Implementing Appropriate Wireless Security - NETGEAR FWG114P Reference Manual

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P

Implementing Appropriate Wireless Security

Note: Indoors, computers can connect to wireless networks at ranges of 500 feet or
more. Such distances allow others outside of your area to access your network.
Unlike wired network data, your wireless data transmissions can extend beyond your walls and
can be received by anyone with a compatible adapter. For this reason, use the security features of
your wireless equipment. The FWG114P Wireless Firewall/Print Server provides highly effective
security features which are covered in detail in this chapter.
Figure 4-1: FWG114P wireless data security options
There are several ways you can enhance the security of you wireless network:
• Restrict Access Based on MAC Address. You can allow only trusted PCs to connect so that
unknown PCs cannot wirelessly connect to the FWG114P. Restricting access by MAC address
adds an obstacle against unwanted access to your network, but the data broadcast over the
wireless link is fully exposed.
• Turn Off the Broadcast of the Wireless Network Name SSID. If you disable broadcast of
the SSID, only devices that have the correct SSID can connect. This nullifies the wireless
network 'discovery' feature of some products such as Windows XP, but the data is still fully
exposed.
• WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared
Key authentication and WEP data encryption will block all but the most determined
eavesdropper.
4-2
ProSafe 802.11g Wireless Firewall/Print Server
Broadband
MODEL FWG114P
ACT ACT 100 100
1) Open System: Easy but no security
1 2 3 4
PWR TEST ALERT ALERT LNK/ACT LNK/ACT
P R IN TER M O DEM IN TER N ET LO CA L W LA N
2) MAC Access List: No data security
FWG114P
3) WEP: Security but some performance impact
4) WPA or WPA-PSK: Very strong security
December 2003, M-10177-01
Wireless Data
Security Options
Range: Up to 500 Feet
Wireless Configuration