Re: student wireless security model

["Nguyen, Tung" <nguyetun () MSCD EDU>]

With the recent discovered vulnerability on WPA2 protocol "Hole 196".   Is WPA2 still good enough to provide 
confidentiality and integrity for wireless traffic? 
(http://www.networkworld.com/newsletters/wireless/2010/072610wireless1.html
)

At Metro State, we are considering to provide VPN to students in addition to other security controls.


Tung Nguyen, CISSP, MCSE, GSNA, GPEN
Information Security Specialist
Metropolitan State College of Denver
Phone: 303-352-4163
http://www.mscd.edu/infotech/security/index.shtml

"I don't want to hear excuses.  I want to hear results" - AFV Show

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Miller,James R
Sent: Monday, August 30, 2010 9:48 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] student wireless security model

Also using WPA2, 802.1x and RADIUS authentication against an AD database.

Jim Miller
CISSP,CCSP
Lead Network Engineer
The University of Akron
(330) 972-7958
millerj () uakron edu<mailto:millerj () uakron edu>

[cid:image001.png@01CB482A.5CCDD250]

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mayne, 
Jim
Sent: Monday, August 30, 2010 11:05 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] student wireless security model

I am curious what security model other universities are now using for their student wireless networks.


-      Encrypted or unencrypted

-      Authentication (mac, 802.1x, web portal etc.)

-      Any NAC security checks on the client

Thanks,
Jim