Authentication method comparison

2007-10-23 Thread Wright, Donald
We currently have a WPA wlan using TTLS as the auth method and SecureW2 for the PC client software. We occasionally receive trouble calls from users having issues with SecureW2, and are now being asked if there is a more user-friendly auth method we could move to. I know the short list

RE: [WIRELESS-LAN] Authentication method comparison

2007-10-23 Thread King, Michael
Hi Don, You could look at IDEngines. They sell a service (Autoconnect) that scripts the install of the 802.1x Supplicant on Windows / Mac We currently use the built-in XP/Vista Supplicant with PEAP, but I know that IDEngines also supports (and distributes) the SecureW2 client. They are

Re: [WIRELESS-LAN] Authentication method comparison

2007-10-23 Thread Jonn Martell
Hi Donald, You don't need to have AD to support PEAP. Your RADIUS/LDAP infrastructure does need to support MSCHAPv2 (aka native NT users and domains). Look how RADIATOR does it for a good off-the-shelf solution to supporting PEAP on a non-Microsoft backend. ... Jonn Martell, CWNE On

Controlling Encrypted p2p

2007-10-23 Thread George Rogato
How is everyone controlling encrypted p2p traffic? Thanks George ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Controlling Encrypted p2p

2007-10-23 Thread Julian Y. Koh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At 12:17 -0700 10/23/2007, George Rogato wrote: How is everyone controlling encrypted p2p traffic? I can't speak for everyone.. :) but here at NU, our PacketShaper can't classify the majority of the encrypted P2P filesharing traffic. So close to

RE: [WIRELESS-LAN] Controlling Encrypted p2p

2007-10-23 Thread Scholz, Greg
We use our shaper and firewall to block any P2P protocols that they can determine. So the encrypted P2P problem tends to not be that it can't be seen at all, just that the data channel is encrypted - block the session channel and the data channel will never be established - kind of like the data

RE: [WIRELESS-LAN] Controlling Encrypted p2p

2007-10-23 Thread Mike Binns
How is everyone controlling encrypted p2p traffic? By blocking it at the source... At Gordon, we use SafeConnect. If a student opens up a P2P process on their computer, the SafeConnect service running on their computer will see it and block them within 10 seconds of the process starting, and ask

Universities supplying free Wifi to the public

2007-10-23 Thread Wendy Wigen
Do any of you folks know of any institution that fits this description? See request below: Peter Fleck wrote: I'm looking for the names of colleges and universities (U.S.) that provide free Wi-Fi to the public on their campuses. Any information as to how they are addressing security

Re: [WIRELESS-LAN] Universities supplying free Wifi to the public

2007-10-23 Thread John Watters
We used to do just what is being considered but dropped it this past summer due to CALEA concerns. We would be interested in hearing any logic that would allow general public access to our campus wireless network without putting us in jeopardy (or increasing the possibility of us falling under