Who Leads in WLAN Security?
Comparative Evaluation of Vendor Offerings and Positioning
WLAN security has improved immeasurably with the adoption of IEEE 802.11i, but vendors are still faced with several security gaps. In addition, the public now demands more elaborate guest authentication, intrusion detection, site planning, and network management. Aruba Networks and Trapeze Networks are battling Cisco for market supremacy. Their products were designed from the beginning with security paramount, so they are forcing Cisco to move faster to integrate many key security functions that now are add-on products. Bluesocket, Xirrus Networks and Meru Networks provide intriguing alternatives built on quite different architectures. Nortel has a very strong WLAN security offering built in part on its own technology and in part on its partnership with Trapeze. Symbol and HP offer some innovative security technologies but both have significant security gaps yet to be filled.
This study examines the major security vulnerabilities found in today’s WLAN equipment and evaluates the vendors based on both their innovation and their implementation. One key differentiator is how effectively these companies have built strategic partnerships and integrated their partners’ products. Another area of contention is End Point security. Voice over Wi-Fi raises the stakes because vendors have been forced to provide stopgap measures to handle load balancing and roaming as well as some other areas to ensure low latency.
 What Does This Report Answer?
- What is Cisco’s greatest challenge in the WLAN market?
- In what key areas can Aruba and Trapeze most effectively compete with Cisco?
- Where are wireless LANs most vulnerable today, and what proprietary measures are vendors taking?
- What do Symbol and HP need to do to gain market share?
- On what key security features should enterprises focus when comparing the leading WLAN equipment vendors?
- What kinds of security partnerships make sense right now for WLAN equipment vendors?
- Which vendors are positioned best today because of their WLAN architecture?
- What is the biggest challenge facing Bluesocket today?
- What impact will radically new architectures such as those from Xirrus Networks and Meru Networks have on the WLAN security market?
Who Needs This Report?
- WLAN Equipment Manufacturer Product Managers and Marketing Strategists
- Financial and Investment Analysts
- Vendors Specializing in the Network Security Market
- Large Enterprise CIOs and Network Managers Evaluating WLAN Equipment
- WLAN Chip Manufacturers
- Services Companies
 
