Wi-Fi 7 Deployment at CUNEF University with EnGenius Cloud Equipment

CUNEF University

Ranked as the best private university in Spain by Forbes magazine (June 5, 2023), and recognized among the top five Spanish universities producing successful entrepreneurs according to the Endeavor network, CUNEF University is a cutting-edge private institution. It has stood out in higher education for over 50 years thanks to its specialization, the excellence of its students, faculty, and researchers, and its high level of internationalization.

Officially recognized as a university in 2019, CUNEF’s academic journey began in 1973. Since then, over 15,000 professionals have been educated within its classrooms.

CUNEF University’s undergraduate and postgraduate programs respond to emerging challenges shaped by technology and a globalized market, in a context where continuous education and lifelong learning are essential.

The university operates from two campuses in Madrid—Almansa and Pirineos—located in the heart of the city’s academic district, Ciudad Universitaria. The newly inaugurated Almansa Campus is located in the José María Churruca business park, a complex spanning more than 178,000 m², designed by architect Kevin Roche. It has the capacity to host over 3,000 students and includes four unique buildings housing classrooms and flexible learning spaces equipped with the latest teaching technology. CUNEF University has created an ecosystem where pedagogy, technology, and environment promote active learning, supported by photovoltaic panels that enhance the energy self-sufficiency of the complex.

Project Requirements

Following a successful initial deployment of Wi-Fi 6 and 10G switching infrastructure at its central campus, CUNEF University once again turned to EnGenius for  the expansion and modernization of its network. This new phase introduced next-generation Wi-Fi 7 access points and a robust switching architecture, designed to support the growth of connected devices and meet the demands of academic, multimedia, and administrative traffic.

For this second phase, the IT department, led by CTO Mr. Javier Sánchez Hernández, decided to implement Wi-Fi 7 connectivity with the following equipment:

– 108 EnGenius ECW526 units: Wi-Fi 7 (BE19000) triradio access points designed for very high-density environments.
– 2 EnGenius ECW270 units (4×4): Outdoor Wi-Fi 6 access points with extended coverage and IP67 protection.
– 16 multi-gigabit and SFP+ aggregation switches.

This evolution not only improved connection speed but also latency, concurrency capacity, and spectral efficiency—essential for university environments with thousands of simultaneous device connections.

The coverage areas included:

– Classrooms
– Common areas
– Multidisciplinary rooms
– Faculty offices
– Teachers’ rooms
– An assembly hall with capacity for 200 people

The adoption of Wi-Fi 7 at CUNEF University reinforces its commitment to delivering a top-quality, accessible, and sustainable digital experience. Through EnGenius Cloud, management of this new generation of access points is fully centralized and does not require physical servers, enabling agile, uninterrupted deployment. Native integration with Azure AD, customizable captive portals, and remote access via the Cloud To-Go app allow IT staff to maintain complete control of the network from anywhere, dynamically adapting to academic traffic and events. This translates into a smarter, more secure network aligned with the needs of a high-performance educational environment.
‍

Intelligent Management with EnGenius Cloud

The entire network is centrally managed via EnGenius Cloud, with full integration with Azure AD and RADIUS systems for access control and advanced SSID segmentation.

Key features include:

– Real-time monitoring
– Proactive AI diagnostics
– Automated configuration via QR scan or serial code
– WPA3 security, dynamic VL

Technological Accessibility    

The expansion of the network at CUNEF University was carried out with a smooth transition thanks to EnGenius’ cloud-managed architecture. All devices were pre-configured remotely and deployed using barcode scanning, with no on-site configuration required. The ECW526, a tri-radio Wi-Fi 7 access point BE19000, provides speeds of up to 18.8 Gbps combined, employing technologies such as Multi-Link Operation (MLO) and enhanced OFDMA, optimized for dense environments such as auditoriums or study rooms. Each unit is designed to handle hundreds of devices simultaneously, with minimal lag and maximum stability.

For their part, PoE++ and full-fiber 10G switches made it possible to structure a scalable and resilient network, with high-capacity links between buildings, classrooms and common areas. The entire ecosystem—wireless and wired—is managed from EnGenius Cloud, licensefree, with full visibility and unified control from a single console.
‍

The Implementation  

Managing dynamic traffic and user flows is one of the greatest challenges in university environments, given the constant movement of students, faculty, and events. With EnGenius Cloud, CUNEF University can adapt network performance in real time based on how each space is used.

Integration with identity services such as Azure AD, LDAP, Active Directory, Google LDAP, RadSec, or EduRoam, plus custom captive portal and voucherbased authentication, ensures secure, segmented access for students, faculty, and visitors. Furthermore, applying policies per SSID and controlling bandwidth per user or group ensures consistent quality, even during peak demand.

