Certified Wireless Network Administrator (CWNA) PW0-105 Chapter Network Security Architecture

Chapter 13 Overview Security Basics Legacy Security Robust Security Traffic Segmentation Infrastructure Security VPN Wireless Security 2 Certified Wireless Network Administrator: CWNA – PW0-105

Security Basics Data privacy AAA Segmentation Monitoring Policy 3 Certified Wireless Network Administrator: CWNA – PW0-105

Data Privacy About the protection of data and the prevention of unauthorized access to it Uses encryption –RC4 –AES Exercise Certified Wireless Network Administrator: CWNA – PW0-105

AAA Authentication –Who are you? –What are you? Authorization –What can you do? Accounting –What did you do? 5 Certified Wireless Network Administrator: CWNA – PW0-105

Segmentation LANs WANs VLANs 6 Certified Wireless Network Administrator: CWNA – PW0-105

Policy Defines how computer systems must be implemented –Specific WiFi policies must be created –Traditional wired policies are not sufficient 7 Certified Wireless Network Administrator: CWNA – PW0-105

Legacy Security Legacy authentication –Open System –Shared Key Static WEP encryption MAC filters SSID cloaking or hiding 8 Certified Wireless Network Administrator: CWNA – PW0-105

WEP Key and IV 9 Certified Wireless Network Administrator: CWNA – PW0-105

Robust Security vs. Legacy Security 10 Certified Wireless Network Administrator: CWNA – PW0-105

Robust Security Network (RSN) 11 Certified Wireless Network Administrator: CWNA – PW , originally i, define an RSN –STAs must use the 4-way handshake –STAs must use CCMP or TKIP Pre-Shared Key (PSK) Proprietary PSK –Dynamic PSK and Private PSK are examples 802.1X/EAP

802.1X Comparison 12 Certified Wireless Network Administrator: CWNA – PW0-105

WLAN Bridging and 802.1X 13 Certified Wireless Network Administrator: CWNA – PW0-105

802.1X/EAP Architecture and Process 14 Certified Wireless Network Administrator: CWNA – PW0-105

EAP Types 15 Certified Wireless Network Administrator: CWNA – PW0-105

Traffic Segmentation 16 Certified Wireless Network Administrator: CWNA – PW0-105 VLANs –Guest –Voice –Data RBAC

Wireless VLANs 17 Certified Wireless Network Administrator: CWNA – PW0-105

Infrastructure Security 18 Certified Wireless Network Administrator: CWNA – PW0-105 PhysicalInterface

VPN Wireless Security (Hotspot) 19 Certified Wireless Network Administrator: CWNA – PW0-105

VPN Wireless Security (Site-to-Site) 20 Certified Wireless Network Administrator: CWNA – PW0-105

Chapter 13 Summary Security Basics Legacy Security Robust Security Traffic Segmentation Infrastructure Security VPN Wireless Security 21 Certified Wireless Network Administrator: CWNA – PW0-105