Wireless Network Security

[hennessy1]

I currently have WPA2 enabled in my wap. I was wondering if I would be better off with WPA2-Enterprise and if so how would I be able to tell if all my wireless adapters are compliant with that standard. I know the names and models of the adapters if that helps. Or would I be better off enableing mac address filtering? Thank you for any help.

 

[ScottMac]

For home use, Enterprise is probably "a little" overkill.

The operating encryption is the same, it's just a matter of how things get rolling when you start up.

As long as you use a good, long passphrase that doesn't contain "dictionary words" and has a mix of upper case, lower case, numbers, and symbols (!@ ...) you should be fine.

By not using words as they would be seen a dictionary, you eliminate the use/success of "cracklibs"and force the would-be attacker to "brute force" the guessing of your passphrase (one character position at a time, trying every possible combination), which is generally more trouble than an attacker would be willing to suffer (especially when your neighbor is probably easy pickin's).

Don't scrimp on the passphrase, you only have to enter it once per host (though you should change it periodically as a matter of good security practice).

Good Luck
Scott

 

[JackMDS]

Wireless security is based on encryption.

From this perspective there is No difference between End-User and Enterprise.

The Core differences between WEP, WPA, and WPA2 - http://www.ezlan.net/wpa_wep.html

In addition to WPA2, Enterprise uses also a RADIUS server to log on.

http://en.wikipedia.org/wiki/RADIUS

Logon control has to do with the nature of the way buisiness use Wireless.

As a regular user I doubt that you need a controlled Logon.

In general.

From the weakest to the strongest, Wireless security capacity is.
No Security
MAC______(Band Aid if nothing else is available).
WEP64____(Easy, to "Break" by knowledgeable people).
WEP128___(A little Harder, but "Hackable" too).
WPA-PSK__(Very Hard to Break).
WPA-AES__(Not functionally Breakable)
WPA2____ (Not functionally Breakable).

Note 1: WPA-AES the the current entry level rendition of WPA2.

Note 2: If you use WinXP and did not updated it you would have to download the WPA2 patch from Microsoft. http://support.microsoft.com/kb/893357

The documentation of your Wireless devices (Wireless Router, and Wireless Computer's Card) should state the type of security that is available with your Wireless hardware.

All devices MUST be set to the same security level using the same pass phrase.

Therefore the security must be set according what ever is the best possible of one of the Wireless devices.

I.e. even if most of your system might be capable to be configured to the max. with WPA2, but one device is only capable to be configured to max . of WEP, to whole system must be configured to WEP.

If you need more good security and one device (like a Wireless card that can do WEP only) is holding better security for the whole Network, replace the device with a better one.

Setting Wireless Security - http://www.ezlan.net/Wireless_Security.html