The IT team highly values the ability to preconfigure devices remotely, allowing instant adoption from the cloud and reducing deployment times to minutes, enabling highly efficient and scalable operations.

The Result

Major update brings up to 900 Mbps iPerf throughput, enhanced Wi-Fi 7 insights, and improved cloud-based collaboration via Link-Live portal.

Colorado Springs, Colorado, USA – July 1, 2025 – NetAlly, a leading innovator in handheld network testing solutions, today announced the release of AllyWare™ v2.8, the latest software update across its award-winning line of network testers, including AirCheck® G3, CyberScope®, EtherScope® nXG, and LinkRunner® series tools. Available for all customers with AllyCare (NetAlly’s premium product support), the update delivers significant enhancements that continue to raise the bar for network visibility, performance validation, and troubleshooting efficiency.

“Version 2.8 reflects our commitment to constant innovation and listening to our customers,” said Julio Petrovitch, Senior Product Manager at NetAlly. “With this release, we’re enabling users to validate Wi-Fi 7 deployments, achieve higher throughput in performance tests, and streamline cloud-based collaboration—all critical needs for modern network teams.”

Highlights of AllyWare v2.8 include:

• iPerf Test Enhancements – Up to 900 Mbps Throughput
  An updated iPerf engine introduces intelligent multi-threaded processing, significantly increasing test throughput—up to 900 Mbps in lab conditions. This delivers more accurate and reliable network performance insights, especially in bandwidth-intensive environments.
• Deeper Wi-Fi 7 Visibility & Control
  Support for Wi-Fi 7 (802.11be) BSSID rate and capability analysis gives IT pros the real-time insights needed to validate new wireless deployments. New filtering, signal threshold controls, and spectrum navigation tools make wireless troubleshooting faster and more precise.
• Improved Usability and Filtering
  A new search function in the Wi-Fi app, enhanced filter controls (select/deselect all), and custom signal adjustments per channel make analysis and device identification easier than ever.
• Smarter Link-Live Integration
  LANBERT™, Path Analysis, and iPerf results are now automatically uploaded to Link-Live™, improving team collaboration, historical reporting, and centralized project management.

This update is free to all customers with an active AllyCare™ support contract. Customers with expired contracts are encouraged to renew to take advantage of these new capabilities and ensure continued access to future updates.

Available For:

• AirCheck G3
• CyberScope, CyberScope Air, CyberScope XRF
• EtherScope nXG
• LinkRunner AT 3000, AT 4000, and LinkRunner 10G

NetAlly also confirmed that another AllyWare release is planned before the end of the year, underscoring the company’s dedication to rapid innovation and ongoing value for AllyCare customers.

About NetAlly
For decades, the NetAlly family of network test and analysis solutions has been helping network and cybersecurity professionals better deploy, manage, maintain, and secure today’s complex wired and wireless networks. Since creating the industry’s first handheld network analyzer in 1993, NetAlly continues to set the standard for portable network analysis and cybersecurity assessment with tools that include EtherScope nXG, CyberScope, AirMagnet, LinkRunner, LinkSprinter, AirCheck, and more. NetAlly simplifies the complexities of network testing and cybersecurity assessments, provides instant visibility for efficient problem resolution, and enables seamless collaboration between site personnel and remote experts. To learn more and see how NetAlly helps network and security professionals get their jobs done faster, visit https://www.netally.com/, follow us on Facebook, Twitter/X, LinkedIn, Instagram or YouTube.

Austin, TX and Washington, D.C. – July 23, 2025 – Wi-Fi Alliance® congratulates Arielle Roth on her confirmation by the United States Senate to serve as Administrator of the National Telecommunications and Information Administration (NTIA).

“Arielle Roth’s deep expertise in telecommunications policy and her longstanding commitment to advancing broadband access make her exceptionally well-suited to lead NTIA at this important moment,” said Kevin Robinson, President and CEO of Wi-Fi Alliance. “Her leadership will be instrumental in fostering a forward-looking spectrum strategy that supports unlicensed innovation and promotes equitable access to connectivity for all Americans.”

Wi-Fi Alliance looks forward to working with Administrator Roth and the NTIA to ensure that technologies like Wi-Fi® continue to deliver robust, secure, and affordable connectivity across the country—fueling economic growth, educational opportunity, and digital equity.

