Who Leads in WLAN Security?

Comparative Evaluation of Vendor Offerings and Positioning



WLAN security has improved immeasurably with the adoption of IEEE 802.11i, but vendors are still faced with several security gaps. In addition, the public now demands more elaborate guest authentication, intrusion detection, site planning, and network management. Aruba Networks and Trapeze Networks are battling Cisco for market supremacy. Their products were designed from the beginning with security paramount, so they are forcing Cisco to move faster to integrate many key security functions that now are add-on products. Bluesocket, Xirrus Networks and Meru Networks provide intriguing alternatives built on quite different architectures. Nortel has a very strong WLAN security offering built in part on its own technology and in part on its partnership with Trapeze. Symbol and HP offer some innovative security technologies but both have significant security gaps yet to be filled.

This study examines the major security vulnerabilities found in today’s WLAN equipment and evaluates the vendors based on both their innovation and their implementation. One key differentiator is how effectively these companies have built strategic partnerships and integrated their partners’ products. Another area of contention is End Point security. Voice over Wi-Fi raises the stakes because vendors have been forced to provide stopgap measures to handle load balancing and roaming as well as some other areas to ensure low latency.


What Does This Report Answer?
  • What is Cisco’s greatest challenge in the WLAN market?
  • In what key areas can Aruba and Trapeze most effectively compete with Cisco?
  • Where are wireless LANs most vulnerable today, and what proprietary measures are vendors taking?
  • What do Symbol and HP need to do to gain market share?
  • On what key security features should enterprises focus when comparing the leading WLAN equipment vendors?
  • What kinds of security partnerships make sense right now for WLAN equipment vendors?
  • Which vendors are positioned best today because of their WLAN architecture?
  • What is the biggest challenge facing Bluesocket today?
  • What impact will radically new architectures such as those from Xirrus Networks and Meru Networks have on the WLAN security market?
Who Needs This Report?
  • WLAN Equipment Manufacturer Product Managers and Marketing Strategists
  • Financial and Investment Analysts
  • Vendors Specializing in the Network Security Market
  • Large Enterprise CIOs and Network Managers Evaluating WLAN Equipment
  • WLAN Chip Manufacturers
  • Services Companies


Section 1
Executive Summary
1.1 The Evolution of WLAN Security
1.2 Architectural Approaches & their Impact on Security
1.3 Resiliency & High Availability
1.4 Authentication Today: IEEE 802.1x and Beyond
1.5 End Point Security: The Big Picture
1.6 Encryption and Firewall Protection
1.7 Wireless Intrusion Detection & Protection
1.8 Wireless Security Management Today: Turning Data into Information
1.9 Partnerships and Certifications
1.10 Today’s Enterprise WLAN Security Market

Section 2.
Scope of Study
2.1 Sources and Methodology

Section 3.
The Evolution of WLAN Security
3.1 WEP Authentication
3.2 Wi-Fi Protected Access (WPA) Authentication
3.3 WEP Encryption
3.4 WPA Encryption
3.5 WPA2 or Robust Secure Network
3.6 The Evolution of Wireless Intrusion Detection & Protection

Section 4.
Architectural Approaches and Their Impact on Security
4.1 WLAN Security and an Overlay Approach
4.2 WLAN Security and an Integrated Approach
4.3 Distributed Architecture and Security
4.4 Centralized Architecture’s Security Advantages
4.5 Centralized Architecture & Scalability
4.6 Hybrid Architectural Approaches and WLAN Security

Section 5.
Resiliency and High Availability
5.1 Access Point Failure
5.2 Switch Failure
5.3 Switch Scalability.
5.4 Intrusion Detection System Failure
5.5 Load Balancing & Resiliency
5.6 Quality of Service & Network Resiliency
5.7 SpectraLink Voice Priority (SVP).
5.8 Wi-Fi Multimedia (WMM)
5.9 Upstream & Downstream QoS Support
5.10 Fast Roaming
5.11 Battery Life & Network Resiliency

Section 6.
Authentication Today: IEEE 802.1X and Beyond
6.1 Devices that cannot perform 802.1x Authentication
6.2 Guest Access
6.3 Captive Portal
6.4 Role Based Management for Guest Services
6.4.1 VLAN Hopping: More Marketing Hype than Security Vulnerability

Section 7.
End Point Security: The Big Picture
7.1 The Vision and the Reality
7.2 Microsoft’s Network Admission Protection (NAP)
7.3 Cisco’s Network Access Control (NAC)
7.3.1 Cisco’s NAC Appliance
7.4 Hewlett-P:ackard’s Identity Driven Manager
7.5 Bluesocket’s Endpoint Control
7.6 Extreme Networks’ Appliance Approach
7.7 Aruba & Trapeze and Endpoint Security

Section 8.
Encryption and Firewall Protection
8.1 Gaps in WPA2 Encryption
8.1.1 Devices Unable to Perform WPA2 Encryption.
8.1.2 The Lack of IEEE 802.11W Protection
8.1.3 Not all Systems Support IPSec termination
8.2 Firewalls & WLAN Security
8.2.1 The Changing Role of the Firewall
8.2.2 Integrated Firewalls
8.2.3 Is a Firewall Appliance Necessary?

Section 9.
Wireless Intrusion Detection and Protection
9.1 Some Dirty Little Secrets of Wireless Intrusion Detection Systems
9.2 Major Types of Attacks
9.2.1 Protecting Against Rogue Access Points
9.2.2 Protecting Against Man-in-the-Middle Attacks
9.2.3 Protecting Against Denial of Service Attacks
9.2.4 Management Frame & Other DoS Attacks
9.2.5 RF Jamming
9.2.6 Protecting Against Evil Twins
9.2.7 Protecting Against Misconfigured Access Points
9.2.8 Protecting Against MAC Spoofing
9.2.9 Protecting Against the Wireless Bridges
9.2.10 Protecting the Wireless & Wired Intersection
9.2.11 Protecting Against Honeypot Attacks
9.3 Integration Between WIDPS & WLAN Equipment

Section 10.
Wireless Security Management Today: Turning Data into Information
10.1 Enterprise-wide View
10.2 View of the Wired and Wireless Environment
10.3 Classification and Alert Notification & Prioritization
10.4 Policies & Rules
10.5 Compliance Reporting
10.6 Location Identification
10.7 Site Planning

Section 11.
Partnerships and Certifications
11.1 Partnerships
11.1.1 Endpoint control
11.1.2 WIDPS
11.1.3 Site Planning
11.1.4 Firewalls
11.1.5 Network Management
11.2 Certifications

Section 12.
Today’s WLAN Security Market
12.1 A Patchwork of Standards & Proprietary Stop-Gap Measures
12.2 Today’s Leaders & Challengers
12.3 Cisco
12.4 Aruba
12.5 Trapeze Networks
12.6 Hewlett Packard
12.7 Extreme Networks
12.8 Symbol Technologies
12.9 Nortel Networks
12.10 Bluesocket
12.11 Xirrus
12.12 Meru Networks
12.13 Alcatel
Section 13.
Company List


Section 14.
Acronyms


Sources and Methodology

Notes
Report Code: RR-WLES

Purchase this product

Email this page


Number of Pages: 54
Deliverable Formats:
Price: Login
Release Date: 4Q 2006


Brochure Download
Login
Table of Contents:HTML
Related Press Releases:2006.12.04


Research Report
The Voice Over Wi-Fi Ecosystem