Cornerstone Issue 47: December 18, 2002



Welcome to Issue 47 of Cornerstone, an electronic newsletter issued periodically by Core Competence.

Cornerstone reports on a wide range of networking topics and activities involving Core Competence. A brief abstract explains what you will find if you choose to visit each URL.

WIRELESS LANS

http://searchnetworking.com/ateAnswers/0,289620,sid7_tax292553,00.html
searchNetworking Wireless LAN Q&A
December, 2002

As a searchNetworking expert on wireless LANs, Lisa Phifer answers questions posed each week by readers. Questions tackled this month

  • Wireless Encryption Protocol or Wired Equivalent Privacy?
  • Enabling wireless access from your laptop to your cable modem
  • Wi-Fi antennas than span more than a mile
  • What's new in wireless security
  • Troubleshooting a WLAN with W2K connection sharing

Visit this Q&A page to read answers or pose your own question to any searchNetworking site expert.

http://www.watchguard.com/docs/wirelesslans_wp_ltr.pdf
Layered Security Practices for Incorporating Wireless LANs into Intranets
WatchGuard White Paper, November 2002

This paper, developed by Dave Piscitello for WatchGuard, discusses the concerns around incorporating wireless LANs into trusted networks, and explains that many wireless LAN issues can be addressed with conventional security practices and technologies you may have already deployed. Includes a security checklist for network administrators to use when implementing wireless security.

http://searchnetworking.com/webcastsTranscriptSecurity/1,289693,sid7_gci868667,00.html
Audio Event Transcript: Making Sense of 802.11 Standards
searchNetworking, December 2002

IEEE 802.11a, b, or g - which wireless LAN standard is right for you? What's the difference between 802.1x and 802.11i - more importantly, why should you care? In this searchNetworking audio event transcript, Lisa Phifer spells out the A-B-C's of 802.11 standards and explains where these standards appear in today's wireless LAN products and services.

VIRTUAL PRIVATE NETWORKING

http://searchnetworking.com/tip/1,289483,sid7_gci868459,00.html
VPN Client Alternatives, Part 4 -- IPsec
searchNetworking, November 29, 2002

Those searching for "free" VPN client software have many options. In this column, Lisa Phifer provides a survey of open source, embedded, third party trial, and vendor-specific VPN clients that run IPsec and IKE.

http://searchnetworking.com/tip/1,289483,sid7_gci860630,00.html
VPN Client Alternatives, Part 3 -- L2TP
searchNetworking, October 31, 2002

In this companion column, Lisa Phifer considers "free" VPN clients that use the Layer 2 Tunneling Protocol (L2TP) over IPsec, and explains how they differ from PPTP or "vanilla" IPsec VPN clients.

SECURITY ADMINISTRATION

http://www.watchguard.com/docs/vlans_wp_ltr.pdf
Using Virtual LANs to Get More From Your Firewall
WatchGuard White Paper, December 2002

VLANs separate large networks into smaller pieces that are easier to maintain. Extending VLANs into your firewall takes this modularity to the next level. This primer, developed by Lisa Phifer for WatchGuard, explains how VLAN tags can be used to bind policies to virtual interfaces, creating independent firewall rules for logical workgroups.

http://www.corecom.com/external/livesecurity/webserver.htm
Affordable Web Server Scanning
WatchGuard LiveSecurity Editorial, October 4, 2002

With cross site scripting attacks more commonplace, complex, and malicious than ever, one important initiative for keeping your Web site secure is this: timely inventory, review, and control of Common Gateway Interface (CGI) code. With the right scanners, assessing the security of CGI scripts doesn't have to be expensive. In this column, Dave Piscitello considers how to use web server scanning tools to reduce exposure to cross-site scripting attacks.

-----------------------------------------------------------------

Cornerstone is an electronic publication of Core Competence, Inc. If you do not wish to receive future issues, please reply to this message or send email to cornerstone@corecom.com with the word "remove" in the subject line or message body.

For additional information about Core Competence, visit our web site http://www.corecom.com
For past issues, visit our CornerStone page http://www.corecom.com/html/cornerstone.html
Send us a subscribe message to receive future issues of CornerStone.