About Wi-Fi Alliance®  |  www.wi-fi.org
Wi-Fi Alliance® is the worldwide network of companies that brings you Wi-Fi®. Members of our collaboration forum come together from across the Wi-Fi ecosystem with the shared vision to connect everyone and everything, everywhere, while providing the best possible user experience. Since 2000, Wi-Fi Alliance has completed more than 80,000 Wi-Fi certifications. The Wi-Fi CERTIFIED™ seal of approval designates products with proven interoperability, backward compatibility, and the highest industry-standard security protections in place. Today, Wi-Fi carries more than half of the Internet’s traffic in an ever-expanding variety of applications. Wi-Fi Alliance continues to drive the adoption and evolution of Wi-Fi, which billions of people rely on every day.

Your hotel offers great locations, high-quality amenities, and excellent service. Are guests still leaving negative reviews about connectivity issues? You might be focusing on the wrong thing.

Guest expectations around connectivity have shifted dramatically. Today’s travelers – especially younger demographics – prioritize reliable internet access above traditional hotel amenities. In fact, 35% of Gen Z guests say fast Wi-Fi is more important than a comfortable bed! Yet many properties make a costly mistake: they assume strong signal strength equals a great guest experience.

The reality is more complex. A strong Wi-Fi signal is just one piece of the puzzle. Without proper network design, even premium equipment can deliver frustrating results that damage your property’s reputation and online reviews.

The Hidden Problems Behind Poor Guest Connectivity

According to industry surveys, over 90% of guests say a strong Wi-Fi connection is one of their top priorities when booking a hotel. But many properties struggle with network issues that aren’t immediately obvious to property managers.

Here’s what’s really happening behind the scenes.

Too many devices competing for bandwidth

Modern guests travel with multiple devices. Most hoteliers frequently encounter guests seeking to connect multiple devices to the hotel’s network. When too many devices connect to a single access point, especially if that equipment isn’t designed for heavy usage, everything slows down – regardless of how strong the signal appears.

This creates a cascading effect. Guests notice lag during video calls, streaming buffers constantly, and work productivity plummets. Especially when guests pay premium rates at upscale properties, these issues become deal-breakers that show up in online reviews.

Inadequate circuit bandwidth planning

Many properties invest in expensive networking equipment but skimp on the bandwidth that feeds it. This creates a bottleneck that guests feel immediately. Two-thirds of guests use the hotel Wi-Fi within seven minutes of arrival, and at least a third request the Wi-Fi password immediately upon arrival. Thus, network problems become apparent almost instantly.

The issue compounds during peak occupancy periods. A network that works fine at 60% capacity can collapse when the property fills up, leaving luxury guests frustrated during your busiest (and most profitable) times.

VLAN configuration errors

Virtual Local Area Networks (VLANs) segment network traffic to improve performance and security. When configured incorrectly, different systems start interfering with each other. Guest Wi-Fi competes with property management systems, security cameras conflict with point-of-sale terminals, and overall network performance tanks.

These misconfigurations often go unnoticed until guests start complaining, making them particularly dangerous for properties where reputation and online reviews matter most.

Why Hotel Network Design Matters More Than Ever

Today’s hotel guests have transformed expectations. They’re not just checking emails – they’re streaming 4K content, participating in videoconferences, and running cloud-based applications simultaneously across multiple devices.

The average guest now travels with a smartphone, tablet, laptop, and often additional devices, such as smartwatches, portable speakers, or gaming systems. Each device creates network demands that traditional Wi-Fi for hospitality wasn’t designed to handle.

For resorts and larger properties, the challenge extends beyond guest rooms. Meeting spaces need bandwidth for presentations and videoconferencing. Pool and beach areas require connectivity for social media sharing. Restaurants need reliable connections for mobile ordering systems.

The Right Infrastructure Makes All the Difference

Proper hotel network design starts with understanding your property’s unique characteristics. Construction materials matter significantly; concrete walls and metal doors require different equipment placement than wood-frame construction. Larger properties with more than 150 rooms need higher-capacity gateways and more sophisticated network architecture.

Strategic access point placement

Modern best practices favor in-room access point installation over hallway placement. This approach accommodates more devices per room while reducing interference. Since newer Wi-Fi technology tends to have shorter range but higher capacity, bringing access points closer to where guests actually use their devices improves performance dramatically. Properties also need to consider in-room connectivity requirements for modern entertainment solutions and IoT devices.

Property-wide placement requires understanding the demands in specific locations. Conference rooms need higher-capacity equipment for videoconferencing and presentations. Restaurants require reliable coverage for mobile ordering and payment systems. Pool areas and outdoor spaces need weatherproof access points with extended range capabilities.

Lobby areas face the highest device concentration during check-in periods, requiring robust placement to handle traffic surges. Back-of-house areas require dedicated coverage for operational systems, such as housekeeping tablets and maintenance connectivity. Each area’s unique traffic patterns and usage demands determine optimal placement strategies.

