Augment WEP with WiFi-tolerant VPN |
 |
EXPERT RESPONSE FROM: Alonzo Ellis
|
|
|
|
| > |
QUESTION POSED ON: 30 November 2001
What is your opinion of the level of security protection offered by these vendors who are marketing wireless devices for the home or campus environment that follow the 802.11b standard? Also, what are your thoughts on the existing WEP capabilities? How easy is it to intercept traffic and interpret the info by someone just getting within 100 meters of a wireless network?
|
|
| > |
|
My opinion is that WEP is not (nor was it meant to be) a complete security solution for WiFi. It needs to be augmented by a WiFi-tolerant VPN solution. The best way to secure it today is to first put an IPSEC VPN gateway behind the WAP. Next, you configure the gateway to only accept inbound/outbound IPSEC traffic (use IKE for JFK for key negotiation). Finally you install a VPN client/s on the machine/s that want access to your network. What this guarantees is that a VPN tunnel will have to be established before a user can access your network over the wireless access point and that an IPSEC tunnel will always be present for the duration of the session.
|
|
|
|
|
|
|
|
Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
|
|
|
|
|
|
|
|
|
|
|
|
