Network Design

1
Network Design

• Whats Out There and What Do You Need?

2
Design Factors

• How many users?
• How close together are they? (user density)
• How far apart are they? (cell width)
• How much bandwidth are they expecting to use?
• Whats it going to be used for?
• Voice / video / email / surfing / other
• Do you have appropriate policies in place?
• Encryption?
• Do you know the capabilities, limits,
  shortcomings and risk?
• Does management?

3
Whats needed?

• Access Points (or Bridges)
• Antennas
• Access Control
• Floor plans (surveys!!)
• Hand Scanners (surveys!!)
• Intrusion Detection/Prevention
• Cool stuff? (Underlying reason?)

4
Antennas

• Omni
• Uni-directional
• Arrays
• Weird (Tunable direction - Fidelity CommTech)
• Note you get what you pay for!
• Note dont pay for what you dont need!

5
Access Points

• Consumer (Low) Grade
• Linksys, DLink, NetGear
• SOHO (indoor) Commercial Grade
• Linksys, Meru, Cisco, Aruba
• Outdoor Commercial Grade
• Cisco, Aruba, AirFortress

6
Clients (cards s/w)

• 3eTi
• Funk
• Intel Centrino (built-in)
• Cisco
• Linksys
• DLink
• NetGear
• etc.
• etc.

7
Encryption

• WEP
• WPA
• WPATKIP
• WPA2 (802.11i)
• Cranite
• AirFortress
• Other?

8
Access Control

• PKI (User? Equipment?)
• Active Directory
• RADIUS
• Proprietary

9
Intrusion Detection/Prevention

• Active v. Passive
• Built-in/stand-alone
• Pick a religion, any religion!
• Wired
• Affected by encryption
• Aruba, ISS, Snort
• Wireless
• Not affected by encryption
• Aruba, Air Defense, AirMagnet

10
Hand Scanners

• Bumblebee (BV Systems)
• AirMagnet Handheld (AirMagnet)
• eEye Wireless Scanner (Free!)
• AiroPeek NX (Wild Packets)(laptop)
• Kismet (laptop and PDA)

11
Other

• Laptop file system encryption (PointSec, Mobile
  Armor)
• Personal firewalls (pick one)
• Personal IDS sensors (AirDefense Personal)
• Remote access (iPass)

12
Policy and Procedures

• Get it in writing!
• Get managements visible support!
• Allowed who, what, where, when, how, and why?
• Not allowed why not?
• Whos responsible for what?
• Whore you gonna call?
• Put it in writing!

13
Cool (or not) stuff

• Mac Book Pros
• Spectrum Analyzers (Wi-Spy thru Cognio)
• Wi-Fi
• Bluetooth
• Other sources in same band(s)
• Toys (Vocera, Zipits, Nokia 770/800s)

14
Did I miss anything?(Hint Yes!)

15
People!

• Training (All of your personnel!)
• Operations (maintenance operation)
• Procedure authors
• Information Assurance (spot checks)
• Certification and Accreditation
• Policy authors
• Incident Response (monitoring)
• Policy Procedure authors
• Lessons Learned authors

16
Questions?