Webconfig Wizard; The Security Checklist - Lancom 1723 VOIP User Manual

LANCOM 1722 VoIP – LANCOM 1723 VoIP – LANCOM 1724 VoIP – LANCOM 1823 VoIP
Chapter 11: Security settings
11.2.2

WEBconfig Wizard

With WEBconfig you have the option to launch the Check security settings
Wizard to check and change any settings. The following values are edited:
11.3

The security checklist

The following checklists provide an overview of all security settings that are
important to professionals. Most of the points in this checklist are uncritical
for simple configurations. In these cases, the security settings in the basic
configuration or that were set with the Security Wizard are sufficient.



116
Device password
The protocols to be available for accessing the configuration from local
and remote networks
The parameters for locking the configuration (the number of incorrect
password entries and the duration of the lock)
Security parameters such as WLAN name, closed-network function, WPA
passphrase, WEP key, ACL lists, and protocol filters
Detailed information about the security settings mentioned here are
to be found in the reference manual.
Have you secured your wireless network with encryption and
access control lists?
With the help of 802.11i, WPA or WEP, you can encrypt the data in your
wireless network with different encryption methods such as AES, TKIP or
WEP. LANCOM Systems recommends the strongest possible encryption
with 802.11i and AES. If the WLAN client adapters do not support these,
then you should use TKIP or at least WEP. Make sure that the encryption
function in your device is activated, and that at least one passphrase or
WEP key has been entered and selected for application.
For security reasons, LANCOM Systems strongly advises you not to use
WEP! You should only ever use WEP under exceptional circumstances.
When using WEP encryption, use additional security mechanisms
additionally.
Ex-factory, WPA encryption is activated for every unconfigured device
as standard. This WPA encryption in WLAN devices being managed by