Introduction

In Chapter 4, we examined the various reasons that your wireless network segment is not to be trusted in the same way that you would normally trust a wired network segment. In addition, we discussed the reasons that a wireless DMZ (WDMZ) is needed. We also looked at some basic WDMZ designs; we implement those designs in this chapter. (For a refresher on WDMZ fundamentals, please review Chapter 4.) With a wired DMZ, you are attempting to (for the most part) control the type of traffic going into and out of your network.This is not completely the case with WDMZ implementations.The number-one concern with WLANs is controlling access who can get on the wireless network and how we can control that access.

The ways you can implement security on a wireless network are varied and limited only by imagination. As outlined in Chapter 4, measures taken to increase security are not limited to implementing DMZs or VPNs but also include many actions that could be characterized as good administrative practices. In the following sections, we examine some potential solutions that you might implement to provide the net effect of a DMZ for your WLAN.

These solutions are certainly not all inclusive you can add to them as you see fit or even create your own solutions.To increase your network s security, you need to control access to wireless networks.You ll find a wide range of products in the market to achieve this goal.

This chapter looks at a couple of products in depth...