Excellent post Brandon. I have been using the IP range filtering which has worked well, but it is cumbersome to maintain as you stated. My next step is to setup the SSO agents. For anyone that has not updated the firmware, I highly recommend that you do so. It has transformed a good firewall into a great appliance.
This configuration has been a great success at Cornell and Aliquippa school districts. The new DC security log method also works with Apple devices that have authenticated to Active Directory. Greate for mixed Apple and Windows environments.
Click here to cancel reply.
Remember my details
Notify me of followup comments via e-mail