Enterprise security - advice please

[paul.thomas]

Hi Guys

We have a number of Cisco aironet access points, mainly AIR-AP1131AG-E-K9 models.

Historically these have been WEP/WPA security which was ok until we started using Windows 7.  With XP I used to enter all the keys manually on each PC as it was built so the users did not know the keys.  Now with Windows 7 they can just click to see the keys!

I obviously need to take my wireless security to the next level.

I would ideally like a solution that just means I can send out the config to each PC client via windows GPO.

Any adivce/suggestions/pointers on how to do this?

[Stephen Rodriguez]

You could configure the AP for WDS then implement 802.1x. Then push the config to the users via GPO. you would need an AAA server such as IAS NPS or ACS to do the authentication.

Steve

Sent from Cisco Technical Support iPhone App

[George Stefanick]

As Steve points out WDS will be key. When you go 802.1X you dont want your clients to AUTH during each roam. Some apps will not like that...