Adding Wireless Network Access

[JR]

Alex, that's a good proposed method. It would, however, leave connectivity for "friendly" wireless laptops a bit confused. The firewall would have to be configured to let them into the company network.

Oh, and Larry, 10/100? That's so 90's, man. Don't you find cyclingtv to be a bit jumpy?

JR

[vaking]

JR,
The proposed method treats the "friendly wireless laptop" the same way as a "friendly PC on the Internet" or remote connection for internal employee. If Larry's company provides remote access ability for its employees - this wireless network can leverage that facility. If there is no such facility today - adding wireless network will give all wireless laptops ability to browse Internet but no access to internal network. Internal people with laptops will have to remember that they can use ethernet connection or wireless connection but ethernet connection provides more access. Visitors have no business accessing internal network anyway. In other words - the proposed method addresses the "hospitable thing for visitors" but does not address issues of remote access and does not create new risk factors. Those would be separate topics. It is simply the most conservative approach to wireless security - consider it an insecure media and treat it same way as connectivity over Internet - another insecure connectivity method.