Title: WIRELESS STRATEGIES Cutting Through the Confusion
1WIRELESS STRATEGIESCutting Through the Confusion
- Presented By
- Robert Gaby, CPA, MCP
- Information Technology Group, Inc.
2Agenda
- Introduction
- Why Wireless
- Wireless challenges
- Planning the Wireless Network
- Application Selection
- Getting Connected / Wi-Fi Standards
- Device Selection
- Network and Security Considerations
3Where We Are
- Employees are mobile not at there desks
- In meetings
- On the road
- In front of customers or vendors
- There is an overload of great applications/content
- Millions of Internet/Intranet data sources
- Applications are formatted for desktops they
dont look right on small screen devices
- Cant access applications unless youre plugged
in
4Where We Want To Be
- Employees need information to get their jobs
done
- They want
- Access to information anywhere
- Access to information on any device
- Access to information in the right format
5So Why Wireless?
- Potential real time access to information
- Anytime
- Anywhere
- Increases productivity
- Always connected
- 60 minutes plus of additional productivity per
day
- Increases accuracy
- Access to any information
- Ability to respond immediately
6So Why Wireless (continued)?
- Bottom line cost savings!
- Increased productivity
- Improved accuracy
- Infrastructure
7Wireless ChallengesIT Perspective
- Incompatible with existing infrastructure
- Roaming across network boundaries
- May require rewiring or reconfiguring existing
network
- Security Issues
- Other technologies must be introduced to ensure
authentication and privacy
- Multiple authentication schemes required
8Wireless ChallengesIT Perspective (continued)
- Potential incompatibility with existing
applications
- Address changes
- May require rewriting existing applications or
purchasing new applications
- Difficult to manage and troubleshoot
- First generation management tools
- Transient network problems
9Wireless ChallengesUser Perspective
- Unstable connections
- User frustration
- Loss or corruption of data
- Can be cumbersome to use
- Requires additional intervention
- Can decrease productivity
10Wireless Challenges In Review
- What devices to support (PDAs, phones, laptops,
handhelds, etc.)?
- What networks to use?
- Should it be integrated with the current network
infrastructure?
- What about authentication?
- What about privacy and confidentiality
11Wireless Challenges In Review
- What about using existing applications?
- Unstable connectivity
- Roaming
- Limited bandwidth
- What about central management / administration?
12Before you begin.
13Planning the Wireless Network
- Existing infrastructure considerations
- Will you need to upgrade network components?
- Will you need to rewire or add cable runs?
- Will the network need to be reconfigured?
- Can it be co-located with existing network
services?
- Is it compatible with existing policy enforcement
equipment such as firewalls, routers, network
address translators?
- What is required? PAN, LAN, or WAN?
14Planning the Wireless Network
- Environmental considerations
- Are there physical barriers to consider?
- Multiple buildings
- Multiple floors
- Walls, doors, etc.
- Is there the possibility of interference from
other wireless devices?
- Cordless phones
- Microwaves
- Other
- Has access to hardware been considered?
15Planning the Wireless Network
- Connectivity issues
- Is unencumbered network roaming required?
- How will applications deal with out of coverage
conditions or suspended operations?
- Loss of data
- Potential loss of productivity
- What is the cost when a mobile device is not
connected?
- Will bandwidth be an issue?
16Planning the Wireless Network
- Application considerations
- Are the applications suited for a wireless
environment?
- Device considerations
- Displays
- Touch screens - no keyboards
- Performance reduced because of lower bandwidth
- Security highly sensitive application data
- Persistent able to function without a
connection
- Will applications needed to be rewritten,
reconfigured or purchased?
17Planning the Wireless Network
- Security considerations
- Will authentication be integrated with existing
authentication systems?
- Is there a requirement to encrypt data?
- Will temporary or outside users have access to
the system via a wireless connection?
- Will any wireless access points (WAPs) be a part
of a VPN?
- Is physical security an issue?
18Implementing a Wireless Network
- Define the application(s)
- Plan the infrastructure
- Select appropriate devices
- Implement security
19Define the Application(s)
- PIM
- Email / Text Messaging / Notification
- Document creation and management
- Executive information / company portal
- Voice mail / voice over IP
- Sale force automation or field services
- CRM
- Warehouse management
- Operating system
20Operating System Selection
- Palm OS 60 market share
- Thousands of applications
- Easy to use
- Pocket PC / Windows CE
- Great for running PC applications on a handheld
or PDA
- Familiar Interface
- Symbian Designed for cellular phones
21Operating System Selection
- Application will define the operating system!
- Select the right tool for the job!
22Plan the Infrastructure
PAN (Personal Area Network)
23Getting Connected
24LAN TechnologiesCutting through Confusion802.??
