Wireless network security solution

Hello All!
I'm looking to protect wireless network from possible network and malware attacks, bandwidth usage monitoring and content filtering.
Will Cisco IPS 4300-4500 series do the job? How about software solution (Cisco IOS Intrusion Prevention System)?
I would appreciate you thoughts and suggestions.

Is this a router that is supplied by your ISP? Is it a DSL or FIOS service?
If so, let's reinstall the printer in this manner:
- Unplug the Internet line that runs between the router and the wall
- Turn the power off on the router, wait 30 seconds, then turn the power back on.
- Go through the normal process of connecting the printer to the router.
- Now find the IP address of the printer (it should be on the self-test printout), type it into a browser.
- On that screen you will find a Networking Tab, then on the left Wireless, then the IPv4 Tab.
- On this screen you want to set a Manual IP. You need to set an IP address outside the range that the router automatically sets (called the DHCP range). If you know what that is, set an IP outside that range but no higher than 254 (the last number in the address). If you do not know, use the current IP address.
- Use 255.255.255.0 for the subnet (unless you know it is different, if so, use that)
- Enter your router IP (its on the self-test printout) in the Gateway and first DNS field, leave the second blank.
- Click 'Apply'
- Finally, plug in the Internet line, reboot the router and test.
Say thanks by clicking "Kudos" "thumbs up" in the post that helped you.
I am employed by HP

Similar Messages

Wireless network management solution

We are running a pilot project to deploy a centralize wireless solution for our campus. The pilot consists of only about 20 Cisco1200 access points. We are in need of Network Management solution to manage these access points. The NMS would have to pretty much behave like what we already have into place for our wired networks such as: alerts on snmp traps, thresholds settings, data capture, administration,etc, in general be able to proactively check possible shortcomings on the infrastructure and help to troubleshoot problems. Once we fully deploy the centrally controlled wireless network, there could be any way from 1200 to 1500 access points, so whichever system we choose must be able to scale to these numbers.
Im interested in knowing which wireless network management solutions are the preferred one from the audience on this forum. Your input will help me to narrow down possible options.
Thanks a lot for any information.

I would suggest that you go for the WLSE. CiscoWorks WLSE is a centralized, systems-level application for managing and controlling an entire Cisco Aironet WLAN infrastructure. For more information on this read
http://www.cisco.com/en/US/products/sw/cscowork/ps3915/index.html

Need my wireless network security key

I got a laptop and a kindall. Wanted to connect them to my wireless network. A screen asks for the wireless network security key. I have no idea what that is. Went to home computer and tried to copy the key, but I ended up deleting it and now can't connect to my wi-fi on that either. I attempted to restore computer to earlier date in hopes I could get back the code that was set up and when that didn't work, I set the router to default mode by using a pen to hold in button in back 10 to 15 seconds. Nothing has work, and I have no internet connection. I had to use my computer at work to type this. What can I do?

You must hard reset the router by pressing and holding the reset button in back for 30 seconds and release. Wait 10 seconds and power cycle the router. Connect via your browser with a wired computer to 192.168.1.1 username blank, password 'admin'. Now configure the router back to your settings with your new SSID and password. Once done change all your computers to the same password. Write the password down and tape it to the router.

TS1398 My wireless password in only 6 lowercase letters, but my iPod touch requires me to enter 8 before allowing me to join. Therefore it will not let me log on to the wireless network, any solutions?

My wireless password in only 6 lowercase letters, but my iPod touch requires me to enter 8 before allowing me to join. Therefore it will not let me log on to the wireless network, any solutions?

