 |
| Data exchange on a wireless network functions just like data exchange on a wired network. However, because wireless communications are transmitted through the air rather than over a closed cable, you need to implement some wireless-specific security measures to ensure that your wireless communications are as secure as your wired communications. Wireless solutions use these primary tactics to maintain network integrity: |
|
|
• |
Encryption – WEP (at a minimum; not recommended), WPA or WPA2 encryption (highly recommended) |
|
|
• |
MAC address filtering |
|
|
• |
VPN security |
|
 |
|
|
|
| Wireless products originally used the less-secure WEP (Wired Equivalent Privacy) protocol to help protect data transmissions from prying eyes. However, hackers quickly learned how to crack the 40-bit WEP encryption. Although WEP 128-bit encryption is stronger and more resistant to hacking, WEP is considered a non-viable security solution for most environments, most critically those with a business impact, and has been replaced by the much stronger WPA (Wi-Fi Protected Access) protocol. WPA and WPA2 (version 2) are available. Both are essentially built of a complicated software algorithm that scrambles data as it's sent and unscrambles it as soon as it's received, keeping data safe in transit. |
|
| Tip: When you evaluate access points and wireless network adapters, be certain that you can integrate or at least easily upgrade to WPA/WPA2 encryption or newer standards as they emerge. |
|
|
|
|
|
| MAC (Media Access Control) address filtering restricts network access to authorized devices by assigning each network interface a unique hardware identification number. You can program the network access point to communicate only with approved MAC addresses, and it maintains these approved addresses in a password-protected table. Any attempts to access the wireless network by devices with unauthorized MAC addresses are denied. |
|
| By itself, MAC address filtering doesn't adequately or fully provide a secure network medium; it merely provides a single component in a much larger security framework that must be consistent throughout the network. In addition, creating the MAC address filter list can be a time-consuming, mostly manual effort. Therefore, consider it a complementary security solution mainly for businesses with a relatively small number of networked devices. |
|
| Tip: If you decide to incorporate MAC address filtering in your security setup, enable it as soon as you set up the access point. |
|
|
|
|
|
|
| The best practice in wireless network security is to begin your security efforts at the front door to the network. You can use VPN (virtual private networking) technology to control which users outside of your system have access to it. A VPN is like a gateway to your network that authorized users who are on the outside (on the road, at a client site or working from home, for example) have to pass through before they can access any part of your network, wired or otherwise. Before any user is granted access to your wireless network, they should have to log on to your VPN and pass its authentication requirements. |
|
| Organizations that enable remote access to networks almost always use VPN for control. Because VPN technology has been available for several years, many resources and tools are available to help you set up VPN access. Don't view a VPN as a barrier to a wireless network, but rather as a common component that any network that allows outside access should include. Combined with MAC address filtering and WPA/WPA2 or newer wireless LAN protocols, VPN can make your wireless network highly secure. |
|
Rate this information |
|
| To download the latest Adobe® Reader®, please go to the Adobe website at http://www.adobe.com. Adobe and Reader are trademarks of Adobe Systems Incorporated. |
|
|
|
Set up a wireless LAN |
|
|
Related links |
|
|
Related courses |
|
|
|
| The HP Learning center offers a variety of courses related to wireless networking. Visit it today and look for: |
|
|
• |
Wireless networking solutions |
|
• |
The wireless mobile office |
|
|
|
|
Printable version