25The 802.11 Maze
26Laws of Radio Dynamics
- Higher data rates shorter transmission range
- Higher power output increased range, but lower
battery life
- Higher frequency ratios high data rates,
shorter ranges
27Bluetooth 802.15
- For the personal area network (PAN)
- Eliminates wires at the desktop
- Best utilized for
- Local printer connectivity
- Connectivity to PDAs, handhelds and cellular
phones
- Wireless headsets
28802.11b (aka Wi-Fi)
- Pros
- Modest price
- Mature technology
- Adequate for most home office applications
- Minimal fluctuation in throughput out to maximum
range
- Cons
- Lowest overall throughput of 802.11x
technologies
- Small spectrum only three channels in 2.4GHz
band (maximum of three networks operating in a
2.4 GHz environment)
29802.11b Users
- Transaction intensive
- Have an existing based of 802.11b
- Need roaming to other 802.11b sites
- Require lowest cost of acquisition
30802.11a What is it?
- 5 GHz WLAN is
- Next generation, indoor WLAN opportunity
- Supports migration to higher speeds
- Supports new WLAN applications
- What it is not
- Broadband wireless access
- Broadcast TV
- Cellular
31802.11a Advantages
- Large spectrum band supports 12 simultaneously
operating networks
- High speed
- Up to 54Mbps
- Enables real-time media applications
- Video streaming
- Audio voice
- Gaming
- Allows for high density user environments
- Provides high speed links for LAN-LAN bridging
32802.11a Advantages
- Less congestion fewer products use this
frequency
- Can co-exist with 2.4 GHz systems
- License free band
33802.11a Challenges
- Competing evolving standards
- HiperLAN2 (Europe)
- NMAC
- Regulatory 5Mhz band is not available
worldwide
- Market will be slow to evolve to 5 GHz
- Cost
- Limited range raises infrastructure cost (4x
number of 802.11b WAPs to cover same area)
- Device cost is high demand required to reduce
cost
34802.11a Challenges
- 30 50 less range
- Certain environments may significantly reduce
signal strength
- Signal fluctuations can occur at ranges beyond 20
feet
- Higher power consumption requirements become a
hurdle for
- Handhelds
- PDAs
- Laptops
35802.11a Users
- High bandwidth requirement
- Have a nonexistent or small base of 802.11b
devices
- Require greater capacity more channels
- Are concerned about Bluetooth interference
36802.11g - What is it?
- Likely to become the next standard
- High speed extension of 802.11b
- Compatible with 802.11b
- Adds an inner ring of high speed performance to
Wi-Fi networks
- 2.4 GHz range
- Adaptive rate shifting 54,22,11,5.5,2,1 Mbps rates
37802.11g Advantages
- Addresses higher speed and capacity requirements
for key applications
- Compatible with existing 802.11b standard
- Costs less than 802.11a alternatives
- Provides easy migration for 802.11b users
- Backward compatibility with 802.11b
- Leverages existing 2.4GHz design
38802.11g Challenges
- Customer confusion almost too many choices
given compatibility with 802.11b
- 54 Mbps coverage will be limited to devices in
close proximity to access points
- 2.4 GHz limits number of simultaneous networks to
3
- 802.11g products just now becoming available
39WAN TechnologiesWhich network is best for
me?2G, 3G, ???
40What are the choices?
- 2G (Second Generation)
- CDMA (Code-division multiple access)
- TDMA (Time division multiple access)
- CDPD (Cellular digital packet data)
- GSM (Global system for mobile communications)
41What are the choices?
- 3G (Third Generation)
- GPRS (General packet radio service)
- CDMA 2000 1x
- WCDMA (Wideband code-division multiple access)
- CDMA 1xEV
42Network Choices
Verizon Wireless Sprint PCS
CDMA 1xRTT 56-144 Kbps
GPRS 20-40Kbps
CDPD 19.9 Kbps
CDMA 14.4 Kbps
ATT Wireless
GSM 9.6 Kbps
43Which 3G Technology is Best
443G Cost
45The Final Analysis
- 2G Networks
- The Pros
- Low cost
- Good solution for email, instant messaging,
transmitting small documents
- Available in most metropolitan areas
- The Cons
- Slow
- Technology will be obsolete in 1 2 years
46The Final Analysis
- 3G Networks
- The Pros
- Performance begins to approach low end DSL
speeds
- Once deployed will offer better stability
- The Cons
- New technology
- Expensive difficult to cost justify at current
pricing levels
47The Final AnalysisWhats Best?
48End User DevicesThe Easy Part!
- Mobility is behavior Wireless is technology
- Choose the device best suited for
- End user behavior
- The Environment
- The applications
- The infrastructure
- Hundreds of choices
- OS Pocket PC, CE, Palm, Symbian
- Types Handheld, PDA, Tablet, phone, etc.
- The Final Decision!
