You could always put your AP's on a separate VLAN. Utilizing a firewall block off the "Wireless" VLAN and write firewall rules to only allow those ports for SIP. If you have very sensitive data you could always put an IDS sensor on this VLAN.
This would limit many risks and keep the casual war driver from easily cracking a WEP key and having full access to your network. IMHO most companies when deploying voip do (or should be) put VOIP traffic and Data on separate VLAN's. There are quite a few PoE switches out there that support VLAN's, we distribute one from Planet. ------------------------ Regards, Sean Milheim iDREUS Corporation (941) 739-0051 x1005 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Riddell Sent: Wednesday, August 17, 2005 4:30 PM To: Commercial and Business-Oriented Asterisk Discussion Subject: Re: [Asterisk-biz] VOIPSupply.com - New Product Announcements Michael Giagnocavo wrote: >>The only individuals who should be concerned with encryption IMHO are: >> >>Those with something to hide or who are conduction communications or a >>sensitive nature. In the context of a business environment I would not >>necessarily want someone riding my bandwidth or listening in, but it's >>way at the bottom of the list of things that keep me up at night. > > > Well, I think most people would like to hide their banking and credit > card information. Leaving your network open to anyone wanting to plug > in just makes it that much easier... (Then again, its probably easier > to just send someone a Trojan renamed to "Coolpicsofu.exe".) Only problem is, the cordless technology that is being replaced has no security whatsoever. Therefore anything is better than nothing. What would be nice is a wifi phone that could run OpenVPN and connect directly to our VPN using 99999999999999999999bit encryption (or thereabouts). :) -- Cheers, Matt Riddell _______________________________________________ http://www.sineapps.com/news.php (Daily Asterisk News - html) http://www.sineapps.com/rssfeed.php (Daily Asterisk News - rss) _______________________________________________ Asterisk-Biz mailing list Asterisk-Biz@lists.digium.com http://lists.digium.com/mailman/listinfo/asterisk-biz _______________________________________________ Asterisk-Biz mailing list Asterisk-Biz@lists.digium.com http://lists.digium.com/mailman/listinfo/asterisk-biz