Security Basics mailing list archives

RE: Wireless Internet network for the enterprise


From: "Sean Tindall" <sean () bulletproofnetworks ca>
Date: Tue, 20 May 2008 16:14:19 -0600

I wasn't going to reply, until I noticed that despite looking for free
projects, you mentioned you were looking for appliance suggestions, and
I'm not aware of any free appliances.  So here goes:

Try a SonicWALL + SonicPoint(s) wireless solution and make use of
wireless guess services.  It handles 1 - 5 out of the box, and then tack
on a Viewpoint server (or any other syslog capable intelligent reporting
layer - I will admit that Viewpoint is nowhere near the best option) to
handle #6. 

Of course, all of the above costs money, and most people that ask for
these kinds of things are usually looking for free or next to it,
discounting the amount of time it's going to take to cobble things
together.

And no, I don't work for SonicWALL.  We use variations of the above when
deploying wireless at hotels and it works wonderfully.

sT


-----Original Message-----
We are in the process of checking the needs to implement Wireless
Internet access for company guests. The maximum number of users is about
50 at the same time.


We will use a some gateway (or a box) and Access points located at our
building.


We are looking for the following requirements:

1. Limiting access only to specific services, such as HTTP, HTTPS or
SMTP.
2. Limiting access to internal IP's. Users who are connected won't able
to reach any other connected user. 
3. Limiting access to specific time range and days at week.
4. QOS - some kind of traffic shaping to prevent users from flooding the
bandwidth.
5. Authentication - we are not sure about this because we don't want to
make it difficult for guests. What do you say?
6. Reporting - real time monitoring and/or logging of outgoing traffic.

We searched for Linux based gateways and we found the SmoothWall and
IPCOP projects. Do you know any other free projects? 

Do you have suggestions for specific appliance/box?

Much Thanks.


Regards,

Zefferno.


Current thread: