Cisco ISA500 Series Administration Manual page 171

Wireless Configuration for ISA550W and ISA570W
Configuring the Access Points
STEP 4
STEP 5
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
Security
Mode
WPA +
WPA2
RADIUS
If you choose Open as the security mode, no other options are configurable. This
mode means that any data transferred to and from the SSID is not encrypted. This
security mode can be useful during initial network configuration or for problem
solving, but it is not recommended for regular use on the Internal network because
it is not secure.
If you choose WEP as the security mode, enter the following information:
• Authentication Type: Choose either Open System or Shared key, or
choose Auto to let the security appliance accept both Open System and
Shared Key schemes.
• Default Transmit Key: Choose a key index as the default transmit key. Key
indexes 1 through 4 are available.
Description
This mode allows both WPA and WPA2 clients to connect
simultaneously. The SSID automatically chooses the
encryption algorithm used by each client device. This
option is a good choice to enable a higher level of security
while allowing access by devices that might not support
WPA2.
The following WPA+WPA2 security modes are supported
on your security appliance:
• WPA/WPA2-Personal Mixed: This security mode
supports the transition from WPA?Personal to
WPA2?Personal. You can have client devices that use
either WPA?Personal or WPA2?Personal.
• WPA/WPA2-Enterprise Mixed: This security mode
supports the transition from WPA?Enterprise to
WPA2?Enterprise. You can have client devices that
use either WPA?Enterprise or WPA2?Enterprise.
This security mode uses the RADIUS servers for client
authentication and uses dynamic WEP key generation for
data encryption.
This security mode is only available when a RADIUS server
is connected to the SSID.
5
165