A Cisco Secure Wireless Network offers customers an integrated, defense-in-depth approach to WLAN security, and includes WLAN threat detection and mitigation, as well as policy enforcement. This guide outlines the role of Cisco Security Agent (CSA) in WLAN threat detection and mitigation, as well as in policy enforcement, and provides an overview of the security features it offers for a WLAN, along with implementation guidelines to assist in its design and deployment in production networks. More information on end-to-end integrated WLAN security, along with references to documents that outline current guidelines for securing a WLAN, can be found in Appendix B—Sample Customized. | CSA for WLAN Security A Cisco Secure Wireless Network offers customers an integrated defense-in-depth approach to WLAN security and includes WLAN threat detection and mitigation as well as policy enforcement. This guide outlines the role of Cisco Security Agent CSA in WLAN threat detection and mitigation as well as in policy enforcement and provides an overview of the security features it offers for a WLAN along with implementation guidelines to assist in its design and deployment in production networks. More information on end-to-end integrated WLAN security along with references to documents that outline current guidelines for securing a WLAN can be found in Appendix B Sample Customized Wireless Ad-Hoc Rule Module page 49. Software implementation screenshots and behavior referenced in this chapter are based on CSA FCS software release. It is assumed that readers are already familiar with both CSA and the Cisco Unified Wireless Network. Note Note that this guide addresses only CSA features specific to WLAN security. Contents CSA for WLAN Security Overview 3 CSA for General Client Protection 3 CSA for WLAN-Specific Scenarios 4 CSA and Complementary WLAN Security Features 6 CSA Integration with the Cisco Unified Wireless Network 6 Wireless Ad-Hoc Connections 7 Wireless Ad-hoc Networks Security Concerns 7 CSA Wireless Ad-Hoc Connections Pre-Defined Rule Module 8 Pre-Defined Rule Module Operation 8 Pre-Defined Rule Module Operational Considerations 9 Pre-Defined Rule Module Configuration 10 111 111 CISCO. Americas Headquarters Cisco Systems Inc. 170 West Tasman Drive San Jose CA 95134-1706 USA 2007 Cisco Systems Inc. All rights reserved. Contents Pre-Defined Rule Module Logging 12 Wireless Ad-Hoc Rule Customization 13 Simultaneous Wired and Wireless Connections 14 Simultaneous Wired and Wireless Connections Security Concerns 15 CSA Simultaneous Wired and Wireless Connections Pre-Defined Rule Module 15 Pre-Defined Rule Module Operation 15 Pre-Defined Rule .
