RE: Wireless LAN Security for Warehouse

[Guillaume Lavoix <glavoix () altadis com>]

Hello Jennifer,

Symbol is a good brand as many others like cisco, 3com etc...
But if you choose a brand you should be aware that any device of
Whatever brand has to be checked for security as it's very common
To find bug or vulnerabilities on any vendor's hardware.

For instance if I just type in google 

Symbol wireless vulnerability 
Or 
Symbol wireless vulnerabilities

You can find some related vulnerabilities in Symbols products, some have
been corrected
And are not considered by vendors like an AP-4121 with snmp access enabled
which
Allows you to : www.wardriving.com/novnews02.php (this is an old example but
looking a bit more you'll probably find other examples).

What I want to say by that, is that it is not necessaraly the brand that you
have to focus
On to make sure that you'll get a good level of security, but rather on you
and the way you'll 
Implement,configure  and secure it. Fixing such problems (default settings)
left by the vendor and updating the firmware is also a good thing when it
fixes security holes etc...

I hope this little comment will help you make your decision.
Sincerely,

Guilaume

-----Mensaje original-----
De: Jennifer Fountain [mailto:jfountain () rbinc com] 
Enviado el: lunes, 03 de mayo de 2004 22:56
Para: security-basics () lists securityfocus com
Asunto: Wireless LAN Security for Warehouse
Carácter: Privado


My company is looking into wireless technology for our warehouse to replace
our RF devices.  I have been tasked to research which techonolgy
we should use.   Right now, we are looking into symbol.  They seem to
have a good infrastructure.  What is your opinion on their product's
security?  Can anyone recommend any other wireless products or recommend
certain security requirements that I should look for in these devices? =20

Thanks for any help!

Kind Regards,

Jennifer Fountain



---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------