to associate more than one realm with an authentication server
to logically group network access devices and associate them with specific sign-in policies
to allow or prevent users from accessing resources in specific locations on the network
to define the URL that users of network access devices can use to access the Infranet Controller