Forum

Can you be more specific? Once the user is linked via the IPSec tunnel to the corporate LAN, the remote user is no longer "remote". It's another host on the corporate LAN. Whatever tools are used to push policies to users wouldn't know the difference.

The policies aren't pushed to users, but rather to the remote AP. Suppose, for example, that a particular user uses 802.1X/PEAP-MSCHAPv2, SSID=101, CCMP, with a long set of firewall/ACL rules because he/she is part of the Marketing group. That policy and WLAN profile could be pushed to the remote AP sitting at their house. When they go to the office, they get this profile. When they go home, they get this profile. No matter where they connect, they get the same security connectivity, the same corporate LAN access rules, etc.

Devinator