NETWORK WORLD NEWSLETTER: JOANIE WEXLER ON WIRELESS IN THE ENTERPRISE 09/06/04 Today's focus: IPolicy blocks worms, viruses across 802.11 nets
Dear [EMAIL PROTECTED], In this issue: * IPolicy's LAN-side firewalls can thwart 802.11-borne ��infections * Links related to Wireless in the Enterprise * Featured reader resource _______________________________________________________________ This newsletter is sponsored by Intel A NW Special Report: The State of Wireless LANs Wireless has becomes more integrated and accepted as a way of doing business. However, several questions are raised about its current state; what are the trends and best practices for deploying wireless LANs? What are the leading applications? What are the tradeoffs in current wireless standards? What are the best options for wireless infrastructures and security mechanisms? Click here to download your copy, no registration required http://www.fattail.com/redir/redirect.asp?CID=79121 _______________________________________________________________ DOWNLOAD THE LATEST SPECIAL REPORTS FROM NETWORK WORLD Focused reports on compelling industry topics, Network World Special Reports are available online at Network World Fusion. Network World Special Reports on IP Telephony Security, the State of Wireless LANs, trends in the networked world and more are currently available. Download any or all of our Special Reports at: http://www.fattail.com/redir/redirect.asp?CID=79659 _______________________________________________________________ Today's focus: IPolicy blocks worms, viruses across 802.11 nets By Joanie Wexler Much progress has been made to protect the traditional "WAN edge" from Internet-bred worms and viruses that laptops and other mobile devices might pick up and pass to a corporate network via remote connections. But what about when infected portable devices link directly to the corporate LAN? Consider the case where users have had their Internet-attached laptops with them on the road, then bring them into the office and connect to the corporate network via an 802.11-based WLAN or plug directly into an Ethernet port. In such cases, they will bypass the traditional firewall, intrusion detection system, anti-virus check and so forth. This can be an unfortunate situation. Once infected, internal computers will generate increasing volumes of "bad" traffic, possibly creating denial-of-service attacks. WLAN switch vendors such as Aruba Wireless Networks have built stateful firewalls into their products, which helps. These tend to support access control lists only, however, filtering on IP source address or user identity, but not checking for malicious signatures. Intrusion prevention firewall maker iPolicy Networks bundles not only access control but also a number of other security capabilities and supports up to 4G bit/sec LAN connections in its equipment. So internal LAN traffic can be secured in addition to traditional WAN-edge perimeter traffic by an iPolicy device before being bounced through the LAN switch and back out to other LAN devices, explains Antoine Gaessler, iPolicy vice president of marketing. In other words, WLAN client traffic could be put through the various security paces that your enterprise runs in an iPolicy firewall - intrusion detection/prevention, anti-virus updates, spam and URL filters, and access control lists - before being granted access to LAN resources. The company, which has a reference-sell relationship with WLAN switch-maker Meru Networks, last week added a bunch of new models to its product suite, mixing and matching price/performance to the size and throughput requirements of the enterprise site at hand. Considerations are aggregate throughput, number of concurrent sessions and number of new sessions-per-second supported. Lower-end products (the iPolicy 2000 series), with about 100M bit/sec throughput, start at about $5,000; higher-end, multi-gigabit-speed products (the current iPolicy 6000 series) range in price from $50,000 to $200,000. IPolicy touts its single-pass inspection engine, which allows its devices to inspect a given packet just once against multiple rules. The company says this improves performance compared with competing products that inspect packets multiple times when running multiple security applications. RELATED EDITORIAL LINKS Behind the perimeter Network World, 08/30/04 http://www.nwfusion.com/research/2004/0830appsecperspective.html Security overlay architecture holds promise Network World Wide Area Networking Newsletter, 05/06/04 