InformationWeek

February 5, 2001

Printer-friendly

Untethered Doesn't Mean Unsecure

Cisco adds wireless networking security framework to wireless lan products

By Matthew G. Nelson (mnelson@cmp.com)

More on wireless networking:

EETimes: HomeRF Looks To Gain Ground On Bluetooth (1/11/01)

InternetWeek: 802.11B: One Standard Worth Waiting For (11/16/00)

InternetWeek: At Last, The Year Of The Wireless LAN? (11/17/00)

isco Systems last week added features to its line of 802.11b wireless LAN products, including much-needed security enhancements. The updated Cisco Aironet 350 Series includes PC Cards and PCIA client antennas for use in notebook computers, wireless access points for Internet connectivity, and bridges to link buildings wirelessly.

The most prominent new feature of the Aironet 350 is the inclusion of a wireless networking security framework based on the proposed 802.1x standard being developed by Cisco and Microsoft, analysts say.

Earlier wireless LAN systems have relied on the Wired Equivalent Privacy protocol, which encrypts each transmission with a 40-bit algorithm. "Forty-bit encryption can be cracked in a day by a good hacker," says Joel Conover, a senior analyst for enterprise infrastructure at research firm Current Analysis. "That's not network-equivalent security."

The Aironet 350 uses the Radius security protocol, which provides user identification, authentication, and 128-bit encryption to secure messages.

Microsoft has installed Aironet wireless LANs in 70 buildings on its Redmond, Wash., campus and five international campuses and has deployed almost 10,000 wireless clients. But the current installation is of the Aironet 340 system, so Microsoft's IT department had to install additional 128-bit encryption to secure transmissions. "We're looking forward to the Aironet 350," says Rick Devenuti, Microsoft's CIO. "There are many things we do here that we consider confidential. And as a user, the advantage of having all my records with me all the time is a huge benefit."

Other enhancements to the Aironet line include increased power to 100 milliwatts in the antennas, the ability to scan for conflicting radio frequencies, and support for different countries' frequencies.

Cisco's Aironet 350 Series is available now. Pricing for the access point is $1,499; the PC Card is $229; the PCI adapter is $339; and the bridge is $1,999. A work-group bridge designed for a smaller number of users is $629. The Cisco Secure ACS for Windows version 2.6 is $5,995.