Cis 513 Wireless Security Policy

Wireless Security Policy

Name

Strayer University

CIS 513

Date of submission

Wireless Security Policy

All of the Cisco Wireless Ap’s would be configured with a dedicated SSID which will help provide separate connection to the students and guests. As such, the faculty would have access to a secure login which would not be made available to the students, while the students have a different login interface. All of them would be registered in a secure database. Administrators would be able to add students to the existing database and register their machines and provide them with the required ID and password. In order to ensure that there is no rogue or unauthorized person connected to the network, CCA and the CSA or the Cisco Secure Agent would be implemented (Neil Anderson, 2008). They would regularly scan the client’s device to make sure that only authorized persons are connected. Apart from this, the wireless connection on the access points would be protected by WPA2

Wireless Network Security

Random checks are performed at regular intervals to check for user activity. When any of the users is found breaking security code, an immediate action is taken to notify user about violation.

Following are few activities on regular basis to ensure security:

•

Access points are disabled between 1am and 6 am.
• Guest users are only given access between 8am to 6pm.
All access points are directed so that their signals do not go beyond the outside building walls.

The deployed wireless network automatically disables rogue access points when required. In order to connect to the wireless network, all wireless laptops are required to be the current domain members. A group policy is enforced to all domain members so as to lock their system to SSID access point. For network layer protection, firewalls must be installed throughout the network. Wireless connections should always be WPA2 secured. All systems must have anti-virus software which provides protection from viruses. To ensure that only valid users access the network system, server certificates are installed in the

network.
Wireless Network Staffing, Training, and Support Requirements
Staffing requirements
In order to deploy wireless network, following resources with mentioned responsibilities are required:
• Implementation analyst - Review of documents and complete network diagrams.
• Network engineer - Develop end-user and administrative documentations.
• Field Engineer - Hardware ordering, track deliveries, dropping-off at worksite and hardware installation.
• Technical engineer - Develop hardware documentation and track labor and equipment costs.
Training and support requirements
After the deployment of network, users are required to be trained on network security issues and appropriate use of wireless network services. The training plan will outline the requirements, schedule and methods to provide training to employees at all levels at XYZ institution about the wireless infrastructure. At the end of the training, employees will be adept with the changes being made and will also be fundamentally more aware about the wireless services at the institution.

Terms and Definitions
• DHCP means Dynamic Host Configuration Protocol
• IP means Internet Protocol
• MAC means Medium Access Control
• SSID means Service Set Identification
• VLAN means Virtual Local Area Network
• WPA2 means Wi-Fi Protected Access II
• CCA means Cisco Clean Access
• CSA means Cisco Secure Agent
• OC-3C means Optical Carrier 3 Concatenated
• LAN means Local Area Network
• Mbps means Megabit per second
• 802.11a/b/g/n/ac is the specification for the wireless LAN. A, B, G, N and AC standards for revisions with AC being the latest.

References
Chipps, K. (n.d.). Certfication Zone. Retrieved from Chipps: http://www.chipps.com/How%20to%20Implement%20Wireless%20Networks.pdf
CISCO. (2014). Cisco Aironet 3600 Series. Retrieved March 15, 2014, from CISCO: http://www.cisco.com/c/en/us/products/wireless/aironet-3600-series/index.html
CISCO. (2014). Cisco Catalyst 6880-X Switch. Retrieved March 15, 2014, from CISCO: http://www.cisco.com/c/en/us/products/switches/catalyst-6880-x-switch/index.html
CISCO. (2014). Cisco HyperSwitch ATM Family. Retrieved March 15, 2014, from CISCO: http://www.cisco.com/c/en/us/support/docs/switches/lightstream-atm-switches/10052-14.html
CISCO. (n.d.). Industry Leading Performance with Cisco?s Aironet 3600 Series Access Point White Paper. Retrieved March 14, 2014, from CISCO: http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-3600-series/white_paper_c11-688713.html
Neil Anderson, P. L. (2008). Cisco Networking Simplified .