ConSentry LANShield Controllers
Document Downloads:
LANShield Controller Family - Cost-effective, Transparent Deployment
The LANShield Controller makes it easy for IT to embed user and application control directly into the LAN infrastructure. It augments existing switches with user and application intelligence that makes applying controls and segmenting users on the LAN much easier than using traditional tools such as VLANs or ACLs, lowering IT’s cost of operations.
The LANShield Controller sits between access switches and the distribution or core layer, aggregating uplinks from wiring closets and enforcing access policies on all traffic. A transparent device, the LANShield Controller requires no changes to network design or user behavior, simplifying deployment and reducing operational costs.
The Controller supports high-availability and resiliency modes. Enterprises that have dual-homed wiring closet switches can deploy two ConSentry LANShield Controllers as peers — the two platforms share authentication state and preserve user authentications in case of failover. In addition, the Controller itself supports two failure modes. IT can set the device to fail to pass-through, where all LAN traffic will traverse the Controller untouched, or fail to block, where all traffic is stopped. The Controller also includes redundant power supplies and fans.
The LANShield Controllers deploy transparently between existing switches, providing intelligent switching to control users and applications
Deployment Options and IT Initiatives
The LANShield Controller sits behind existing switches to augment the LAN with user and application control. IT can leverage the LANShield Controller to:
- troubleshoot user and application issues more quickly
- support non-user devices such as robotics and IP phones
- limit access to resources
- track all user activity for auditing
- support a more dynamic and diverse workforce
- more easily roll out new applications, systems, and business locations


