<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: wireless]]></title>
    <link>http://securityratty.com/tag/wireless</link>
    <description></description>
    <pubDate>Fri, 27 Jun 2008 15:54:02 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Troubleshooting 802.1x port-based authentication systems]]></title>
      <link>http://securityratty.com/article/07043ef54a0f449c612a1a325bc4a054</link>
      <guid>http://securityratty.com/article/07043ef54a0f449c612a1a325bc4a054</guid>
      <description><![CDATA[Learn how to most effectively troubleshoot 802.1x problems that may arise on your client's wireless...]]></description>
      <content:encoded><![CDATA[Learn how to most effectively troubleshoot 802.1x problems that may arise on your client's wireless network.<img src="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~4/328963786" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 07 Jul 2008 07:19:28 +0000</pubDate>
      <category domain="http://securityratty.com/tag/effectively troubleshoot">effectively troubleshoot</category>
      <category domain="http://securityratty.com/tag/wireless network">wireless network</category>
      <category domain="http://securityratty.com/tag/client">client</category>
      <category domain="http://securityratty.com/tag/arise">arise</category>
      <source url="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~3/328963786/0,289483,sid100_gci1318570,00.html">Troubleshooting 802.1x port-based authentication systems</source>
    </item>
    <item>
      <title><![CDATA[Seven Steps to Secure and Seamless Field Mobility]]></title>
      <link>http://securityratty.com/article/9e3de185ceb44138cb5f628cbb8299ef</link>
      <guid>http://securityratty.com/article/9e3de185ceb44138cb5f628cbb8299ef</guid>
      <description><![CDATA[Source: Columbitech) This white paper examines the unique challenges of the wireless world and what an IT department should consider when evaluating a security solution for its mobile workforce....]]></description>
      <content:encoded><![CDATA[<b>(Source:  Columbitech)</b>  This white paper examines the unique challenges of the wireless world and what an IT department should consider when evaluating a security solution for its mobile workforce. Additionally, it compares the third-generation mobile VPN with older VPN technologies, and their ability to handle these challenges.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=W98bN7"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=W98bN7" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/324946907" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 02 Jul 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/challenges">challenges</category>
      <category domain="http://securityratty.com/tag/white paper examines">white paper examines</category>
      <category domain="http://securityratty.com/tag/unique challenges">unique challenges</category>
      <category domain="http://securityratty.com/tag/mobile vpn">mobile vpn</category>
      <category domain="http://securityratty.com/tag/wireless world">wireless world</category>
      <category domain="http://securityratty.com/tag/vpn technologies">vpn technologies</category>
      <category domain="http://securityratty.com/tag/mobile workforce">mobile workforce</category>
      <category domain="http://securityratty.com/tag/security solution">security solution</category>
      <category domain="http://securityratty.com/tag/source">source</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/324946907/whitepapers.do">Seven Steps to Secure and Seamless Field Mobility</source>
    </item>
    <item>
      <title><![CDATA[Kill Switches and Remote Control]]></title>
      <link>http://securityratty.com/article/6faff6d8aced2811984a7463136f6b3a</link>
      <guid>http://securityratty.com/article/6faff6d8aced2811984a7463136f6b3a</guid>
      <description><![CDATA[It used to be that just the entertainment industries wanted to control your computers -- and televisions and iPods and everything else -- to ensure that you didn't violate any copyright rules. But now...]]></description>
      <content:encoded><![CDATA[It used to be that just the entertainment industries wanted to control your computers -- and televisions and iPods and everything else -- to ensure that you didn't violate any copyright rules. But now everyone else wants to get their hooks into your gear.

OnStar will soon include the <a href="http://www.informationweek.com/news/mobility/showArticle.jhtml?articleID=202400922">ability</a> for the police to shut off your engine remotely. Buses are getting the <a href="http://www.nypost.com/seven/06082008/news/regionalnews/busting_terror_114567.htm">same capability</a>, in case terrorists want to re-enact the movie <cite>Speed</cite>. The Pentagon wants a kill switch <a href="http://blog.wired.com/defense/2008/06/the-pentagons-n.html">installed</a> on airplanes, and is worried about potential enemies <a href="http://spectrum.ieee.org/may08/6171">installing</a> kill switches on their own equipment. 