Fiber infrastructure for future-proofing

Multi-mode fiber connections between distribution frames provide essentially unlimited bandwidth capacity. This infrastructure can handle current demands while preparing for future technology upgrades. Properties that invest in proper fiber infrastructure find it much easier to add new services or upgrade existing ones without major renovation projects.

Fiber backbone connections eliminate bandwidth bottlenecks that plague copper-based cabling, particularly during peak usage periods. They also support advanced features, such as centralized network management and real-time monitoring across all property areas. For larger properties, redundant fiber paths provide backup connectivity, preventing network outages from impacting guest services or operational systems.

Proper network segmentation and traffic management

Well-designed VLANs separate guest traffic from operational systems. This prevents interference while improving security. Guest networks, PMS, POS terminals, and CCTV security camera solutions should each operate on separate network segments, ensuring optimal performance for all systems.

Advanced traffic management goes beyond basic separation. Quality of Service (QoS) policies prioritize critical business applications over recreational traffic. Bandwidth allocation ensures operational systems maintain consistent performance even during peak guest usage periods. Dynamic VLAN assignment can automatically place different device types on appropriate network segments based on their authentication credentials, improving security and reducing administrative overhead.

Beyond Basic Connectivity: Advanced Network Features

Many properties, particularly luxury hotels and resorts, require network capabilities that extend beyond basic internet access. Modern guests expect seamless casting to in-room TVs, secure access to streaming services, and reliable connectivity for business applications.

The network must also support property operations. Modern hotels integrate numerous systems – keycard access, climate and lighting controls, security systems, PMS, POS, and more – all requiring network connectivity. Poor network design creates operational headaches that affect both guest experience and staff efficiency.

Security considerations add another layer of complexity. Network design must protect both guest privacy and property data while maintaining the seamless connectivity experience that guests expect, especially for luxury stays.

The WorldVue Advantage: Expert Network Design for Hotels & Resorts

For 50 years, WorldVue has been helping hospitality properties navigate evolving technology needs. Today, our expertise includes designing, installing, and supporting networks for hotels and resorts of all types and sizes. Our approach takes into account your property’s unique construction, guest expectations, operational requirements, and future expansion plans.

We begin with detailed site surveys that identify potential interference sources, determine optimal equipment placement, and establish bandwidth requirements. Our engineers understand how different construction materials and layouts affect signal propagation and design accordingly.

Our network designs incorporate proper segmentation from the ground up. Guest networks operate independently from operational systems, ensuring both security and optimal performance. We plan for peak occupancy scenarios, not just average usage, so your network performs well even when every room is occupied.

For new construction projects, we work with your development and design teams to plan proper conduit routes, equipment room placement, and power requirements. This proactive approach prevents costly retrofitting later while ensuring optimal network performance from day one.

For renovation and retrofit projects, we specialize in maximizing existing infrastructure while upgrading network capabilities to modern standards. Our approach minimizes guest disruption during installation while delivering immediate improvements in performance and reliability, transforming outdated properties into competitive ones.

Ready to Stop Losing Reviews Over Connectivity Issues?

Your property deserves a network designed for hospitality excellence. Don’t let poor hotel network design undermine your guests’ experience and damage your online reputation.

Contact WorldVue today to schedule a comprehensive network assessment.

Our hospitality technology experts will evaluate your current infrastructure, identify opportunities for improvement, and design a solution that delivers the seamless connectivity your guests demand.

Visit our contact page to get started, or for international properties, reach out directly at [email protected] to learn how proper network design can transform your guest experience.

Data is the currency of modern workloads, from AI to analytics and more. Based on a recent industry report, the global data center market is expected to grow to 1,008.65 billion US dollars (USD) by 2034, representing a compound annual growth rate (CAGR) of 11.24 percent from 2025 to 2034.[1] It’s no surprise then that most businesses are moving quickly to keep up with this demand by updating their servers with modern processors, memory, and storage.

If you’re one of those organizations, don’t shortchange your network infrastructure in your digital transformation journey. Today, enterprise-generated data is created and processed across both traditional centralized data centers and the cloud, which means your network adapters could become a bottleneck if they aren’t equipped to handle low-latency, distributed computing needs. Performance is no longer the only factor to consider. With so much data crossing your networking threshold, scalability, reliability, and security are paramount. And of course, you need to think about the bottom line, especially when you’re tasked to do more with less.

Taking these challenges into account, the following five key connectivity considerations, along with readily available solutions, can help you achieve your data center optimization objectives.

