SVSU Wireless Policy
Campus & Office Access Point Addendum
Background:
In an effort to ensure the integrity of the SVSU Network and the security of the data that traverses the network, it is important that the SVSU campus wireless network is as secure as the wired network. We have two main mechanisms to secure the network:
- We have to know and control what is attached to the network. On the wired network this is accomplished by a periodic computer registration and network logins for fixed (office) connections plus an authentication/registration each time a connection is initiated to a walk-up port (Brown Hall Concourse, Library). We also validate that operating systems and anti-virus systems are up to date.
- The data security is achieved by the fact that the wired network is difficult to eavesdrop on or tap. One computer can not see the data that other computers on the network are generating.
A wireless network by default has none of these security features.
- We do not know what devices are plugged into the network nor who is using them.
- The data generated – email, passwords, Colleague access – is transmitted through the air and anyone with a wireless card in their computer, in the office next door, down the hall, on the floor above or below, can see and capture those transactions. Examples: Home Depot was hacked by someone sitting in the parking lot with a laptop and a Pringle's can antenna. Autos with keyless entry systems are being opened by car thieves using laptops.
To secure the integrity of the network, any device that connects to the wireless network must pass a registration/authentication test each time it connects. At that point we will check to make sure the laptop is not infected with some virus and we will insure that the user has a valid SVSU ID and is therefore authorized to access SVSU's network. Not doing so would risk knocking out our campus network during teaching and business hours (for example: during registration).
To secure the data itself we have to ensure that all connections to the wireless network are encrypted with a modern / high quality encryption and only permit connections to the network that are so encrypted.
Approved Access Points (Antennas):
In order to meet the above security requirements in a way that leverages the infrastructure we already have, we have standardized on Access Points (APs) from Cisco Systems. These Access Points (APs) can be configured to work with our network resources to meet the security requirements outlined above.
Currently SVSU approves the use of CISCO 1200 and 1100 series APs.
Examples of wireless access points not allowed on the campus network are all home units such as Linksys and Netgear.
Exception: This limitation on access points does not apply to wireless access points attached to ResNet, the campus residential network.