What Is Internet Authentication Service?
The Internet Authentication Service (IAS) is a centralized Windows management component installed on servers that acts as the dedicated application for authenticating remote user access. It is part of Microsoft's Remote Authentication Dial-in User Service (RADIUS) best implemented for complex network environments that require users to access the network from outside. The IAS authenticates several methods of remote connection, like remote access dial-up, virtual private network (VPN) and wireless remote access. In even more complex network environments, the IAS acts as a proxy server to forward authentication to other RADIUS servers.
Other People Are Reading
-
Benefits
-
The IAS is useful in complex network environments that have users who access the network remotely and in different ways. Imagine four users who access the network remotely, each using a different method: dial-up, VPN, Ethernet connection and wireless. Several devices or servers can be set up to authenticate each of these types of connections, but it is too costly to have dedicated servers. Also, having several entry points for remote access poses a bigger security risk for the network. With IAS, authentication is done in fewer servers regardless of the type of remote access used. This simplifies authentication management and reduces security risks.
RADIUS Structure
-
IAS is one component of a RADIUS structure. A simple RADIUS structure is composed of the computers that need remote access (access clients); servers that facilitate the connection (access servers) between the access clients and the network; and the IAS server (RADIUS server) that authenticates all these connections.
-
IAS as Proxy Server
-
IAS can also be configured as a proxy server, which acts as the intermediary between the access servers and the RADIUS server. In a large network, several servers may be set up as IAS servers to balance the load and number of remote access connections. Having multiple RADIUS servers creates security risks. To increase security, you can use IAS as a proxy server, which will act as a substitute for access servers to connect on. Between the IAS proxy server and the RADIUS servers, you can place a firewall to limit connection only to those that pass through the proxy.
Installing IAS
-
IAS is an available Windows component for Windows 2003 servers and later versions. To Install the IAS, simply go to "Add/Remove Programs" and click on "Add/Remove Windows Components." From the "Windows Components Wizard," click "Details" under "Networking Services" and select the "Internet Authentication Service" option. It may prompt you for the Windows server installer CD if the files are not available on the server.
Creating Remote Policies
-
To create remote policies for IAS, open IAS, right-click "Remote Access Policies" and click "New Remote Access Policy." You can choose the type of access method you want to allow, like wireless, Ethernet, VPN or dial-up, and you can also configure users and conditions for authentication.
-
