Re: Wireless Security for Business Use

From: WiFiGuRu (WiFiGuRu@WiFi[noSpamPlease)
Date: 04/09/02

  • Next message: Don Kelloway: "Re: cmd.exe and root.exe in HTTP error files" 

    From: WiFiGuRu <WiFiGuRu@WiFi[noSpamPlease]Consulting.com>
Date: Tue, 09 Apr 2002 01:28:02 GMT

    So True and right on the money. The only thing I've seen in this space
    that seems secure is airfortress, not something you will see in public
    hot spots. I purchased one to evaluate before reccomending it to
    clients and it seems quite secure so far. Anyway public Hot spot
    security is going to be difficult, especially if you are paranoid. If
    you have an email worm it will allow network invasion in many places,
    just not in hotspots.

    Maybe the next big thing will be secure hotspots...

    Michael Erskine wrote:

    > Ok then the long answer...
    >
    > A VPN provides a secure tunnel over an IP network. It in NO WAY
    > insulates the IP network from traffic which is not in the tunnel.
    > This means that someone might piggyback thru your wireless network
    > into your corporate network, if your corporate network is not
    > firewalled against that.
    >
    > A wireless network (particualrily an unsecured one) can easily be
    > joined by anyone who knows how to discover the network (E)(B)SSID and
    > set his system up with the right IP, Gateway, and Netmask. DHCP is no
    > protection unless IP addresses are assigned to specific MAC layer
    > addresses and even then they are not protection because MAC addresses
    > can be forged... so an attacker might just wait till a legitimate host
    > was down and assume his MAC...
    >
    > Or the attacker could just send you a mail worm that opens a
    > connection back to one of his compromised hosts and then piggyback
    > thru you on your VPN tunnel.
    >
    > The only sure protection for a wireless link which can ensure the
    > safety of anything connected to that link is link level encryption
    > with an unbreakable encryption algorythm... I don't make that comment
    > lightly. The fact is there is no operating system which is completely
    > secure. People may point to this one or that one and say, "There are
    > no known exploits..." or "No exploit has been reported in..." That is
    > all well and good... and the banking system still operates upon a
    > private network... and military agencies still have regulations
    > regarding the kinds of material which can be stored upon computers
    > connected to the *public* network.
    >
    > Basically there is no such thing as a secure wireless network which is
    > not proprietary, physically secured, and running strong encryption
    > (typically at the physical and/or datalink layers.
    >
    > So Stewart, what do you think about WEP?
    >
    > -m-
    >

    Relevant Pages

    • Re: Securing a Network - Whats the most secure Network/Server OS? - Is there a secure way t
      ... Anyways the question begs an answer as to why would you want to encrypt 'All' the traffic on an internal network that is reasonably secure and where the systems have been hardened appropriately. ... 630 computer all up, including the Server ... What is the best way to have 256-bit encryption of all traffic on ...
      (Security-Basics)
    • Re: Tell me if Ive got this right.....(please)
      ... >>In many ways it's more secure, since everything on the network is ... If you only look at one factor of security, ... > Then it would be even MORE secure, using encryption on a wired network. ...
      (alt.home.repair)
    • Re: Pakistan to ban encryption software
      ... network you have access to (and of course, ... capture, which is illegal without said permission). ... But the point remains that general email is at least as secure as a letter, and that greater security than that is not generally warranted. ... card details are sold in batches as quickly as possible. ...
      (uk.legal)
    • Re: What security package for SBS?
      ... I have a secure Windows network. ... I also have a secure MacMini and on occasion a secure Ubuntu. ... With a business class firewall stripping crap off all incoming traffic and properly implemented security policies in addition to giving your users absolutely no admin rights, there is no reason to believe you can't create a secure Microsoft Network. ...
      (microsoft.public.windows.server.sbs)
    • Re: Wifi Security
      ... Then add in good practices and secure those endpoints! ... I have changed the security to WPA2 with a 128bit ... and attempt to break into her wireless internet connection. ... part of her network cannot do WPA2 but you actually want her network to ...
      (microsoft.public.security)