1. Achieving consistent, low-latency performance

Despite the rise of AI, the demand for high-performance data centers is mainly driven by other causes, including growing data volumes, increasingly complex enterprise applications, and the continued growth of cloud computing. These factors, along with ongoing digital transformation initiatives, demonstrate the need for robust infrastructure that can support demanding initiatives beyond those associated solely with advanced AI. To address these demanding workloads, you can deploy servers built on advanced CPUs, like Intel® Xeon® 6 processors. But how do you also ensure your network infrastructure is up to par?

Pairing servers built on modern processors with high-performance network adapters and efficient network protocols can help optimize quality of service (QoS) for fast, reliable Ethernet connectivity. With network adapters that excel in minimizing latency, you can ensure the consistent, reliable performance needed for your demanding applications.

Another way to boost performance is to use Remote Direct Memory Access (RDMA) to reduce work handled by the processor. RDMA over Converged Ethernet (RoCE) v2 and Internet Wide Area RDMA Protocol (iWARP) can help offload tasks from the CPU during data transfers between systems.[2]

2. Ensuring reliability and compatibility

Don’t let your networking infrastructure be the weakest link in your data center. You could deploy the most reliable servers on the market and still waste valuable time and money troubleshooting downtime if your network adapters aren’t built to keep up.

The same goes for compatibility. Network adapters that can’t interoperate with previous-generation adapters or the rest of your infrastructure can inevitably lead to more costly downtime, troubleshooting, and headaches. This is particularly true for infrastructure modernization, which can be complex and disruptive if your adapter software drivers are not compatible with your existing prior-generation devices.

A better approach would be to deploy adapters with dependable failover mechanisms and other features that help ensure your network can handle disruptions without significantly impacting business-critical workloads.

You can also save yourself hours of planning, troubleshooting, and compromising by choosing solutions that come with validation, assuring comprehensive interoperability across a broad ecosystem of servers and switches. The Intel® Ethernet E830 and E610 Controllers and Network Adapters provide those benefits because they are rigorously tested for interoperability and compatibility, with extensive conformance testing and comprehensive operating system support. Additionally, both adapters offer software drivers with backward compatibility to enable consistent deployment across product generations.

3. Improving scalability and flexibility

With the explosion of data and the rapid growth of evolving technologies like 5G Virtualized Radio Access Network (vRAN), you need a network infrastructure that can meet your needs today and into the future with scalability and flexibility. For example, if your infrastructure can’t scale efficiently, you might run into performance and latency bottlenecks as you try to roll out new applications and services. Without flexibility, you could find yourself reconfiguring and redeploying adapters every time you need to adjust your infrastructure to meet changing needs.

Consider the flexibility and cost savings offered by the higher port density of the Intel Ethernet family of controllers and network adapters. For example, the Intel Ethernet E830 Network Adapter offers a wide variety of configuration choices, including 1 x 200 gigabit Ethernet (GbE), 2 x 100GbE, 8 x 25GbE, 8 x 10GbE, 2 x 25GbE, 2 x 10GbE, and 2 x 1GbE ports in a single adapter. You can use the Ethernet Port Configuration Tool (EPCT) to reconfigure the number of ports and port speeds as often as needed without revalidation, which simplifies port management. Higher port density on one adapter reduces hardware costs compared to buying multiple lower-density adapters. That’s a big advantage over other network adapters with lower port densities and more complex management schemes.

4. Strengthening security

You could deploy the industry’s highest-performing and most flexible network adapters but still regret your decision if those adapters open the door to security breaches. Loss of data or confidential information could cost your business dearly from remediation costs, downtime, and damage to your reputation. Look for network adapters that support modern cryptographic security features and a hardware root of trust that adds resilient protection against supply-chain attacks, unauthorized access, and cyberattacks.

The Intel Ethernet E830 and E610 Controllers and Network Adapters, for example, both meet Federal Information Processing Standards (FIPS) 140-3 Level 1 requirements and support secure boot and secure firmware updates compliant with Commercial National Security Algorithm (CNSA) 1.0 to provide resilient protection against unauthorized access and cyberattacks. They also offer device and firmware attestation, which protects firmware using a verifiable certificate chain and security-enabled measurement communication to help protect businesses from supply-chain attacks.

5. Improving total cost of ownership (TCO)

Performance, power consumption, and cooling costs all add up over time. According to a Goldman Sachs report, power demand from data centers is projected to increase by 50 percent by 2027, and by as much as 165 percent by the end of the decade.[3] If your data center infrastructure doesn’t operate as an integrated, well-oiled machine, you might see your overall operating costs rise precipitously, regardless of how low your initial capital costs were.

