Creating A Wireless Network That Works
Turn Tape Drives Into A Complete Solution
Have you been considering a wireless network? Recent breakthroughs in wireless networking and wireless LAN, along with the introduction of virtual private networks (VPNs), may now provide the confidence you need to jump on board. When integrating wireless LANs and related PDAs, notebooks and other equipment, follow these best practices to ensure proper fit and functionality within your company's network.
Access Points
Access points — hardware devices that are wired into your company's Ethernet network — allow employees to roam freely with full Internet connectivity while toting a laptop around the office.
Many organizations guess wrong when selecting the number of devices required to ensure a fast connection for all users. It's not as simple as merely installing access points near conference rooms and other obvious places. You'll find that not every conference room requires wireless Internet access, but that access is needed in less obvious areas, such as lobbies and places where clients gather informally.
Because actual performance depends on the number of users, choosing an effective number of access points depends on the level of bandwidth your company wants to guarantee employees. Start by calculating the usage levels required by individual users. With wireless networks operating at the standard 11 Mbps, for example, each access point supports about 6 Mbps of data throughput. Thus, 60 employees could surf the Web at moderate speeds of 100 Kbps.
However, if users spend most of their time viewing high-quality streaming video, each access point could sustain only three users. Consider adding an access point for every three to five users who routinely transfer graphics, spreadsheets, photos and other large files.
For safety, treat access points as unsecured, external devices that offer easy access to hackers and other intruders. VPNs remain the most common and cost-effective way to protect these vulnerable network elements. Choose a VPN solution powerful enough to encrypt and decode the data as quickly as possible, to avoid latency and network sluggishness.
Wireless Devices
Consistency rules when choosing notebooks, PDAs, phones or other wireless equipment for inside users or road warriors. Unfortunately, many organizations buy equipment based on price or personal preference — often resulting in a mishmash of software and equipment that becomes time-consuming for IT staff to support. It's better to stick with a single manufacturer and purchase the same product, with the same operating system, for all users.
When it comes to laptop selection, companies do best to purchase the same make and model, then upgrade within that product line as replacements are needed. Select laptops with state-of-the-art capabilities, such as Intel Centrino mobile technology for greater processing power, and optimized battery life.
Three great choices are the MX M3 ,Toshiba Portégé R100, and the IBM ThinkPad R and T Series notebooks.
The same holds true for PDAs. Stick to one platform — either Microsoft's Pocket PC software or Palm's operating system — and one model. Regardless of company preference, many employees prefer to use their own PDAs. Therefore, set a policy that excludes use of personal hardware to reduce the impact on IT support staff.
As you consider your options for access points and wireless devices, give us a call. We will help you pull all the components together for a safe, effective wireless network.
| Essential Steps To Better Wireless Security |
- Change the default SSID (network name). Hackers know products' default SSIDs (set by the factory) and can use them to join your network. To deter future intrusion attempts, change your SSID regularly.
- Disable the SSID broadcast option. By default, most wireless networking devices are set to broadcast the SSID, so anyone can easily join the wireless network. Disabling this option can deter potential hackers.
- Change the default password needed to access a wireless device. Wireless access points and routers require a password before you can change their settings. Hackers know these defaults, but can be thwarted if you customize the device with difficult passwords.
- Enable MAC address filtering. With this feature enabled, wireless network access is provided solely for devices with this specific series of numbers and letters. This feature makes it harder for a hacker to access your network using a random MAC address.
|
| Wireless Security Glossary |
|
802.11 – The umbrella standard that provides 1- or 2-Mbps transmission in the 2.4-GHz band.
802.11a – This extension to 802.11 enables up to 54-Mbps in the 5-GHz band.
802.11b – Another extension to 802.11, this provides 11-Mbps in the 2.4-GHz band.
802.11g – Ratified in June 2003, this extension adopts 802.11a's orthogonal frequency division multiplexing (OFDM) for 54-Mbps speeds, but in the 2.4-GHz band.
802.11i – This supplemental draft standard is intended to improve WLAN security. It uses WPA and the advanced encryption standard (AES) to protect the encrypted transmission of data between systems of 802.11a and 802.11b WLANs.
|
back to top
Strengthen Wireless Security With WPA
Does your wireless network need higher security? Check out Wi-Fi Protected Access (WPA), a new protocol that offers significant improvements over Wireless Equivalent Privacy (WEP). Here's some information to help you better understand WPA and determine if it's right for you.
Q. How does WPA fit into the world of wireless technology?
A. WPA is one component of the industry's forthcoming 802.11i technology standard, which should be finalized by the end of 2003. Essentially, WPA raises the bar on network security and can help you achieve a network that is difficult for hackers to infiltrate.
Q. What went wrong with WEP?
A. Due to fundamental encryption flaws (one key for all devices, insufficient key length and manual key distribution), WEP could be cracked by hackers. These flaws left the network's data-link layer exposed to unauthorized access.
Q. How is WPA an improvement over WEP?
A. WPA offers more sophisticated encryption, more assurance of data integrity and enhanced authentication. One such feature is temporal key integrity protocol (TKIP), which changes the encryption key for every data packet and synchronizes those changes between the wireless client and the access point for encryption. WPA also increases the keyspace and uses a new algorithm that calculates an 8-byte message integrity code (MIC) to verify data integrity. In addition, WPA's extensible authentication protocol (EAP) and the 802.1x protocol work together to provide enhanced authentication and dynamic key exchange.
Q. Who can benefit most from WPA-enabled products?
WPA offers attractive benefits for every size network, but enterprises and SMB networks that serve high-risk markets (e.g., financial, healthcare, education) should prioritize a switch to WPA immediately.
Don't leave your wireless network unprotected — and your customers' personal data at risk — when there's a stronger security solution within reach. Enhance your security and keep your peace of mind with WPA. back to top
Take Advantage Of The PDA Evolution
Thanks to increased functionality and a vast number of options, a new generation of PDAs is here. In fact, many business people now consider these wireless wonder devices a vital way to maximize their freedom and flexibility. Here's an overview of recent improvements that may help you reap similar benefits:
Displays deliver vibrant color screens with a variety of resolution levels (160 x 160 pixels to 320 x 480 pixels).
Handwriting recognition software recognizes block characters, natural alphabet printing and cursive writing.
E-mail/network access, using PC Card modems, enables you to send and receive e-mail messages in real time, no longer relying on a physical cradle as the go-between.
Digital cameras offer an impressive 640 x 480 pixel resolution. Some premium models feature even higher resolutions (1,200 x 1,600 megapixels) with built-in flash.
Global Positioning Systems enable you to download maps, conduct street searches and use your PDA as a personal guide.
Networking features, such as Bluetooth, enable you to wirelessly transmit data to a printer. You can also upgrade your PDA with Ethernet networking capabilities or purchase a model with built-in wireless technology.
New security features help minimize the risk of security breaches — including fingerprint verification, firewalls, VPNs and triple-DES encryption.
If you plan to purchase networked PDAs, don't forget the middleware — a layer of software that redirects e-mail messages from your e-mail server to your handheld devices. Call us today, and we can help you put the power of PDA technology in the palm of your hands.
|
Palm Or Pocket PC: Which OS Is Best? |
|
The answer depends on your needs. If you only want to check e-mail, Palm OS will suffice. This software takes up less memory and runs faster than Pocket PC, and many claim it is easier to use. On the other hand, if you want Microsoft Office functionality and more expansion options, Microsoft's Pocket PC software is a better choice.
|
back to top
|