User's Manual

4/1/05 Operating System Security
OL-7426-02
Series lightweight access points Discourage Rogue AP clients by sending the clients deauthenticate and
disassociate messages whenever they associate with the Rogue AP).
Integrated Security SolutionsIntegrated Security Solutions
• Operating System Security is built around a robust 802.1X AAA (authorization, authentication
and accounting) engine, which allows operators to rapidly configure and enforce a variety of
security policies across the Cisco SWAN.
• The Cisco Wireless LAN Controllers and Cisco 1000 Series IEEE 802.11a/b/g Lightweight Access
Points are equipped with system-wide authentication and authorization protocols across all
ports and interfaces, maximizing system security.
• Operating System Security policies are assigned to individual WLANs, and Cisco 1000 Series
IEEE 802.11a/b/g Lightweight Access Points simultaneously broadcast all (up to 16) configured
WLANs. This can eliminate the need for additional APs, which can increase interference and
degrade system throughput.
• The Cisco Wireless LAN Controllers securely terminates IPSec VPN clients, which can reduce the
load on centralized VPN concentrators.
• Operating System Security uses the Radio Resource Management (RRM) function to continually
monitor the air space for interference and security breaches, and notify the operator when they
are detected.
• Operating System Security works with industry-standard aaa (authorization, authentication and
accounting) servers, making system integration simple and easy.
• The Operating System Security solution offers comprehensive Layer 2 and Layer 3 encryption
algorithms which typically require a large amount of processing power. Rather than assigning
the encryption tasks to yet another server, the Cisco 4100 Series Wireless LAN Controller can
be equipped with an VPN/Enhanced Security Module that provides extra hardware required for
the most demanding security configurations.
Simple, Cost-Effective SolutionsSimple, Cost-Effective Solutions
Because the Cisco SWAN Radio Resource Management (RRM) function is enabled from the factory, the
IT department does not need to create a detailed rollout plan to continually monitor APs, or to individu-
ally update APs, resulting in very low input required from the IT department or Wireless LAN manager.
This means less money spent deploying, configuring, updating, and monitoring the Cisco SWAN.