Efficiency in data center deployments is increasingly driving down costs. Features like high port-density hardware minimize initial capital expenditures (CapEx) by requiring fewer units to achieve the same levels of connectivity. In addition, selecting components with low power consumption directly curtails ongoing operating expenses (OpEx). Robust manageability and tools such as EPCT not only streamline management but also contribute to lower OpEx. The synergy of pairing these efficient network adapters with appropriately scaled servers is key to unlocking a lower total cost of ownership (TCO).[4]

Meeting data center demands with Intel Ethernet

The Intel Ethernet family of controllers and network adapters helps businesses achieve their digital transformation goals by offering high performance with low-latency data transfer between systems. That means your data center is ready to take on demanding workloads without breaking a sweat.

Need flexibility? The Intel Ethernet E830 and E610 Controllers and Network Adapters offer scalable architectures, comprehensive security and manageability features, small form factors, and a broad range of port-configuration options. Intel Ethernet E830 Network Adapters, with 200 Gbps maximum throughput and broad port density that includes the unique 8 x 25GbE configuration, are ideal for optimized, higher bandwidth data-plane operations. Intel Ethernet E610 Network Adapters provide industry-leading power efficiency, the latest advancements in 10GBASE-T connectivity, and comprehensive manageability features for control plane networking.

With both adapters, you can combine flexibility, simplified management, efficiency, interoperability, and strong security to achieve exceptional performance and a lower TCO in your data center.

The path to optimization

Navigating the complexities of data center optimization requires a holistic approach. By keeping these five key considerations at the forefront of your strategy, you can build a more agile, efficient, and cost-effective data center that not only meets your current business needs, but that also lays a strong foundation for future growth and innovation. The journey to an optimized data center is an ongoing one, but with these considerations as your guide, you’ll be well-equipped to navigate the path to success.

It is estimated that there are 20 million shipping containers in transit, right now. In 2023, approximately 2.2 billion metric tons of cargo were shipped globally in containers, with the largest cargo being able to carry more than 24,000 containers. 

Container ports are engines of regional growth, gateways to unlock industrial capacity. For port operators, and the local economies that rely on them, there is economic advantage in being able to unload and distribute containers quickly and efficiently. 

It is a process that has become increasingly digital. While the containers may remain unchanged, rectangular boxes made of Corten steel with a marine-grade plywood floor, their movements are now governed by robotic cranes, autonomous vehicles, optical recognition and IoT sensors.  

It is not enough for port operators to boast of having deep water access, modern rail links and miles of berthing. This counts for little without a solid network infrastructure. 

Everything Connects to the Network 

With an annual capacity of two million TEU, DP World Evyap is vital to the Turkish economy. Its location, on the Sea of Marmara, connecting the Black Sea to the Aegean and Mediterranean Seas, is a crucial waterway for international trade.  

“Any glitch in the network can create bottlenecks,” says Gokhan Erbas, IT Director, DP World Türkiye, and the man charged with overseeing the network upgrade of one of Türkiye’s most important ports. 

DP World terminals currently manage 10 percent of Türkiye’s total container throughput. DP World plans to increase capacity and extend the quayside at Evyap. A reliable pervasive wireless network is a critical first step.  

The 265,000sqm site had suffered from gaps in network connectivity. This hampered efficiency and created a lack of trust in digital applications. Erbas says the wireless network upgrade was vital for efficient operations and growth.  

Eliminating Connectivity Dead Zones  

Today, Cisco Ultra-Reliable Wireless Backhaul (URWB) covers the site with robust dependable connectivity, eliminating dead zones and restoring faith in digital workflows. Cisco URWB enables the smooth running of the Terminal Operating System (TOS), the lifeblood of any modern port. 

The Evyap TOS manages everything from vessel schedules to gate access, storage planning to documentation. In an environment where over 150+ trucks are in constant motion, even a momentary network failure could have ripple effects across the global supply chain. Thanks to Cisco URWB’s zero-packet-loss architecture and ultra-low latency, DP World Evyap now operates with uninterrupted connectivity—ensuring real-time decision-making, accelerated automation, and seamless logistics flow. 

Engineering a Network for the World’s Most Demanding Port Environments 

Deploying ultra-reliable connectivity in an industrial port setting was a complex challenge. DP World Evyap’s dynamic operations demanded a resilient network infrastructure capable of overcoming the industry’s toughest conditions. Dense steel container stacks caused RF signal disruptions, requiring a solution that ensured uninterrupted communication. Extreme environmental factors, including temperatures exceeding 40°C, necessitated a system designed for seamless operation in harsh conditions. High-dust and high-moisture environments further emphasized the need for an ultra-durable and future-proof wireless infrastructure. 