http://www.nwfusion.com/newsletters/frame/2004/0503wan2.html Will deep-inspection firewalls suffice as sole security guard? Network World Wide Area Networking Newsletter, 05/11/04 http://www.nwfusion.com/newsletters/frame/2004/0510wan1.html Wi-Fi plays defense Computerworld, 08/23/04 http://www.nwfusion.com/nlwir559 Sorting out the 802.11i/RADIUS security confusion Network World Wireless in the Enterprise Newsletter, 08/11/04 http://www.nwfusion.com/nlwir560 _______________________________________________________________ To contact: Joanie Wexler Joanie Wexler is an independent networking technology writer/editor in California's Silicon Valley who has spent most of her career analyzing trends and news in the computer networking industry. She welcomes your comments on the articles published in this newsletter, as well as your ideas for future article topics. Reach her at <mailto:[EMAIL PROTECTED]>. _______________________________________________________________ This newsletter is sponsored by Intel A NW Special Report: The State of Wireless LANs Wireless has becomes more integrated and accepted as a way of doing business. However, several questions are raised about its current state; what are the trends and best practices for deploying wireless LANs? What are the leading applications? What are the tradeoffs in current wireless standards? What are the best options for wireless infrastructures and security mechanisms? Click here to download your copy, no registration required http://www.fattail.com/redir/redirect.asp?CID=79121 _______________________________________________________________ ARCHIVE LINKS Archive of the Wireless newsletter: http://www.nwfusion.com/newsletters/wireless/index.html Wireless research center Latest wireless news, analysis and resource links http://www.nwfusion.com/topics/wireless.html _______________________________________________________________ Webcast - Successful Voice over IP installation Learn how to design, build and implement workable service-based VoIP infrastructures. Hear about the key drivers for a hosted approach to VoIP. And discover new systems and services that are required when implementing VoIP. Go now. http://www.fattail.com/redir/redirect.asp?CID=80179 _______________________________________________________________ FEATURED READER RESOURCE CHECK OUT NW FUSION'S NEW WHITE PAPER LIBRARY NW Fusion's White Paper Library was recently re-launched with new features and improved capabilities! Sort NW Fusion's library of white papers by Date and Vendor, view white papers by TECHNCIAL CATEGORY, mouse over white paper descriptions and take advantage of our IMPROVED white paper search engine. CLICK HERE: <http://www.nwfusion.com/vendorview/whitepapers.html> _______________________________________________________________ May We Send You a Free Print Subscription? You've got the technology snapshot of your choice delivered at your fingertips each day. Now, extend your knowledge by receiving 51 FREE issues to our print publication. Apply today at http://www.subscribenw.com/nl2 International subscribers click here: http://nww1.com/go/circ_promo.html _______________________________________________________________ SUBSCRIPTION SERVICES To subscribe or unsubscribe to any Network World e-mail newsletters, go to: <http://www.nwwsubscribe.com/Changes.aspx> To unsubscribe from promotional e-mail go to: <http://www.nwwsubscribe.com/Preferences.aspx> To change your e-mail address, go to: <http://www.nwwsubscribe.com/ChangeMail.aspx> Subscription questions? Contact Customer Service by replying to this message. This message was sent to: [EMAIL PROTECTED] Please use this address when modifying your subscription. _______________________________________________________________ Have editorial comments? Write Jeff Caruso, Newsletter Editor, at: <mailto:[EMAIL PROTECTED]> Inquiries to: NL Customer Service, Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 For advertising information, write Kevin Normandeau, V.P. of Online Development, at: <mailto:[EMAIL PROTECTED]> Copyright Network World, Inc., 2004 ------------------------ This message was sent to: [EMAIL PROTECTED] ------------------------ Yahoo! Groups Sponsor --------------------~--> Make a clean sweep of pop-up ads. Yahoo! Companion Toolbar. Now with Pop-Up Blocker. Get it for free! http://us.click.yahoo.com/L5YrjA/eSIIAA/yQLSAA/BCfwlB/TM --------------------------------------------------------------------~-> Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/kumpulan/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
