Wireless Data Encryption

Hello all,
I currently have WLC running 7.4 and would like to enable Encryption.
I can see I can enable Encryption globally under all APs.
My question is:
- What does this encrypt? AP to Controller?
- What consequences does this have other than performance and reboot of APs
- Will this make packet sniffing harder for users connected to the Wireless Network?
Thanks for your help guys!

Hi,
- What does this encrypt? AP to Controller?
When data encryption is enabled, traffic is encrypted at the access point before it is sent to the controller and at the controller before it is sent to the client.
- What consequences does this have other than performance and reboot of APs
As per cisco recommandation, Encryption limits throughput at both the controller and the access point.
- Will this make packet sniffing harder for users connected to the Wireless Network?
Yes
Regards
Dont forget to rate helpful posts

Similar Messages

Wireless data encryption without pre-shared keys?

Is there anyway to secure the data transmitted wirelessly without using pre-shared keys for encryption? I'm trying to allow residents to connect to the wireless network without having to go around and put wireless keys on all laptops.

You could look into 802.1X with certificates. This still requires a certificate to be downloaded to the client, but there are several automated ways of doing this.
You will need a certificate authority, and a RADIUS server (such as ACS). There's loads of documentation on CCO on how to configure this.
HTH

Listener Start Problem with TDE (Transparent Data Encryption)

i am testing Transparent Data Encryption in Oracle 10g by using the following link
http://oracle-base.com/articles/10g/TransparentDataEncryption_10gR2.php
Before Implementing the TDE listener was running fine but after implementation of TDE the listener was unable to start
Please check the steps which i follow
Step1-
specify the ENCRYPTION_WALLET_LOCATION parameter in the sqlnet.ora file, now SQLNET.ora file looks like the following
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
ENCRYPTION_WALLET_LOCATION=
(SOURCE=(METHOD=FILE)(METHOD_DATA=
(DIRECTORY=D:\oracle\product\10.2.0\wallet\)))
please check the contents of listener.ora file,i didn't make any configuration changes for listener before or after implementation of TDE
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = D:\oracle\product\10.2.0\db_1)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
(ADDRESS = (PROTOCOL = TCP)(HOST = shakeel-pc.lhr.inov8.com.pk)(PORT = 1521))
Step2-
CONN sys/password AS SYSDBA
ALTER SYSTEM SET ENCRYPTION KEY AUTHENTICATED BY "myPassword";
TDE implemented successfuly implemented.
But when i try to stop/start listener
C:\>lsnrctl status
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:30
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Produ
ction
Start Date 05-JUN-2008 22:40:14
Uptime 0 days 7 hr. 4 min. 16 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File D:\oracle\product\10.2.0\db_1\network\admin\listener.o
ra
Listener Log File D:\oracle\product\10.2.0\db_1\network\log\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=shakeel-pc.lhr.inov8.com.pk)(PORT=15
21)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "orcl" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orclXDB" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orcl_XPT" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
The command completed successfully
C:\>lsnrctl stop
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:35
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
The command completed successfully
C:\>lsnrctl start
[i]LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:40
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Starting tnslsnr: please wait...
TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Production
System parameter file is D:\oracle\product\10.2.0\db_1\network\admin\listener.or
a
Log messages written to D:\oracle\product\10.2.0\db_1\network\log\listener.log
Error listening on: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PARTIAL=yes)(QUEUESI
ZE=1))
No longer listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\E
XTPROC1ipc)))
TNS-12560: TNS:protocol adapter error
TNS-00583: Valid node checking: unable to parse configuration parameters
Listener failed to start. See the error message(s) above...
To start the listener i have to close wallet as
1- SQL>conn sys as sysdba
ALTER SYSTEM SET WALLET CLOSE;
2- Replace the SQLNET.ora file as previous ,now SQLNET.ora contains
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
Now if i start the listener then the listener was started succesfuly
Please suggest why listener is not being start with TDE?

I have the same problem. I'm testing TDE using Oracle 11gR1. After setting the parameter encryption_wallet_location and restart the listener, the listener failed to start. The error is exactly the same
TNS-12560: TNS:protocol adapter error
TNS-00583: Valid node checking: unable to parse configuration parameters
By removing the parameter encryption_wallet_location, the listner can be started successfully.
Anyone can help?

Need suggestion for data encryption

Hello Experts,
I need your expert opinion on one of the data encryption method. We have some legal compliance to implement data encryption as listed below, lets say we have to apply encryption on 2 tables (1) TAB_A (2) TAB_B.
(1) Need data encryption on the TAB_A & TAB_B for 2-3 columns and not the entire table.
(2) Data should not be in readable format, if anyone connect to database and query the table.
(3) We have reporting services on our tables but reporting services doesn't connect to our schema directly rather they connect to a different schema to which we have given the table Select grant.
(4) Reports should work as it is, and users should see the data in readable format only.
(5) There are batch processes which generates the data into these tables and we are not allowed to make any changes to these batch processes.
This is a business need which has to be delivered. I explored various options such as VPDs, Data encryption methods etc but honestly none of these are serving our business need. There is also a limitation of encrypting data as data volume of quiet high (30TB DB) and generally users query the data on millions of records at a time. Also reports have very tight SLAs as well. If we create any encryption wrapper then decrypt will take longer in reports and will cause the SLA miss for reports.
Could someone please suggest any better solution to me or if something is inbuilt in Oracle? We are using Oracle 11g.
Regds,
Amit.

you can read about Transparent Data Encryption
Check
http://docs.oracle.com/cd/B28359_01/network.111/b28530/asotrans.htm

Hey yall.. I lost everything from my mac from a data encrypted error and now it won't let me download Lightroom off of the disk again onto my new mac. What should I do?