What encryption are you using on the router?
If WEP you have to set the router to use the first key and you have to enter the first key as the password on the iPod. See:
iOS: Recommended settings for Wi-Fi routers and access points

Wireless Network Printing Solution

Yesterday I discoverd a solution that allows you to set up a HP Photosmart C7200 Series (Model Number: SDGOB-0713) on a wireless network... This is related to an issue we had printing from an iMac, MacBook Pro and a Mac mini to two different identical HP C7200 printers.
We found that if you plugged both the printer and the Mac's directly into the network (no wireless involved) you can successfully auto detect the printer with a Bonjour option and an HP IP option, Note: prevously we couldn't detect it at all. Then we installed both print queue options and found that the Bonjour option stop's working once you switch back to wireless but the HP IP Queue contenues to work great wired or wireless.
Wireless Access Points used (Buffalo WZR-AG300NH)

Sorry This Printer does not have e-print and wireless capability .To send print job through your ipad requires e-print capability and not necessarily wireless enabled printer .
Click the Kudos star if this was helpful. Thank You!
(Although I am an HP employee, I am speaking for myself and not for HP)

Using public wireless network, security settings?

Hi there,
I'm a new Mac user. If I'm using my MacBook Pro on a public wireless network, do I need to change any security settings to prevent other users from accessing my documents/hard drive etc?
Thanks in advance.
M.

Yes turn of guest access to your computer in the accounts preference pane.
Turn off any sharing protocols you may have enabled in your sharing preference pane.
In the security preference pane click on the firewall tab and set access for specific services.
Also when using public wifi it is a good idea not to use email or connect to any online banks etc.

Is my Wireless network secure?

How do I go about checking that my wireless network is secure? I use the new Airport Extreme Basestation, and the network works well. It was set up with the help of an AppleCare agent. I'd like to know that my neighbours can't access my network too. The reason I'm querying this, is because each time I access my network, I get straight in, without the system prompting me for the password.
For peace of mind - I'd like to have to enter my password each time I go to access the network. Am I correct in thinking this will improve the security of my network?

How do I go about checking that my wireless network
is secure?
Ensure you are using WPA.
I use the new Airport Extreme
Basestation, and the network works well. It was set
up with the help of an AppleCare agent. I'd like to
know that my neighbours can't access my network too.
The reason I'm querying this, is because each time I
access my network, I get straight in, without the
system prompting me for the password.
This is because the password is kept within your Mac Keychain Access.
Your Mac remembers the password and passes it on when asked, saving you having to do it.
For peace of mind - I'd like to have to enter my
password each time I go to access the network.
Reconfigure your Airport network with a new network name and password and ensure you uncheck the box to remember the Airport network password.
Am I
correct in thinking this will improve the security of
my network?
You are not correct it does not improve the security of your network.

Wireless network security

Okay: I've read a quite a few of the posts under this topic, and (shamefully) I need something more remedial, please.
I have a cable internet connection and a (Belkin) wireless router with one Macbook and one PC (XP). What, specifically, do I need to do to make this reasonably secure, and where do I do these things?
Everything is set up and working, but I don't really understand which computer (if any) is controlling my "network" so I don't understand what settings to make on which piece of hardware (Mac, PC, modem, router). Where, for example, do I make the WPA password settings, and how can/do I check that they are working on the other computer? Do I need to change the SSID name? What about encryption?
Thanks for your help

