1. Introduction

Wireless security is something that most everyone wants, but which few actually use. Barriers to use include throughput loss in older 802.11b products, WEP's ability to be cracked, and difficulty in getting the darned thing working!

Wireless Security Corporation (WSC) can't do much about the first problem, but its WSC Guard service is aimed squarely at conquering the other two. I took a quick look at the product and found that it pretty much lives up to its claims...

What it is

WSC's marketing message is pitched to small to medium businesses that want to take advantage of the flexibility of wireless networks, but don't want to sacrifice security in taking the plunge. Prospective customers typically have no IT staff, or staff whose expertise doesn't include setup and ongoing managment of authentication services. It might also include businesses that are perfectly capable of running their own authentication services, but would rather outsource that function, freeing staff to work on other things.

WSC Guard basically provides 802.1x-based authentication using WSC's servers that are accessed via the Internet using an encrypted connection. There are no limitations as to the number AP's, members, or guests that can be handled, but the WLAN to be protected should be made up of products that are on WSC's list of supported products. This list bears a little explanation.

WSC says that WSC Guard should work with "most" clients is that support 802.1x / WEP and preferably WPA. But due to the interoperability issues that still continue to appear, they decided to list specific combinations of NIC's and AP's that have been tested and certified to work with WSC Guard.

Access Point / wireless router requirements also include support for 802.1x / WEP and/or WPA. But because WSC's application has to automatically configure security settings on each AP, it needs to know something about the AP's interface. So if the AP you want to use isn't on WSC's list, you'll either need to contact WSC to see if they can / will support the product you want to use, or go shopping for one of the certified products on the list.

WPA-enabled WLAN equipment should be used for the most robust security, since WPA uses stronger encryption and improved dynamic key generation and management. But WSC Guard's 802.1x-based authentication also enhances the security of WEP-based WLANs by its use of encrypted WEP keys and periodic rekeying and/or re-authentication.

Tip: Mixed WEP / WPA WLANs can be handled by WSC Guard, but you'll need to create separate networks with no roaming allowed between them. This isn't a WSC limitation, but a limitation of the APs themselves, which usually don't simultaneously support both WEP and WPA clients.