Using Aruba best practices what should be enabled for visitor networks where encryption is needed but authentication is not required?

Opportunistic Wireless Encryption (OWE), also known as Wi-Fi Enhanced Open™, is a feature of the WPA3 standard specifically designed for this scenario. It provides individualized, robust encryption for each user's connection to an open (non-password-protected) network. Users experience the simplicity of connecting to an open network without needing a password, while their data traffic is automatically encrypted, protecting it from passive eavesdropping. This meets the dual requirements of needing encryption without requiring user authentication, which is an Aruba and industry best practice for public-facing visitor networks.

A. Wi-Fi Protected Access 3 Enterprise requires 802.1X authentication (e.g., username/password or certificates), which violates the "authentication is not required" constraint.
C. Wired Equivalent Privacy (WEP) is a severely outdated and insecure protocol with well-known vulnerabilities; it is never considered a best practice.
D. Open Network Access, in its traditional form, provides no encryption, leaving all user data vulnerable and failing the "encryption is needed" requirement.

1. Wi-Fi Alliance. (2018). Wi-Fi CERTIFIED WPA3™: Technology for a new generation of Wi-Fi security. Page 5

Section "Protection in open Wi-Fi networks". The document states

"Wi-Fi Enhanced Open provides data protection to users in open Wi-Fi networks... [it] provides unauthenticated data encryption."

2. Harkins

D.

& Zorn

G. (January 2018). Opportunistic Wireless Encryption. IETF RFC 8110. Section 1

"Introduction". This RFC

which defines the standard

states

"This document describes a mode for Wi-Fi that provides encryption of the wireless media on an open

i.e.

unauthenticated

network."

3. Aruba Networks. (2021). ArubaOS 8.9.0.x User Guide. Chapter "Configuring a WLAN SSID Profile"

Section "Enhanced Open". The guide describes configuring "Enhanced Open (OWE)" for SSIDs

noting it provides encryption for open networks. This confirms its implementation and recommended use in Aruba systems.