Due to the large broadcast area of even modestwireless equipment, you need to be as secure as possible. There are several steps that you can take.
First, by default most wireless units broadcast their service set identifier (SSID). You should disable this. Also, be aware that default SSIDs (such as "router""LinkSys", etc.) are well known by hackers, so make sureyours is unique.
Most wireless equipment, utilizes WEP (wirelessencryption protocol). This is typically available at64-bit, or 128-bit strengths. When performance is not anissue, always select 128-bit.
But, WEP is known to be weak and even the 128-bit iscrackable given enough time. To foil these attempts, makesure you change your encryption key at frequentintervals; if possible, weekly.
While WEP is widespread, new encryption methods are readilyavailable. Wireless security tends to be a cat and mouse gamewith hackers. Keep your hardware current to ensure you cantake advantage of the newest technologies.
Another method used to secure wireless access points(WAP) is MAC address filtering. With this technique, alllaptops, workstations, and/or PDAs that will be usingthe WAP are pre-registered with their unique networkequipment address (known as a MAC). While MAC filteringwill keep out a casual intruder, a sophisticated hackercan spoof an existing known MAC and gain access.
The best overall solution for securing wireless is end-to-endencryption. In this scenario, a VPN device is either placed infront of the WAP, or integrated into it. Users are required touse a VPN client to connect to the network. All traffic isthen encrypted. In order to hack in, an intruder will have tocrack the VPN encryption before being able to either listen to orinject network traffic.
SecurePipe delivers a complete network security solution -- the expert staff, innovative technology and the examiner compliant processes you need to dramatically improve your security posture and reduce costs. SecurePipe makes strong network security affordable by delivering 24x7 managed network security at a fraction of the cost of doing it in-house. To learn more, contact us toll-free at 1-877-248-1632 or email sales@securepipe.com to arrange a FREE security assessment to learn how your financial institution canbenefit from managed security services.
First published on BankersOnline.com8/2/04
Securing Wireless Networks -- Secure Pipe
Question:
We are using wireless; is there any way to reallysecure it?
Answer:
Vendor: