Aruba updates WLAN management
Taking account of new security specs
By John Cox, Network World (US) | Published: 10:48, 19 January 2009
Aruba has released a new version of its wireless management software, with changes that let retailers and others monitor compliance with the latest payment-card security standards.
The company's AirWave Wireless Management Suite 6.2 now can track compliance with version 1.2 of the Payment Card Industry Data Security Standard (PCI DSS).The suite can create an array of reports documenting where the wireless network is in sync with the standard, and where it's not. AirWave, which Aruba acquired early in 2008, manages multivendor WLANs, mesh, and WiMAX networks.
The software update also includes placement suggestions for radio sensors; support for Cisco LWAPP 5.1/5.2 features; monitoring of Cisco 871w routers and remote Aruba access points; and the ability to accept a management trap by a Cisco WLAN controller as soon as it happens rather than waiting for a periodic polling of that controller.
The PCI spec mandates data-security standards for merchants and service providers handling credit or debit card data. Merchants have been allowed to continue relying on the Wireless Equivalent Privacy (WEP) protocol, an original part of the IEEE 802.11 WLAN standard. But WEP has been shown to be easily compromised. The newest PCI standard forbids WEP on all new networks after 1 March and requires eliminating it from existing networks by June 2010, said Manav Khurana, head of industry marketing for Aruba.
Also in keeping with PCI Council recommendations, quarterly WLAN audits can now be done automatically over scores or hundreds of retail outlets via AirWave.
By continuously monitoring WLANs with reference to the PCI standard, AirWave can immediately identify when any change at a site causes a violation of some part of the standard. The software flags the change, and alerts network administrators.
The new AirWave release also now takes the information it had always been collecting and aggregates this into a set of standard PCI reports. Previously, this information was collected and stored separately, and network administrators had to synthesize it on their own.
New reports include one that identifies new devices and users, and another for periodic inventorying of WLAN devices and networks.
AirWave Wireless Management 6.2 is now in beta test, with general availability due in February.