Wifi Security for SOHOs: Cyberoam UTM CR15wi

www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.

Comprehensive Network Security

Our Products

Unified Threat Management Cyberoam Central Console (CCC) SSL VPN

Data Protection & Encryption

Device Management

Application Control

Asset Management

Cyberoam – Endpoint Data Protection

Cyberoam Wi-Fi ApplianceComprehensive Network Security with Wi-Fi Access Point for Small and Remote Offices



TopicsTopics

SOHO/SMB Dilemma – Wi-Fi vs. Wired

Traditional Wi-Fi vs. Cyberoam Wi-Fi

Cyberoam Wi-Fi Advantage

CR15wi GUI Preview



SOHO/SMB Dilemma – Wi-Fi vs. Wired networks SOHO/SMB Dilemma – Wi-Fi vs. Wired networks

The World is moving from Wired to Wireless!- Global WLAN market rose by 20% in Q1, 2010 compared to last

year – Dell'Oro Group- Market expected to grow to $5.5 bn in 2010

Benefits- Easier and faster deployment - Reduced overhead costs & deployment times- Higher mobility leads to better flexibility- Increased employee productivity due to instant connectivity

Benefits & Risks – You Gain Some, You Lose Some Benefits of Wi-Fi come with Security risks Unless addressed, Wi-Fi advantages can turn into risks for business



Wi-Fi Security Risks for SOHO & SMBWi-Fi Security Risks for SOHO & SMB

Uncontrolled and un-monitored Guest access leading to risk of Internet Abuse

Risk of Information Theft

Unrestricted access by Guests to internal network

Inability to trace user specific activity



Traditional Wi-Fi vs

Cyberoam Wi-Fi



Internet Pure Pre-Shared Key based Security degrades exponentially with time

-Sharing of Pre-Shared key with Guests, Ex-Employees

-Brute Force attacks

Firewall / Router

Common Pre-Shared key

Employee

Guest 1

Ex-Employee

Guest 2

Guest 3

Wi-Fi Router

Traditional Wi-Fi without user authentication

ACME CORPORATION



User Name

MAC ID

IP Address

Cyberoam Wi-Fi with user authentication

Internet

Common Pre-Shared key

Employee

Temporary User Access

Layer 8 Technology

CR15wi

Network

Temporary User Access Expires

Guest 1

Cyberoam’s Layer 8 Advantage – Identity-based Controls

Duration of Access

Schedule of Access

Data Transfer Limit

Bandwidth Availability

Identity-based Reporting for each user, including guests

Information Theft controlled

ACME CORPORATION



InternetTony

Bandwidth control

Duration /Quota control

Schedule Control

Reporting

Cyberoam’s Layer 8 Advantage – Identity-based Controls

Apply these controls on Employees as well as Guests

CR 15wi



Traditional Wi-Fi without network segmentation

Internet

Firewall - Router

Wi-Fi Router

EmployeeGuest

Accounting/ERP Software

E.g. Tally, Quicken, PeachTree

Shared Network Drives Common Pre-Shared key

Switch

• Guest can access internal network

• Risk of Information Theft

•Unmonitored Internet Access

• Risk of Internet Abuse

ACME CORPORATION



Cyberoam Wi-Fi allows Separate Guest and Employee Network Access

Internet

Switch

CR15wi

Employee

Segmented network for Employees & Guests Layer 8 Authentication

o Guests get limited access

o Can only access Internet

o No access to network resources

Identity-based Reporting for every user

Layer 8 Advantage


E.g. Tally, Quicken, PeachTree Guest

Shared Network Drives

ACME Guest

ACME Employees



ACME Marketing

Internet

Switch

CR15wi

Layer 8 Advantage


E.g. Tally, Quicken, PeachTree Guest

Shared Network Drives

Multiple Virtual Access Points – 8 SSIDs for network segmentation

Engineering

ACME Guest

ACME Engineering

Marketing



Cyberoam Wi-Fi Advantage



Cyberoam Wi-Fi AdvantageCyberoam Wi-Fi Advantage

Reduced TCO

Enhanced Security



Wi-Fi Router

Other Network Security Devices

- Reporting- Content Filtering- Bandwidth Mgt

- Antivirus- Antispam- IPS- VPN and many more

Cyberoam Wi-Fi Reduces TCOCyberoam Wi-Fi Reduces TCO

+

+=

Reduces cost of managing WLAN

- Eliminates need for separate Wi-Fi routers and firewall

CR 15wi

Firewall - Router



Get Higher Throughput and range with 802.11n MIMO Technology- Multiple Input – Multiple Output MIMO technology

- Fine-tune Coverage & Bandwidth

- Higher performance by aggressively transmitting and receiving data over WiFi channels

- Faster handling of video streaming and high bandwidth downloads

2 x 3

-2 Transmit antennas

-3 Receive antennas

Coverage Bandwidth

Ability to fine-tune coverage with bandwidth



Cyberoam Wi-Fi Security AdvantageCyberoam Wi-Fi Security Advantage

High performance, integrated security over WLAN

Supports 802.11 n/b/g wireless standard

Multiple Virtual Access Points Supports upto 8 SSIDs

Supports IP-address pool



High performance, integrated security over WLAN

- Includes entire set of UTM security features

- Secures wireless networks to the extent of wired networks



Multiple Virtual Access Points for Network Segmentation

- Supports upto 8 SSIDs

- Create segregated networks in same physical area

- Various departments like Marketing, Sales, Engineering can be on separate zones

- Separate zone for Guest

No need to share corporate network username, password

Separate pre-shared key

Extend 1 Access Point to 8 Virtual Access Points



CR 15wi Specs



Cyberoam WiFi Appliance – CR 15wi Cyberoam WiFi Appliance – CR 15wi

802.11 n/b/g (WEP, WPA, WPA2, 802.11i ,TKIP, AES, PSK, 802.1x EAP)

Antenna Detachable 2x3MIMO

Access Points Up to 8 bssid

Transmit Power (EIRP) 11n HT40 : +17dBm11b CCK: +19dBm11g OFDM:+17dBm

Receiver Sensitivity - 65dBm at 300Mbps- 70dBm at 54Mpbs 10% PER- 86dBm at 11Mpbs 8% PER



CR 15wi GUI Preview



Configuring Wireless Access PointConfiguring Wireless Access Point



Firewall Rule PageFirewall Rule Page





Configuring Firewall Rule PageConfiguring Firewall Rule Page





DHCP ServerDHCP Server




DHCP Configuration OptionDHCP Configuration Option



Thank [email protected]

Wifi Security for SOHOs: Cyberoam UTM CR15wi

Technology

Transcript of Wifi Security for SOHOs: Cyberoam UTM CR15wi