IAS as a RADIUS server

From: Henry, Christopher M. (chenry_at_radiologycorp.com)
Date: 07/30/03

  • Next message: Larry Seltzer: "HTASploit" 
    Date: Wed, 30 Jul 2003 08:10:49 -0400
To: <focus-ms@securityfocus.com>

    I am in the process on implanting a RADIUS server to authenticate users
    logging on from my RAS server and VPNs. I have been reading about using
    IAS as a RADIUS server, but I was not entirely sure exactly how secure
    it is. What are your experiences using IAS, or would you recommend that
    I use another product for greater security?

    Just to give a little background, I need to use a RADIUS server the
    interacts with active directory, so users will have the same username
    and password no matter where they log in from.

    ---------------------------------------------------------------------------
    Your network firewall and IDS products do not prevent Web application
    attacks - the most common form of online exploitation- resulting in Web
    defacement, data theft, sabotage and fraud.
    KaVaDo is the only company that provides a complete suite of Web
    application security products.
    Download a FREE whitepaper on "Security Policy Automation for Web
    Applications":http://www.securityfocus.com/Kavado-focus-ms
    ---------------------------------------------------------------------------

  • Next message: Larry Seltzer: "HTASploit"

    Relevant Pages

    • RE: IAS as a RADIUS server
      ... with IAS you could go one further and encrypt the radius ports ... IAS as a RADIUS server ... RADIUS is a pretty secure protocol itself, so as far as security I'd ... Your network firewall and IDS products do not prevent Web application ...
      (Focus-Microsoft)
    • RE: IAS as a RADIUS server
      ... I've been using IAS in a fairly large deployment here (about 10 production ... RADIUS is a pretty secure protocol itself, so as far as security I'd ... I am in the process on implanting a RADIUS server to authenticate users ...
      (Focus-Microsoft)
    • Re: Wireless AP wants Radius Server, advice?
      ... Yes you can use IAS for Radius, and as you've said it would be ... configuring IAS as a Radius Server for Wireless clients. ... > Reading through the AP's manual they recommend for the best security, ...
      (microsoft.public.windows.server.sbs)
    • RE: Restrict Network Access
      ... > the Internet (not just WWW, all connectivity). ... If you've got a firewall that supports authentication, have it authenticate users against a RADIUS server on one of your NT Server boxes. ...
      (Security-Basics)
    • Re: IAS RADIUS server in root domain servicing RRAS clients in subdomains
      ... but the parent domain by default in AD establishes a two way trust with ... the child domain so therefore Transcender are right that the RADIUS server ... in the root domain would authenticate users in the regional offices. ...
      (microsoft.public.win2000.ras_routing)
    • Quantcast