2.3 SELECTING AUTHENTICATION METHODS ………508DISALLOWING PASSWORD-BASE...

3.2.3 Selecting Authentication Methods ………508

Disallowing Password-Based Connections

(PAP, SPAP, CHAP, MS-CHAP v1) ………509

Using MS-CHAP v2 ………511

Using EAP ………511

Using RADIUS/IAS vs. Windows Authentication …………512

Selecting the Data Encryption Level ………512

Using Callback Security ………513

Managed Connections ………513

Mandating Operating System/File System ………514

Using Smart Cards for Remote Access ………514

3 Creating Remote Access Policies ………515

Policies and Profiles ………515

Authorizing Remote Access ………516

Authorizing Access By User ………516