By leveraging Cisco URWB, DP World Evyap has established a cutting-edge network that not only enhances operational efficiency but also reduces maintenance costs, strengthens security, and delivers an unparalleled user experience. 

“Seamless connectivity is everything,” Erbas says. “Cisco Ultra-Reliable Wireless Backhaul means operational efficiency, stronger security, lower maintenance costs and better experience for network users.” 

For Evyap – Körfez, better global connections start with better local connections.  

DP World Evyap in figures 

• 265,000sqm site  
• 2 million TEU capacity 
• 1.1m tons of liquid bulk handling capacity 
• Summer temperatures > 40°C 
• 150+ trucks on site at any time 

Shadow IT is quickly becoming one of the biggest blind spots in cybersecurity, especially for MSPs. As clients increasingly adopt cloud-based tools, browser extensions, and AI-powered applications, many of these services bypass traditional IT oversight. These unsanctioned tools may seem minor at first, but they can introduce serious vulnerabilities to your clients’ environments.

Think of a client’s network like an iceberg. Above the surface are the approved tools: sanctioned, monitored, and secured by you. But beneath the surface lies the bulk of the threat, made up of tools operating without visibility or approval. This is where Shadow IT hides.

With remote work, bring-your-own-device policies, and easy access to cloud software, Shadow IT is expanding rapidly. The danger? It is often invisible until something breaks.

But what exactly is Shadow IT, and why should MSPs care?

What is Meant by the Term “Shadow IT?”

Shadow IT refers to any software, hardware, or cloud-based tool that employees use without the knowledge or approval of their organization’s IT team. This includes everything from personal file-sharing accounts to AI meeting assistants or browser add-ons.

Real-world examples of Shadow IT are often introduced with good intentions. A marketing specialist might store files in a personal cloud drive for convenience. A project team could adopt a planning app to collaborate on tasks. A customer success rep may use an AI-powered notetaking tool to summarize client calls. These actions seem helpful on the surface, but they introduce tools that operate beyond IT’s protective reach.

Why does Shadow IT happen? Often, it’s because the employee needs something now and waiting on approval feels like a delay. Remote work also blurs the lines between personal and professional software. And with thousands of SaaS tools just a click away, users don’t always realize the risks of choosing the easy option.

Is Shadow IT a Threat to MSPs?

It is tempting to view Shadow IT as a user issue. But for MSPs, it’s a much larger concern. Every unapproved tool represents an area of the environment that you don’t control, yet are still expected to secure and support.

Imagine this: a client starts using a project management platform to track deliverables. Weeks later, they contact you because access is lost, and key data is missing. But you were never told about the platform in the first place. Now, you’re responsible for resolving a problem tied to a tool you didn’t provision, secure, or maintain.

This is the reality of Shadow IT. It introduces unknowns into environments where predictability is your greatest asset. Over time, unmanaged tools chip away at:

• Security posture: Tools that bypass review may contain vulnerabilities, transmit unencrypted data, or expose login credentials through insecure APIs.
• Compliance guarantees: Many industries depend on strict controls for storing and handling sensitive information. If an unauthorized tool is used for client or personal data, your client may inadvertently violate frameworks like HIPAA, GDPR, or SOC 2.
• Operational consistency: Supporting a growing number of tools you never approved creates inefficiency. It can lead to longer resolution times, more frequent miscommunications, and a higher volume of support tickets.

“If you don’t know what tools your client is using, how can you protect them?”

Shadow IT in cybersecurity isn’t just an internal threat, it reflects directly on the service quality, accountability, and expertise your clients expect from you.

The Real Risks of Shadow IT

Is Shadow IT always bad? Not necessarily. In fact, it often surfaces because users are trying to work around workflow blockers. They want to move faster, collaborate better, or fill a perceived gap in the toolset. But unmanaged Shadow IT presents real risk, regardless of intent.

Security Gaps

Unauthorized tools typically fall outside of patch cycles, endpoint detection, and access control policies. Many also collect telemetry or data in ways that aren’t transparent. Without knowing how a tool functions or stores information, you cannot reliably assess its threat potential.

Compliance Failures

A single file uploaded to a non-compliant cloud storage app can create a cascading issue. Regulated industries like finance, healthcare, and education are particularly vulnerable, as they must adhere to strict requirements around data handling, encryption, and auditability. If an audit uncovers usage of tools that haven’t been assessed for compliance, the client may face penalties, legal exposure, or reputational damage. Navigating cloud compliance challenges becomes even more difficult when unauthorized tools fall outside your oversight.

