Table of Contents
Advertisement
Chapter 10: Configuring Security
Comparison Of Security Modes For Key Management, Authentication And Encryption Algorithms
convenience trade-off for other scenarios where the priority is making it as easy as possible
for clients to connect. (See "Does Prohibiting The Broadcast SSID Enhance Security?" on
page 99)
Following is a brief discussion of what factors make one mode more secure than another, a
description of each mode offered, and when to use each mode.
10.1.2 Comparison Of Security Modes For Key Management, Authentication And
Encryption Algorithms
Three major factors that determine the effectiveness of a security protocol are:
•
How the protocol manages keys.
•
Presence or absence of integrated user authentication in the protocol.
•
Encryption algorithm or formula the protocol uses to encode/decode the data.
Following is a list of the security modes available on the 9160 G2 Wireless Gateway, along
with a description of the key management, authentication, and encryption algorithms used in
each mode. We include some suggestions as to when one mode might be more appropriate
than another.
•
"When To Use Unencrypted (No Security)" on page 94.
•
"When To Use Static WEP" on page 95.
•
"When To Use IEEE 802.1x" on page 95.
•
"When To Use WPA Personal" on page 96.
•
"When To Use WPA Enterprise" on page 97.
10.1.2.1 When To Use Unencrypted (No Security)
Setting the security mode to None (Plain-text) by definition provides no security. In this
mode, the data is not encrypted but rather sent as "plain-text" across the network. No key
management, data encryption or user authentication is used.
Recommendations
Unencrypted mode, i.e. None (Plain-text), is not recommended for regular use on the Inter-
nal network because it is not secure. This is the only mode in which you can run the Guest
network, which is by definition an unsecure LAN, always virtually or physically separated
from any sensitive information on the Internal LAN.
Therefore, only set the security mode to None (Plain-text) on the Guest network, and on the
Internal network for initial setup, testing, or problem solving only.
94
Psion Teklogix 9160 G2 Wireless Gateway User Manual
Advertisement
Table of Contents
