The ReefEdge Connect System: Security for a Mobile Enterprise

The ReefEdge Connect System was designed from the start to address the security,
manageability, and usability requirements of enterprise wireless LANs. Network
administrators can designate the approved wireless LAN users, manage their
security credentials and network access privileges, and ensure the encryption of their
wireless transmissions in accordance with corporate policies. The ReefEdge
Connect System works with existing authentication, directory, and systems
management systems within the enterprise. Wireless LAN users receive the
connectivity, subnet roaming, and bandwidth management required to ensure a
seamless mobile communications experience. Built on innovative, patent-pending
technology, the ReefEdge Connect System delivers the high performance, scalability,
and reliability needed to support full enterprise deployments.
The ReefEdge Connect System addresses head-on the three axes of security—
authentication, access control, and privacy. The system design recognizes that
different technologies are appropriate for addressing each of these axes, that
enterprises will have differing needs along each axis, and that enterprise needs will
change over time. IT managers can select and implement the security controls that
are appropriate for the particular situation.
Authentication
Using the ReefEdge Connect System, enterprises control which users can access
the wireless LAN. The Connect System requires all users to authenticate to the
network, creating a dynamic binding between the user’s identity and the device that
they are using.
This authentication model offers several advantages: The user’s identity—rather than the device or the network adapter—determines
network access. Lost and stolen devices do not automatically gain access to the
network. Users can share their devices with colleagues without fear of
compromising the enterprise network. Users can easily change or upgrade devices without requiring re-provisioning by
the ReefEdge Connect System administrator. A user may employ multiple devices simultaneously. The enterprise IT manager can administer and monitor the enterprise network to
determine which users and devices are authorized, as well as which are currently
active.
ReefEdge Connect System authentication works easily with both current and future
technologies. The authentication service works with any browser-enabled device,
and an automatic sign-on utility is available for Microsoft Windows clients. The
Connect System also integrates with access points, including the Cisco Aironet 350,
that support 802.1x authentication with EAP; in this configuration, the ReefEdge
system recognizes the same authentication credentials supported by the EAP
authentication server. The Connect System operates seamlessly within an enterprise
environment by linking with external authentication services such as RADIUS
servers, LDAP directories, and Microsoft Windows™ domains. ReefEdge enables
solution providers to build custom authentication solutions that integrate with
biometric security, SIM cards, secure ID tokens, and custom or legacy authentication
solutions.