Security in Wireless environment

[ljCharlie]

We are thinking of going into a wireless work place for our computers an servers. One question is security. I understand that we will have to buy some kind of security software to protect our computers. However, one other question that my boss raise is that when a computer sends out signal, the signal goes all direction. What if someone on the street have the right equiptment, can he/she intercept the signal and get the information? The scenerio is that if I have the right equipment I can intercept and listen to someone else on their cell phone talking because the cell is wireless and send out the signal all direction. Is it that easy for wireless network? Let's assume my next door neighbor has a wireless laptop or some kind of equipment and I have a wirless network. And yes, I have the right security software to protect my computers, but the question is once the I send out a signal and it open in the the air, can my next door neighbor intercept the signal and see what I'm doing? My understanding is that a firewall only protects what's coming into my computer or network only...not when the signal is up in the air.

Any idea or suggestion into this confusion that I have is greatly appreciated.

ljCharlie

[doctorgonzo]

Securing a wireless network involves enabling WEP, which encrypts the signal so it can't be deciphered even if intercepted.

Also, for added protection it is a good idea to configure access points to only allow connections from certain MAC addresses. That way, only your business's computers will be able to connect. Nobody else would be able to access it. Of course, that also means that legitimate users who are, for example, bringing in a laptop from home won't be able to connect either.

Security is more than just a product. It is a process. Sit down with stakeholders and hammer out a policy for implementing the wireless network. You want to think about an answer these questions beforehand, not when something breaks.

[ljCharlie]

Thanks for the response and suggestions. I understanding the all the appropriate settings need to be in check but my boss is concern about once the signal is out in the open space anyone with the right equipment can intercept and decode the signal. A firwall is only good protecting what's internally inside a computer but what about when it's out and no longer in the computer? The same thing with wired network. What about when the packets are in transmission along the cable line? How do we prevent people from intercepting that packets while it's in trsansmission to its destination? And with the wirless, it's becoming more easily. I have not read much into the security issues with wireless while the data is in transmission in the open space. That is why I would like to know more before we implement the changes.

ljCharlie

[doctorgonzo]

Yes, the signal can be intercepted by anybody. But with WEP enabled, the signal is encrypted. The intercepted signal will be random noise, unintelligible to anybody who does not have the key to decrypt it. For greatest security, get components that allow large WEP keys (at least 128-bit).

[ljCharlie]

I see! That's what I wanted to know. So anyone can intercept the signal but it'll just be a bunch of noise and nothing really usefull if the signal itself is encrypted. Yes, I heard of WEP and WPA but wasn't really sure exactly what they do. My understanding is that WEP and WPA are only to prevent computer from trying to get in on the network or Internet access. I did not that WEP or WPA also do signal encrypting.

ljCharlie
ljCharlie