Security & Management for your wireless LANs. Bluesocket Wireless Gateways

Transcription

1 Security & Management for your wireless LANs Wireless Gateways

2 Achieve unparalleled wireless LAN security and manageability. With the Wireless Gateway, youcan: Establish and maintain asafe, securewirelesslan Simplifythe managementofyourwirelesslan Enable interoperability of a wide range of wireless standards "Future-Proof" your WLAN investment WG-1100 Wireless Gateway WG-2100 Wireless Gateway WG-5000 Wireless Gateway Wireless Gateways Wireless Gateways provide high-performance, reliable, policy-based WLAN security and management solutions that have been deployed by hundreds of large institutions, corporations and public access providers utilizing 's Secure Mobility TM and HighDataDensity TM technology for wireless data and voice applications. All Wireless Gateways are enterprise-class network appliances that seamlessly fit into your enterprise's existing network infrastructure. They integrate secure, interoperable and manageable, standards-based Wireless LANs into existing LAN/WAN infrastructure for private and public access, requiring no proprietary client-side software, while dramatically reducing implementation and support costs. offers a range of scalable Wireless Gateways (WGs) to support your enterprise WLAN deployments from the network edge to the core. The WG-1100 SOE (Small Office Edition) supports small offices and workgroups of 15 concurrent users; while the WG-1100 can support entire office floors of up to 100 users (at 30 Mbps encrypted/100 Mbps unencrypted); for medium to large enterprises, the WG-2100 offers hardware-based encryption acceleration, delivering encrypted-data performance up to 150 Mbps, and up to 400 Mbps for clear, unencrypted traffic. For larger enterprises requiring higher throughput and centralized WLAN management and control, the WG-5000 provides a core infrastructure platform supporting up to 1000 users with 2 Gigabit copper or fiber ports, delivering industry leading 400 Mbps performance for IPSec traffic, and 1 Gbps for clear traffic. Secure Mobility Adds New Meaning to Wireless LAN Security 's patent-pending Secure Mobility TM technology gives users of laptops, PDAs and other mobile devices wireless access to corporate networks and the Internet while moving within their campus buildings, other corporate premises and public coverage areas. Secure Mobility TM gives them the freedom to work where they choose-letting them roam seamlessly across subnets, even those using IPSec tunneling, without the need to re-authenticate. Secure Mobility TM technology is compatible with, and enhances, current and emerging WLAN security standards such as 802.1x, WPA and i. Unlike traditional firewalls and VPNs, 's approach goes beyond merely preventing intruders from breaking into your corporate network. The Wireless Gateway uses role-based access control to provide the correct level of access for every user of the wireless LAN. Access to corporate resources can be based on each user's role within the organization. Thus, an employee within the IT department may see all network assets, while a visiting guest can only connect to the Internet to check and browse the Web but will be denied access to the corporate network. This controlled access is a unique benefit of the Wireless Gateway family. The right level of access translates into the right level of security - regardless of the mobile device, security protocol or client-side security software. What's more, Wireless Gateways let mobile users connect to any wireless LAN in your organization and move freely from office to office, floor to floor and building to building-without having to re-authenticate or install mobile device client software. We call this-the Secure Mobility MatriX -an elegant, open-systems solution delivering three critical elements of an enterprise class wireless LAN: security, mobility and interoperability. >

3 Firewall Corporate Network g Access Point Switch/Hub Wireless Gateway Internet Existing LAN wiring Web b Access Point a Access Point LDAP/RADIUS NT Domain Server The Wireless Gateway acts as a firewall between the wireless LAN access points and the wired LAN, and requires no changes to existing wired LAN hardware or user client software. Additional Wireless Gateways can be connected to provide hot failover capability, as well as scalability and subnet mobility across the enterprise. A unique wireless LAN security & management approach Wireless Gateways provide a flexible approach to wireless LAN security and management, employing advanced technology and tools unmatched by other solutions: Universal WLAN Authentication The Wireless Gateway provides flexible authentication options utilizing username/password combinations or digital certificates, with the authentication database held locally or centrally in RADIUS, LDAP, NT Domain servers, or Windows Active Directories. Users can log into a Windows Domain and authenticate to the WLAN seamlessly with 's unique "Transparent Windows Domain Login." Where AP-based 802.1x (WPA) authentication is required, complements the login process transparently, allowing appropriate access for the WLAN user. Where browser-based, secure (SSL) login is required (e.g. Hot Spots, Universities, Guests/Visitors), supports a customizable HTML login page that allows end-user branding and an ability to upload 3rd party SSL certificates. Where "non-intelligent" devices need WLAN access, MAC-based authentication and role/vlan assignment is supported. Role-Based Access Control and Policy Enforcement 's unique role-based approach provides convenient management of privileges for different categories of users. Wireless Gateways match user permissions to your organizational structure. IT Administrators can define destinations (such as a finance server, router or IP address subnet), services (such as HTTP, FTP, POP3), user locations, time/date schedules, and available bandwidth to control which users have access to each resource. Multiple service and destination groups simplify policy creation and reduce the complexity and cost of administration of large-scale networks. Strong Encryption With the Wireless Gateway, you can bring the highest level of security directly to the user's mobile device. All Wireless Gateways support IPSec (Internet Protocol Security), typically used in high-end VPN and firewall products. Microsoft's native L2TP/IPSec client implementation is also supported, which allows for a single, non-proprietary access to WLAN and existing remote access VPN resources. Other options include using PPTP which is built into both Windows and Macintosh platforms. Interoperability with Mobile Devices and Multi-vendor Access Points In the rapidly growing WLAN market, newer mobile devices continue to emerge. ensures support for the growing number of heterogeneous mobile devices irrespective of the type of device and client types they support (e.g. PDAs, Scanners, Tablet PCs, VoWLAN Handsets/Devices and Integrated Laptops). Since the Wireless Gateway requires no additional or proprietary client software, it dramatically simplifies implementation and ensures interoperability. This also reduces the time and complexity associated with installing, configuring and supporting additional software on each and every mobile device and Access Point in your WLAN deployments.

