Flogo_25hours-hotels.svg",51,35,"125",[],2,{"image":396,"url":11,"size":377,"display":399,"id":400},{"url":397,"width":398,"height":384,"alt":11,"subtype":375,"mime_type":376},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002Flogo_steigenberger.svg",112,[],3,{"image":402,"url":11,"size":392,"display":406,"id":407},{"url":403,"width":404,"height":405,"alt":11,"subtype":375,"mime_type":376},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002Fkempinski.svg",2102,2183,[],4,[409,417,421,425,429,433,438,443,448],{"image":410,"url":11,"size":415,"display":416,"id":379},{"url":411,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F1-1.png",2000,"png","image\u002Fpng","150",[],{"image":418,"url":11,"size":415,"display":420,"id":386},{"url":419,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F2-1.png",[],{"image":422,"url":11,"size":415,"display":424,"id":394},{"url":423,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F3.png",[],{"image":426,"url":11,"size":415,"display":428,"id":400},{"url":427,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F4.png",[],{"image":430,"url":11,"size":415,"display":432,"id":407},{"url":431,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F5.png",[],{"image":434,"url":11,"size":415,"display":436,"id":437},{"url":435,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F6.png",[],5,{"image":439,"url":11,"size":415,"display":441,"id":442},{"url":440,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F7.png",[],6,{"image":444,"url":11,"size":415,"display":446,"id":447},{"url":445,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F8.png",[],7,{"image":449,"url":11,"size":415,"display":451,"id":452},{"url":450,"width":412,"height":412,"alt":11,"subtype":413,"mime_type":414},"https:\u002F\u002Fcms2.iacbox.com\u002Fdocuments\u002F9.png",[],8,[],[455],{"id":456,"date":457,"date_gmt":457,"guid":458,"modified":460,"modified_gmt":460,"slug":461,"status":462,"type":463,"link":464,"title":465,"content":467,"excerpt":469,"featured_media":379,"template":11,"meta":470,"categories":471,"class_list":473,"blocks":479,"acf":486,"wpml_current_locale":488,"wpml_translations":489,"_links":496,"_embedded":527},10940,"2017-11-21T10:18:37",{"rendered":459},"https:\u002F\u002Fcms2.iacbox.com\u002Fblog\u002Fthe-protocol-gap-in-captive-portals\u002F","2026-11-09T15:34:32","the-protocol-gap-in-captive-portals","publish","blog","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fblog\u002Fthe-protocol-gap-in-captive-portals\u002F",{"rendered":466},"The Protocol Gap in Captive Portals",{"rendered":11,"protected":468},false,{"rendered":11,"protected":468},{"_acf_changed":468,"footnotes":11},[472],27,[474,463,475,476,477,478],"post-10940","type-blog","status-publish","hentry","category-tech",[480],{"name":481,"id":482,"fields":483},"acf\u002Fwysiwyg","acf\u002Fwysiwyg_6af3fe822515c",{"variant":484,"border":468,"wysiwyg":485},"default","\u003Cp>In this series, we would like to highlight the issues that arise in communication between \u003Cstrong>hotspots\u002Fcaptive portals\u003C\u002Fstrong> and \u003Cstrong>end devices\u003C\u002Fstrong>. A layperson might assume that manufacturers of network hardware and operating systems addressed this problem long ago and solved it cleanly with a network protocol, but unfortunately that is a \u003Cem>misconception\u003C\u002Fem>. There is a major gap in the \u003Cem>protocol landscape\u003C\u002Fem>, and the solutions currently in use are better described as workarounds—and not infrequently even as dirty hacks.\u003C\u002Fp>\n\u003Ch2>The Protocol Gap\u003C\u002Fh2>\n\u003Cp>At present, there is no network protocol that a \u003Cem>captive portal\u003C\u002Fem> can use to communicate with the client. The goal is to convey simple information to the end device, such as that a login is required before this network can be used. In the enterprise environment, \u003Cem>802.1x\u003C\u002Fem> can take on this role, but this technology is generally limited to corporate use because, for one thing, it only covers login via username and password and none of the many other scenarios. In addition, many end users—such as hotel guests—are overwhelmed by a \u003Cstrong>WPA2 Enterprise login\u003C\u002Fstrong>, and at that point, online assistance is not possible either.