Dynamic Hotspot Management
DWP is developed specifically to handle a wide variety of Wi-Fi and Hotspot scenarios. It provides administrators the ability to set configuration within the management console to allow DWP users to bypass Webroot's proxies, or fail open to connect to the Internet, in the unlikely event they are not able to connect to a Webroot proxy server for any reason.
To ensure that users are able to maintain connectivity at all times, DWP follows the connection path described in this topic.
First Attempt
- DWP will attempt to connect to the web proxy server using the proxy server address and the port set by the administrator.
- In the event that a connection cannot be established, it will go to the second attempt.
Second Attempt
- DWP will again attempt to connect to the web proxy server by using the proxy server address with dynamically changing ports (port hopping).
- DWP will attempt to switch between ports (80, 8080 and 3128) at 15 second intervals until a connection is made.
- This will be enabled in all DWP clients by default and will not be configurable.
- In the event that a connection to our web proxy server still cannot be established, it will go to the third attempt.
Third Attempt
- DWP will go into Default Security mode and try to filter traffic by contacting the Webroot Threat Intelligence platform via port 443 to use the requested site's reputation score as a guide, in the same way our SecureAnywhere Endpoint solutions do.
- This is turned on by default, and is not configurable.
- No logging will be available.
- No customer policies will be enforced.
- In the event that a connection to the Webroot Threat Intelligence platform cannot be established, it will go to the fourth attempt.
Fourth Attempt
- DWP will check its local policy to see if the administrator has allowed unsafe browsing (Fail Open).
- Unsafe browsing will be a configuration option on the portal and will offer no protection.
- It will allow users unfiltered access to the internet.
- If they choose this option DWP will still attempt to reestablish a connection to the Webroot proxy server every 2 minutes by following the communication path and logic described above.
- This will be a configuration option on the portal and will NOT be turned on by default.