Section 1
Executive Summary
- 1.1 The Evolution of WLAN Security
- 1.2 Architectural Approaches & their Impact on Security
- 1.3 Resiliency & High Availability
- 1.4 Authentication Today: IEEE 802.1x and Beyond
- 1.5 End Point Security: The Big Picture
- 1.6 Encryption and Firewall Protection
- 1.7 Wireless Intrusion Detection & Protection
- 1.8 Wireless Security Management Today: Turning Data into Information
- 1.9 Partnerships and Certifications
- 1.10 Today’s Enterprise WLAN Security Market
Section 2.
Scope of Study
- 2.1 Sources and Methodology
Section 3.
The Evolution of WLAN Security
- 3.1 WEP Authentication
- 3.2 Wi-Fi Protected Access (WPA) Authentication
- 3.3 WEP Encryption
- 3.4 WPA Encryption
- 3.5 WPA2 or Robust Secure Network
- 3.6 The Evolution of Wireless Intrusion Detection & Protection
Section 4.
Architectural Approaches and Their Impact on Security
- 4.1 WLAN Security and an Overlay Approach
- 4.2 WLAN Security and an Integrated Approach
- 4.3 Distributed Architecture and Security
- 4.4 Centralized Architecture’s Security Advantages
- 4.5 Centralized Architecture & Scalability
- 4.6 Hybrid Architectural Approaches and WLAN Security
Section 5.
Resiliency and High Availability
- 5.1 Access Point Failure
- 5.2 Switch Failure
- 5.3 Switch Scalability.
- 5.4 Intrusion Detection System Failure
- 5.5 Load Balancing & Resiliency
- 5.6 Quality of Service & Network Resiliency
- 5.7 SpectraLink Voice Priority (SVP).
- 5.8 Wi-Fi Multimedia (WMM)
- 5.9 Upstream & Downstream QoS Support
- 5.10 Fast Roaming
- 5.11 Battery Life & Network Resiliency
Section 6.
Authentication Today: IEEE 802.1X and Beyond
- 6.1 Devices that cannot perform 802.1x Authentication
- 6.2 Guest Access
- 6.3 Captive Portal
- 6.4 Role Based Management for Guest Services
- 6.4.1 VLAN Hopping: More Marketing Hype than Security Vulnerability
Section 7.
End Point Security: The Big Picture
- 7.1 The Vision and the Reality
- 7.2 Microsoft’s Network Admission Protection (NAP)
- 7.3 Cisco’s Network Access Control (NAC)
- 7.3.1 Cisco’s NAC Appliance
- 7.4 Hewlett-P:ackard’s Identity Driven Manager
- 7.5 Bluesocket’s Endpoint Control
- 7.6 Extreme Networks’ Appliance Approach
- 7.7 Aruba & Trapeze and Endpoint Security
Section 8.
Encryption and Firewall Protection
- 8.1 Gaps in WPA2 Encryption
- 8.1.1 Devices Unable to Perform WPA2 Encryption.
- 8.1.2 The Lack of IEEE 802.11W Protection
- 8.1.3 Not all Systems Support IPSec termination
- 8.2 Firewalls & WLAN Security
- 8.2.1 The Changing Role of the Firewall
- 8.2.2 Integrated Firewalls
- 8.2.3 Is a Firewall Appliance Necessary?
Section 9.
Wireless Intrusion Detection and Protection
- 9.1 Some Dirty Little Secrets of Wireless Intrusion Detection Systems
- 9.2 Major Types of Attacks
- 9.2.1 Protecting Against Rogue Access Points
- 9.2.2 Protecting Against Man-in-the-Middle Attacks
- 9.2.3 Protecting Against Denial of Service Attacks
- 9.2.4 Management Frame & Other DoS Attacks
- 9.2.5 RF Jamming
- 9.2.6 Protecting Against Evil Twins
- 9.2.7 Protecting Against Misconfigured Access Points
- 9.2.8 Protecting Against MAC Spoofing
- 9.2.9 Protecting Against the Wireless Bridges
- 9.2.10 Protecting the Wireless & Wired Intersection
- 9.2.11 Protecting Against Honeypot Attacks
- 9.3 Integration Between WIDPS & WLAN Equipment
Section 10.
Wireless Security Management Today: Turning Data into Information
- 10.1 Enterprise-wide View
- 10.2 View of the Wired and Wireless Environment
- 10.3 Classification and Alert Notification & Prioritization
- 10.4 Policies & Rules
- 10.5 Compliance Reporting
- 10.6 Location Identification
- 10.7 Site Planning
Section 11.
Partnerships and Certifications
- 11.1 Partnerships
- 11.1.1 Endpoint control
- 11.1.2 WIDPS
- 11.1.3 Site Planning
- 11.1.4 Firewalls
- 11.1.5 Network Management
- 11.2 Certifications
Section 12.
Today’s WLAN Security Market
- 12.1 A Patchwork of Standards & Proprietary Stop-Gap Measures
- 12.2 Today’s Leaders & Challengers
- 12.3 Cisco
- 12.4 Aruba
- 12.5 Trapeze Networks
- 12.6 Hewlett Packard
- 12.7 Extreme Networks
- 12.8 Symbol Technologies
- 12.9 Nortel Networks
- 12.10 Bluesocket
- 12.11 Xirrus
- 12.12 Meru Networks
- 12.13 Alcatel
Section 13.
Company List
Section 14.
Acronyms
Sources and Methodology
Notes | |

|
Number of Pages:
| 54 |
|
|
Deliverable Formats:
|  |
|
Price:
| Login |
|
|
Release Date:
| 4Q 2006 |
|


|