\u003C\u002Fp>\n\u003Ch2>The Redirect Problem\u003C\u002Fh2>\n\u003Cp>Typically, a WiFi user must authenticate, buy a ticket, or simply agree to the terms of use in order to use the network. There are many variants, but that is beside the point—the problem is always the same. The user wants to reach the \u003Cem>login page\u003C\u002Fem> \u003Cem>conveniently\u003C\u002Fem>, without having to perform any special actions on their device. Because there is no standard for this process, \u003Cem>captive portals\u003C\u002Fem> have to perform various, sometimes questionable manipulations of network traffic to provide this functionality.\u003C\u002Fp>\n\u003Cp>A long time ago, users still had to manually open the web browser and visit any unencrypted website (via HTTP); then the captive portal could conveniently redirect the browser to the login page via HTTP response code 302.\u003C\u002Fp>\n\u003Cp>The number of \u003Cem>encrypted websites using TLS is increasing\u003C\u002Fem> and has been for a long time—recently, even sharply. While this is a good thing for the internet and end users, it prevents redirection to the login page. If a guest’s browser opens an encrypted page via HTTPS, it cannot be redirected without warnings. In the early days, this redirection was still done anyway, hoping that the guest would simply click away the \u003Cem>SSL\u002FTLS certificate warning\u003C\u002Fem>. By now, most people—rightly—consider it grossly negligent to train laypeople to behave in a way that could become a serious problem for online banking and online shops.\u003C\u002Fp>\n\u003Cp>In recent years, additional standards have been implemented to complement TLS and make it even more secure (or, in fact, truly secure), including\u003C\u002Fp>\n\u003Cul>\n\u003Cli>HSTS (HTTP Strict Transport Security)\u003C\u002Fli>\n\u003Cli>and HPKP (HTTP Persistent Key Pinning).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>HSTS is a \u003Cem>trust-on-first-use extension\u003C\u002Fem> that tells the browser that this website should only be accessed via TLS, so TLS stripping cannot be performed (as is unfortunately still the case with STARTTLS for email). HPKP, also trust-on-first-use, provides the browser with a hash value of the certificate, so that no other certificate is permitted—even if it would be valid (e.g., issued by an enterprise firewall including an installed CA on the client).\u003C\u002Fp>\n\u003Cp>These two extensions have the practical effect that the guest can no longer bypass a certificate warning. Without a doubt, this is a good thing for trust in encrypted connections. For these reasons, \u003Cstrong>IACBOX\u003C\u002Fstrong> has not redirected TLS connections to the landing page for quite some time.\u003C\u002Fp>\n\u003Ch2>The Workarounds\u003C\u002Fh2>\n\u003Cp>For several years now, most devices in a guest WiFi network have been mobile devices—so a solution was needed. The two major vendors, Google and Apple, developed a similar workaround. An unencrypted HTTP request is made to a vendor-specific page and, if a redirect (HTTP 302) occurs, a hotspot system is detected and a minimalist browser is opened. This bypasses the problem with encrypted browser start pages and also has the advantage that the user does not have to open the browser manually to see the login page. However, this feature also introduces a \u003Cem>\u003Ca title=\"https:\u002F\u002Fwww.iacbox.com\u002Fde\u002Fprodukte\u002Fprivacy-toolkit\u002F\" href=\"https:\u002F\u002Fcms.iacbox.com\u002Fdie-box\u002Fmodule\u002F\" target=\"_blank\" rel=\"noopener\">privacy\u003C\u002Fa> issue\u003C\u002Fem>—but that is another story.\u003C\u002Fp>\n\u003Cp>Not only mobile devices, but also operating systems such as Windows from version 8 onwards, or browsers such as current versions of Firefox and Google Chrome, perform this so-called \u003Cstrong>connectivity check\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>On the one hand, the connectivity check was a lifesaver for the difficult relationship between users and \u003Cem>captive portals\u003C\u002Fem>, but the different approaches and, in some cases, undocumented internal states still make the process fragile.