Methods For Securing Communications With External Organizations

By Author: Shirley Green
Total Articles: 129
Comment this article

Connecting the networks of different organizations for the purpose of sharing CompTIA A+ certification information or doing other business activities is not an entirely new activity; however, the breadth and scope of these multiorganizational networks or extranets is new. It is also much easier these days to connect networks, and there are more -ways for doing so. There are two main ways to secure communications with external organizations: using Web server applications and using VPNs. In both cases, certificates play major roles in providing secure communications. And in both cases, there are special trust relationship issues because of the need for secure communications between organizations. The following sections describe how certificates secure communications and how to resolve trust relationship issues.
Authentication can be configured for the A+ certification as a whole (by using the VPN server properties) and for each interface (by using the interface properties). Make sure that the router as a whole includes only protocols that ...
... the interfaces need.
Do not configure the user account used for authenticating the connection to require a password change at next logon. The VPN router will not be able to respond.
Where multiple VPN servers (remote access and demand-dial) are present, consider using RADIUS for authentication and accounting. Doing this pro?vides a centralized service that is much more granular and robust than Win?dows authentication and accounting.
Ensure that certificate revocation is enabled. Set the following registry key value to 0 (zero) to ensure that CRL checking is enabled for RAS certificates. By default, it is set to 0 (zero), but it might have been set to 1 during troubleshooting. When this value A+ Exams is set tol, revocation status is ignored.
Instead of reducing security, determine why authentication is failing. It might be supposed to fail (certificate invalid), or it might be failing because of an improper configuration.