I run WEP 128 bit for starters on all wireless devices.  I then have a
Netscreen 5XP firewall running the latest 3.1 release software which has the
ability to terminate VPN tunnels on all interfaces including the Trusted
side interface.   I then run an AES128 bit encrypted IPSEC tunnel from my
machines on the LAN to that firewall device.   My wireless notebook is no
exception.

I have full IPSEC encryption on all devices terminating through the
Netscreen firewall device.   Check them out!  http://www.netscreen.com/

I think you will be very impressed with what they can offer in such a small
$500 package.   I run these things at all my client sites, large and small
companies.   Netscreen has firewalls of all types and sizes!   I am so
paranoid about security, and the new ScreenOS 3.1 release totally gives me
at least the encryption protection I need!  For those Linux people out there
(heh we have a big following, eh) you can just use Stunnel with the
Netscreen devices.


sean.



----- Original Message -----
From: "Secure Green" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 09, 2002 2:02 PM
Subject: Wireless Firewall


> Has anyone found any reasonably secure solutions for setting up a wireless
> network in the home?
>
> My current configuration is:
>
> [Cable Modem] -ethernet- [GnatBox PC Firewall] -ethernet- [2 PCs]
>
> I would like to have a similar setup such as:
>
> [Cable Modem] -ethernet-  [ ??  PC with 1 ethernet card and 1 802.11 card,
> software? ] -Wireless- [2 PCs]
>
> I'd like to find a software solution that can make use of an old PC that I
> have, similar to what can be done with Gnatbox (www.gnatbox.com).  The
> external interface needs to be firewalled, and the internal interface
needs
> to support 802.11b, and preferably VPN since I don't trust WEP.  I could
> keep the Gnatbox setup if I purchased a hardware 802.11b AP, but it's a
lot
> cheaper to throw an extra wireless PCI card into the same box as the
> firewall.  It's just too bad that Gnatbox doesn't support wireless yet...
>
> --SG
>
>
>

Reply via email to