![]() |
Cornerstone Issue 43: July 27, 2002
Welcome to Issue 43 of Cornerstone, an electronic newsletter
issued periodically by Core Competence.
Cornerstone reports on a wide range of networking topics and
activities involving Core Competence. A brief abstract explains
what you will find if you choose to visit each URL.
http://www.isp-planet.com/fixed_wireless/research/2002/int_media_research_wlan_security.html
Internet.com's Thor Olavsrud interviews CoreCom's Lisa Phifer about her
new INT Media Research study, "802.11 Wireless LAN Security: Usage,
Expectations, and Strategies for the Future"...
http://www.jupiterdirect.com/bin/report.pl/94065/639
In this study, Lisa Phifer analyzes survey results collected from over
300 participants with deployed wireless LANs. This study confirms that
many early adopters implemented Wi-Fi LANs without adequately securing
them and illustrates the real-life consequences of doing so. It examines
how security requirements in key vertical markets are influencing WLAN
deployment, considering the devices, user communities, and applications
being served by existing and planned WLANs in communications, education,
and manufacturing, and risk-averse businesses like healthcare, banking,
and public utilities. Finally, this study considers how WEP, 802.1X,
VPNs, and traditional network security measures are being applied to
secure WLAN access to small business, enterprise, and service provider
networks.
http://searchsecurity.techtarget.com/tip/1,289483,sid14_gci840766,00.html
Studies suggest that 1 in 5 enterprises have already been infiltrated by
"rogue access points." Unsecure, unauthorized WLANs can rip gaping holes
in your network's security perimeter. Visitors and neighbors can
unwittingly join your network by associating with unconfigured APs.
Opportunistic stations may "borrow" high-bandwidth access to the public
Internet. Hackers can use wireless and your network as a springboard to
spam or attack others. In this column, Lisa Phifer considers discovery
tools, WLAN analyzers, vulnerability assessment and IDS tools that can
help companies get a better handle on WLAN use.
http://searchnetworking.com/ateAnswers/0,289620,sid7_tax292553,00.html
As a searchNetworking expert on wireless LANs, Lisa Phifer answers
questions posed each week by readers. Questions tackled this month:
Visit this Q&A page to read answers or pose your own question to any
searchNetworking site expert.
http://www.interop.com
To learn more about VPNs, join Dave Piscitello, Joel Snyder and Fred
Avolio in Atlanta this September. Day 1 provides an overview of VPN
technologies, alternatives, applications, use considerations, and
selection criteria. Day 2 examines the nitty gritty details that make
or break an IPsec VPN. Both days include live demonstrations to
illustrate common challenges and practical recommendations for
successful VPN deployment.
http://www.corecom.com/external/livesecurity/newmuvpn.htm
With WatchGuard's permission, CoreCom reposts Dave Piscitello's
LiveSecurity column on WatchGuard's new mobile user VPN client, a
customized version of the widely used SoftRemote VPN client. This
column gives readers a quick tour of the MUVPN client.
http://www.corecom.com/external/livesecurity/secparams.htm
Most common problems in deploying VPNs, especially in multi-vendor
deployments, arise from mismatched configurations. With WatchGuard's
permission, CoreCom reposts Dave Piscitello's LiveSecurity column
that describes the most important IKE and IPsec parameters and
suggests how to choose among the many options defined by standards.
http://searchnetworking.com/tip/1,289483,sid7_gci834818,00.html
Many public network operators offer secure tunneling from smart phones,
pagers, and PDAs to a wireless gateway, hosted at the operator's NOC.
Some are based on Wireless Application Protocol (WAP), an architecture
for communication between WAP-enabled devices and Internet Web servers.
The original WAP was roundly criticized for introducing a "WAP gap"
that interrupted end-to-end security between wireless client and wired
server. Lisa Phifer examines how WAP 2.0 tries to close the "WAP gap"
in her latest searchNetworking column.
http://isp-planet.com/technology/2002/pestpatrol.html
Viruses have become so common that ISPs and enterprises no longer even
consider turning up a public server without protection. Unfortunately,
viruses are not the only pests to worry about. Lisa Phifer found that
combining your favorite A/V solution with a product like PestPatrol can
be useful to find and destroy trojans and spyware that might otherwise
be overlooked. To learn more, see this ISP-Planet product review.
-----------------------------------------------------------------
Cornerstone is an electronic publication of Core Competence, Inc.
If you do not wish to receive future issues, please reply to this
message or send email to
cornerstone@corecom.com
with the word "remove" in the subject line or message body.
For additional information about Core Competence, visit our web site http://www.corecom.com
|