I've set up a couple of wireless networks for businesses and can suggest you do the following.
Read the manual on how to login into your router. Usually you have to open your browser and navigate to something like: http://192.168.1.1 - again, consult your manual with regards to this. Also it will tell you which password to use, although some Belkin routers require no password by default. Now, to security.
1. Fit thing that you should do is to change name for administrator account (use marco, admin, administrator - whatever you like) if there is such an option, but most importantly, CHANGE OR SET UP A PASSWORD FOR YOUR ADMINISTRATOR ACCOUNT! There is a reason I put this in bold, as this is the most stupid mistake people make and the first thing hackers do is to check if they can get in by using default password (i.e. no password - easy, isn't it?)
2. Name your network (SSID) - something like 'nowiresbox' will do, and turn off SSID broadcasting. Only you will know the SSID name (there is no reason why someone else should) you have given to your wireless network, and all you have to do is type it in when setting up connections. While SSID can still be discovered easily, it is still a good practice to disable its broadcast.
3. Set up MAC address filtering. Every network device (Ethernet card, AirPort, etc.) have a MAC address that looks like this: 00:0d:93:8c:2e:3b. This means only network devices with MAC addresses you specify will be able to connect to your wireless network. To find out your MAC address, open Network Utility (in Applications>Utilities), click on 'Info' tab. Select 'Network interface (en1)' to view info about your wireless card or 'Network interface (en0)' to view info about your Ethernet card. The 'Hardware address' entry will display MAC address for each of the interfaces selected. Write them down, and put them in your router options as MAC filtering entries. Again, while it is possible to spoof a MAC address, this is a good practice that would give another hurdle to those who try to get into your network.
4. Set up encryption. This means transmitted packets on your will be encrypted (scrambled) so that they can't be read by eavesdroppers. The main methods of encryption are: WEP (wired equivalent privacy), WPA (wifi protected access) and WPA2 (enterprise-grade WPA in other words). First thing to know is that you shouldn't use WEP and use WPA (or WPA2 instead), as WEP is very easy to crack with the right tools. Also, try to make up a long encryption key.
5. Turn on logging on your router so that you know what's happened in case things go sour.
6. Mind that every time you press that reset button, all your settings (including administrator password) default to the factory state. To avoid redoing all the work, after you have set up your router with the instructions above in mind, back up your settings so that when you have to reset your router, you can restore everything back in a snap.
7. Also, sometime it might be a good idea to limit the amount of IP addresses that your router's DHCP server gives out to only the number of computers you have connected to it. Say, if your router's IP address is 192.168.1.1 and you have 3 computers in your house, set up an option in DHCP lease to give out IPs starting from 192.168.1.2 to 192.168.1.4 - but make sure you know what you are doing.
Ask more questions if you have any and good luck.
Aleh Saiko

WRT54G wireless network security

I have a WRT54G V.6 that i've been using for several years. Its attached directly to my desktop and wirelessly to 2 laptops in my house. I have as much security as i can have on it...WPA2 with a long password, Mac filtering, password for the router administration etc. Lately i've been getting billed from my interenet for too much downloads and i'm sure it wasn't me thats been downloading. I'm worried someone's been on my network. I enabled logging on the router but i don't understand how to tell if someone's been on my network aside from me and my family. Can someone please tell me how to find out if someone's been on my network, either by looking at the log or some other way? Also, any other suggestions for protecting my network?
thanks
Daniel

You could check the "DHCP Client Table" and see if there are any MAC addresses listed that don't belong to you. However, keep in mind that MAC addresses can be faked.
You said that you have a "long password", but just as important, does it contain a variety of characters, such as capital letters, small letters, and digits? If you are simply using a long dictionary word, WPA2 can be cracked in a few minutes. Usually I recommend at least 24 random characters for the encryption password, and at least 12 random characters in the router login password, but even half this number will keep out all but the most dedicated intruders.
It is very unlikely that anyone could crack a WPA2 protected system, if you are using a strong password. But, for your own peace of mind, change your encryption and router login passwords.
More likely, you have a lot more downloading than you realize. Most people have their computer set for automatice updates. Microsoft recently put out a 250 megabyte update. Antivirus programs update themselves frequently. If anyone in your household is using peer-to-peer (P2P) software, this can result in massive downloads. If your computer is infected with a virus, the virus could be generating downloads.
Overall, it sounds like your security is pretty good. For added security, if you do not use UPnP, then, in the router, set it to "disabled". UPnP is used by some programs, such as Internet games, video conferencing software, etc. When UPnP is enabled, it allows any program on your computer to open a port and listen for incoming data. Virus programs will often use this feature to listen for instructions from home, and download data to your computer. I assume that you routinely run an antivirus program on your computer, if not, then I would suggest this. Make sure that your antivirus program also checks for "root kits", which is a common method that viruses use to hide on your computer.
Hope this helps.