4 reduces the Total Cost of Ownership (TCO) of your network. Wireless Gateway simplifies WLAN management: Easy-to-use Web interface No client software to manage Supports multiple standards Highly-scalable architecture Firewall WLAN A WLAN C Internet Network Backbone Web WLAN B WLAN D LDAP/RADIUS NT Domain Server Where multiple Wireless Gateways are deployed across multiple WLANs, provides centralized management and control through its Secure Mobility TM MatriX. These WGs communicate with each other in real time allowing seamless, secure roaming, policy enforcement and WLAN management across the enterprise. Powerful and Simple WLAN Management The Wireless Gateway has an intuitive, web-based graphical interface that lets you manage the network centrally and conveniently, facilitating rapid configuration and remote management. Administrators can review, modify and monitor all WLAN activity including which users are connected, when they connect, and how much bandwidth they are using. Logging and reporting dramatically improves the Network Administrator's view of activity that allows for historical session audit capabilities and providing reports on WLAN usage to plan for future growth. QoS and Bandwidth Management is a shared bandwidth technology, so network contention becomes an issue as the number of users and network traffic increase. overcomes this problem by allowing administrators to assign a maximum bandwidth to each role or to each individual user for incoming and outgoing traffic. For example, visitors can be assigned a 128 kbps limit while employees are assigned a 2 Mbps limit. In addition, advanced QoS functions provide administrators with complete control over prioritization of traffic as well as industry standard DiffServ marking based on role, protocol or service. Future-Proof Your Technology Investment Wireless LAN standards are evolving, which means that many of today's products may soon be outdated. The Wireless Gateway is an open system which supports multiple standards and is interoperable with wireless and wired networking infrastructure from all major vendors. takes a "total system" approach to wireless technology standards - making its products compatible with existing and future wireless LAN equipment and standards. supports: b/a/g access points from all major vendors Wide range of wireless devices (from laptops to scanners to PDAs) Support for multi-vendor wired network infrastructure: AAA servers, routers, switches Emerging standards (e.g x, WPA, i, e) This open approach allows you to manage and secure a multi-vendor wireless LAN and complete your network deployment, giving users secure access to the wireless LAN via any device, from any manufacturer, over any air interface. Enterprises can benefit by adding new wireless technologies, as they become available. Free your enterprise. Make the move to the Secure Mobility TM with MatriX >

5 Wireless Gateway Product Family Common Features: Authentication Methods: Local DB RADIUS LDAP Windows Domain Windows Active Directory Transparent Windows Login 802.1x, WPA Transparent Login Secure Tokens MAC Address Wireless Encryption: IPSec (DES, 3DES, AES) IPSec Client Support Windows XP Windows 2000 SSH Safenet PGPNet Funk AdmitOne Certicom Movian MAC OS 10.2 L2TP/IP SEC PPTP (40 & 128 bit) SSL Multiple Gateways: Hot- Failover Secure Mobility TM MatriX Policy Management: Role Location Time/Schedule VLAN (802.1q) Stateful Packet Inspection TCP/UDP Ports Protocols Destinations QoS/CoS: Bandwidth Management (incoming, outgoing) Traffic Prioritization DiffServ Marking Management: Secure Admin Web Page SNMP v2c & v3 Traps and Alerts CLI (Serial Port) Local Logging Syslog IP Address Assignment: Static IP DHCP Server/Relay NAT Ease of Use: No proprietary client software required Intuitive Web Configuration Uses existing authentication servers Simple network installation Easily expandable Public Access: RADIUS Accounting Session-Timeout Walled Garden Website Redirect AnyIP TM Support Redirect (SMTP) Remote Subnet Aggregation Documented API Compliance: FCC UL VCCI CE Power: V, 80 Watts (WG-1100) V, 200 Watts (WG-2100) V, 350 Watts (WG-5000) Environmental: 10 to 35C operating temp % Humidity (non-condensing)

6 Overcome Today s Wireless LAN Challenges Wireless local area networks are being deployed at a record pace, inspired by the need for mobile connectivity both within and outside the workplace. Wireless LANs are appearing in a wide range of locations - from corporate offices, to universities and hospitals, airports and hotels. By equipping employees with mobile devices, leading-edge enterprises remove the barriers to networking and communication, increasing productivity and competitive advantage. Even with the obvious cost savings and productivity gains, wireless LAN technology presents significant challenges for IT professionals. How do you: Support a growing number of wireless devices and competing standards Overcome bandwidth limitations Deploy network-wide Access Control mechanisms Scale the network across the Enterprise Protect the network from unauthorized users Ensure data and user privacy: From the Edge to the Core Integrate your WLAN into an existing wired infrastructure Do you want to benefit from wireless networking with a secure, managed solution that provides seamless integration with your existing wired network? For more information, visit our website at Or call: United States (toll free) Europe +44 (0) (UK) Asia (Aus/NZ) The logo, Secure Mobility and Wireless Gateway are trademarks of, Inc. 2003, Inc. All rights reserved. All other trademarks, trade names, and companies referenced herein are used for identification only, and are the property of their respective companies.