Security Basics: RE: Wireless Security vs Performance

[Marc Rivero López <mriverolopez () gmail com>]

Today it safer than I've seen is WPA2 with Radius server certificates. WEP
is already dead.

Marc Rivero López
http://www.seifreed.wordpress.com

-----Mensaje original-----
De: listbounce () securityfocus com [mailto:listbounce () securityfocus com] En
nombre de juan | ToBe Security
Enviado el: domingo, 05 de julio de 2009 19:29
Para: 'Johnny Wong'; 'Leandro Quibem Magnabosco';
security-basics () securityfocus com
Asunto: RE: Wireless Security vs Performance

I think a vpn or wap2 + radius in enogh.

If you do all what you plan the  performace will be bad.

Juan

 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Johnny Wong
Sent: Wednesday, July 01, 2009 3:30 AM
To: Leandro Quibem Magnabosco; security-basics () securityfocus com
Subject: Re: Wireless Security vs Performance

WEP will be easily cracked. Why not WPA2? By the way, if VPN is the only way
for the users to access the local network, then why bother with protecting
the wireless access?

At 05:11 AM 24-06-09, Leandro Quibem Magnabosco wrote:
> Hello guys,
>
> I am modeling a new wireless network and I need it to be the most 
> secure possible and still provide access to our local network.
> That being said, TKIP + WEP + VPN sounds like a good way to get 
> security and still provide access to the local network.
> What worries me is the performance on such configuration.
>
> If anyone has such configuration or ever tested something like that, 
> please what you think of it.
> Suggestions of other models are also really welcome.
> --
>
>
>
> *Leandro Quibem Magnabosco
> Consultor de TI
> (48) 3251-5323
> *leandro.magnabosco () fcdl-sc org br 
> <mailto:leandro.magnabosco () fcdl-sc org br>
> www.fcdl-sc.org.br <http://www.fcdl-sc.org.br>
> Rua: Rafael Bandeira, 41
> CEP. 88015-450  Florianópolis - SC
>
> "Este é um e-mail oriundo da Federação das Câmaras de Dirigentes 
> Lojistas de Santa Catarina, e seu conteúdo é confidencial e destinado 
> exclusivamente a seu(s) destinatário(s), não podendo ser copiado ou 
> repassado,no todo ou em parte, a terceiros. Se esta mensagem foi-lhe 
> enviada por engano, pedimos o obséquio de entrar em contato conosco.
> This is an e-mail from the Federação das Câmaras de Dirigentes Lojistas 
> de Santa Catarina and its contents are privileged and confidential to 
> the ordinary user(s) of the e-mail address(es) to which it was 
> addressed, and no one else may copy or forward all or any of it in any 
> form. If this e-mail was sent to you in error, please contact us."
>
> -----------------------------------------------------------------------
> - This list is sponsored by: InfoSec Institute
>
> Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both 
> Instructor-Led and Online formats is the most concentrated exam prep 
> available. Comprehensive course materials and an expert instructor 
> means you pass the exam. Gain a laser like insight into what is covered 
> on the exam, with zero fluff!
> http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
> -----------------------------------------------------------------------
> -

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we
examine the importance of Apache-SSL and who needs an SSL certificate.  We
look at how SSL works, how it benefits your company and how your customers
can tell if a site is secure. You will find out how to test, purchase,
install and use a thawte Digital Certificate on your Apache web server.
Throughout, best practices for set-up are highlighted to help you ensure
efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------