Microsoft is doing some of the most creative thinking along these lines, with something it's calling "<a href="http://arstechnica.com/news.ars/post/20080611-microsoft-patent-brings-miss-manners-into-the-digital-age.html">Digital Manners Policies</a>." According to its <a href="http://appft1.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=HITOFF&d=PG01&p=1&u=%2Fnetahtml%2FPTO%2Fsrchnum.html&r=1&f=G&l=50&s1=%2220080125102%22.PGNR.&OS=DN/20080125102&RS=DN/20080125102">patent application</a>, DMP-enabled devices would accept broadcast "orders" limiting capabilities. Cellphones could be remotely set to vibrate mode in restaurants and concert halls, and be turned off on airplanes and in hospitals. Cameras could be prohibited from taking pictures in locker rooms and museums, and recording equipment could be disabled in theaters. Professors finally could prevent students from texting one another during class. 

The possibilities are endless, and very dangerous. Making this work involves building a nearly flawless hierarchical system of authority. That's a difficult security problem even in its simplest form. Distributing that system among a variety of different devices -- computers, phones, PDAs, cameras, recorders -- with different firmware and manufacturers, is even more difficult. Not to mention delegating different levels of authority to various agencies, enterprises, industries and individuals, and then enforcing the necessary safeguards.

Once we go down this path -- giving one device authority over other devices -- the security problems start piling up. Who has the authority to limit functionality of my devices, and how do they get that authority? What prevents them from abusing that power? Do I get the ability to override their limitations? In what circumstances, and how? Can they override my override?

How do we prevent this from being abused? Can a burglar, for example, enforce a "no photography" rule and prevent security cameras from working? Can the police enforce the same rule to avoid another Rodney King incident? Do the police get "superuser" devices that cannot be limited, and do they get "supercontroller" devices that can limit anything? How do we ensure that only they get them, and what do we do when the devices inevitably fall into the wrong hands?

It's comparatively easy to make this work in closed specialized systems -- OnStar, airplane avionics, military hardware -- but much more difficult in open-ended systems. If you think Microsoft's vision could possibly be securely designed, all you have to do is look at the dismal effectiveness of the various copy-protection and digital-rights-management systems we've seen over the years. That's a similar capabilities-enforcement mechanism, albeit simpler than these more general systems.

And that's the key to understanding this system. Don't be fooled by the scare stories of wireless devices on airplanes and in hospitals, or visions of a world where no one is yammering loudly on their cellphones in posh restaurants. This is really about media companies wanting to exert their control further over your electronics. They not only want to prevent you from surreptitiously recording movies and concerts, they want your new television to enforce good "manners" on your computer, and not allow it to record any programs. They want your iPod to politely refuse to copy music to a computer other than your own. They want to enforce <em>their</em> legislated definition of manners: to control what you do and when you do it, and to charge you repeatedly for the privilege whenever possible. 

"Digital Manners Policies" is a marketing term. Let's call this what it really is: Selective Device Jamming. It's not polite, it's dangerous. It won't make anyone more secure -- or more polite.

