Question : Wireless Security Certificate, worth the hassle?

Hello Experts,

We are currently using a Windows 2003 Domain and have a Private Wireless.  
We are currently using IEEE 802.1x authentication using PEAP and a certificate from our Certificate Domain Controller.

The question i have is that if we go into the PEAP settings you can uncheck/check  a box that says "Validate server certificate".  If it is checked then it checks for the certificate and lets you on the wireless.  If it's unchecked it just skips the check and lets you on the wireless.

What are the advantages of using the Certificate?  How much safer is it?  Is it worth the hassle of having this security measure?.

If possible please cite some articles explaining your answer or let me know what your credentials are so.

Thank you!!

Answer : Wireless Security Certificate, worth the hassle?

The advantage of using the certificate is that the client laptop can verify that it is connecting to your wireless and no-one else's.

If someone wanted to compromise the laptop they could set up a wireless access point with the same name as your own wireless and without server-cert checking, the laptop will connect. The attacker could then try and access the laptop over the network.
Random Solutions  
 
programming4us programming4us