Wireless Network Security Settings

I have purchased a WRT54G router. I had no problems getting one computer and one laptop on the internet with the security settings turned on. The problem is that I am trying to connect an older laptop to the system. The older laptop does not have a ethernet connection port so I am not able to run the normal setup. It does have wireless adapter card. With the card I can get on the internet when the router security settings are turned off but I want to turn my security setting on. How do I keep my security turned on and still be able to get on the internet with the old computer? I was told that it would be possible and that I could set up a password to where the older laptop could sign on to get on the internet. How would I go about doing this?

First, make sure you have the latest driver for your wireless card.
Next, in the computer's wireless software, go to "Preferred Networks" (sometimes called "Profiles" ) and enter your network's SSID, encryption method, and key. Next make this network your default network and set it to connect automatically. (Note: to do this, you may have to right click on your network and select "Properties" or "settings". ) Reboot computer. It should work.

Shared device / wireless network security

Past couple days... my daughters SLEEPING MBP has appeared on my MBP as a shared device. How is this possible if it's sleeping?
Perhaps there's a good explanation for this, but I'm concerned about it.
She connects via wireless to our home D-link wireless router.
Wasn't sure where to ask question on boards... help appreciated.
Thanks.
David Stamm

Here are the relevant System Preferences Mr. Stamm:
To enable "wake" from a remote system (Note this feature may not work with non-Apple routers, so it's good to know it works with your D-Link):
To enable screen sharing, file sharing etc ("Remote Management" encompasses Screen Sharing):
Connecting to your system from another one, for purposes of screen sharing or copying files (screenshot is from Lion):
If you do not want your password field to automatically populate, just deselect "Remember this password..."
In summary:
You always need a name and password
Your name and password are secured in OS X's Keychain (with your consent)
You can enable or disable any or all of these features
None of your shared devices or computers may by reached from outside your LAN (without using other utilities)
I hope this helps assuage your concerns.

Wireless network security detected wrong

My work has it's access point configured for both WEP and WPA. Unfortunately WPA doesn't work at the access point side. Tiger detects the access point with the correct name, but always tries to use WPA even though I tell it each time to use WEP.
Is there any way to have it remember this?

My work has it's access point configured for both WEP
and WPA. Unfortunately WPA doesn't work at the
access point side. Tiger detects the access point
with the correct name, but always tries to use WPA
even though I tell it each time to use WEP.
Is there any way to have it remember this?
I have never come across a wireless access point to be using WEP and WPA. It is normal for a WAP to require wpa or wep not at the same time.
When connecting to the access point with the WEP key do you add it to the keychain.
Also is your company aware that WEP is not secure at all and can easily be cracked by even amatuer crackers. Therefore if the access point is using a wep key as well as a wpa key it may as well be wide open.

Important Information Regarding your Wireless Network Security

I received this email today from Verizon stating that I need to change my wifi router settings for WPA2 instead of WEP.
What the wonderfully intelligent Verizon folks forgot to include as a very basic step is to CHECK first before you follow any instructions. The wonderful router that Verizon supplied doesn't indicate on the configuration page that WPA2 is ALREADY configured. At first I thought Verizon pushed out new code and wiped that configuration, but that didn't make sense. I was sure I had set up WPA2. Then I remembered, looking at my notes, to check "Wireless Status" under "Wireless Settings."
My recollection was confirmed. I almost had to re-do everything and then update all of my devices because I started to blindly follow Verizon's lead.
So, don't blindly follow Verizon instructions and remember that the user interface on Verizon routers is pretty awful, too.
Check around, don't assume that the interface will indicate that something is already configured. One screen may tell you something is configured (status) and the other is written to assume you intend to configure (even if already configured).
I hope this helps someone.

Its a generic message going to EVERYONE.
The G and I version even come configured with WPA2 , and many have followed previous recommendations to switch to WPA2.

How to connect to an ieee stander wireless network in school

I am a student of UNM.
we can't get the wireless connection to our ece deperment if OSX is above 10.5.
we can get the connect under windows and linux but not Mac.
I did asked our IT about this issuse, thire answer was Apple didn't following ieee wireless stander on newer osx.
I tried all the solution on interstant including using iphone developer tools, but it doesn't work.
Is any possible that feture update can fix this problem?

