Order No.176 Extends Inspections to Corporate Campus Public Wi-Fi: How All-Optical Networks Support Renovation and Upgrade

Public Wi-Fi in corporate campuses may seem to merely supply internet access for employees and visitors, yet it serves as a critical external gateway to the campus network. As the Measures for Supervision and Inspection of Cyberspace Security by Public Security Organs (Ministry of Public Security Order No.176) takes effect on October 1, 2026, clearer requirements are imposed on network operators regarding user information registration, network log retention and cybersecurity protection. For corporate campus public Wi-Fi, the focus is no longer limited to “internet accessibility”; operators must also track who is accessing the network, what resources they visit, and whether abnormal activities can be traced.

For long-established campuses with complex network architectures, legacy Wi-Fi systems often struggle to satisfy network experience, security protection and compliance management simultaneously. Upgrading with all-optical networks transforms public Wi-Fi from simple wireless coverage into an integrated campus network solution combining coverage, authentication, security, auditing and operation & maintenance.

I. Why Public Wi-Fi Requires Renovation

1. Visitors can access Wi-Fi, but identities and activities cannot remain untraceable

Campus public Wi-Fi serves internal staff, clients, visitors and temporary personnel. If shared passwords are still used for access, it becomes difficult to pinpoint the specific user responsible for anomalous network behaviour.

Therefore, the first step of public Wi-Fi renovation is not merely expanding wireless coverage, but building a robust user identity system. Portal authentication and similar methods verify user identities before granting network access, while retaining required network logs. This makes the public network truly manageable and traceable.

2. Public Wi-Fi acts as an open gateway; the network egress must also have security safeguards

Public Wi-Fi serves large numbers of users with diverse terminal types. Without effective security protection at the egress, malicious access, vulnerability exploitation or virus propagation may compromise the entire campus network.

Against the backdrop of stricter cybersecurity supervision focusing on practical defensive capabilities, enterprises cannot rely solely on equipment inventories or management documents. Firewalls, intrusion prevention and other security functions must be deployed at the network egress to reduce risks of external threats penetrating the campus intranet.

3. Multiple parallel networks in legacy campuses: Wi-Fi upgrades may trigger cascading impacts

Many older campuses were built on copper cable networks. As office, surveillance and wireless access services expanded, equipment in telecom closets multiplied, resulting in tangled cabling and complicated switching hardware. Expanding public Wi-Fi often requires adding switches, recabling or even renovating equipment rooms.

Patching only the Wi-Fi layer leaves the underlying network architecture unchanged. Genuine upgrades start from the network foundation, delivering a stable network base for wireless access, office operations and security monitoring.

II. How AINOPOL All-Optical Networks Enable Public Wi-Fi Upgrades

1. Portal real-name authentication: shift public Wi-Fi from shared passwords to identity-based access

For corporate campus public Wi-Fi scenarios, AINOPOL builds a user identity management system via a Portal authentication platform. Employees, visitors and other users authenticate before accessing the network according to campus requirements, eliminating management headaches caused by shared public accounts.

Combined with network log retention capabilities, user identities are linked to internet activities. In the event of cybersecurity incidents, queries and traceability can be performed, evolving public Wi-Fi from open access to an identity-verified, logged service.

2. Dream Gateway creates a secure egress, placing security defenses at the network entry point

Public Wi-Fi upgrades focus not only on AP quantity but also internet egress security. AINOPOL Dream Gateway provides routing and security functions for campus network egress. Firewalls enforce policy control over inbound and outbound traffic, while IPS, WAF and antivirus modules identify and block network attacks and malicious traffic.

Massive access traffic from public Wi-Fi first passes through this security perimeter before entering the campus network, lowering risks that external attacks disrupt internal office and security monitoring services.

3. All-optical network carries Wi-Fi to resolve long-term campus challenges: coverage, bandwidth and capacity expansion

At the underlying network layer, AINOPOL replaces extensive legacy copper cables and multi-layer switching hardware with all-optical networks. Optical fibres are extended to access zones across the campus, paired with optical APs to deliver wireless coverage.

Compared with traditional copper architectures, all-optical networks feature longer transmission distances and abundant bandwidth headroom to support public Wi-Fi, office work, video surveillance and other services. Later, when campuses need to add APs, expand coverage or boost bandwidth, upgrades can leverage existing fibre infrastructure, cutting renovation costs from repeated recabling.

4. Integrated communication & encryption: balance network experience and security for public Wi-Fi upgrades

For corporate campuses, network upgrades pursue more than faster speeds; data transmission security must also be considered. AINOPOL integrates communication and security capabilities. Built on the all-optical network, the integrated communication & encryption framework enables the campus network to host public Wi-Fi, office and other services while safeguarding data, laying the groundwork for a more comprehensive campus cybersecurity system.

Under Order No.176, the philosophy for corporate campus public Wi-Fi is shifting from “providing network connectivity” to “delivering manageable, auditable, secure and controllable network services”.

For legacy campuses, rather than continuously adding hardware to ageing copper networks, a foundational upgrade using all-optical networks is recommended. Integrate Portal real-name authentication, log retention, egress security and unified management. This improves public Wi-Fi access experience while reinforcing enterprise capabilities in identity management, security defense and audit traceability, balancing usability and security for campus networks.

FAQ

Q: What requirements does Order No.176 impose on campus public Wi-Fi?
A: Article 7 of Order No.176 explicitly mandates inspections to verify whether “user registration information and internet access logs are recorded and retained in accordance with the law”. Providers of public internet access services are listed as inspection targets. Campuses offering public Wi-Fi must fulfill two core obligations: real-name authentication and log retention.

Q: How long must visitor logs be retained?
A: In practice, public security authorities generally require log retention for public internet venues to last no less than 180 days (6 months). Logs must include core fields: real-name information, login/logout timestamps, IP addresses, MAC addresses and visited URLs.

Q: Is the “scan QR code to obtain password” method compliant?
A: It is non-compliant. Announcements from the Lingcheng Branch of Dezhou Public Security Bureau explicitly prohibit service provision via non-real-name methods such as “public accounts or fixed passwords”. The requirement is “one account per person, with real-name traceability”.