\u003C\u002Fp>\n\u003Ch2>WISPr\u003C\u002Fh2>\n\u003Cp>Then there is \u003Cstrong>WISPr\u003C\u002Fstrong>, which is actually intended to facilitate roaming between 3\u002F4G and WiFi networks. Among other things, this protocol defines an XML interface over HTTPS through which the end device receives the information that it is behind a captive portal and what the URL for the landing page is. For Apple devices, this response is required for the \u003Cem>captive browser\u003C\u002Fem> to open. Android and Windows from version 8 onwards also support \u003Cstrong>WISPr\u003C\u002Fstrong>, but their connectivity check works without it as well. However, WISPr does not solve the underlying problem either, because the end device must already make this request to the \u003Cem>captive portal\u003C\u002Fem> (its gateway).\u003C\u002Fp>\n\u003Ch2>A real solution is needed\u003C\u002Fh2>\n\u003Cp>A glimmer of hope on the horizon is the new \u003Cstrong>IETF working group capport\u003C\u002Fstrong> [\u003Ca title=\"https:\u002F\u002Fdatatracker.ietf.org\u002Fwg\u002Fcapport\u002Fabout\u002F\" href=\"https:\u002F\u002Fdatatracker.ietf.org\u002Fwg\u002Fcapport\u002Fabout\u002F\" target=\"_blank\" rel=\"noopener\">https:\u002F\u002Fdatatracker.ietf.org\u002Fwg\u002Fcapport\u002Fabout\u002F\u003C\u002Fa>], which is working on new protocols, extensions to existing protocols, and interfaces that allow end devices to communicate with a \u003Cem>captive portal\u003C\u002Fem> in a standardized way. In this blog series, we will take a closer look at the current developments of this working group.\u003C\u002Fp>\n\u003Cp>A small but important step has already been taken—the RFC 7710 standard [\u003Ca title=\"https:\u002F\u002Ftools.ietf.orf\u002Fhtml\u002Frfc7710\" href=\"https:\u002F\u002Ftools.ietf.orf\u002Fhtml\u002Frfc7710\" target=\"_blank\" rel=\"noopener\">https:\u002F\u002Ftools.ietf.orf\u002Fhtml\u002Frfc7710\u003C\u002Fa>], which defines a DHCP option for IPv4 and IPv6 that sends a URL for a landing page to the client. \u003Cstrong>IACBOX\u003C\u002Fstrong> has supported this option since early 2016, but unfortunately we have not yet found any devices that actually honor it.\u003C\u002Fp>\n\u003Cp>This also reveals the real problem—\u003Cem>without implementation of the standards by operating system vendors\u003C\u002Fem>, nothing will change in the current situation.\u003C\u002Fp>\n\u003Cp>Read the second part of the series here: Current status of the capport RFC.\u003C\u002Fp>\n",{"quicklinks":487},true,"en_US",{"de_DE":490},{"locale":491,"id":492,"slug":493,"post_title":494,"href":495},"de_DE",9034,"die-protokoll-luecke-bei-captive-portals","Die Protokoll-Lücke bei Captive Portals","https:\u002F\u002Fcms2.iacbox.com\u002Fblog\u002Fdie-protokoll-luecke-bei-captive-portals\u002F",{"self":497,"collection":503,"about":506,"version-history":509,"predecessor-version":512,"wp:attachment":516,"wp:term":519,"curies":523},[498],{"href":499,"targetHints":500},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10940",{"allow":501},[502],"GET",[504],{"href":505},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog",[507],{"href":508},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Ftypes\u002Fblog",[510],{"count":386,"href":511},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10940\u002Frevisions",[513],{"id":514,"href":515},10941,"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10940\u002Frevisions\u002F10941",[517],{"href":518},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fmedia?parent=10940",[520],{"taxonomy":521,"embeddable":487,"href":522},"category","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fcategories?post=10940",[524],{"name":525,"href":526,"templated":487},"wp","https:\u002F\u002Fapi.w.org\u002F{rel}",{"wp:term":528},[529],[530],{"id":472,"link":531,"name":532,"slug":533,"taxonomy":521,"acf":534,"_links":535},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fcategory\u002Ftech\u002F","Tech","tech",[],{"self":536,"collection":541,"about":544,"wp:post_type":547,"curies":550},[537],{"href":538,"targetHints":539},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fcategories\u002F27",{"allow":540},[502],[542],{"href":543},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fcategories",