Cornerstone Issue 43: July 27, 2002



Welcome to Issue 43 of Cornerstone, an electronic newsletter issued periodically by Core Competence.

Cornerstone reports on a wide range of networking topics and activities involving Core Competence. A brief abstract explains what you will find if you choose to visit each URL.

WIRELESS LAN SECURITY

http://www.isp-planet.com/fixed_wireless/research/2002/int_media_research_wlan_security.html
WLAN Security Poses Market Opportunity
ISP-Planet, June 11, 2002

Internet.com's Thor Olavsrud interviews CoreCom's Lisa Phifer about her new INT Media Research study, "802.11 Wireless LAN Security: Usage, Expectations, and Strategies for the Future"...

http://www.jupiterdirect.com/bin/report.pl/94065/639
802.11 Wireless LAN Security: Usage, Expectations, and Strategies
Jupiter Research, June 12, 2002

In this study, Lisa Phifer analyzes survey results collected from over 300 participants with deployed wireless LANs. This study confirms that many early adopters implemented Wi-Fi LANs without adequately securing them and illustrates the real-life consequences of doing so. It examines how security requirements in key vertical markets are influencing WLAN deployment, considering the devices, user communities, and applications being served by existing and planned WLANs in communications, education, and manufacturing, and risk-averse businesses like healthcare, banking, and public utilities. Finally, this study considers how WEP, 802.1X, VPNs, and traditional network security measures are being applied to secure WLAN access to small business, enterprise, and service provider networks.

http://searchsecurity.techtarget.com/tip/1,289483,sid14_gci840766,00.html
Bolstering Wireless LAN Security
searchSecurity, July 25, 2002

Studies suggest that 1 in 5 enterprises have already been infiltrated by "rogue access points." Unsecure, unauthorized WLANs can rip gaping holes in your network's security perimeter. Visitors and neighbors can unwittingly join your network by associating with unconfigured APs. Opportunistic stations may "borrow" high-bandwidth access to the public Internet. Hackers can use wireless and your network as a springboard to spam or attack others. In this column, Lisa Phifer considers discovery tools, WLAN analyzers, vulnerability assessment and IDS tools that can help companies get a better handle on WLAN use.

http://searchnetworking.com/ateAnswers/0,289620,sid7_tax292553,00.html
searchNetworking Wireless LAN Q&A
June 24-July 18, 2002

As a searchNetworking expert on wireless LANs, Lisa Phifer answers questions posed each week by readers. Questions tackled this month:

  • What are popular authentication protocols for securing 802.11?
  • How can 2.4 GHz be used by both WLAN access point and telephone?
  • Is there a formula to determine bandwidth attenuation through walls?
  • What is Multipath signal interference?

Visit this Q&A page to read answers or pose your own question to any searchNetworking site expert.

VIRTUAL PRIVATE NETWORKS

http://www.interop.com
VPN Day 1: Fundamentals, VPN Day 2: Design and Deployment
Networld+Interop Atlanta, September 9-10, 2002

To learn more about VPNs, join Dave Piscitello, Joel Snyder and Fred Avolio in Atlanta this September. Day 1 provides an overview of VPN technologies, alternatives, applications, use considerations, and selection criteria. Day 2 examines the nitty gritty details that make or break an IPsec VPN. Both days include live demonstrations to illustrate common challenges and practical recommendations for successful VPN deployment.

http://www.corecom.com/external/livesecurity/newmuvpn.htm
Navigating WatchGuard's New MUVPN Client
LiveSecurity Editorial, April, 2002

With WatchGuard's permission, CoreCom reposts Dave Piscitello's LiveSecurity column on WatchGuard's new mobile user VPN client, a customized version of the widely used SoftRemote VPN client. This column gives readers a quick tour of the MUVPN client.

http://www.corecom.com/external/livesecurity/secparams.htm
Security Parameters for Site-to-Site VPNs
LiveSecurity Editorial, May, 2002

Most common problems in deploying VPNs, especially in multi-vendor deployments, arise from mismatched configurations. With WatchGuard's permission, CoreCom reposts Dave Piscitello's LiveSecurity column that describes the most important IKE and IPsec parameters and suggests how to choose among the many options defined by standards.

SERVER, DESKTOP, LAPTOP, AND PDA SECURITY

http://searchnetworking.com/tip/1,289483,sid7_gci834818,00.html
Gateways For Wireless Access
searchNetworking, June 21, 2002

Many public network operators offer secure tunneling from smart phones, pagers, and PDAs to a wireless gateway, hosted at the operator's NOC. Some are based on Wireless Application Protocol (WAP), an architecture for communication between WAP-enabled devices and Internet Web servers. The original WAP was roundly criticized for introducing a "WAP gap" that interrupted end-to-end security between wireless client and wired server. Lisa Phifer examines how WAP 2.0 tries to close the "WAP gap" in her latest searchNetworking column.

http://isp-planet.com/technology/2002/pestpatrol.html
Scrubbing Servers with PestPatrol
ISP-Planet, June 14, 2002

Viruses have become so common that ISPs and enterprises no longer even consider turning up a public server without protection. Unfortunately, viruses are not the only pests to worry about. Lisa Phifer found that combining your favorite A/V solution with a product like PestPatrol can be useful to find and destroy trojans and spyware that might otherwise be overlooked. To learn more, see this ISP-Planet product review.

-----------------------------------------------------------------

Cornerstone is an electronic publication of Core Competence, Inc. If you do not wish to receive future issues, please reply to this message or send email to cornerstone@corecom.com with the word "remove" in the subject line or message body.

For additional information about Core Competence, visit our web site http://www.corecom.com
For past issues, visit our CornerStone page http://www.corecom.com/html/cornerstone.html
Send us a subscribe message to receive future issues of CornerStone.