Wireless Security

Discussion in 'Server Security' started by BOFH, Sep 20, 2004.

  1. BOFH

    BOFH Guest

    Can anyone point me to a step-by-step guide to secure a wireless access
    point we have just bought. We also just bought 22 laptops with wireless and
    need to just allow those to access the domain...not the whole estate.

    BOFH, Sep 20, 2004
    1. Advertisements

  2. BOFH

    Jeff Cochran Guest

    I would think the manufacturer's instructions would be your best
    guide. Can't really give a step-by-step without knowing the exact
    make, model, firmware, etc.

    Jeff Cochran, Sep 20, 2004
    1. Advertisements

  3. BOFH

    BOFH Guest

    I thought security was done via Group Policy on a Windows Server?

    BOFH, Sep 20, 2004
  4. There are several and a lot depends on the capability of the WAP, the wireless
    adapters, your network configuration, and the operating systems. The main thing is to
    use some sort of authentication and encryption. WEP is kind of old technology that
    while a whole lot better than nothing does have some weaknesses. WPA is much better
    and most newer wireless equipment is WPA capable at least for pre shared key [PSK] .
    Be sure to use complex passphrases for WPA. 801.X is the most secure type of wireless
    access but requires a IAS/radius server on the network and computer certificates for
    at least the IAS computer and every client also if using the most secure access which
    is EAP-TLS.

    As far as controlling access to just the domain, that would have to be done on the
    WAP if it has any firewall/IP filtering capabilities or using different
    keys/passphrases for multiple Wireless Access Points if available, through software
    firewalls on the laptops, possibly ipsec filtering policies on the laptops in they
    are W2K/XP Pro, or through your network switching capabilities to segment the
    network. The links below go into much more detail on wireless security. --- Steve

    Steven L Umbach, Sep 20, 2004
  5. BOFH

    Jeff Cochran Guest

    For a piece of hardware this isn't running Windows? No.

    Jeff Cochran, Sep 20, 2004
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.