Hey yall.. I lost everything from my mac from a data encrypted error and now it won't let me download Lightroom off of the disk again onto my new mac. What should I do?

Hi Brennacoyle,
Can you please share the error message that you are getting while trying to download on the new MAC ?
Cheers,
Kartikay Sharma

Are there any tools for data encryption and decryption ?

Hi,
i am using oracle 9i R2, i want encrypt my data. Are there any tools available in market.
Please let me know the ways to do data encryption and decryption.
Thanks in advance
Prasuna.

970489 wrote:
using DBMS_OBFUSCATION_TOOLKIT.Encrypt /DESEncrypt we can't secure our password...So i am looking for an another alternative.As Blue Shadow said, what are you really trying to achieve?
Encrypting a password is itself not secure. Anything that can be encrypted can be decrypted. That is why Oracle itself DOES NOT encrypt passwords.
Surprised??
Here's what Oracle does with passwords, and what others should be doing if they have to store them.
When the password is created, the presented password - clear text - is concatenated with the username. The resulting character string is then passed through a one-way hashing function. It is that hashed value that is stored. Then when a user presents his credentials to log on to the system, the presented credentials are combined and hashed in the same manner as when the password was created, and the resulting hash value compared to the stored value.

Data encryption in oracle 8i and 9i

Hi,
I would like to know how data encryption in Oracle 9i
differes from that of Oracle 9i database.
Thanks in advance
Shinto

What is your national character set? What is NLS_LENGTH_SEMANTICS set to?
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Data Encryption using DBMS_OBSFUCATION_PACKAGE

Hello Friends,
I want to encrypt EMPNAME column data in EMP table using
DBMS_OBSFUCATION_PACKAGE. I am not getting much help for this
package. can anybody suggest me some sites concerning
information on package ?
Thanx.
Adi

try this one.
I am pasting the procedure.
run catobtk.sql from sys
DECLARE
input_string VARCHAR2(16) := 'SRINIVAS';
raw_input RAW(128) := sys.UTL_RAW.CAST_TO_RAW(input_string);
#key_string VARCHAR2(16) := 'keepthesecretnum';
key_string VARCHAR2(16) := 'abcdefghijklmnop';
raw_key RAW(128) := sys.UTL_RAW.CAST_TO_RAW(key_string);
encrypted_raw RAW(2048);
encrypted_string VARCHAR2(2048);
decrypted_raw RAW(2048);
decrypted_string VARCHAR2(2048);
error_in_input_buffer_length EXCEPTION;
PRAGMA EXCEPTION_INIT(error_in_input_buffer_length, -28232);
INPUT_BUFFER_LENGTH_ERR_MSG VARCHAR2(100) :=
'*** DES INPUT BUFFER NOT A MULTIPLE OF 8 BYTES - IGNORING
EXCEPTION ***';
double_encrypt_not_permitted EXCEPTION;
PRAGMA EXCEPTION_INIT(double_encrypt_not_permitted, -28233);
DOUBLE_ENCRYPTION_ERR_MSG VARCHAR2(100) :=
'*** CANNOT DOUBLE ENCRYPT DATA - IGNORING EXCEPTION ***';
-- 1. Begin testing raw data encryption and decryption
BEGIN
dbms_output.put_line('> ========= BEGIN TEST RAW DATA
=========');
dbms_output.put_line('> Raw input : ' ||
sys.UTL_RAW.CAST_TO_VARCHAR2(raw_input));
BEGIN
sys.dbms_obfuscation_toolkit.DESEncrypt(input => raw_input,
key => raw_key, encrypted_data => encrypted_raw );
sys.dbms_output.put_line('> encrypted hex value : ' ||
rawtohex(encrypted_raw));
sys.dbms_obfuscation_toolkit.DESDecrypt(input => encrypted_raw,
key => raw_key, decrypted_data => decrypted_raw);
dbms_output.put_line('> Decrypted raw output : ' ||
sys.UTL_RAW.CAST_TO_VARCHAR2(decrypted_raw));
dbms_output.put_line('> ');
if sys.UTL_RAW.CAST_TO_VARCHAR2(raw_input) =
sys.UTL_RAW.CAST_TO_VARCHAR2(decrypted_raw) THEN
dbms_output.put_line('> Raw DES Encyption and Decryption
successful');
END if;
EXCEPTION
WHEN error_in_input_buffer_length THEN
dbms_output.put_line('> ' || INPUT_BUFFER_LENGTH_ERR_MSG);
END;
dbms_output.put_line('> ');
END;

