Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

WLAN Security Monitors: Page 17 of 31

The 800's wireless IDS features, while stronger than Airespace's and Cisco's, are immature at best. Although it technically saw every attack we threw at it, depending on how each attack operated, the 800 switch offered up a combination of MAC spoofing, ad hoc, deauthentication, disassociation and AirJack (so named for the open-source drivers used by many of our attacks) signature alarms to suggest exactly what malicious activity was afoot. We had to run NetStumbler detection continuously for four days to trigger the IDS alarm.

Aruba 800 WLAN Switch with AirOS Wireless Intrusion Detection software 2.0; Aruba 52 Access Point. $4,995 for software/appliance, $500 for AirMonitors. Aruba Wireless Networks, (408) 227-4500. www.arubanetworks.com

Airespace Wireless Enterprise Platform 2.0

Airespace's Wireless Enterprise Platform comprises the 4000 WLAN Switch and ACS (Airespace Control System) software. The company is betting heavily on its highly granular location capabilities, and though ACS is somewhat lacking in the IDS department compared with Aruba's young and dodgy IDS features, many administrators will welcome Airespace's automated approach to keeping intruders at bay.

Setting up and configuring Airespace's switch is as easy as it gets. After inputting its network settings and uplink port configuration via the CLI, we were ready to use the box's slick GUI to configure WLAN and security profiles, all with default-enabled SSL encryption. ACS running on a beefy PC on our test network made configuration, management and troubleshooting our switch, or even an entire network of Airespace switches and access points, simple by bringing all switch configurations and collected RF monitoring data into a single user interface.