Similar experience here. Most of our customers use a firewall/VPN that
allows for IPSec tunnels on each end. If you ever have wireless clients
(laptops, etc), then you may consider using IPSec client software that can
terminate on an internal edge of a firewall/VPN.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Joe Matuscak
Sent: Friday, March 15, 2002 8:54 AM
To: Scott Overfield
Cc: Firewalls ([EMAIL PROTECTED])
Subject: Re: Wireless LAN security


On Fri, 15 Mar 2002, Scott Overfield wrote:

> My employer and I have been discussing the option of purchasing a Lucent
> Orinoco system to replace the current ADSL line between our two buildings,
> which are only about half a mile apart, with a clear line of
> site......However, I have very little experience with wireless, and I
> understand WEP is easily cracked...does anyone on the list have any
> experience with these devices, and how they can be secured? Any
suggestions
> or links that you can pass along I would appreciate very much......

We've been experimenting with the same thing. Our plan is to disable WEP,
put a Linux based firewall on either side of the wireless link and run an
IPsec VPN across the wireless link.  We've prototyped the firewall parts
using a Smoothwall/IPcop firewall distributuion with its FreeS/wan vpn.
There are obviously other VPN systems you can run, but I think a VPN is
the only safe way to go at the moment.


Joe Matuscak
Rohrer Corporation
717 Seville Road
Wadsworth, Ohio 44281
(330)335-1541
[EMAIL PROTECTED]


_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to