RE: WiFi security implications

["Tres London" <telconstar99 () wblondon com>]

Unfortunately this is a public wireless network. I have no control, nor
does IT have any control, over the security.

-Tres London

-----Original Message-----
From: Moshe Ashkenazi [mailto:moshe () bobo-san no-ip info] 
Sent: Friday, December 05, 2003 12:06 PM
To: Paul Kurczaba; Tres London; security-basics () securityfocus com
Subject: Re: WiFi security implications

I know the the WiFi WEP encryption as some security issues and maybe
that is
the reason your IT concerned, if that is the reason you can switch to
WiFi
WPA encryption method.

Thanks,
Moshe Ashkenazi.
----- Original Message ----- 
From: "Paul Kurczaba" <paul () myipis com>
To: "Tres London" <telconstar99 () wblondon com>;
<security-basics () securityfocus com>
Sent: Friday, December 05, 2003 1:08 AM
Subject: Re: WiFi security implications


> The VPN connection should be secure (when properly configured) no
matter
> what connection the client is using: Cable, DSL, 802.11a/b/g
(Wireless),
or
> Satellite. If your company is using 3DES encryption or higher, there
should
> be no security issues. I'm thinking that your IT may be concerned that
if
> you don't have a personal firewall running on your notebook, then
others
> have the possibility of accessing your computer on an open wireless
network.
> -Paul Kurczaba
> ----- Original Message ----- 
> From: "Tres London" <telconstar99 () wblondon com>
> To: <security-basics () securityfocus com>
> Sent: Wednesday, December 03, 2003 9:28 PM
> Subject: WiFi security implications
>
>
> > Hello List, 1st time poster here :)
> >
> > If I work for a financial firm, have a laptop with wireless access
and
> > am at a publicly available wireless access point, and want access to
my
> > network via VPN, what are the security implications?
> >
> > My company currently allows people from home to VPN into the network
at
> > work, but IT is nervous about allowing it over a wireless connection
> > because of security implications.
> >
> > My point is that VPN should be secure enough on it's own, even if
people
> > access my information, it's still encrypted with IPSec (or something
> > like that).
> >
> > Thoughts?
> >
> > Thanks,
> >
> > -Tres London
------------------------------------------------------------------------
--
> -
------------------------------------------------------------------------
--
> --
> >
------------------------------------------------------------------------
--
-
>
------------------------------------------------------------------------
--
--


---------------------------------------------------------------------------
----------------------------------------------------------------------------