[545],{"href":546},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Ftaxonomies\u002Fcategory",[548],{"href":549},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog?categories=27",[551],{"name":525,"href":526,"templated":487},[],[554,629,697],{"id":555,"date":556,"date_gmt":556,"guid":557,"modified":559,"modified_gmt":559,"slug":560,"status":462,"type":463,"link":561,"title":562,"content":564,"excerpt":565,"featured_media":379,"template":11,"meta":566,"categories":567,"class_list":569,"blocks":572,"acf":577,"wpml_current_locale":488,"wpml_translations":578,"_links":581,"_embedded":606},10475,"2026-08-21T15:36:04",{"rendered":558},"https:\u002F\u002Fcms2.iacbox.com\u002Fblog\u002Feu-cra-cyber-resilience-act-part-2\u002F","2026-11-09T13:18:01","eu-cra-cyber-resilience-act-part-2","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fblog\u002Feu-cra-cyber-resilience-act-part-2\u002F",{"rendered":563},"EU CRA – Cyber Resilience Act – Part 2",{"rendered":11,"protected":468},{"rendered":11,"protected":468},{"_acf_changed":468,"footnotes":11},[568],25,[570,463,475,476,477,571],"post-10475","category-sales",[573],{"name":481,"id":574,"fields":575},"acf\u002Fwysiwyg_6af3fe7f80d24",{"variant":484,"border":468,"wysiwyg":576},"\u003Ch2>EU CRA obligations from September 11\u003C\u002Fh2>\n\u003Cp>The CRA introduces a reporting obligation starting as early as \u003Cstrong>September 11, 2026\u003C\u002Fstrong>, which we would like to highlight here.\u003C\u002Fp>\n\u003Ch3>What needs to be reported?\u003C\u002Fh3>\n\u003Cp>– actively exploited vulnerabilities\u003C\u002Fp>\n\u003Cp>– or serious security incidents with an impact on product safety\u003C\u002Fp>\n\u003Cp>must be reported to \u003Cstrong>ENISA\u003C\u002Fstrong> via the Single Reporting Platform (SRP), which then automatically forwards them to the national CSIRT – in Austria, this is \u003Cstrong>CERT.at\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch3>Deadlines\u003C\u002Fh3>\n\u003Cp>Within 24h: Early warning after becoming aware of the vulnerability\u003C\u002Fp>\n\u003Cp>– Within 72h: More detailed report on the type and scope of the vulnerability, including an initial assessment and possible mitigation measures\u003Cbr \u002F>– A final report must be submitted 14 days after a bug fix or mitigation measure becomes available.\u003Cbr \u002F>– For serious security incidents, a detailed report must be made within one month.\u003Cbr \u002F>– Duty to inform users: Affected users must be informed immediately.\u003C\u002Fp>\n\u003Ch3>User Information Obligation\u003C\u002Fh3>\n\u003Cp>Since 2024, we have been regularly publishing \u003Cstrong>Security Advisories\u003C\u002Fstrong> on our homepage, which list the vulnerabilities that have occurred and been resolved.\u003C\u002Fp>\n\u003Cp>– \u003Ca href=\"https:\u002F\u002Fwww.iacbox.com\u002Fwissen\u002Fsecurity-advisories\u002F\">https:\u002F\u002Fwww.iacbox.com\u002Fwissen\u002Fsecurity-advisories\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Chr>\n\u003Ch3>Reporting vulnerabilities to us\u003C\u002Fh3>\n\u003Cp>In addition to the mandatory reporting of security gaps\u002Fincidents, we have now officially designated a \u003Cstrong>PSIRT\u003C\u002Fstrong> (Product Security Incident Response Team) to handle vulnerability management.\u003C\u002Fp>\n\u003Cp>You can reach our security team at any time via \u003Ca href=\"mailto:security@iacbox.com\">security@iacbox.com\u003C\u002Fa>. For serious security incidents or vulnerabilities, we ask you to use PGP encryption.\u003C\u002Fp>\n\u003Cp>– Our homepage now also provides a security.txt file: \u003Ca href=\"https:\u002F\u002Fwww.iacbox.com\u002F.well-known\u002Fsecurity.txt\">https:\u002F\u002Fwww.iacbox.com\u002F.well-known\u002Fsecurity.txt\u003C\u002Fa>\u003Cbr \u002F>– PGP Key: \u003Ca href=\"https:\u002F\u002Fwww.iacbox.com\u002F.well-known\u002Fsecurity-pub.asc\">https:\u002F\u002Fwww.iacbox.com\u002F.well-known\u002Fsecurity-pub.asc\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Vulnerability Disclosure Policy\u003C\u002Fh3>\n\u003Cp>We have published a Vulnerability Disclosure Policy (VDP) describing our preferred \u003Cstrong>Coordinated Vulnerability Disclosure (CVD)\u003C\u002Fstrong> process. This is intended to give us the opportunity to fix vulnerabilities before they are published and, on the other hand, to establish a timeline within which we will respond.