Securing a wireless network

[valicon]

I have a question related to wifi security. Using a Windows 2003 network with Cisco PIX and Cisco concentrators, whats the best possible way in which to secure wireless traffic? I was thinking about using WEP and IPSec over the VPN, but is this really secure enough? Another alternative would be to use a raduis server and PEAP, or EAP-TLS and certificate services. Does anyone have any experience in implementing wireless or any suggestion as to obtaining the best security available to wireless? Thanks.

 

[Sparent]

I have implemented a few Symbol wireless networks. Most of these are for low-risk areas such as warehouses where only barcode scanner operate wirelessly. As you know, WEP (40-bit, 128-bit) means "Wired Equivalent Privacy" which is barely enough for some higher risk domains. Kerberos and Radius are good.

My advice is, check out the upcomming 802.11i wireless security standard

Good luck

Simon

 

[boochTP]

My recommendation, if you have the budget and resources to manage it, would be to use PEAP with SecurID tokens and AES (now that 802.11i is official).