HAN Networks Co., Ltd.

Overview Features Technical Specifications Product Information

Home Page >Product >Security and Access Management Platform >Software

Security and Access Management Platform

SAMP (Security and Access Management Platform) by Beijing HAN Networks Technology Co., Ltd. is an advanced access control solution for modern enterprise networks. It supports secure BYOD, guest access, and IoT connectivity while protecting network and data security, enhancing efficiency and collaboration.

Features

Flexible and Scalable Deployment

Built on a microservices architecture, SAMP offers high concurrency and availability, catering to large enterprises while remaining scalable for smaller networks.

Supports private and public cloud deployments, customizable to specific needs.

Multi-tenant capable, providing secure access management for multiple clients with a single instance.

Enables “headquarters + branch” deployment for faster authentication, better user experience, and remote redundancy to ensure uninterrupted service.

Unified Access and Authentication

The platform includes a standard Radius server and a content-based policy server, supporting authentication for wired, wireless, and IoT access. It offers flexible methods such as MAC, Captive Portal, 802.1X, DSPSK, WeChat, SMS, email, and QR code authentication. Additionally, it enhances security through differentiated access control based on time, SSID, user group, and device type.

BYOD and Guest Access

The platform enables secure BYOD self-service, allowing employees to easily connect personal devices to the network. It provides individual employee portals and supports guest self-registration with customizable approval rules, either automated or with employee intervention.

Comprehensive Authorization

The platform supports authorization by device, user role, access location, SSID, authentication method (802.1X, MAC, Captive Portal), and access type (wired or wireless).

Flexible Authentication Sources

The platform supports authentication through local data sources and third-party systems, including LDAP/LDAPS, Microsoft AD, and external Radius servers, ensuring seamless integration with diverse enterprise environments.

Marketing Templates

The platform identifies device types, brands, and operating systems, enabling targeted marketing strategies. It offers customizable templates for embedding multimedia content, such as images and videos, to create engaging and tailored advertising campaigns.

Seamless Integration

The platform supports standard authentication protocols for compatibility with third-party devices, preserving existing investments while enabling network upgrades. It also offers a dictionary function for deep integration with leading vendors, ensuring unified enterprise solutions.

RESTful API Integration

The platform offers standard RESTful APIs, allowing SAMP to integrate with existing management systems through secondary development, enabling unified system management.

Technical Specifications

Category	Feature	Details
Deployment	Virtual Installation	· VMware ESXi
		· Microsoft Hyper-V
		· KVM on CentOS
	Public Cloud Installation	· Alibaba Cloud, Tencent Cloud, China Telecom, Baidu Cloud, Huawei Cloud
	Public Cloud Installation	· AWS, Azure, etc.
Distributed Architecture	Distributed Computing Framework	· Supports multi-tenant services, providing SAMP services for multiple customers within a single instance.
AAA	Authentication Policy Center	· MAC Authentication
		· 802.1X Authentication
		· Captive Portal Authentication
		· DSPSK
		· Unified Authentication
		· IoT
Guest	Guest Management	· Guest Self-Servic
		· Guest Hierarchical Management
		· SMS/Email Notifications
		· Device Recognition
BYOD	BYOD Management	· Employee Self-Service
		· Role-Based Organizational
		· SMS/Email Notifications
		· Device Recognition
Asset	Asset Management	· Enterprise Network Asset Management
External Authentication Sources	External Authentication Sources	· LDAP
		· AD
		· External Radius
Social Login	Social Account Login	· WeChat
		· Facebook
		· Google+
QR Code	QR Code Authentication	· Supports QR Code-Based Authentication
Custom Portal	Custom Portal Pages	· Flexible customization, supporting text, images, videos, and advertisement insertion (optional)
Access Control	Endpoint-Based Access	· Supports MAC Address-Based Endpoint Access
	Username + AP MAC Address Access	· Allows specific users to connect via designated APs
	Device-Based Access	· Controls access based on device type, operating system, and system policies
Strategy	Bandwidth Control	· Role and SSID-Based Bandwidth Management
Strategy	Duration Control	· Configurable maximum connection time per day, week, or month
Endpoint Recognition	Device Type Recognition	· Supports identification of smartphones, tablets, laptops, and PCs
	Device OS Recognition	· IOS、Android、Windows、Symbian
	System Recognition Statistics	· Displays graphical statistics for device types and usage
Certificate Management	Certificate Management	· Supports custom security certificates
Vendor Integration	Multi-Vendor Integration	· Integrates with leading vendors (e.g., Cisco, Aruba) for unified networking
Firewall Integration	Firewall Collaboration	· Performs actions based on firewall detection results (e.g., force logout, blacklist) (upcoming feature)
Open API	OpenAPI Interface	· Provides standard RESTful API for development
System Auditing	System Auditing	· Includes event logs and statistical reports

Product Information

Product Brochure