\u003C\u002Fp>\n\u003Cp>– \u003Ca href=\"https:\u002F\u002Fwww.iacbox.com\u002Fiacbox-vdp.txt\">https:\u002F\u002Fwww.iacbox.com\u002Fiacbox-vdp.txt\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Vulnerability Management\u003C\u002Fh3>\n\u003Cp>The IACBOX development team has been managing vulnerabilities for years, particularly those occurring in the third-party dependencies of our product. In the course of CRA compliance, we have further expanded and formalized this process.\u003Cbr \u002F>We produce \u003Cstrong>SBOMs (Software Bill of Materials)\u003C\u002Fstrong> for our software products to identify vulnerabilities in our supply chain quickly and efficiently. Although the SBOM obligation does not come into effect until 2027, it has been an integral part of our software development for some time now in order to ensure effective vulnerability management.\u003C\u002Fp>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cp>Stay secure and up to date with IACBOX Software Maintenance! Should you require further information, please contact us.\u003C\u002Fp>\n",{"quicklinks":487,"meta_override":468},{"de_DE":579},{"locale":491,"id":580,"slug":560,"post_title":563,"href":558},8682,{"self":582,"collection":587,"about":589,"version-history":591,"predecessor-version":594,"wp:attachment":598,"wp:term":601,"curies":604},[583],{"href":584,"targetHints":585},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10475",{"allow":586},[502],[588],{"href":505},[590],{"href":508},[592],{"count":386,"href":593},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10475\u002Frevisions",[595],{"id":596,"href":597},10476,"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10475\u002Frevisions\u002F10476",[599],{"href":600},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fmedia?parent=10475",[602],{"taxonomy":521,"embeddable":487,"href":603},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fcategories?post=10475",[605],{"name":525,"href":526,"templated":487},{"wp:term":607},[608],[609],{"id":568,"link":610,"name":611,"slug":612,"taxonomy":521,"acf":613,"_links":614},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fcategory\u002Fsales\u002F","Sales","sales",[],{"self":615,"collection":620,"about":622,"wp:post_type":624,"curies":627},[616],{"href":617,"targetHints":618},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fcategories\u002F25",{"allow":619},[502],[621],{"href":543},[623],{"href":546},[625],{"href":626},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog?categories=25",[628],{"name":525,"href":526,"templated":487},{"id":630,"date":631,"date_gmt":631,"guid":632,"modified":634,"modified_gmt":634,"slug":635,"status":462,"type":463,"link":636,"title":637,"content":639,"excerpt":640,"featured_media":379,"template":11,"meta":641,"categories":642,"class_list":643,"blocks":645,"acf":650,"wpml_current_locale":488,"wpml_translations":651,"_links":654,"_embedded":679},10473,"2026-08-13T09:48:03",{"rendered":633},"https:\u002F\u002Fcms2.iacbox.com\u002Fblog\u002Feu-cra-cyber-resilience-act\u002F","2026-11-09T13:17:59","eu-cra-cyber-resilience-act","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fblog\u002Feu-cra-cyber-resilience-act\u002F",{"rendered":638},"EU CRA – Cyber Resilience Act",{"rendered":11,"protected":468},{"rendered":11,"protected":468},{"_acf_changed":468,"footnotes":11},[568],[644,463,475,476,477,571],"post-10473",[646],{"name":481,"id":647,"fields":648},"acf\u002Fwysiwyg_6af3fe7f8c866",{"variant":484,"border":468,"wysiwyg":649},"\u003Cp>In this blog series, we want to keep you up to date on the implementation of the \u003Cstrong>Cyber Resilience Act (CRA)\u003C\u002Fstrong> for IACBOX.\u003C\u002Fp>\n\u003Ch2>Overview\u003C\u002Fh2>\n\u003Cp>The CRA is an EU-wide regulation (EU 2024\u002F2847) that applies to \u003Cstrong>all products with digital elements\u003C\u002Fstrong>. The only exceptions are products that are already subject to other\u002Fstricter regulations in areas such as medical devices, automotive, etc.