Cloudpath

TTLS Configuration

Name:

Use Anonymous Identity

Description:

Enabling this option instructs SecureW2 to use an Anonymous outer identity.

Notes:

As part of the TTLS protocol, an outer tunnel is established. Prior to this outer tunnel being established, all transmissions are in the clear. After establishing the outer tunnel, all transmissions are encrypted. An identity (or username) is necessary to establish this outer tunnel. If the end-user's username is used, it is transmitted in the clear, which is less than desirable. To avoid this, most deployments utilize the username 'Anonymous' for establishing the outer tunnel. This ensures that the end-user's username is not transmitted in the clear.

Values:

Selected
The client will use an anonymous outer identity.

Default Value:

Selected

Recommended Setting:

Selected.

Cloudpath Help :

Cloudpath can detect the SecureW2 setting 'Use Anonymous Identity'.

Supported settings include:

Enabled - Default. When selected, 'Anonymous' will be used for the outer identity.

Disabled - When selected, 'Anonymous' will not be used for the outer identity.

This setting is only applicable if Use Alternate Identity is set to 'Enabled'.

Cloudpath is able to auto remediate this setting.
By default, SecureW2 will enable this for a new profile.