Study

RADIUS Deployments Like the different controller’s deployments, there are also different ISE deployments. Single site deployment This is a deployment when there is only one site. On this site, all the communications are done by a single RADIUS cluster and the LDAP database. Since it is a single site, everything is centralized. The queries between …

Before we dive into RADIUS, first I want to explain a little bit about LDAP. Lightweight Directory Access Protocol is a protocol that is used for directory services over an IP network. It is possible that the RADIUS server has a database with user accounts for authentication, but most of the time it uses an …

As mentioned in the authentication blog, the Authentication Server (AS) and the Supplicant need to talk to each other with the same EAP protocol. The AS has also a server certificate which is used for two purposes. First it is used to show the supplicant that this server is the right server to send your …

It doesn’t matter how strong the authentication is, it always comes back to three categories. – Something you know – Something you have – Something you are An example of something you know is a password for a PSK WLAN. Something you have can be the laptop that is part of the active directory or …

Not every security problem is per se caused by a hacker. Sometime, unintentionally, your own employees are causing the issue—humans are still the weakest link. As I said it is unintentional because when you don’t have a policy written down the users are not aware of what is allowed and what is not allowed. Rogue …

We’ve talked a couple of times about programs like wireshark. With wireshark you are able to ‘listen’ to all the frames that are transmitting in the air. Another word for this is eavesdropping. This is not per se an attack since you can use wireshark for troubleshooting as well. Sadly, people can misuse wireshark for …