Wireless in the Enterprise:
Security Risks, Challenges, and the Solution
Kaustubh Phanse
Wireless Architect, AirTight Networks

Convenience
Efficiency
Cost savings
Opportunities

Everywhere

sed
cen m
nli
s U ectru
se
Fi u ncy Sp
Wi ue
Freq

Off-the-shelf

Plug and play

“ Wireless is a wonderful thing, unless
you are worried about security.
– John Pescatore, Gartner
”

Enterprise LAN is
confined to wires
Outside is
insecure
Inside is secure
Internet
Firewall shields inside
from outside

Network not confined to wires
or the building anymore
Internet
Wireless security holes
bypass the firewall

Wardriving

WEP Encryption
WEP was meant to be
“Wired Equivalent Privacy”
WEP turned out to be
“Worst Ever Privacy”

WiFi Protected Access (WPA/WPA2)

Simply having “No WiFi” policy
does not
make your organization immune to WiFi Threats

319 million units shipped in 2008
Source: WiFi Alliance and In-Stat
144
23%
71
33%
56 48
52%
51%
Notebooks, Portable Cellular phones Stationary Consumer
ultra-mobile PCs Consumer electronics
electronics

2010
All notebooks, ultra-mobile PCs will
have WiFi

Rogue AP is an unauthorized access point
connected to the wired enterprise network
Usually consumer
or home-grade APs
Deployed casually or maliciously

Inadvertent
Deliberate
Malicious

Administrators lack transparency and control

Are your employees connecting
Is your sensitive data to neighboring WiFi networks?
leaking over the air?
Are Rogue APs attached
to your enterprise network?
Internet
Firewall
Are you having difficulty enforcing
your security policies at multiple sites?
Can someone across the street
shutdown your WiFi network?

WLAN
Infrastructure
Attacks Next Generation Threats and
Vulnerabilities Projection
June 2009
Mobile and Wireless
Device Endpoint
Attacks

Wireless intrusion prevention
system (WIPS)

Automate your wireless security
with a WIPS
Gain visibility 24x7
Instantaneously detect and block wireless threats
Accurately locate wireless devices
Regain and stay in control

The Global Leader in Wireless Security
and Compliance Solutions
www.airtightnetworks.com
kaustubh.phanse@airtightnetworks.com