This essay <a href="http://www.wired.com/politics/security/commentary/securitymatters/2008/06/securitymatters_0626">originally appeared</a> in Wired.com.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=JiKwGJ"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=JiKwGJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=aXm5MJ"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=aXm5MJ" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 01 Jul 2008 02:48:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wireless devices">wireless devices</category>
      <category domain="http://securityratty.com/tag/devices">devices</category>
      <category domain="http://securityratty.com/tag/devices inevitably">devices inevitably</category>
      <category domain="http://securityratty.com/tag/digital manners policies">digital manners policies</category>
      <category domain="http://securityratty.com/tag/prevent">prevent</category>
      <category domain="http://securityratty.com/tag/prevent security cameras">prevent security cameras</category>
      <category domain="http://securityratty.com/tag/difficult security">difficult security</category>
      <category domain="http://securityratty.com/tag/cameras">cameras</category>
      <category domain="http://securityratty.com/tag/prevent students">prevent students</category>
      <source url="http://www.schneier.com/blog/archives/2008/07/kill_switches_a.html">Kill Switches and Remote Control</source>
    </item>
    <item>
      <title><![CDATA[How to configure wireless access points]]></title>
      <link>http://securityratty.com/article/13dbff77a1434d47b45dac995fa38195</link>
      <guid>http://securityratty.com/article/13dbff77a1434d47b45dac995fa38195</guid>
      <description><![CDATA[A crucial part of any WLAN installation is configuring wireless access points. Learn which configuration options -- such as IP address, transmit power and beacon interval -- are best for your...]]></description>
      <content:encoded><![CDATA[A crucial part of any WLAN installation is configuring wireless access points. Learn which configuration options -- such as IP address, transmit power and beacon interval -- are best for your customers.<img src="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~4/323408639" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 30 Jun 2008 09:31:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wireless access">wireless access</category>
      <category domain="http://securityratty.com/tag/configuration options">configuration options</category>
      <category domain="http://securityratty.com/tag/beacon interval">beacon interval</category>
      <category domain="http://securityratty.com/tag/wlan installation">wlan installation</category>
      <category domain="http://securityratty.com/tag/transmit power">transmit power</category>
      <category domain="http://securityratty.com/tag/crucial">crucial</category>
      <category domain="http://securityratty.com/tag/address">address</category>
      <category domain="http://securityratty.com/tag/customers">customers</category>
      <source url="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~3/323408639/0,289483,sid100_gci1307438,00.html">How to configure wireless access points</source>
    </item>
    <item>
      <title><![CDATA[How to configure wireless access points]]></title>
      <link>http://securityratty.com/article/2a66720e71f0617f7886c3e836e372b4</link>
      <guid>http://securityratty.com/article/2a66720e71f0617f7886c3e836e372b4</guid>
      <description><![CDATA[A crucial part of any WLAN installation is configuring wireless access points. Learn which configuration options -- such as IP address, transmit power and beacon interval -- are best for your...]]></description>
      <content:encoded><![CDATA[A crucial part of any WLAN installation is configuring wireless access points. Learn which configuration options -- such as IP address, transmit power and beacon interval -- are best for your customers.<img src="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~4/323988893" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 30 Jun 2008 09:31:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wireless access">wireless access</category>
      <category domain="http://securityratty.com/tag/configuration options">configuration options</category>
      <category domain="http://securityratty.com/tag/beacon interval">beacon interval</category>
      <category domain="http://securityratty.com/tag/wlan installation">wlan installation</category>
      <category domain="http://securityratty.com/tag/transmit power">transmit power</category>
      <category domain="http://securityratty.com/tag/crucial">crucial</category>
      <category domain="http://securityratty.com/tag/address">address</category>
      <category domain="http://securityratty.com/tag/customers">customers</category>
      <source url="http://feeds.feedburner.com/~r/WhatisEnterpriseItTipsAndExpertAdvice/~3/323988893/0,289483,sid100_gci1307438,00.html">How to configure wireless access points</source>
    </item>
    <item>
      <title><![CDATA[Skyhook Expands Wi-Fi Positioning to Cell, GPS]]></title>
      <link>http://securityratty.com/article/828076f3d31c309f8a15ddea305e261f</link>
      <guid>http://securityratty.com/article/828076f3d31c309f8a15ddea305e261f</guid>
      <description><![CDATA[Skyhook Wireless will combine information from Wi-Fi wardriving, GPS radios, and cell tower signals for better location: The pitch at Skyhook Wireless is that despite its accuracy, satellite-based GPS...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.skyhookwireless.com/press/skyhookxps.php"><strong>Skyhook Wireless will combine information from Wi-Fi wardriving, GPS radios, and cell tower signals for better location:</strong></a> The pitch at Skyhook Wireless is that despite its accuracy, satellite-based GPS remains relatively expensive, that it's slow to get a fix when it powers up, and that it's not accurate enough in the middle of cities. Their XPS 2.0 system leverages GPS with the advantages of Skyhook's Wi-Fi signal database and algorithms along with cell-tower triangulation.</p>

<p>Ted Morgan, the head of Skyhook, explained in an interview that while GPS is certainly the gold standard, and while it works well in stand-alone devices designed for continuous use and navigation, it's not the right choice by itself for mobile devices. It can take 5 or 10 minutes for a GPS-only device to get an accurate fix on the satellites it needs to give you accurate information. (Various shortcuts can provide less accurate information more quickly.)</p>

<p>"This notion of 'tell a user or consumer to stand outside for 30 seconds before they can search for the nearest pharmacy' is pretty silly," Morgan said. He noted that with all the radios now found in newer mobile devices, using several of them produces a fast and much more accurate result. The iPhone 3G, for instance, sports quad-band 2G, tri-band 3G, Bluetooth, Wi-Fi, and GPS chips.</p>

