MOD Standards For 802.11a/b/g/n

Curiosityx · 28 Jan 2008 at 13:35

Greetings, ive just acquired a project to implement a secure Cisco Controller based wireless network for an MOD site.

Now i haven't a problem on the technical side involving the Cisco Unfied Wireless Network and ACS technologies but have limited experience with MOD site security.

My initial thoughts would be Wpa2 combined with AES and 802.1x for authentication to a backend Radius/TACACS+ server.

Is anyone aware of any specific standards outlined by the MOD for deployment of 802.11 Wireless networks within secured sites?

The site already falls under the Tempest guidelines but id like to have all available information to hand.

Regards

Snapshot · 28 Jan 2008 at 13:45

<Boggle!> Surely 802.11 and Tempest is a complete contradiction.

Real conversation in a computer manufacturer's tech support dept:
Engineer: I'm having trouble installing a Tempest mouse.
2nd level 1: What's a Tempest mouse?
2nd level 2: An armadillo!

tom_e · 28 Jan 2008 at 13:55

I would imagine even anyone that did know wouldnt go broadcasting it on a public forum, the MOD are quite touchy about even little things like that being talked about.
Can you not contact someone within the MOD?

Fr0dders · 28 Jan 2008 at 13:58

the MOD are so secrative about their stuff, that at work we have a completely seaparate department for them. I work for emis who just got awarded the clinical systems contract for them. We provide a medical records systems for both the MOD and the Prison Service. If your a soldier, your medical records will be one on of our servers.

However us plebs dont even have access to their servers. We can access every GP in the country, but we're not trusted with the MOD / HMP stuff and access is only by the vetted people in the MOD department.

I strongly suggest you ask around at the MOD as i doubt you'll find the answer here.

Curiosityx · 28 Jan 2008 at 14:47

Snapshot said:
<Boggle!> Surely 802.11 and Tempest is a complete contradiction.

Yes it does sound a tad ironic, i can imagine the look on the face of senior management..

"Right we've installed fiber and eliminated the possibility of eavesdropping.......Pardon what was that...You've installed a wireless network?!?!"

One of the niceties with the Cisco kit is that you can manually tune the power levels in order to minimize the footprint, this in combination with 802.11a makes it relatively easy to contain within a building.

Cheers for the replies guys, ill go and give the MOD a beasting.