Wireless Security

[Goosemaster]

Appearantly, WEP Key's can on average be decoded after 5hours, or between 100MB and 5GB of Data.

I have been changing my WEP keys periodically, but My Dad will be using our Lappy for sensitive imformation( Not like governemnt really sensitive...just his business....and financial stuff), and he won't trust it unless I secure it well.

We already have a Hardware firewall, software firewalls, and have isolated the wireless from our wired networks. We have DHCP disactivated, WEP enabled, and MAC addressing. Our AP does not allow for SSID disactivation, but according to many, that point is moot. I also have a Windows 2003 server Domain Controller running, with all but my HTPC on it. All shared Drives/folders are only open to authorized domain users.


I am very interested in using PKA and Some technologies in 2003 server, but am unfamilar with their purpose and efficacy.


I usually have a linux server running(gentoo), but am using a 2003 trial to train for something at work. It will probably running for a few moths, so no linux stuff right now.

Also, I have a Sonicwall derivative as the hardware firewall.


How much security is the Domain providing me? In addition, what can I do to improve it?

Thanks

I will post a picture in a little bit


EDIT:


Here is my pride and Joy

Also, the laptop is only Using ICS via a crossover cable for right now. In about a week, it Sohuld have its own wireless adapter, as I haven't had time to buy one.

 

[Goosemaster]

Updated with diagram

 

[JackMDS]

Some people use the VPN in Win2003 to tunnel the Wireless.

 

[Goosemaster]

bump

 

[cmetz]

Goosemaster, recently I've gone with the Linksys WRT54G and WMP54G and used WPA TKIP, 802.11g-only, MAC filtering, and SSID broadcast disabled. This is not as good a security as an IPsec VPN over the air, but it's also easier to set up and less can go wrong, once you've gotten over the hump of having to buy all new stuff (which has been required anyway at these sites).

The WPA stuff is starting to really work, as long as your clients are running WinXP. Linux I don't think has any useful support for WPA, yet I think other vendors' WPA stuff should work now, too. WPA was very painful a few months ago, but is finally starting to become mainstream enough to be useful.

 

[buleyb]

TKIP doesn't solve your WEP problems, just your key exchange security. The key problem to WEP is that it uses RC4 to encrypt/decrypt the stream. The reason its so easy to break WEP keys it because after collecting so much information, you can guess with some accuracy a plaintext/ciphertext pair. In RC4 land, that information is golden, because you can XOR them together and get the key back.

AES is the better way to use WPA, because RC4 isn't used. TKIP simply increases the amount of time/data you need to collect to crack it.