Re: Cisco Secure ACS vs. Firewall

[Rudolf Eggelbusch <rudolf.eggelbusch () web de>]

Hi Mario,

I expect that that the company whant to use WEP Encryption(better than 
nothing but not a strong encryption) and or LEAP Authentication for that 
reason Cisco Secure ACS is needed.
If you need to have more security as with WEP Encryption you can build an 
overlay VPN with VPN Clients on the forklisters (PC, Terminals) and a 
central VPN Concentrator like the VPN3000 from Cisco this Concentrator has 
also an Firewall build in and it offers a DMZ Zone for Wireless.
This box is very easy to configure and has reporting features build in.

Best Regards Rudolf Eggelbusch, CCSS1/CCIP

At 11:13 23.10.2002 +0200, mario.walter () bluewin ch wrote:
> Hi List
>
> we are going to setup a WLAN in a warehouse to enable the forklifters to
> communicate with with the warehouse management (WM) system. The company,
> which will install all the equipment suggested to setup a Cisco Secure ACS
> for security reasons. However, I would prefer the installation of a firewall
> and having a separate network segment for this WLAN, because the traffic
> between the WM system and the forklifts isn't critical at all, but the traffic
> on the company LAN is. So, my idea is to restrict the traffic going through
> this firewall to only the needed protocols and IPs (outgoing and incoming),
> to protect the rest of the companys LAN.
> Any thoughts, caveats, comments?
>
> TIA
>
> Mario