Implement Appropriate Wireless Security - NETGEAR FVM318 Reference Manual

Reference Manual for the Model FVM318 Cable/DSL ProSafe Wireless VPN Security Firewall

Implement Appropriate Wireless Security

Unlike wired network data, your wireless data transmissions can extend beyond your walls and
can be received by anyone with a compatible adapter. For this reason, use the security features of
your wireless equipment.
Indoors, computers can connect over 802.11b wireless networks at a
Note:
maximum range of up to 500 feet.
immediate area to access your network. It is important to take appropriate steps to
secure your network from unauthorized access. The FVM318 firewall provides highly
effective security features which are covered in detail in this chapter. Deploy the
security features appropriate to your needs.
Data Security Options
Range: Up to 500 Feet
1) Open System: Easy but no security
2) MAC Access List: No data security
3) WEP: Limited security but performance impact
4) IPSec (VPN): Highly secure, more reliable, and better performance
Figure 3-1: FVM318 wireless data security options
Restricting access by MAC address filtering adds an obstacle against unwanted access to your
network, but the data broadcast over the wireless link is fully exposed. To block a determined
eavesdropper, you should use one of the data encryption options of the firewall. Wired Equivalent
Privacy (WEP) data encryption provides some security. However, a determined intruder can
compromise WEP, there may be degradation of the data throughput on the wireless link, and WEP
configurations can be less reliable. Unique to the FVM318, you can use the highly secure, reliable,
high performance IPSec VPN communications protocols for your wireless connection.
3-2
FVM318 Wireless
Such distances can allow for others outside of your
FVM318
IN TER N ET W LA N
Cable/DSL ProSafeWirelessVPN Security Firewall
LNK
PWR TEST
ACT Enable
1 2 3
LO CA L MODEL FVM318
100
LNK/ACT
4 5 6 7 8
Wireless Configuration