<p>Morgan said that A-GPS (assisted GPS) already combines cell tower information with GPS. A cell phone can be told approximately where it is, and thus instead of cycling through 24 satellites, start with the two that are most directly overhead. This can reduce the time to gain a location to as little as 20 seconds, Morgan said, although any kind of movement usually lengthens the time to 30 to 60 seconds.</p>

<p>Skyhook's system takes advantage of this aspect of A-GPS. They let a GPS system grab onto two satellites quickly to correct data from their Wi-Fi Position System (WPS). Morgan said that this reduces the WPS error by 35 to 40 percent through "weak fixes."</p>

<p>Within cities' concrete canyons, "you can only get a true GPS fix about 70 percent of the time outdoor, but you get two satellites all the time," Morgan said. "In the entire footprint, we're able to use this hybrid technology, even though GPS is only available 70 percent of the time." Outside of metro areas, cell towers can still be used to improve GPS startup times.</p>

<p>Skyhook has continued to expand its European coverage for WPS; they cover about 8,000 cities in the US and Canada, which is roughly 70 percent of the population; "it looks exactly like a cellular coverage map," Morgan said, and includes "any town with five streets in it."</p>

<p>In Europe, their current big push, partly because of their inclusion in the iPhone, they cover 70 percent of population in the current countries--the UK, France, and Germany--but they're now at 50 percent of the population of the rest of Western Europe. They're working assiduously in Japan, Korea, Hong Kong, and Australia as well, and looking into China and India. India has very little Wi-Fi, so they may rely more on cell towers there.</p>

<p>The company also announced a <a href="http://www.skyhookwireless.com/press/skyhookcsr.php"><strong>partnership with wireless chip maker CSR today</strong></a>, which is a major providers of Wi-Fi and Bluetooth chips to computer and handset makers. Nearly a year and a half ago, Skyhook <a href="http://www.skyhookwireless.com/press/skyhooksirf.php"><strong>partnered with SiRF</strong></a>, the dominant worldwide chip supplier for stand-alone GPS gear, that's also making a push into mobile devices. Skyhook obviously needs a win with a cell chip maker, like Infineon, Broadcom, or Qualcomm, given the XPS technology, to score a place in tens of millions of cell phones beyond the iPhone.</p>

