Re: Wireless security and VPN

[Steve Cooper <steve () nuclear-monkeys co uk>]

I would also be interested in this, we're just about to setup a wireless
network for a company warehouse. I was thinking about using IPSec
underneath the WEP encryption, with a W2k server and XP pro desktops
it's relatively easy to setup IPSec but I am unsure if this will work
with pocket PC's or other OS's like linux.

On Thu, 2002-11-14 at 17:12, Brian Bettger wrote:
> Hello,
>
> I am searching for a product that incorporates a Wireless Access Point
> AND VPN authentication to use for nearly all of our wireless rollouts.
> As you know SSID and WEP are possibly not enough to keep people out of
> networks. An integrated VPN authentication after SSID and WEP, BUT
> before network authentication would be REALLY nice. In other words, I
> turn on my laptop, PDA or workstation, it establishes the primary
> connection through the use of SSID and WEP, then stops, leaving port
> 1723 open, dropping all other traffic or attack attempts until I make a
> secure VPN connection. As soon as I establish the VPN connection I am
> then prompted (or not) with my NT, Novell, or whatever login.
>
> The thought is, a war driver could possibly crack WEP, access to the WAP
> but is then faced with needing to establish a VPN connection even before
> he can gain information about the network. The war driver / cracker
> could only scan and see port 1723. 
>
> Please pass this on as a request for development if possible. Another
> point is that it would be nice to have this bundled into one appliance.
> Additionally pass this on to anyone else you feel may help.
>
> Yes, I have looked into Proxim's solution, but it is over priced for my
> clients (SOHO to medium size business, 25-100 users) and requires two
> appliances, the WAP and then the VPN appliance.
>
>
> Brian Bettger
> Systems Engineer
> Diversint, Inc.
> Diversified Internet Services Group
>
> 360-404-2044
>
> www.diversint.com
>
> Technology is Business