Best way to Secure onsite WiFi for Azure AD devices

[Max_Power]

Is there anyone willing share how they are securing their WiFi onsite, for device connectivity where devices only appear in Azure AD? Please.

 

We use Meraki for our WiFi, but there isn't a method (a straight forward one anyway from what I've researched), to utilise a Radius Service with Azure AD devices.

Merkai advise on Cisco ISE with AWS but it is very expensive.

 

We have utilised IPSK but its quite a management overhead and Radius SaaS via 3rd party companies is a very expensive solution.

 

Just wondering what other people are doing?

 

Thank you

[RedwayNetworks_Calum]

Is there anyone willing share how they are securing their WiFi onsite, for device connectivity where devices only appear in Azure AD? Please.

 

We use Meraki for our WiFi, but there isn't a method (a straight forward one anyway from what I've researched), to utilise a Radius Service with Azure AD devices.

Merkai advise on Cisco ISE with AWS but it is very expensive.

 

We have utilised IPSK but its quite a management overhead and Radius SaaS via 3rd party companies is a very expensive solution.

 

Just wondering what other people are doing?

 

Thank you

 

Hi Max,

 

The engineers and I believe that the best solution would be to create a Windows Server VM in Azure configured with NPS. Meraki APs can be added to the NPS Server as RADIUS Clients.

I hope this helps however if you need any more help or advice please feel free to message me.

[DrCheese]

That wouldn't work tho, as Windows NPS needs machine accounts in normal AD (Not Azure AD only) & doesn't like just using a computer certificate to authenticate

[RedwayNetworks_Calum]

As an alternative to the NPS Server, can you not also try and use Meraki "Enterprise with Local Auth" in the SSID setting to force the Meraki APs to talk directly to the Azure AD using LDAP?

[AVCTech]

I keep meaning to try this, but I never get around to it

 

Meraki MR 802.1X with Azure Active Directory – APICLI