<p>Skyhook's technology most recently appeared in a soon-to-ship model of the Eye-Fi--the <a href="http://www.eye.fi/products/explore/"><strong>Explore</strong></a>. The $130 Secure Digital card with Wi-Fi built in allows you to take pictures with any camera, and have the Wi-Fi signal space recorded for later lookup when you upload photos. The pictures are geotagged with that information. The card can optionally be used with Wayport's 10,000 strong Wi-Fi network in the U.S for $15 extra per month. David Pogue of The New York Times <strong><a href="http://www.nytimes.com/2008/06/26/technology/personaltech/26pogue.html?_r=1&amp;oref=slogin">recently wrote up</a></strong> the Eye-Fi Explore.</p>]]></content:encoded>
      <pubDate>Mon, 30 Jun 2008 06:25:33 +0000</pubDate>
      <category domain="http://securityratty.com/tag/gps">gps</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/a-gps">a-gps</category>
      <category domain="http://securityratty.com/tag/stand-alone gps gear">stand-alone gps gear</category>
      <category domain="http://securityratty.com/tag/gps system grab">gps system grab</category>
      <category domain="http://securityratty.com/tag/skyhook">skyhook</category>
      <category domain="http://securityratty.com/tag/gps-only device">gps-only device</category>
      <category domain="http://securityratty.com/tag/gps chips">gps chips</category>
      <category domain="http://securityratty.com/tag/gps radios">gps radios</category>
      <source url="http://wifinetnews.com/archives/008384.html">Skyhook Expands Wi-Fi Positioning to Cell, GPS</source>
    </item>
    <item>
      <title><![CDATA[The 802.1X Hat-Trick]]></title>
      <link>http://securityratty.com/article/09d9695144200f268c18e0c036eec36b</link>
      <guid>http://securityratty.com/article/09d9695144200f268c18e0c036eec36b</guid>
      <description><![CDATA[Well my recent blogging , or lack there of, may have clued you in on my recent hectic travel schedule. Its June, and that means the end of governments fiscal year, so weve been busy little bees at the...]]></description>
      <content:encoded><![CDATA[<p>Well my recent <a href="http://security.squarespace.com/" target="_blank">blogging</a>, or lack there of, may have clued you in on my recent hectic travel schedule. It&#8217;s June, and that means the end of government&#8217;s fiscal year, so we&#8217;ve been busy little bees at the office. (Read my <a href="http://www.securityuncorked.com/security-uncorked/2008/4/2/what-is-8021x-heres-a-technology-primer-for-you.html" target="_blank">primer on 802.1X</a>&nbsp;here.)</p><p><strong>For June, we have an 802.1X <a class="offsite-link-inline" href="http://en.wikipedia.org/wiki/Hat_trick" target="_blank">hat-trick</a>&nbsp;to blame</strong> for my slack blogging habits. Over the past few weeks, I&#8217;ve had back-to-back 802.1X implementations, one wired, one wireless and one with both. Two government customers and one commercial, not in that order. And&nbsp;I&nbsp;even did one semi-training-slash-semi-implementation-quick-start&nbsp;for another&nbsp;customer. </p><p><strong>It&#8217;s been fun, but 1X is always challenging.</strong> The variety of components, the nature of the interactions and the &#8216;newness&#8217; of actual implementations make it difficult to work from any type of cookbook or implementation guide. There are just too many variables. </p><p><strong>When will it be easier?</strong> I think as 1X is more widely implemented in the real world, customers will become more familiar with the concepts and integrators will have more experience to make it go smoothly. For now, everyone has to just take it one step at a time and address issues as they arise. And, for now, I&#8217;ll enjoy the&nbsp;job security that 1X offers ;)</p><p>Luckily, I&#8217;ve&nbsp;had the opportunity to work with a variety of customers and a variety of environments and equipment while hammering out 802.1X. The experience and exposure has certainly given me a unique insight into the issues, complications and solutions that come along with a 1X project. </p><p>At present, I think&nbsp;we&#8217;ve successfully configured 1X on about a dozen different types of equipment, both switches and wireless APs and controllers, from a variety of vendors. It may not sound like much, but in the world of 1X, that&#8217;s quite a variety when you consider each manufacturer has their own &#8216;system&#8217; for configuring 1X and the commands and procedures can vary greatly even from product-to-product from the same vendor. </p><p><strong>Is the 1X streak over?</strong>&nbsp;Not at all. We have several customers with NAC and 802.1X projects that we had to queue up for after June 30. I&#8217;ll keep you posted!</p><p># # #</p><p>&nbsp;</p>
]]></content:encoded>
      <pubDate>Sun, 29 Jun 2008 22:39:27 +0000</pubDate>
      <category domain="http://securityratty.com/tag/customers">customers</category>
      <category domain="http://securityratty.com/tag/government customers">government customers</category>
      <category domain="http://securityratty.com/tag/variety">variety</category>
      <category domain="http://securityratty.com/tag/real world">real world</category>
