Threat defense for ticket gates, tills and park-wide family WiFi
A theme park runs ticket gates, virtual queue systems, food and retail tills, photo kiosks and CCTV across a wide site, staffed by hundreds of seasonal workers. Shield checks each DNS lookup before a connection starts, so phishing, ransomware and C2 callbacks stop at the lookup. Visitor WiFi comes second: family-safe for children and lighter on data on the busiest days.
What is at stake
Where a park network is exposed
Seasonal staff and phishing
Hundreds of new starters each season get logins to rotas, tills and email. They are the easiest people to fool with a fake login page.Gates and queues on one network
Turnstiles, queue displays and the park app's back end all depend on connectivity. Ransomware there closes the gates on a bank holiday.Children on park WiFi
Families hand phones to children in the queue. Without filtering, adult content and malicious ads reach them on your WiFi.
How Shield fits
A policy for each zone, team and network
- Gates, tills and kiosksThreat-first policy for turnstiles, food and retail ePOS, photo kiosks and card terminals, with new domains blocked.
- Seasonal and office staffThreat defense by Entra ID group, with social media and games apps blocked on work devices during shifts.
- Queues, CCTV and IoTQueue displays, cameras and sensors on their own VLANs, each device visible through the relay.
- Visitor WiFiFamily-safe categories, Safe Search on Google, Bing and YouTube, and ad blocking across the park.
Guest WiFi policy
- Adult contentBlocked
- GamblingBlocked
- Safe Search on Google, Bing and YouTubeEnforced
- Streaming at busy timesLimited
Allow list
bookings.examplemenu.exampleBlock list
rival-venue.exampleProof
What Shield brings to a park on a busy day
- 44%
- less data used on visitor WiFi with ads and trackers blocked, in Purple's own tests
- 10 days
- earlier warning of new phishing and malware domains than standard blocklists
- 80,000+
- venues in 90 countries run WiFi on Purple, the platform behind Shield
- Friendly WiFifiltering meets the Friendly WiFi standard for family-safe public WiFi
FAQ
Questions we hear from teams like yours
Can we cover the hotel and the park with different rules?
Yes. Set policy per site, venue, SSID or VLAN, and by time of day. The on-site hotel, the park and the staff areas can each have their own rules, managed from one dashboard with drill-down from a domain to each device.
How do we stop visitors using a VPN to get round filtering?
Shield blocks VPN and proxy apps with one click, alongside Safe Search on Google, Bing and YouTube. Children using park WiFi stay inside the family-safe policy, and you can see in reporting how often bypass attempts happen.
Will filtering slow the WiFi on peak days?
No. Blocking ads and trackers reduces the load: up to 44% less data and up to 62% fewer DNS queries in Purple's own tests. Shield checks each lookup before the connection starts, so allowed traffic carries on as normal.
Do we need hardware across a large site?
No. Point the routers, firewalls or DHCP at Shield. A relay covers segmented VLANs for queue systems and CCTV, so each device's internal IP is visible. Nothing needs installing on visitors' phones.
What happens if Shield goes down?
Shield runs on a dual anycast DNS network and fails closed, so an outage never leaves the park's networks unfiltered. Gates, tills and visitor WiFi keep their policy whichever node answers.
Other industries
Cinemas
Threat defense for ticketing, kiosks and concession tills, with family-safe WiFi in the foyer.Theaters
Threat defense for box office, show control and bar tills, with family-safe audience WiFi.Music venues
Threat defense for door scanners, cashless bars and production kit, with lighter fan WiFi.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.