That's a neat trick they used there, relying on IEEE standards, which never had any requirement for interoperability. Their wireless network, while IEEE standard, is not WiFi CERTIFIED as it still uses TKIP.
TKIP on WPA was an interim solution to WEP.
http://wifinetnews.com/archives/2010/06/say_goodbye_to_wep_and_tkip.html
You might send your IT department this link: http://osxdaily.com/2009/09/21/wireless-network-security-change-your-wpa-encrypt ion-from-tkip-to-aes/

Wireless Network Design

What are best practices in consideration to wireless network design? I have a WLC 4400 and 1200 AP's that I want to deploy to replace my existing wireless network. I am researching the best network design for implementing a secured wireless infrastructure and also having a quest account for non employee's to logon to and surf the Internet. We also have WAN sites that need to be included in this design.
Any help would be appreciated.

Hi Tim,
I just wanted to add a bit to the excellent info you have already received from Alejandro (nice work A!);
Here some good "getting started" Cisco docs (and link to a video) which might help. This is a fair bit of reading :)
Wireless LAN Design Guide
http://www.cisco.com/web/about/ciscoitatwork/design_guides/dg-wlan.html
Wireless Site Survey FAQ
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_q_and_a_item09186a00805e9a96.shtml
Understanding the Lightweight Access Point Protocol (LWAPP)
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns337/networking_solutions_white_paper0900aecd802c18ee.shtml
Deploying Cisco 440X Series Wireless LAN Controllers
http://www.cisco.com/en/US/products/ps6366/prod_technical_reference09186a00806cfa96.html
Cisco Wireless LAN Controller Configuration Guide, Release 4.0
http://www.cisco.com/en/US/products/ps6366/products_configuration_guide_book09186a00806b0077.html
WLC Video
http://www.cisco.com/en/US/products/ps6366/index.html
Lightweight Access Point FAQ
http://www.cisco.com/en/US/products/ps6306/products_qanda_item09186a00806a4da3.shtml
Lightweight AP (LAP) Registration to a Wireless LAN Controller (WLC)
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a00806c9e51.shtml
Here are some excellent overall scope ideas;
Deploying High Capacity Wireless LANs
http://www.cisco.com/en/US/products/ps6108/products_white_paper0900aecd8027a5f7.shtml
Cisco Deploys Wireless LAN Technology to Increase Productivity
http://www.cisco.com/web/about/ciscoitatwork/downloads/ciscoitatwork/pdf/Cisco_IT_Case_Study_WLAN_2004_print.pdf
Design Principles for Voice Over WLAN
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/networking_solutions_white_paper0900aecd804f1a46.shtml
Evaluating Interference in Wireless LANs: Recommended Practice
http://www.cisco.com/application/pdf/en/us/guest/products/wireless/c2072/cdccont_0900aecd80554f8b.pdf
I have attached some good "getting started" type Security docs). You may also want to engage your Cisco partner and Cisco SE to help you plan and implement this most important function of Wireless.
Wireless LAN Security White Paper
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns386/networking_solutions_white_paper09186a00800b469f.shtml
Five Steps to Securing Your Wireless LAN and Preventing Wireless Threats
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns386/networking_solutions_white_paper0900aecd8042e23b.shtml
WLAN Security considerations (Part of WLAN SRND Guide)
http://www.cisco.com/application/pdf/en/us/guest/netsol/ns178/c649/ccmigration_09186a00800d67eb.pdf
Wireless LAN Security Solution
http://www.cisco.com/en/US/netsol/ns339/ns395/ns176/ns178/netqa0900aecd801e3e59.html
Wireless - Compare Products and Solutions
http://www.cisco.com/en/US/products/hw/wireless/products_category_buyers_guide.html
**Don't forget to check out the good books available from Cisco Press (link on this site)
Hope this helps! And best of luck.
Rob

Wireless network security solution

Similar Messages

Maybe you are looking for