      <category domain="http://securityratty.com/tag/implementations">implementations</category>
      <category domain="http://securityratty.com/tag/wireless aps">wireless aps</category>
      <category domain="http://securityratty.com/tag/actual implementations">actual implementations</category>
      <category domain="http://securityratty.com/tag/wireless">wireless</category>
      <category domain="http://securityratty.com/tag/address issues">address issues</category>
      <source url="http://www.securityuncorked.com/security-uncorked/2008/6/30/the-8021x-hat-trick.html">The 802.1X Hat-Trick</source>
    </item>
    <item>
      <title><![CDATA[Microsoft repairs PCs crippled by XP SP3 update]]></title>
      <link>http://securityratty.com/article/d4a1ff3d8e60df77c1731595414ffe34</link>
      <guid>http://securityratty.com/article/d4a1ff3d8e60df77c1731595414ffe34</guid>
      <description><![CDATA[Nearly three weeks after security vendor Symantec released a free tool to clean up PCs crippled by the Windows XP Service Pack 3 (SP3) update, Microsoft issued a fix that should reestablish lost...]]></description>
      <content:encoded><![CDATA[Nearly three weeks after security vendor Symantec released a free tool to clean up PCs crippled by the Windows XP Service Pack 3 (SP3) update, Microsoft issued a fix that should reestablish lost Internet and wireless connections.]]></content:encoded>
      <pubDate>Sat, 28 Jun 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/reestablish lost internet">reestablish lost internet</category>
      <category domain="http://securityratty.com/tag/security vendor symantec">security vendor symantec</category>
      <category domain="http://securityratty.com/tag/free tool">free tool</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/sp3">sp3</category>
      <category domain="http://securityratty.com/tag/wireless connections">wireless connections</category>
      <category domain="http://securityratty.com/tag/pcs">pcs</category>
      <category domain="http://securityratty.com/tag/service pack">service pack</category>
      <category domain="http://securityratty.com/tag/fix">fix</category>
      <source url="http://www.networkworld.com/news/2008/062708-microsoft-repairs-pcs-crippled-by.html?fsrc=rss-security">Microsoft repairs PCs crippled by XP SP3 update</source>
    </item>
    <item>
      <title><![CDATA[Maybe the NAC used car salesman can claim them as a customer too? In NAC quality counts!]]></title>
      <link>http://securityratty.com/article/d80f68ce6e6808f9d06f6e7946e4e4a0</link>
      <guid>http://securityratty.com/article/d80f68ce6e6808f9d06f6e7946e4e4a0</guid>
      <description><![CDATA[Dark Reading had a good article today talking about GuideWorks , the TV Guide/Comcast joint venture's 2 year odyssey with NAC, which finds them finally starting to see some good results. I immediately...]]></description>
      <content:encoded><![CDATA[<p>Dark Reading had a <a href="http://www.darkreading.com/document.asp?doc_id=157719&amp;f_src=darkreading_section_296">good article today</a> talking about <a class="zem_slink" title="GuideWorks" href="http://en.wikipedia.org/wiki/GuideWorks" rel="wikipedia">GuideWorks</a>, the TV Guide/Comcast joint venture's 2 year odyssey with NAC, which finds them finally starting to see some good results. I immediately went to the website of the <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/the-used-car-sa.html">NAC used car salesman</a> to see if they claimed them as a NAC customer too, but didn't see anything yet. But with those guys you never know. <br><br>Seriously though folks, this story is a classic NAC story. GuideWorks had guests and unmanaged users visiting their offices all the time. When they would ask to plug in they were told sorry, wait till you get back to your hotel. Over time this answer became unacceptable and they realized they needed a way to give these people a way to get on the net and get their email while keeping their network secure. This very same need drives many initial NAC deployments.<br><br>Like many other NAC customers they wanted something easy, not add major overhead or network changes and easy to administer. Again straight out of the NAC playbook. In the Summer of '06 they began a pilot of the Tipping Point NAC product which is based on the old Roving Planet technology. Now Roving Planet was more of a wireless security company, but near the end they rebranded themselves as NAC and Tipping Point uses that with their IPS devices to enforce. Best of all for GuideWorks the price was sub 10k. <br><br>Here is where the other side of NAC comes in. This is what the article says:</p><blockquote><p><em><p>While NAC tools are often advertised as plug-and-play, GuideWorks found that the NAC setup required a high level of networking expertise. Fortunately, the Inglewood site had plenty of technical expertise because that’s where many of the company’s developers are stationed. In addition, GuideWorks put one of its front-desk employees in charge of setting up new accounts. But because her technical background was limited, the company had to walk her through a learning curve. </p>

