RE: Simple Wireless Question

[security () rexwire com]

Checkpoint a good white paper on where put it. It is obviously for their
product but you can use the paper as a knowledge base.


-SKP

-----Original Message-----
From: Potter, Tim [mailto:Tim.Potter () clarkconsulting com] 
Sent: Thursday, June 26, 2003 1:50 PM
To: security-basics () securityfocus com
Subject: Simple Wireless Question


Okay, so we're going to be implementing wireless soon.  Most likely
using PEAP and either MS version of Radius or Funk (my preference).
The main question I have, is where to place the Radius server?  We are
going to hang a switch off one of the PIX ports and plug in all the
access points to that switch, thereby bringing all the wireless
connections in through a DMZ.  Then they need to authenticate via
Radius.  Do I put the Radius server in that same DMZ?  In another DMZ?
On the Private LAN?  We also plan to use this server for our VPN
connection which come in through a separate DMZ and our dialup
connections which come in to our LAN router directly.
Thoughts on Radius placement?
Thanks much!
-Tim

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------