Wireless Security.pdf - PDF Archive

652 Appendix A
APs is still in the proprietary domain, it is highly recommended that all APs be purchased
from the same vendor. This will ensure that an end station equipped with any 802.11-
compatible NIC will be able to roam between APs. In addition, any new vendor-specific
security improvements that are introduced may require homogenous APs.
Concerns over the usage of WEP and its ability to provide adequate security for a network
have required additional measures to improve your security. It is useful to think of securing
the wireless LAN as you would protect the internal LAN from the public Internet. Using
this framework, you could install two firewalls: one at the gateway into your corporate
LAN and another between the LAN and the wireless network. The wireless firewall
can be configured to pass only VPN traffic. This allows a remote user to connect to the
corporate LAN using the VPN. Likewise, a wireless user can authenticate to the wireless
infrastructure while still having wireless data encrypted through the VPN tunnel.
By segregating the wireless infrastructure from your wired network, and enabling VPN
traffic to pass between them, you create a buffer zone that increases network security. In
addition, IPSec, the main IP Layerencryption protocol used in VPN technology, prevents
productive traffic sniffing, which will thwart attacks that rely on using WEP for encryption,
such as AirSnort. Another advantage of using the VPN approach is if you’ve already
deployed a VPN, your remote users are already familiar with the limitations imposed by it.
Getting wireless users to be comfortable with similar limitations should be relatively easy.
A.2 ABC Inc. InfoSec Risk Assessment Policy
Policy No. 1
Effective date Month/Day/Year
Implement by Month/Day/Year
1.0 Purpose
To empower InfoSec to perform periodic information security risk assessments (RAs) for
the purpose of determining areas of vulnerability, and to initiate appropriate remediation.
2.0 Scope
Risk assessments can be conducted on any entity within ABC Inc. or any outside entity
that has signed a Third Party Agreement Insert Link and the Acceptable Use Policy
www.newnespress.com