NETGEAR FVS318N

Wireless Configuration and Security
89
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
• In infrastructure mode, wireless devices normally scan all channels, looking for a wireless
access point. If more than one wireless access point can be used, the one with the
strongest signal is used. This can happen only when the wireless access points use the
same SSID. The FVS318N wireless VPN firewall functions in infrastructure mode by
default.
Wireless Data Security Options
Indoors, computers can connect over 802.11n wireless networks at a maximum range of
300 feet. Typically, a wireless VPN firewall inside
a building works best with devices within a
100 foot radius. Such distances can allow for others outside your immediate area to access
your network.
Unlike wired network data, your wireless data transmissions can extend beyond your walls
a
nd can be received by anyone with a compatible adapter. For this reason, use the security
features of your wireless equipment. The wireless VPN firewall provides highly effective
security features that are covered in detail in this chapter. Deploy the security features
appropriate to your needs.
Figure 45.
There are several ways you can enhance the security of your wireless network:
• Restrict acces
s based by MAC address. You can allow only trusted PCs to connect so
that unknown PCs cannot wirelessly connect to the wireless VPN firewall. Restricting
access by MAC address adds an obstacle against unwanted access to your network, but
the data broadcast over the wireless link is fully exposed. For information about how to
restrict access by MAC address, see Restrict Wireless Access by MAC Address on
page 101.
• T
urn off the broadcast of the wireless network name (SSID). If you disable broadcast
of the SSID, only devices that have the correct SSID can connect. This nullifies the
wireless network discovery feature of some products, such as Windows XP, but the data
is still exposed. For information about how to turn of broadcast of the SSID, see
Configure and Enable Wireless Security Profiles on p
age 93.
• WEP. Wire
d Equivalent Privacy (WEP) data encryption provides data security. WEP
shared key authentication and WEP data encryption block all but the most determined