• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 202
  • Last Modified:

How Open should we make our Open Wireless Access

We are running different SSID's in different VLans. We have our Radius secured wireless for District owned computers that we manage and then we have an Open network for people who bring their own devices. They use Remote Desktop Gateway to access Termional Servers when they need to use resources on the private side. The problem is we have them restricted to port 80, 443 and 3389 but things like activesync don't work for cell phones and iPads.

What is a good balance between access and security?
0
mlamson
Asked:
mlamson
1 Solution
 
ArneLoviusCommented:
Activesync uses 443 (or 80 if you have no security)

I'm going to guess that the "open" SSID/VLAN terminates on your firewall and the exchange server is "inside" the firewall on a different interface.

If this is a Cisco firewall, I would use NAT (as opposed to PAT) and enable DNS translation, and then add an ACL to allow traffic from the "open" SSID/VLAN to go to port 80/443 on your exchange server.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now