\u003C\u002Fp>\n\u003Cp>Key CRA Points:\u003Cbr \u002F>– As an EU regulation, it enters into force directly and does not require national transposition (unlike NIS2).\u003Cbr \u002F>– The product must be developed through a secure development lifecycle and maintained accordingly.\u003Cbr \u002F>– Security updates must be provided promptly and free of charge for the expected product lifetime of at least 5 years.\u003Cbr \u002F>– Updates must remain available for 10 years.\u003Cbr \u002F>– Pure SaaS products are also exempt, provided that no other on-premises products depend on them. This means that cloud services such as the IACBOX licensing and update server also fall within the scope of the CRA.\u003C\u002Fp>\n\u003Ch2>Timeline\u003C\u002Fh2>\n\u003Cp>– The CRA already entered into force in December 2024.\u003Cbr \u002F>– However, there is a transition period until December 11, 2027. From that date forward, affected products may only be placed on the EU market if they are CRA-compliant and bear the CE marking.\u003Cbr \u002F>– Legacy products already in operation are exempt from the essential requirements and the CE marking obligation; however, reporting obligations still apply.\u003Cbr \u002F>– The initial obligations take effect as early as \u003Cstrong>September 11, 2026\u003C\u002Fstrong>. Actively exploited vulnerabilities or severe security incidents must be reported to ENISA, which will automatically notify the competent national CSIRT—in Austria, \u003Cstrong>CERT.at\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch2>Categorization\u003C\u002Fh2>\n\u003Cp>The CRA divides products into several categories with differing requirements.\u003Cbr \u002F>– \u003Cstrong>Standard\u003C\u002Fstrong> – Products with digital elements: the majority of offered products with lower cybersecurity risk – self-assessment of CRA compliance\u003Cbr \u002F>– \u003Cstrong>Important products\u003C\u002Fstrong>\u003Cbr \u002F>– Subgroup \u003Cstrong>Class I\u003C\u002Fstrong>: Self-assessment of CRA compliance when applying a harmonized standard (these are currently (Aug 2026) still pending!) or a notified body must assess CRA conformity\u003Cbr \u002F>– Subgroup \u003Cstrong>Class II\u003C\u002Fstrong>: Hypervisors, intrusion detection\u002Fprevention systems, firewalls, products whose primary functions are designed for security. A notified body must assess CRA conformity\u003Cbr \u002F>– \u003Cstrong>Critical products\u003C\u002Fstrong>: Hardware security, smart cards, secure elements, etc.\u003C\u002Fp>\n\u003Cp>As a networking product, IACBOX falls into the category of “Important products – Class I”, and we are aiming for a self-assessment based on a harmonized standard, provided one is available in time.\u003C\u002Fp>\n\u003Ch2>IACBOX Roadmap\u003C\u002Fh2>\n\u003Cp>– The current versions v24 and v26 are still based on our proven proprietary Linux platform. After December 2027, these versions will only receive security updates and bug fixes that do not represent substantial modifications.\u003Cbr \u002F>– The first CRA-compliant version will be v27, scheduled for late 2027 and built on a new Linux platform to meet the stringent requirements more efficiently.\u003C\u002Fp>\n\u003Ch2>Contact\u003C\u002Fh2>\n\u003Cp>Stay secure and up to date with IACBOX Software Maintenance! Please contact us if you require further information.\u003C\u002Fp>\n",{"quicklinks":487},{"de_DE":652},{"locale":491,"id":653,"slug":635,"post_title":638,"href":633},8683,{"self":655,"collection":660,"about":662,"version-history":664,"predecessor-version":667,"wp:attachment":671,"wp:term":674,"curies":677},[656],{"href":657,"targetHints":658},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10473",{"allow":659},[502],[661],{"href":505},[663],{"href":508},[665],{"count":386,"href":666},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10473\u002Frevisions",[668],{"id":669,"href":670},10474,"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10473\u002Frevisions\u002F10474",[672],{"href":673},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fmedia?parent=10473",[675],{"taxonomy":521,"embeddable":487,"href":676},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fcategories?post=10473",[678],{"name":525,"href":526,"templated":487},{"wp:term":680},[681],[682],{"id":568,"link":610,"name":611