3 Apr
2019
3 Apr
'19
3 a.m.
Hi, we split the accounts into an AD and a LDAP-Wlan-Account and force the people to use different passwords. The WLAN-IPs also dont't have full access to all intranet ressources as well. If they want to access them, the people have to open a VPN-Connection with AD account and password first. CAT is a good tool for generating the configuration and to increase the security. You can setup a proxy realm like "jshd92dfkjf0fjspd@yourdomain.com" and only this realm would be proxyied to your radius. Anybody who didn't know it, can't connect. Now you can force your users to use the cat tools. Keep in mind what happen if the tools don't work on the client. Regrads Carsten