802 Planet describes how DigitalNet, a systems integrator that does about half its business with the defense department and intelligence agencies, installed a Wi-Fi campus network using a FIPs 140-2 compliant Wi-Fi network. FIPs 140-2 (links), is an encryption standard demanded by the federal government.
DigitalNet, the world’s leading supplier of TEMPEST and Zone secure systems, drafted useage policies for employees. They developed guidlines for passwords, encrytption of local and transmitted data as well as mandatory installation of anti-virus software on all mobile devices. The bought network monitoring to , alert managers to intrusions and detect usage patterns and changed default settings and CRT settings so remote reading using Van Eck eavesdropping units would be more difficult.
FIPS 140-2 is required for sale of products implementing cryptography to the Federal Government. The financial community is also requiring FIPS 140-2 compliance. Without it there is a good chance that municipal networks won’t be used by key players.
FIPS 140-2 was signed on 22nd June 2001, superceding FIPS 140-1.Only FIPS 140-2 conformance is now accepted by NIST.
FIPS 140-2 can be viewed as a quality mark and marketing tool. If you have FIPS 140-2 and your competition does not, then you may have a competitive advantage.
Meanwhile, reports 802 Planet, Harvard Medical School, faced similar issues when designing their wireless network used by thousands of faculty, staff and students. Unauthorized wireless access points were springing up in labs causing security and compatibility concerns.
“Price was important but we wanted a system that we could easily and deploy and manage,” said a Harvard Medical School spokesperson.
The wireless system needed to complement, rather than replace the existing wired network. After evaluating several vendors, the school bought 40 Cisco Aironet 350 access points and deployed them in six buildings. It connects with two Bluesocket WG 1000 gates.
In the future, the school will look at ways of hanfling increased userss, ad hardware switching and impelent additional security measures. It will also look to add more access points to better support loading.
.gif)
