topic Wi-Fi Access Security in Wireless https://community.cisco.com/t5/wireless/wi-fi-access-security/m-p/2071532#M12349 <P>We have installed a working Wi-Fi solution running on a 5508 controller, software ver 7.2.110.0 with 15 AIR LAP 1142 AP’s.</P><P></P><P>The RADIUS authentication is backed off to a Win 2008 R2 server running NPS. The “Connection Request Policy” is configured to look at NAS port Type “Wireless or Wireless IEEE 802.11” and the Authentication Provider is “Local Computer”. The Network Policy again looks for “Wireless or Wireless IEEE 802.11” and the AD group “Domain Users”</P><P></P><P>The above solution is working just fine and the users are happly connecting, the problem that I am experiencing is that people have started to connect their own personal devices to our wireless network using their Domain account details, what I need to do is prevent this from happening can anyone suggest a way to deal with this issue? I was thinking about using certificates?</P> Sun, 04 Jul 2021 05:59:17 GMT Murray Bown 2021-07-04T05:59:17Z Wi-Fi Access Security https://community.cisco.com/t5/wireless/wi-fi-access-security/m-p/2071532#M12349 <P>We have installed a working Wi-Fi solution running on a 5508 controller, software ver 7.2.110.0 with 15 AIR LAP 1142 AP’s.</P><P></P><P>The RADIUS authentication is backed off to a Win 2008 R2 server running NPS. The “Connection Request Policy” is configured to look at NAS port Type “Wireless or Wireless IEEE 802.11” and the Authentication Provider is “Local Computer”. The Network Policy again looks for “Wireless or Wireless IEEE 802.11” and the AD group “Domain Users”</P><P></P><P>The above solution is working just fine and the users are happly connecting, the problem that I am experiencing is that people have started to connect their own personal devices to our wireless network using their Domain account details, what I need to do is prevent this from happening can anyone suggest a way to deal with this issue? I was thinking about using certificates?</P> Sun, 04 Jul 2021 05:59:17 GMT https://community.cisco.com/t5/wireless/wi-fi-access-security/m-p/2071532#M12349 Murray Bown 2021-07-04T05:59:17Z Re: Wi-Fi Access Security https://community.cisco.com/t5/wireless/wi-fi-access-security/m-p/2071533#M12350 <HTML><HEAD></HEAD><BODY><P>Yea you have a few options ..<BR /><BR />Mac filtering .. But I wouldn't recommend it because its labor intensive to manage and easily to work around<BR /><BR />ISE .. Expensive, but can ID a corp asset vs a personal asset and apply rules based on such<BR /><BR />EAP-TLS .. Would require additional knowledge as this is the more complex of the Eaps. Also a Pki would be helpful to manage the Certs.<BR /><BR />Sent from Cisco Technical Support iPhone App</P></BODY></HTML> Tue, 06 Nov 2012 12:30:52 GMT https://community.cisco.com/t5/wireless/wi-fi-access-security/m-p/2071533#M12350 George Stefanick 2012-11-06T12:30:52Z