,"slug":612,"taxonomy":521,"acf":683,"_links":684},[],{"self":685,"collection":689,"about":691,"wp:post_type":693,"curies":695},[686],{"href":617,"targetHints":687},{"allow":688},[502],[690],{"href":543},[692],{"href":546},[694],{"href":626},[696],{"name":525,"href":526,"templated":487},{"id":698,"date":699,"date_gmt":699,"guid":700,"modified":702,"modified_gmt":702,"slug":703,"status":462,"type":463,"link":704,"title":705,"content":707,"excerpt":708,"featured_media":379,"template":11,"meta":709,"categories":710,"class_list":712,"blocks":715,"acf":726,"wpml_current_locale":488,"wpml_translations":727,"_links":733,"_embedded":758},10482,"2026-07-20T13:04:29",{"rendered":701},"https:\u002F\u002Fcms2.iacbox.com\u002Fblog\u002Fwhy-multi-tenant-is-becoming-the-logical-evolution-for-many-it-organizations\u002F","2026-11-09T14:03:04","why-multi-tenant-is-becoming-the-logical-evolution-for-many-it-organizations","https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fblog\u002Fwhy-multi-tenant-is-becoming-the-logical-evolution-for-many-it-organizations\u002F",{"rendered":706},"Why Multi-Tenant Is Becoming the Logical Evolution for Many IT Organizations",{"rendered":11,"protected":468},{"rendered":11,"protected":468},{"_acf_changed":468,"footnotes":11},[711],26,[713,463,475,476,477,714],"post-10482","category-talk",[716],{"name":481,"id":717,"fields":718},"acf\u002Fwysiwyg_6af3fe7f994af",{"variant":484,"border":468,"wysiwyg":719,"ctas":720,"link":725},"\u003Cp>Today, many IT organizations do not have a technology problem. They have a scaling problem.\u003C\u002Fp>\n\u003Cp>New locations are established. New customers are added. New projects successfully go live. However, the real challenge only begins afterward: How can an increasing number of mutually independent organizations be operated efficiently over the long term without administrative and operational overhead growing at the same rate?\u003C\u002Fp>\n\u003Cp>This is precisely the question currently facing managed service providers, internet service providers, hotel groups, educational institutions, and multi-site enterprises.\u003C\u002Fp>\n\u003Ch2>The Real Challenge Begins After Go-Live\u003C\u002Fh2>\n\u003Cp>Today, a new deployment is rarely the issue.\u003C\u002Fp>\n\u003Cp>A site is set up, the captive portal is configured, and commissioning is completed.\u003C\u002Fp>\n\u003Cp>The real work only begins afterward: users must be managed, software updated, policies adjusted, and support tickets resolved. Each additional customer or site brings its own requirements, responsibilities, and processes.\u003C\u002Fp>\n\u003Cp>With ten installations, this overhead is hardly noticeable. With a hundred, it dominates everyday operations.\u003C\u002Fp>\n\u003Ch2>A Pattern Repeating Across Industries\u003C\u002Fh2>\n\u003Cp>In recent years, we have encountered this pattern time and again across numerous discussions with partners and customers—regardless of whether they operate in managed services, education, or hospitality.\u003C\u002Fp>\n\u003Cp>A municipal data center manages approximately 50 schools. Each school requires its own user management, custom settings, and the ability to operate autonomously. At the same time, security policies must be enforced centrally, and visibility across all sites must be maintained. A typical case, not an isolated one.\u003C\u002Fp>\n\u003Cp>A hotel group faces a similar challenge. Each hotel needs to operate autonomously without sacrificing centralized standards and shared management.\u003C\u002Fp>\n\u003Cp>Managed service providers experience the exact same trend, only in an intensified form. Those managing ten customers know every configuration in detail and calculate their overhead per customer accordingly. When that same provider grows to fifty customers, it is not just the number of installations that increases, but also update cycles, support tickets, and escalation paths. The original calculation per customer no longer holds up: revenue grows linearly, while internal overhead scales faster.\u003C\u002Fp>\n\u003Cp>It is precisely at this point that margins begin to shrink for many providers, even as the business appears to grow from the outside.\u003C\u002Fp>\n\u003Cp>The industries differ. The pattern remains the same.