<p>Now the company is planning to deploy the system at its Radnor office, which will be a bit more challenging since there’s less technical expertise there, and that office gets a greater number of visitors. So GuideWorks has been on the search for employees to support the NAC system there. The company expects to have NAC up and running there by the end of the summer. </p></em></p>

</blockquote><p>So 2 years after trial they are rolled out in one office and have to hire employees to support the NAC system at the next office. This was a problem with many of the failed NAC companies over the last few years and I think the problem with this Tipping Point solution. Just providing guest access should not be that hard! Yes the StillSecure Safe Access solution would have been much easier and faster to implement, but to be fair, any of the leading NAC solutions would have been up and running easier as well. </p>

<p>While this article was supposed to serve as reference and case study for the Tipping Point NAC solution, it is far from inspiring. If I were a customer looking into NAC, I don't think this would make run out and look at the Tipping Point solution. Moral of the story is, just because you made a good IPS doesn't mean you have a very good NAC product. When it comes to something like NAC, quality counts and buying a 2nd tier solution can cost you in time to implementation and total cost of ownership.</p>

<div class="zemanta-pixie" style="MARGIN-TOP: 10px; HEIGHT: 15px"><a class="zemanta-pixie-a" title="Zemified by Zemanta" href="http://reblog.zemanta.com/zemified/2c864e8d-b43a-4e14-9fdc-9ac4835bc27b/"><img class="zemanta-pixie-img" alt="Zemanta Pixie" src="http://img.zemanta.com/reblog_a.png?x-id=2c864e8d-b43a-4e14-9fdc-9ac4835bc27b" style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; FLOAT: right; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none"></img></a></div>
<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=ia7VDL"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=ia7VDL" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=bjKsGI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=bjKsGI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=DxCrYI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=DxCrYI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=YQ1SAI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=YQ1SAI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=wD2I6I"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=wD2I6I" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=FSLeNi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=FSLeNi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=2QntYi"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=2QntYi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/321785853" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 27 Jun 2008 19:36:27 +0000</pubDate>
      <category domain="http://securityratty.com/tag/nac">nac</category>
      <category domain="http://securityratty.com/tag/customer">customer</category>
      <category domain="http://securityratty.com/tag/nac solution">nac solution</category>
      <category domain="http://securityratty.com/tag/nac solutions">nac solutions</category>
      <category domain="http://securityratty.com/tag/nac tools">nac tools</category>
      <category domain="http://securityratty.com/tag/nac setup">nac setup</category>
      <category domain="http://securityratty.com/tag/initial nac deployments">initial nac deployments</category>
      <category domain="http://securityratty.com/tag/nac playbook">nac playbook</category>
      <category domain="http://securityratty.com/tag/nac companies">nac companies</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/321785853/maybe-the-nac-u.html">Maybe the NAC used car salesman can claim them as a customer too? In NAC quality counts!</source>
    </item>
    <item>
      <title><![CDATA[Dead Possum Patrol Aided by NYC Wireless Network]]></title>
      <link>http://securityratty.com/article/5a95b3f7c00f05c86aaf0e2ae4310dbd</link>
      <guid>http://securityratty.com/article/5a95b3f7c00f05c86aaf0e2ae4310dbd</guid>
      <description><![CDATA[I'm going for the sensational in the headline, but it's part of the story's intro, too: The New York Times reports on some early uses of the city's $500m wireless network designed for non-public uses....]]></description>
      <content:encoded><![CDATA[<p><strong><a href="http://www.nytimes.com/2008/06/28/nyregion/28network.html?partner=rssuserland&emc=rss">I'm going for the sensational in the headline, but it's part of the story's intro, too:</a></strong> The New York Times reports on some early uses of the city's $500m wireless network designed for non-public uses. The network uses UMTS over licensed spectrum specifically devoted the city's municipal and public safety purposes. </p>

<p>One of the projects leaders uses terms that should warm every New Yorker's heart, if he or she knew what they meant. IT head Paul Cosgrave says the system will overcome silos, an often disparaging term for the separation of resources across groups that can only expensively be overcome. It's the government and business equivalent of the academic problem of a lack of cross-discipline focus.</p>

<p>One of the first applications allows sanitation workforce managers a frighteningly precise amount of knowledge about routes, activities, and behavior of trucks in their territory. Let's hope that's not misused! Efficiency is one thing; micro-management is another.</p>

<p>Another project is testing wireless water-meter reading. The city hopes to spend $90 per meter for the upgrade and shed part of a $12.2m contract with Con Edison that covers 850,000 units. What should be useful about this is that problems can be detected by monitoring waterflow patterns, which in turn allows the often huge problems that take months to notice (occurring underground or in basements where rivers formerly flowed) to be stopped before they turn into multi-million-dollar problems for property owners or the city. Anytime anything happens in Manhattan, it's a multi-million dollar problem.<br />
</p>]]></content:encoded>
      <pubDate>Fri, 27 Jun 2008 15:54:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/city hopes">city hopes</category>
      <category domain="http://securityratty.com/tag/500m wireless network">500m wireless network</category>
      <category domain="http://securityratty.com/tag/frighteningly precise amount">frighteningly precise amount</category>
      <category domain="http://securityratty.com/tag/head paul cosgrave">head paul cosgrave</category>
      <category domain="http://securityratty.com/tag/sanitation workforce managers">sanitation workforce managers</category>
      <category domain="http://securityratty.com/tag/overcome">overcome</category>
      <category domain="http://securityratty.com/tag/public safety purposes">public safety purposes</category>
      <source url="http://wifinetnews.com/archives/008383.html">Dead Possum Patrol Aided by NYC Wireless Network</source>
    </item>
  </channel>
</rss>
