CWNP Blog

CWNP
August 24, 2010

Factors to Consider while Evaluating a Wireless Security Solution

Wi-Fi proliferation and increased awareness about associated security risks is prompting many organizations to install Wi-Fi security monitoring systems, for which the industry term is WIPS (wireless intrusion prevention system). Protection from rogue APs, WiPhishing, corporate client connections to neighborhood APs, mis-configurations of authorized Wi-Fi, wireless DoS attacks, spoofing, and zero-day attacks are some of the commonly cited reasons to install WIPS. There are many WIPS solutions available in the market today, including those offered by WLAN infrastructure vendors and those offered by dedicated security vendors. However, WIPS being a relatively new security technology, organizations often face challenges in evaluating these solutions to determine what best suits them. More so, many end-users may not have the level of dedicated wireless skills and resources required to thoroughly test a WIPS. In this light, this article lays out some high level considerations that are important while evaluating a WIPS solution.

CWNP
August 11, 2010

Meraki's New Features: A 1-2-3 Punch

Vendors contact me on a regular basis to let me know about their new products, features, and developments. I like that. Generally, the hope is that I’ll write about them, but a fair amount of the time, there’s not much worth writing about. I got an email the other day from Meraki and for no apparent reason, I suspected they were writing to tell me about some paltry feature upgrade that neither I, nor CWNP’s constituents would care about. That has nothing to do with Meraki, and was more about my mood at the time (I’m seeing a counselor about that). :) I’ve had nothing but great experiences interacting with Merakians thus far so I had no reason to expect the worse. So, in addition to being anecdotal and transparent, I share that information only to reinforce the fact that I was pleasantly surprised by the 1-2-3 punch of news Meraki released this morning.

CWNP
August 04, 2010

Free Wi-Fi Stumbling and Surveying Tools

You’ve most likely heard of NetStumbler, but there are many more free Wi-Fi stumblers out there. These can come in handy whether you want to check the channels, find rogue APs, or do full RF site surveys. Here’s a review on several of these stumbling and surveying utilities.

CWNP
August 03, 2010

FCC: Laying Down the UNII Law

The word on the street is that the FCC is cracking down on wireless usage in parts of the UNII 2e band. The FCC released a memorandum last week to encourage new wireless deployment practices and vendor marketing emphasis for avoiding interference with certain kinds of radar. I’ll explain the purpose and message of the memorandum here, but if you’d like to read for yourself, here’s a link: http://www.wi-fi.org/files/FCC_Memorandum_on_UNII_Device_Operation_2010_07_27-M.pdf

CWNP
July 12, 2010

AirTightening the Bolts on Insecure Networks

WIPS vendors tell us all about the problems of ad hoc networks and the dangers of hackers, but perhaps they should remind us of the dangers of ad hoc networks and Russian spies. You may have read in recent news that the FBI detained several individuals who were suspected of being Russian spies. During the investigation, some telling evidence was collected by means of Wi-Fi sniffing. As it turns out, one of the suspects would set up shop with a laptop in a coffee shop. Another suspect would drive by in a van, transferring files with the person in the coffee shop via an ad hoc network with “amateurish” security. The FBI caught onto this and was able to sniff the traffic and recover the data. If only the Russian spies had heard marketing messages from WIPS vendors explaining that ad hoc networks are bad. Apparently they’re bad for everyone, spies included.

CWNP
July 08, 2010

First Look: Aruba Integrated Spectrum Analysis

After an initial and timely onslaught of press about integrated spectrum analysis, it looks like Aruba now has something to show. http://arubanetworks.com/products/spectrum-analyzer.php

CWNP
June 30, 2010

End of June Wi-Fi Notables

The Wi-Fi market is healthy and growing. To keep you apprised of the comings and goings you may have missed, here are five notable Wi-Fi happenings from the month of June. You might call this a newsletter blog.

CWNP
June 22, 2010

Top 5 Wireless LAN Performance Issues

As I have been working closely with wireless security over the last several years of my life, I have demonstrated a clear tendency towards blogging about security issues. However, once an enterprise starts moving towards a secure WLAN, the problems naturally shifts towards performance. This blog is dedicated to WLAN performance issues. Several dozens of WLAN performance problems are common. However, in a typical enterprise scenario, what are the Top 5 issues that bother the WLAN operations team the most? In my experience working with customers, these 5 issues are at the top of the list. Let me know if you disagree.

CWNP
June 18, 2010

So Long Insecurity

My wife has a book on her bedside stand called So Long Insecurity, by Beth Moore. I [figuratively] have a press release on my bedside stand called “So Long Insecurity,” by the Wi-Fi Alliance. You may have already read or heard that the compass of the Wi-Fi Alliance is pointed due north on a path to prevent support of insecure security solutions on Wi-Fi certified (read: any Wi-Fi device in the competitive marketplace) devices.

CWNP
June 11, 2010

Using Apple’s Lemons to Make Lemonade

This WWDC Wi-Fi fiasco has gotten far more traction in the press than I would have ever expected. So, with a modicum of jest and a modicum of sincerity, here’s more fuel for the fire.

Blog

Get the Newest Blog Direct to your Inbox