Abstract: According to one embodiment of the invention, a method for generating an advisory message for an endpoint device includes determining a threat level for the endpoint device by identifying a connection type between the endpoint device and the wireless network. The method also includes determining a second threat level for the endpoint device by identifying a security policy of the endpoint device. The method further includes generating an advisory message for the endpoint device based on the threat levels. The advisory message indicates vulnerability of the endpoint device.

Abstract: According to one embodiment of the invention, a method for managing devices in a wireless network includes defining, by a managing device, assignment rules for geographic areas in the wireless network. The method also includes retrieving, by the managing device, device parameters from a device, the device located in a selected geographic area. The method further includes determining, by the managing device, the selected geographic area of the device by comparing the device parameters with the assignment rules. The method further includes displaying, by the managing device, the device in the selected geographic area.

Abstract: According to one embodiment of the invention, a method for synchronizing access points in a wireless network includes determining a service set identifier of a selected access point in the wireless network. The service set identifier identifies a name of a wireless connection. The method also includes determining an virtual local area network corresponding to the determined service set identifier. The virtual local area network is located in an extended service set. The extended service set includes a group of basic service sets. The method further includes identifying one or more access points located in the virtual local area network. The method further includes configuring the identified one or more access points to match a plurality of service parameters of the selected access point.

Abstract: A method for providing access to one or more resources in a computer network, establishing a connection between a user and the computer network via at least one wireless access point, generating an authentication level for the user associated with accessing the one or more resources, sending a program to the client device, receiving authentication data from the user, and changing the authorization level of the user based upon the authentication data received from the user.

Abstract: According to one embodiment of the invention, a method for classifying devices in a wireless network includes discovering, by a managing device, devices in the wireless network in accordance with discovery parameters. The discovery parameters include a parameter indicative of an IP address range. The method also includes retrieving, by the managing device, classification parameters from the devices. The method further includes comparing, by the managing device, the classification parameters with classification rules. The method further includes storing a device profile for each of the devices with classification parameters satisfying the classification rules.

Abstract: A method for providing access to one or more resources in a computer network, establishing a connection between a user and the computer network via at least one wireless access point, generating an authentication level for the user associated with accessing the one or more resources, sending a program to the client device, receiving authentication data from the user, and changing the authorization level of the user based upon the authentication data received from the user.

Abstract: According to one embodiment of the invention, a method for classifying devices in a wireless network includes discovering, by a managing device, devices in the wireless network in accordance with discovery parameters. The discovery parameters include a parameter indicative of an IP address range. The method also includes retrieving, by the managing device, classification parameters from the devices. The method further includes comparing, by the managing device, the classification parameters with classification rules. The method further includes storing a device profile for each of the devices with classification parameters satisfying the classification rules.

Abstract: According to one embodiment of the invention, a method for managing devices in a wireless network includes defining, by a managing device, assignment rules for geographic areas in the wireless network. The method also includes retrieving, by the managing device, device parameters from a device, the device located in a selected geographic area. The method further includes determining, by the managing device, the selected geographic area of the device by comparing the device parameters with the assignment rules. The method further includes displaying, by the managing device, the device in the selected geographic area.

Abstract: According to one embodiment of the invention, a method for synchronizing access points in a wireless network includes determining a service set identifier of a selected access point in the wireless network. The service set identifier identifies a name of a wireless connection. The method also includes determining an virtual local area network corresponding to the determined service set identifier. The virtual local area network is located in an extended service set. The extended service set includes a group of basic service sets. The method further includes identifying one or more access points located in the virtual local area network. The method further includes configuring the identified one or more access points to match a plurality of service parameters of the selected access point.

Abstract: According to one embodiment of the invention, a method for managing access to a wireless network includes defining access criteria for a plurality of endpoint devices in the wireless network. The access criteria includes a group of access policies controlling access to specific access points in the wireless network. The group of access policies are associated with respective access points and an identifier associated with a user. The method further includes configuring at least one endpoint device of the group of endpoint devices in the wireless network with the access criteria.

Abstract: According to one embodiment of the invention, a method for managing ad-hoc connections in a wireless network includes receiving, at an endpoint device, a connection policy from a managing device over the wireless network. The connection policy indicates network security settings for the endpoint device. The method also includes detecting at the endpoint device an ad-hoc connection. The method further includes responding to the ad-hoc connection based on the connection policy.

Abstract: According to one embodiment of the invention, a method for generating an advisory message for an endpoint device includes determining a threat level for the endpoint device by identifying a connection type between the endpoint device and the wireless network. The method also includes determining a second threat level for the endpoint device by identifying a security policy of the endpoint device. The method further includes generating an advisory message for the endpoint device based on the threat levels. The advisory message indicates vulnerability of the endpoint device.

Abstract: A computer-based system is configured for aggregating multiple router configurations into a single router configuration, enabling transfer of functionality from routers configured according to the respective router configurations to a single router having the single router configuration. The system includes a configuration determination resource configured for determining the router configurations from the multiple routers, and a device analyzer resource configured for determining for each router configuration a corresponding candidate configuration to be utilized in the single router configuration. Any conflict detected between the router configuration and the corresponding candidate configuration is managed by a conflict resolution resource, which determines the availability of a resolved configuration in the single router configuration to replace the corresponding router configuration.