\u003C\u002Fp>\n\u003Ch2>Growth Changes the Operating Model\u003C\u002Fh2>\n\u003Cp>In response, many organizations invest in more powerful infrastructure, new features, or additional staff.\u003C\u002Fp>\n\u003Cp>Far less often is it questioned whether the operating model itself still fits the organization’s scale. This is where the primary bottleneck typically emerges: when every new customer adds administrative overhead, it is not just the business that grows—complexity increases as well.\u003C\u002Fp>\n\u003Cp>Hiring more staff may alleviate this bottleneck in the short term. In the long run, however, what scales most is administrative overhead, not the business.\u003C\u002Fp>\n\u003Ch2>Why Multi-Tenant Is Moving Into Focus\u003C\u002Fh2>\n\u003Cp>As organizations expand, a fundamental question arises with increasing urgency: does every organization really need to operate its own management platform? Or is there a more efficient way to manage many segregated organizations centrally without compromising their autonomy?\u003C\u002Fp>\n\u003Cp>This is precisely why Multi-Tenant is gaining importance—not as a new buzzword or short-lived trend, but as an answer to operational requirements driven by the growth of modern IT organizations.\u003C\u002Fp>\n\u003Cp>For managed service providers, internet service providers, hotel groups, educational institutions, and multi-site enterprises, Multi-Tenant is increasingly becoming a strategic decision.\u003C\u002Fp>\n\u003Cp>Today, the crucial question is no longer whether Multi-Tenant makes sense. It is: at what scale does the traditional operating model cease to support growth and instead become the limiting factor?\u003C\u002Fp>\n\u003Ch2>IACBOX Multi-Tenant Is in Its Final Stages\u003C\u002Fh2>\n\u003Cp>It is precisely to address these requirements that we are currently developing IACBOX Multi-Tenant. It will allow multiple segregated customers, sites, or organizations to be managed centrally via a single platform—without sacrificing their autonomy.\u003C\u002Fp>\n\u003Cp>Development is already in its final stages. If you are facing similar challenges or would like to learn more about the architecture and intended use cases at an early stage, feel free to get in touch with us.\u003C\u002Fp>\n",[721],{"link":722},{"title":723,"url":724,"target":11},"Learn More About IACBOX Multi-Tenant","#request-demo",{"title":723,"url":724,"target":11},{"quicklinks":487},{"de_DE":728},{"locale":491,"id":729,"slug":730,"post_title":731,"href":732},8684,"warum-multi-tenant-fuer-viele-it-organisationen-zur-logischen-entwicklung-wird","Warum Multi-Tenant für viele IT-Organisationen zur logischen Entwicklung wird","https:\u002F\u002Fcms2.iacbox.com\u002Fblog\u002Fwarum-multi-tenant-fuer-viele-it-organisationen-zur-logischen-entwicklung-wird\u002F",{"self":734,"collection":739,"about":741,"version-history":743,"predecessor-version":746,"wp:attachment":750,"wp:term":753,"curies":756},[735],{"href":736,"targetHints":737},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10482",{"allow":738},[502],[740],{"href":505},[742],{"href":508},[744],{"count":386,"href":745},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10482\u002Frevisions",[747],{"id":748,"href":749},10483,"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog\u002F10482\u002Frevisions\u002F10483",[751],{"href":752},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fmedia?parent=10482",[754],{"taxonomy":521,"embeddable":487,"href":755},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fcategories?post=10482",[757],{"name":525,"href":526,"templated":487},{"wp:term":759},[760],[761],{"id":711,"link":762,"name":763,"slug":764,"taxonomy":521,"acf":765,"_links":766},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fcategory\u002Ftalk\u002F","Talk","talk",[],{"self":767,"collection":772,"about":774,"wp:post_type":776,"curies":779},[768],{"href":769,"targetHints":770},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fcategories\u002F26",{"allow":771},[502],[773],{"href":543},[775],{"href":546},[777],{"href":778},"https:\u002F\u002Fcms2.iacbox.com\u002Fen\u002Fwp-json\u002Fwp\u002Fv2\u002Fblog?categories=26",[780],{"name":525,"href":526,"templated":487},1794375326283]