iGateway's SecureAP is a comprehensive security technology for a wireless access point. iGateway SecureAP is based on IEEE 802.1x security standard. It provides robust wireless security by protecting wireless users against rogue access points and network intruders from getting access to the confidential company information.
iGateway SecureAP offers:
-
Standards based, 802.1x security framework
-
Support for the latest EAPOL protocols
-
Multiple user authentication for granting network access
-
Data privacy provided by strong encryption
iGateway SecureAP Technology Components
- Wireless security core
- Authentication engine
- EAP relay engine
- RADIUS client
- Network stack interface
- Configuration APIs
- Wireless bridge and spanning tree protocol
iGateway SecureAP Technology Features
- Support for EAP-MD5, EAP-TLS and EAP-TTLS authentication modes
- Compliant with 802.1x-2001 - IEEE standard and 802.1d bridging standards
- RADIUS client with support for both authentication as well as accounting
- Inter operable with Industry standard clients including Microsoft Windows XP and Funk
- Interoperable with industry standard authentication servers such as Microsoft IAS and Funk Odyssey
- API as needed for SNMP MIB given in 802.1x
- CLI/HTTP/LDSV for configuration parameters
- RC4 encryption (support for global key and per station unicast key for encryption)
- Customizable to any platform, RTOS and network stack or for any WLAN interface like 802.11a/b/g
Authentication Engine
iGateway SecureAP provides IEEE 802.1x framework based authentication and key management to securely access wireless networks. Authentication engine consists of authenticator PAE state machine, port timer state machine, authenticator key transmit state machine, re-authentication timer state machine, backend authentication state machine, controlled direction state machine and EAPOL - EAP relay mechanism.
Interoperability with Multiple Authentication Solutions
iGateway SecureAP interoperates with different authentication solutions from multiple vendors such as Funk and Microsoft. The authentication mechanism could be based on username and password combination or a digital certificate.