Wireless data flow

I have a question about how wireless data traffic flows between 2 wireless clients that are associated with the same AP/WLAN/subnet. It doesn't have to go through the WLC, does it?
Is this documented some where on Cisco website that I can find?
Thanks
Binh Dinh

When the access point (AP) joins a Wireless LAN (WLAN) controller, a Lightweight Access Point Protocol (LWAPP) tunnel is formed between the two devices. All traffic is sent through the LWAPP tunnel, which includes all client traffic. The only exception to this is when an AP is in REAP mode. When the AP is in Remote-Edge Access Point (REAP) mode, the control traffic is still tunneled to the controller but the data traffic is bridged locally on the local LAN.
Here is the link info:
http://supportwiki.cisco.com/ViewWiki/index.php/In_LWAPP_network,_does_all_the_network_traffic_both_from_and_to_the_WLAN_client_tunneled_through_a_4400_series_WLAN_controller_that_runs_firmware_version_3.2,_once_a_connection_is_established

What modifications are required to make a servlet support SSL data encrypti

Hi,
What modifications are required to make a servlet support SSL data encryption?
--kumar

Hi,
What modifications are required to make a servlet
support SSL data encryption?
--kumar No modifications are required in servlet. You have to setup servlet container.

Is it possible to perform network data encryption between Oracle 11g databases without the advance security option?

Is it possible to perform network data encryption between Oracle 11g databases without the advance security option?
We are not licensed for the Oracle Advanced Security Option and I have been tasked to use Oracle Network Data Encryption in order to encryption network traffic between Oracle instances that reside on remote servers. From what I have read and my prior understanding this is not possible without ASO. Can someone confirm or disprove my research, thanks.

Hi, Srini Chavali-Oracle
As for http://www.oracle.com/technetwork/database/options/advanced-security/advanced-security-ds-12c-1898873.pdf?ssSourceSiteId… ASO is mentioned as TDE and Redacting Sensitive Data to Display. Network encryption is excluded.
As for Network Encryption - Oracle FAQ (of course this is not Oracle official) "Since June 2013, Net Encryption is now licensed with Oracle Enterprise Edition and doesn't require Oracle Advanced Security Option." Could you clarify this? Thanks.

Data Encryption : Length of the result data in RAW

Hello,
I am pretty new in data encryption, and in 10g, I use package DBMS_CRYPTO.
I have no problem with that.
I want to save to encrypted data in a table.
I think about using RAW columns.
The origine strings are saved into VARCHAR2(4000).
How can I roughly compute and figure out the number of RAWs resulting of the encryption? Is there a kind of formula ?
Is this connected with the length of the encryption key?
Thanks a lot,
Olivier

Hi Murali,
Thanks for your reply.
Yes that's why I found it was weird.
I always have a nice pop up window when click "Data Mart Status of The Request"...
usually.
It also didn't happen to all ODS/Cube,
some of it still shows a nice pop up window,
for loading using InfoPackage or DTP.
So it's not a system problem... there's still pop up window.
However in particular ODS/Cube,
the symbol is correct - that data has been loaded,
but there's no Pop Up window.

Can iTunes from 2 different computer use the same library? (from wireless data storage device)

I purchased a wireless data storage device. My iTunes content will be moved there and I'm planning on moving my wife's iTunes data to the wireless device. Can both our iTunes share the same library?

One Apple ID can be shared for store purchases. On the iPhone go to Settings>Store and put in the ID. Then all the songs purchased with that ID can be downloaded from the iTunes store on the phone.
I hope that is what you were asking?

InfoCube Data Encryption

Hi All,
I am using HR Employee Specific Payroll Data 0PY_C02 for reporting on payroll data.
The sensitivity of the data in this cube is tremendous.
First Question: Can data in an InfoCube be encrypted?
Second Question: Method and Steps involved in implementing Data encryption?
<removed_by_moderator>
Regards,
Ashutosh

hello,
not sure if this is achievable.
but you can look at this thread which talks of masking data in BI.
Archiving Encrypted Credit Card Data
Regards,
Dhanya.

General review of Transparent Data Encryption (TDE) and performance of...

I understand that the implementation of just about any database encryption solution, is going to result in a some degree of a performance hit, especially as searches are performed against the database, but none-the-less, we are thinking about implementing the Oracle TDE solution and as recommended, just isolating encryption needs to ONLY necessary columns of data - in our case, columns pertaining to private ASNWER (results) data and/or PII (Pers. Ident. Info.). This being said, is anyone else doing something similar with TDE, or does anyone have any pointers up front on what to look out for, what to expect, and how they are operating with TDE. (Just reaching out for some thoughts, insight, comments, and/or warnings)... Thank you very much. - Jason

Yes, we have many customers using it, please check my updated TDE best practices paper; it has lots of hints and tricks and things to look out for:
Available from http://www.oracle.com/technology/deploy/security/database-security/transparent-data-encryption/index.html (scroll down, please).
Thanks, Peter

Wireless Data Encryption

Similar Messages

Maybe you are looking for