Mersive Solstice vs. BenQ InstaShow for Wireless Screen Mirroring

Because the Solstice is designed to use the organization’s network, setting up a Solstice is more complex. For a typical organization installation, the network must be configured to open the firewall to half a dozen URLs, and over 30 different network ports.  You will also need to consider how much bandwidth is available, as Mersive recommends 50mbs per receiver to ensure consistent performance, which is one of the highest of all network-based systems. 

Mersive recommends you set up an account on their cloud server and afterward there are nine different steps to configure the receiver, including setting up the security profiles. Once the network is prepared, the apps will need to be deployed to the organization and set up in the user’s notebook. The Mersive app is only available on Windows, Mac, and Android so if your company uses a Chromebook, they must access the system through a browser.

The InstaShow is designed to install right out of the box in less than 10 minutes without IT support. Once you connect the receiver to a projector or display, it is ready to use. Testing by the publication My Tech Decisions indicated it took only a few minutes to connect and use.  The InstaShow can be centrally managed using the network port or operate on a standalone basis – creating a critical “air gap” security experts look for to avoid having hackers using these devices for unauthorized network access and saving bandwidth.

For a visitor to access a Solstice Pod, they typically will need to log onto the same network that is hosting the Solstice Pod and download the Solstice app. Besides the hassle (and risk to the organization) of getting on a new network, the process can present a challenge to certain visitors who have “locked down” notebooks to protect from malware. The non-app alternative is to use either a browser or a standard protocol such as Airplay. If the guest wants to present from a Chromebook or Linux, then using a browser is the only option.  The Solstice system cannot wirelessly connect to any non-computer sources such as a camera, game console, or media player and cannot wirelessly stream any HDCP-protected content.

For a visitor to use an InstaShow in a meeting room, they simply connect an HDMI or USB-C InstaShow button to the notebook. No software is needed to be installed on the visitor’s notebook. The button sets up an encrypted channel in seconds and the presenter simply taps the lighted button to present.  You can tap a button on the side of the WDC-20 and WDC-30 models to split the screen. Mobile users can either use standard protocols like Airplay or the InstaShow app to share from their devices.

The Solstice system is designed to be used on an organization network as the main method of screen mirroring.  This architecture represents a risk to any organization as hackers can use vulnerabilities in these types of devices to gain access to sensitive data.  For example, the data breach at Target was due to a third-party system connected to the network, and recently eight other wireless presentation systems using similar architecture were found to have significant vulnerabilities that could be exploited to access or even shut down the network.  

The other risk of wireless presentation systems is the unauthorized viewing of content.  This is not only a risk to the company where sensitive data such as earnings or reorganizations might be leaked but also to visitors who are sharing unannounced products such as a next-generation smartphone or a sensitive legal document.  The Solstice uses a self-signed certificate. One concern with these certificates is they may not be updated in response to discovered vulnerabilities.  Third-party certificates can be purchased and loaded into the system using the Solstice management tool.   One other consideration on this topic is that an administrator of Mersive Solstice software can allow someone to “Look-in” remotely at the presentation by entering the Solstice display's IP address into their web browser unless the administrator turns it off.

Because the Solstice Pod is an active network device, its firmware, and other security protections must be kept up to date over time to ensure proper protection of the network.  Mersive indicates they do use using third-party testing companies, but there are no publicly viewable certifications available to ensure the device is protected against common vulnerabilities.  In addition, the Solstice Pod does not have any EAL rating certifications, and the product does not use any FIPS-certified algorithms.

For support, Mersive provides free updates for the first year and offers an annual subscription costing up to $280 per receiver.   

The InstaShow is designed for security. By utilizing a closed network, HDMI technology, and advanced encryption, the InstaShow is the most secure wireless presentation system available today.

First, the design of the InstaShow enables it to operate independently from the organization’s network. While it can be controlled and updated via LAN, it does not require any company network access, configuration, or bandwidth.   It also doesn’t require any software, uses standard HDMI technology, and the USB port is only used for power and touch-back data information. 

Every model of InstaShow is certified by third-party testing against common known vulnerabilities, putting it well ahead of even popular systems like the Barco ClickShare. The InstaShow receiver cannot be directly accessed from the internet or cloud services, and no remote users or administrators have any access to see the presentation. 

All transmissions from the InstaShow buttons are encrypted using 128-bit or higher encryption. For governments and financial institutions that deal with highly sensitive data such as tax returns, the InstaShow WDC30 offers both EAL6+ certification – the same as a biometric passport machine- and FIPS-140-3 encryption for use with sensitive government documents.   BenQ provides a detailed security white paper that outlines all the sensitive elements of their security protection.  

For support, BenQ provides free hardware and software security updates for the life of the product.