The Compuquip E-bulletin

Thursday, May 23, 2002 May/June 2002    
HOME
LETTERS

There are no letters for this article. To post your own letter, click Post Letter.

[POST LETTER]
Tech Tip of the Month
Deploying Secure Wireless LANs

Deploying Secure Wireless LANs
 
WLANs use a standard known as 802.11b, or Wi-Fi, that works on the same unlicensed airwaves as household portable telephones.  Everyone who has ever accidentally intercepted others’ calls on these telephones realizes that the vulnerabilities of this technology are significant. 
To make matters even worse, many WLAN devices are sold with critical security features disabled for greater ease of installation, and few users bother to implement the data-scrambling encryption that is a standard feature of most units.  Those who do use all of the standard security features of today’s WLAN equipment may still be invaded by unscrupulous individuals armed with software hacking tools that are available for free on the Internet. 
Breaking into wireless networks has become so easy that some hackers are abandoning their desktop computers to go "war driving," a term they have coined for riding around in a car with a laptop and antenna to find access points and infiltrate wireless computer networks.
Thankfully, there are some improvements in the works.  A breakthrough wireless technology backed by Intel, Sony and other industry giants called ultrawideband could eventually replace Wi-Fi.  This wireless technology is 3 to 10 times faster than Wi-Fi and offers much better security.  In addition, tougher encryption standards for Wi-Fi are also under development. 
However, these changes will take some time to enter the marketplace, so adequate security for today’s Wi-Fi systems is a must.  Here are some of the most effective measures:
 
1.      Activate the encryption system used to protect information flowing across the network.  As noted above, these encryption systems are easily deciphered, so don’t be lulled into a false sense of security after taking this simple step.  
 
2.      Overlay the encryption system with a secondary layer of security.  For most businesses, this means extending the firewalls, virtual private networks and intrusion-detection systems that they are already using for Internet security.
 
3.      Use PPTP, or Point-to-Point Tunneling Protocol, which is included on most versions of the Windows operating system.  An even more secure version of this kind of software, called IPSec or Internet Protocol Security, is also available.  However, these systems will require their own servers, and IPSec requires licensing fees on a per-computer basis.
 
4.      Separate the wireless network from the rest of the network and set up rules to access it.  Essentially, companies should keep their wireless networks outside of their main networks and install firewalls and gateways.
 
5.      Deploy WLAN equipment from Cisco and others that feature enhanced security via proprietary software.
 
By following these steps, companies can take advantage of the benefits of wireless computer networks while avoiding the security drawbacks. 
 
 

[PRINTER FRIENDLY VERSION]
Subscribe or Remove

Enter your email address in the box below to receive an email each time we post a new issue of our newsletter:


Add Remove
Send as HTML
 

Created with eNewsBuilder