Wireless Internet Access¡ªSecurity Information

Wireless network security is a serious issue. Wireless is not only a shared medium, but also a medium that is broadcast via radio waves. Therefore, anyone with a wireless card could monitor your network traffic, which could include passwords, account numbers, etc. Thus the data is inherently insecure. In order to protect data, please ensure it is encrypted using SSL, SSH, or VPN. For more information, see the ITS Security page: www.colorado.edu/its/security , and www.colorado.edu/its/vpn .

What you need to know about security with the wireless network:

1. 1. MAC Address Registration
   For ITS WLAN installations, all users are required to register their Media Access Control (MAC) addresses. Upon first attempting to access a Wireless LAN, users can open a web browser and attempt to load any web page. Anyone who has not registered will be automatically directed to the registration page. Campus users can register using their Student ID number and PIN number, or their IdentiKey login and password. See the Wireless Registration page for more information.
3. 2. Acquisition of Secure (SSH, Kerberized) clients for Telnet Access
   Using the wireless network entails broadcasting network traffic via radio waves, which makes them insecure by definition. Encrypting traffic is one way to ensure data security while using wireless technology. Hence, users should acquire secure client programs for use in accessing the campus network. For more information or to download secure clients, see www.colorado.edu/its/security .
5. 3. VPN replaces WEP on the CU-Boulder Wireless Network
   Instead of WEP, use VPN (Virtual Private Network) to make a secure connection to any system which requires a login and password if you are not using SSH or SSL. The CU Wireless network dos not use WEP encryption. VPN will only protect data between your laptop and the VPN concentrator on campus. Use other security practices for protecting off-campus connections (such as personal firewalls and antivirus software ). For more information see www.colorado.edu/its/vpn.