Operational Friction

When your support team is asked to troubleshoot an issue caused by an unfamiliar tool, resolution takes longer. Shadow IT means more time spent asking questions, diagnosing issues from scratch, and uncovering causes that could have been avoided with visibility from the start.

Financial Waste

Many clients don’t realize they are paying for multiple subscriptions that do the same thing. One department may use a sanctioned CRM while another relies on an unsanctioned one. These overlaps drain budgets and make billing, reporting, and renewals more complex than necessary.

Loss of Client Trust

When clients believe you are securing their environment, they expect total coverage. If a breach is traced back to a tool you didn’t even know was in use, you may still be held accountable. Even if the client introduced the risk, their confidence in your ability to prevent future issues can take a hit.

Shadow IT Management: How to Spot Hidden Tools

Managing Shadow IT begins with identifying it. And while many unauthorized tools stay off traditional inventory lists, they leave behind usage signals that you can detect.

Behavioral Analytics

Look for anomalies in system activity. These might include sudden increases in outbound file transfers, logins to unfamiliar platforms, or data syncing from unmanaged devices. These patterns often reveal when a new tool enters the environment without proper onboarding.

DNS Filtering

This is one of the most efficient ways to uncover Shadow IT. DNS filtering allows you to monitor domain-level traffic and detect connections to cloud services that users have not been authorized to access. This is especially helpful for browser-based tools that don’t require installations and would otherwise fly under the radar.

Regular Audits

Conduct structured software and traffic audits quarterly or monthly. Include browser extensions, encrypted outbound requests, cloud storage platforms, and mobile usage where applicable. Compare findings against your client’s list of approved tools to identify mismatches.

Pro tip: Shadow IT tools can range from simple time trackers to AI transcription bots and collaborative whiteboards. Even a seemingly helpful plugin can represent risk if it hasn’t been reviewed.

Effective Shadow IT management requires that discovery becomes a regular process, not just a response to a problem.

Shadow IT Management: Strategies to Regain Control

Once you have visibility, the next step is containment, education, and long-term prevention. The goal isn’t to punish users for trying to be efficient. It’s to provide them with a safer way to achieve their goals.

Educate Users and Clients

Shadow IT often stems from good intentions. Make clients aware of the risks and responsibilities associated with unapproved tools. Encourage their teams to reach out when a tool isn’t meeting their needs instead of finding their own workaround.

Enforce Acceptable Use Policies

Establish and maintain clear, accessible technology policies. These should outline what types of tools are permitted, how to request new solutions, and what the consequences are for bypassing protocols. Policies only work when they are communicated and reinforced regularly.

Create Tool Request Workflows

A fast, transparent process to evaluate and approve new tools reduces the likelihood of Shadow IT creeping in. Clients should know exactly how to ask for a tool and what evaluation steps it must pass before approval. This process should be lightweight and responsive.

Build a Culture of Visibility

Make software usage part of your regular QBRs. Discuss newly observed tools, identify trends across teams, and recommend consolidation where appropriate. Help your clients see visibility not as surveillance but as a path to efficiency and smarter decision-making.

Why DNS Filtering Supports These Strategies

DNS filtering acts as a checkpoint for outbound traffic, helping you identify new tools before they become entrenched in your client’s workflow. This makes it easier to catch Shadow IT early and have more productive conversations about tool usage.

7 Shadow IT Tools You Probably Overlooked

Some of the most overlooked Shadow IT tools are simple, browser-based, and widely adopted:

1. AI writing assistants: Can expose company input data through third-party APIs
2. Design platforms: Often used via personal logins, bypassing shared controls
3. Video recording apps: Store content in external accounts with unclear access settings
4. Task management tools: May become data silos if not integrated with approved platforms
5. Notetaking extensions: Capture sensitive call data and sync to unknown cloud services
6. Personal email platforms: Frequently used for sending attachments or internal content
7. Freemium chat tools: Create communication silos without audit trails or encryption controls

These tools are adopted because they are easy to use. But they also avoid the standard approval and visibility processes that MSPs rely on to protect client infrastructure. For more on how Shadow IT contributes to misconfigurations and cloud risk, see our breakdown of cybersecurity trends MSPs can’t afford to ignore.

From Risk to Relationship Builder

Shadow IT is not always malicious. It is often a signal that the current workflow, stack, or process isn’t delivering what users need. MSPs who approach it with empathy, structure, and visibility tools will win client trust and long-term retention.

When you help clients understand the risks and provide a better alternative, you’re not just solving a security problem. You’re building a stronger relationship. One where technology decisions are collaborative, strategic, and visible.

Visibility is not just a security measure. It is how you deliver the strategic value your clients expect.