49Cool Wireless Devices
- Kyocera 7135 (coming soon)
- MP3 Player
- Palm OS 4.1
- GPS Locator
- Tri-mode (PCS CDMA, CDMA, Analog
- CDMA2000 1x (153kbs)
- USB / Desktop synchronization
- Voice activated dialing
50Cool Wireless Devices
- Toshiba e740 (599)
- Intel PXA250 processor 400MHz
- 3.5 TFT color reflective display (240 x 320
portrait resolution w/64K colors)
- 64MB SDRAM
- 1-SD (Secure Digital) card slot (3.3V)
- 1-Type II CF Card Slot (3.3V)
- Integrated Wi-Fi (IEEE 802.11b)
- 1-RGB (Monitor) port
51Cool Wireless Devices
- Handspring Treo 300
- CDMA2000 1x (153kbs)
- 33 MHz Dragonball Z processor
- 16 MB RAM
- Palm OS 3.5
- 12 bit color backlit display
- No memory expansion
52Cool Wireless Devices
- Intermec 6650 Pen Tablet
- Windows 98/2000 OS
- Pentium II 333 MHz
- Up to 128 MB RAM
- 800x600 Resolution
- 802.11x with PC Card
53Cool Wireless Devices
- HP 450 CBI Printer
- Bluetooth connectivity with Anycom Bluetooth
CF-2001 card
- 9 PPM Black / 8PPM Color
- 1200 x 1200 resolution
54Cool DevicesWireless Access Points (WAPs)
- Enterprise
- Cisco Aironet 350 (760 street price)
- Intermec MobileLAN 2101 (795)
- Midrange
- Agere Orinoco AP-500 (350)
- Small Office / Home Office
- Linksys WAP11 (170)
- D-Link DWL-900AP (169)
55Some Access Point Guidelines
- How many access points do I need?
- 1 access point for every 40,000 sq. ft. plus 1
- Density of APs needs to be increased if you are
working with office space that has lots of walls
or is on multiple floors
- Consider a site plan radio signals should
overlap
- Where should the access point be located?
- Unobstructed by walls, metal cabinets, or other
large objects
- Away from microwaves, Bluetooth devices and 2.4
GHz cordless phones
- It should be relatively easy to get to if a hard
reset is required
56 57WLAN Vulnerabilities
- Radio signal is easy to intercept
- Unencrypted information can be seen by virtually
anyone
- Potential for a security hole in the entire
network
- Security is difficult to configure
- Low cost products are insecure and unsafe for the
enterprise
58My WAP only broadcast to 100 meters, not to worry
NOT!!
59So who is playing it safe?War drivers know!
60Scary!
-------------------------------------------------
----------------------------------------
This is a list of all networks I have
found, this list is updates regularly
-------------------------------------------------
----------------------------------------
SSID MAC Address Channel
Network Type Vendor WEP Date
-----------------------------------------------
------------------------------------
mxinternet.net 00045AED1EB3 10
Managed Linksys Yes 05/20/02 1
linksys 0006255C4535 6
Managed unknown No 05/20/02 2
JayWest 00904B080105 6
Managed unknown No 05/20/02 3
LIFE Airspace 00022D094CDB 1
Managed Agere-Lucent Yes 05/20/02 4
linksys 00045A0E5693 6 Mana
ged Linksys No 05/20/02 5
airpseg 00409654D805 6
Managed Cisco-Aironet Yes 05/21/02 6
TJGOSSE WIRELE 32036F021402 6 Ad-h
oc unknown Yes 05/21/02 7
Inland Marine 00022D0AB361 1
Managed Agere-Lucent No 05/21/02 8
WLAN 000124F09CCD 11 Mana
ged Acer No 05/21/02 9
tsunami 00409632AB62 6
Managed Cisco-Aironet No 05/21/02 10
-----------------------------------------------
------------------------------------------
61Make it Secure!
- General Tips
- Enable WEP (Wired Equivalent Privacy)
- Data encryption for 802.11 networks
- Client to AP
- Deploy EAP (Extensible Authentication Protocol)
- User authentication for 802.11 networks
- Client to AP to RADIUS (Remote Authentication
Dial In User Service)
62Make it Secure!
- General tips (continued)
- Use a VPN (Virtual Private Network)
- Secure connections over public networks
- Outside of the office
- SSL/WTLS
- Encryption and data integrity
- End to end
63Securing the Wireless LAN
- Change the default network name ESSID
- Disable ESSID broadcast
- Enable WEP
- Change your encryption keys periodically WEP is
easily cracked
- Enable Media Access Control (MAC) filtering on
your APs
- CHANGE the APs administrative the password!!!
64Securing the Wireless LANGoing Beyond the Minimum
- Place APs in the Firewall DMZ
- Utilize VPNs in conjunction with APs
- Authenticate users
- Purchase devices that utilize dynamic WEP
- Use directional antennas (note high gain antenna
can pick up WAP signals from 3 miles away)
- Carefully select location of access points
65Conclusion
- Wireless is not synonymous with mobility
- Think beyond the device consider applications,
networks, and users first!
- Security is an issue! You are always vulnerable
- You will never have 100 wireless coverage
- Have a plan wireless will be the next
disruptive technology
66Wireless StrategiesCutting Through The Confusion
67Wireless StrategiesPresented byBob Gaby, MCP,
CPA