Fortress Technologies BreadCrumb Wireless Network manual Harris SecNET11, Encrypting Wired Traffic

Models: BreadCrumb Wireless Network

1 65
Download 65 pages 42.56 Kb
Page 46
Image 46

Chapter 5. Using BCAdmin™

Enabling/Disabling AirFortress Encryption

AirFortress encryption is enabled and disabled on a BreadCrumb device using a checkbox on the General tab of the BreadCrumb Properties window. Unlike the Access ID, this setting may be changed when communicating wirelessly with the BreadCrumb device.

Important: Enabling and disabling AirFortress encryption in a BreadCrumb device has an immediate effect. If you change this setting, you will have to change your BCAdmin workstation’s setting to match it in order to communicate with the BreadCrumb device again.

Encrypting Wired Traffic

The BreadCrumb devices’ AirFortress support includes the ability to encrypt traffic from a wired network provided that the BreadCrumb device’s ethernet interface is in either Gateway Mode or Gateway (Ingress) Mode. With AirFortress enabled on a BreadCrumb device in one of these modes, encryption of wired traffic entering the wireless network and decryption of wireless traffic entering a wired network is completely automatic.

Tip: In addition to providing secure wireless extension of a wired network, this feature can be used to encrypt communications from ethernet-enabled devices (such as cameras) for which an AirFortress client is not available. For an example of this, see the Section called Encrypting a Video Feed in Chapter 6.

Zeroizing the Access ID

The BreadCrumb Access ID and other settings can be erased remotely or with physical access to the BreadCrumb device by following the steps in the Section called Restoring Default Settings (Factory Reset) in Chapter 7.

Harris SecNET11

For security exceeding AES-256 encryption, Rajant provides support for Harris Corporation’s SecNet11 product family. You must specify when ordering your BreadCrumb devices that you require this feature; each BreadCrumb radio will be replaced with a SecNet11 Plus PC card.

The SecNet11 Plus PC card has been certified as part of the National Security Agency (NSA) Commercial COMSEC Evaluation Program (CCEP).

Tip: To learn more about the SecNet11, visit http://www.govcomm.harris.com/secure-comm/.

40

Page 46
Image 46
Fortress Technologies BreadCrumb Wireless Network manual Harris SecNET11, Enabling/Disabling AirFortress Encryption