Separate your outbound NAT to prevent issues with guest wireless traffic

In this article:

If your organization provides guest wireless network service, issues related to guest traffic may appear on your Scorecard, even though you have no control over guest devices. You can keep those issues off your Scorecard by separating out your outbound network address translation (NAT) IP address.

Deploy a separate guest NAT IP address

A wireless network NAT IP address that is separate and unique from the NAT IP address on your office network routes guest traffic directly out to the internet with a unique digital footprint. Guest traffic never flows on your internal office wireless network, so any potential risk introduced by those unknown devices is neutralized, even if they contain vulnerabilities or have been compromised.

Tell Security Scorecard about the discrete NAT address

After you deploy a separate NAT IP address for your guest wireless network, tell SecurityScorecard about it and provide the unique IP address:

• On your Scorecard, refute any findings related to guest NAT address, indicating that it is separate from your office network.
• Submit a Support request to remove findings related to traffic on the guest NAT address.
  
  

We will remove from your Scorecard any issues detected or associated with your guest NAT IP address..