Securing Wireless LANs with Certificate Services

[Mitzs]

Securing Wireless LANs withCertificate Services is a prescriptive guide that addresses vulnerabilities in today’s wireless networks. Many organizations have tried to use wireless LANs (WLANs), but they often shy away from large deployments or ban them altogether. Despite the many productivity and technology benefits that WLANs offer, insufficient security has prevented a number of organizations from deploying them. Other organizations have implemented 802.11 WLANs using either the limited built-in security features or no security at all.

This guidance was updated to improve usability and provide more detailed information about the pros and cons of different wireless security approaches. It provides a Planning Guide for organizations that are considering implementing a wireless infrastructure and a Build Guide that provides implementation details. An Operations Guide that provides details on maintaining a secure wireless environment is also included, and a Test Guide provides the testing strategy that was used to verify the documentation content. The Test Guide also provides guidance to users about how to validate their implementation.

Like the Securing Wireless LANs with PEAP and Passwords guidance that was released earlier this year, this guidance addresses vulnerabilities in today’s wireless networks and is for organizations that want to deploy WLAN technology with a high degree of confidence in its security. However, this guidance is intended for organizations from several hundred to many thousands of wireless network users. It is based on the WLAN deployment at Microsoft.

This guidance provides information for IT Professionals about how to design, implement, and operate a wireless security infrastructure built with 802.1X and WLAN encryption, RADIUS, and a public key infrastructure (PKI). For business planners and IT architects, the guidance presents a discussion of wireless networking vulnerabilities and an assessment of the different security options that are available. The guidance also provides a detailed design of an overall solution and its various components. For IT implementers and operations managers, the guide offers detailed instructions and companion scripts to successfully deploy and manage a wireless security infrastructure.

To download this guide:
http://www.microsoft.com/technet/sec...ire/swlan.mspx