Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Building Secure Enterprise WLANs: Page 5 of 12

Newer wireless switch architectures from Airespace, Aruba Wireless Networks, Symbol Technologies, Trapeze Networks and others have been engineered with security in mind. In fact, these architectures simplify security enforcement by centralizing policy management. Airespace and Aruba offer the most flexible and sophisticated security implementations, including monitoring capabilities not available from competitors.

Other vendors have had an impact on the market. Vendors of enterprise wireless security gateways, such as Bluesocket, ReefEdge Networks and Vernier Networks, make security overlays that work with any 802.11 AP, providing authentication, privacy, access control and even QoS (Quality of Service). The gateway sits between your dirty WLAN and the secure network, enforcing security policies and providing value-added services like secure roaming.

This modular approach has benefits, particularly for sites with large investments in AP infrastructure or that want the flexibility of selecting APs from multiple vendors, but it does add to the cost and management overhead. Many of the features pioneered by these vendors have been implemented in new WLAN switch architectures, which often provide a more fully integrated solution that includes centralized configuration management and dynamic radio control. The gateway vendors are beginning to develop partnerships with AP manufacturers to deliver more comprehensive systems.

Some security overlay vendors offer more focused devices with niche differentiators. For example, Perfigo provides a security gateway with multivendor AP configuration management and client management. Other vendors offer security implementations that rely on proprietary clients to provide enhanced security, secure roaming across multiple wireless network types (WLAN and GPRS, for example) and session persistence. The long list of these vendors includes Columbitech, Cranite Systems, Ecutel Systems, Fortress Technologies, IpUnplugged and NetMotion Wireless. Some of these provide FIPS-compliant products, making them suitable for government and military environments.

Although these gateways and security overlays are effective, they can be costly to acquire and maintain. In addition, large networks, especially those using high-speed WLANs like 802.11g and 802.11a, may find that they introduce bottlenecks.