how-to block ads
|
Tech_Dude123
@csndc.com
|  Active Directory Authentication
At my workplace, we let anyone that is a member of our domain authenticate into our wireless network. In the past, the other company I worked for made it so that besides authenticating to the domain, you also had to be a member of a certain AD group that allowed you to get onto the wireless network. I'm just thinking, as long as you authenticate through AD, do I really care whether or not you get wireless. I mean you authenticated into the domain, so you're already in the network which means we trust you. What reason would I have for further limiting who gets wireless and who doesn't by making sure you're a part of a particular AD group?
We also have strong encryption for wirless as well (WPA2). So we're fine from that point of view. | |
docrice
join:2008-03-31
Fremont, CA
| It all depends on the security requirements and specifics of a given environment. General trust established with domain users can be further divided into sub-levels depending on different cases.
As an example, I would consider allowing most employees into the wireless network, but probably not one-day contractors who have been provided short-term access. Or, if you have several wireless networks used by different groups, each with different firewall rulesets, you may wish engineering to be allowed to their special network while sales cannot, etc.. | |
-
|
