Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

WLAN Security Monitors: Page 8 of 31

AirDefense Guard 4.0. AirDefense, (877) 220-8301; (770) 663-8115. www.airdefense.net

Network Chemistry, which supplies its wireless sensors to WildPackets and Newbury Networks, wins our Best Value award for its innovative interface, detailed and comprehensive alarm set, and low price.

Network Chemistry's WIPS (Wireless Intrusion Protection System) architecture harnesses its sensors using open-source code and proprietary software. WIPS comprises three apps: SensorManager manages the a/b/g Neutrino sensors; Packetyzer is a front-end GUI for the open-source Ethereal packet analyzer; and the proprietary Fusion, which combines the end-user app and the core analytics engine, provides the console.

After configuring the sensors, we launched Fusion. Easy to navigate, the interface displays key WLAN information: Network view shows devices grouped by SSID with columns of important WLAN stats. A separate window displays alerts, which can be listed chronologically or by alarm. A station window gives more detailed info, including station-specific alarms.

Because it uses Ethereal, Packetyzer doesn't have all the bells and whistles of WildPackets' AiroPeek or Network Instruments' Observer. Still, it does an adequate job decoding packets.





Private Companies Vendors at a Glance


click to enlarge

The vendor includes policies for the most common wireless attacks and configuration deviations; and a CustomProtect capability lets advanced users create their own signatures. Unfortunately, Fusion allows for rule matching based only on packet content, not on anomalous behavior occurring over multiple frames.