Wireless Security.pdf - PDF Archive

572 Chapter 21
Figure 21.77 : Adding wireless NAS-port-type conditions
7. Click the radio button to Grant remote access permission if user matches
conditions in the subsequent Permissions page for the new policy. The next step
is to configure the Profi le to support EAP-TLS and force the strongest level of
encryption (128 bit).
8. Click Edit Profi le and click the Authentication tab.
9. Confirm that the checkbox for Extensible Authentication Protocol is selected
and that Smart Card or Other Certifi cate is listed as the EAP type in the dropdown
box. Clear all the other check boxes and click Confi gure .
10. Select the computer certificate you installed for use by the IAS server, and click
OK . The resulting Authentication tab should look like the one in Figure 21.78 .
11. Force the strongest level of encryption by clicking the Encryption tab and then
clearing all the checkboxes except the one for Strongest .
12. Save the policy by clicking OK and then Finish . Make sure that the policy you
created is higher in the list than the default Remote Access Policy. You can
delete the default policy if you like.
www.newnespress.com