NETGEAR ProSafe FVS318N Reference Manual page 108

ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
security features that are covered in detail in this chapter. Deploy the security features
appropriate to your needs.
Figure 53.
There are several ways you can enhance the security of your wireless network:
• Restrict access based by MAC address. You can allow only trusted computers to
connect so that unknown computers cannot wirelessly connect to the wireless VPN
firewall. Restricting access by MAC address adds an obstacle against unwanted access
to your network, but the data broadcast over the wireless link is fully exposed. For
information about how to restrict access by MAC address, see
by MAC Address on page 117.
• Turn off the broadcast of the wireless network name (SSID). If you disable broadcast
of the SSID, only devices that have the correct SSID can connect. This nullifies the
wireless network discovery feature of some products, such as Windows XP, but the data
is still exposed. For information about how to turn of broadcast of the SSID, see
Configure and Enable Wireless Profiles
• WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP
shared key authentication and WEP data encryption block all but the most determined
eavesdropper. This data encryption mode has been superseded by WPA-PSK and
WPA2-PSK.
For information about how to configure WEP, see
on page 112.
• WPA. Wi-Fi Protected Access (WPA) data encryption provides strong data security with
Temporal Key Integrity Protocol (TKIP) or a combination of TKIP and Counter Mode with
Cipher Block Chaining Message Authentication Code Protocol (CCMP) encryption. The
very strong authentication along with dynamic per frame rekeying of WPA make it virtually
impossible to compromise. The wireless VPN firewall supports WPA with a pre-shared
key (PSK), RADIUS, or a combination of PSK and RADIUS.
For more information about how to configure WPA, see
Profiles on page 112.
• WPA2. Wi-Fi Protected Access version 2 (WPA2) data encryption provides strong data
security with CCMP encryption or a combination of TKIP and CCMP encryption. WPA2
on page 112.
Wireless Configuration and Security
108
Restrict Wireless Access
Configure and Enable Wireless Profiles
Configure and Enable Wireless