User manual SONY VAIO VPC-EB25FX/BI

[. . . ] · Manageability ­ How to make network security more manageable?SONY addresses the need for WLAN authentication through support for 802. 1x EAPs. The IEEE 802. 1x standard and EAP protocols define a framework for authenticating users on a network, as well as a mechanism for dynamically changing and distributing keys. There are several 802. 1x EAP types supporting a variety of authentication methods, including passwords and digital certificates. [. . . ] AES is a block cipher using the Rijndael encryption algorithm on 128-bit (or 192- or 256-bit) blocks of data; block lengths and key lengths are variable. (Block ciphers are typically more complex than stream ciphers and thus harder to crack. The strength of AES security is validated by its adoption by the U. S. government and military. ) AES is a key component of the IEEE 802. 11i specification, the most recent WLAN security standard that was ratified in June 2004 by IEEE Task Group i (TGi) working group members. SONY's current WLANs include AES support, and will support 802. 11i and the corresponding Wi-Fi interoperability test WPA2 through a future software upgrades. Manageability For large WLAN deployments, the effort required to implement and maintain WLAN security measures can be significant. Manageability features of SONY WLAN solutions include: Restricted user rights User rights to certain settings may be restricted to prevent modifying WLAN profiles (for example, security keys), and in some cases from creating new profiles. Easy distribution of encryption keys and user profiles The management and distribution of encryption keys and user profiles can be cumbersome and potentially insecure. Appropriate WLAN management solutions--such as 802. 1x and the ability to import and export WLAN profiles--can be used to distribute keys and profiles, minimizing the burden on IT staff. User credential management SONY addresses the need for the security and simplified management of user credentials by allowing Windows® Domain credentials to be re-used for LEAP authentication. Security can also be further enhanced by the SONY ProtectTools Security Manager--a single client console application that unifies security capabilities of SONY client PCs under a common architecture and single user interface. Today a range of features is being delivered that builds on underlying hardware security building block, s such as embedded security chips designed to the Trusted Computing Group (TCG) standard and Smart Card technology. Control (as on Web) 2. 4 2. 00E 12 Mar 04 W400, W500 3. 1 Microsoft Windows XP Wireless Zero Configuration Utility XP SP1 XP SP2 N/A Intel ProSet Network Configuration Utility V7. 1. 2 V7. 1. 3 V8. 0 3. 00A N/A 20 April 04 W400, W500 ALL WLAN HW Support ALL P/W 2100 P/W 2100 P/W 2200BG OS Support Availability WEP (64/128) WPA WPA2/802. 11i6 Cisco Compatible Extensions v1 Cisco Compatible Extensions v2 Auto Profile Switching Single Sign on (for LEAP) Profile Import/Export 802. 1x type support LEAP EAP-TLS EAP-TTLS PEAP-GTC (Cisco) PEAP-MSCHAPv2 (Microsoft) 2K, XP Mar 04 ü ü 2K, XP May 04 ü ü 2K, XP Now ü ü 2K, XP Oct 04 ü ü 2K, XP Now ü ü 2K, XP Aug 04 ü ü 2K, XP Feb 04 ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü ü 6 802. 11i ratifed by the IEEE June, 2004. WPA2 interoperability testing expected to start in the second half of 2004. 8 Several features in Table 3, above, have particular value in the enterprise environment. The following table highlights the benefits of these selected features. Table 4: Selected feature benefits for the enterprise environment Feature Cisco Compatible Extensions Support Benefit · · Assurance of tested compatibility with Cisco Aironet infrastructure products. Support for the latest industry security standards plus selected Cisco proprietary features Simplifies IT management by allowing windows domain login credentials to be re-used for LEAP authentication Avoids security risk with local storage of LEAP credentials Allows IT administrators to create a single profile and distribute and implement it in an enterprise environment, reducing support time and errors users make when managing their own profiles. Convenience, avoiding the need to manually change profiles when moving from one network to another. Single Sign-on for LEAP · · Profile import/export · Automatic Profile switching · 9 Selecting the right WLAN solution Because SONY offers a selection of standards-based solutions WLAN solutions as described above, customers can choose the solution that best meets their needs. To assist in this selection, SONY offers the following recommendations: Table 5: SONY recommended WLAN solutions If your environment . . . Uses predominantly Microsoft server infrastructure · · Recommended Supplicants · Recommended WLAN adapters · · Microsoft Windows XP Wireless Network Connection Manager SONY WLAN W400, W500 Intel Pro/Wireless 2100, 2200BG Microsoft server products manage authentication Authentication based on Microsoft EAP-TLS or Microsoft PEAP · · Uses predominantly Cisco Aironet infrastructure Atheros Client Utility Intel ProSet Network Configuration Utility Intel ProSet Network Configuration Utility Microsoft Windows XP Wireless Network Connection Manager Atheros Client Utility Microsoft Windows XP Wireless Network Connection Manager · · SONY WLAN W400, W500 Intel Pro/Wireless 2100, 2200BG Intel Pro/Wireless 2100, 2200BG Is standardized on Intel technology · · · Requires 802. 11a support · · · · · SONY WLAN W500 Requires LEAP single sign-on support · · Atheros Client Utility Intel ProSet Network Configuration Utility · · SONY WLAN W400, W500 Intel Pro/Wireless 2100, 2200BG 10 Emerging WLAN standards Three significant WLAN standards emerging that may offer significant benefits to enterprise business in the next 1 to 2 years are described in the following table. Table 5: SONY recommended WLAN solutions Standard 802. 11e Description Quality of Service. Enhances the current 802. 11 MAC to expand support for applications with Quality of Service requirements, and in the capabilities and efficiency of the protocol. Examples of QoS applications include media streaming and Voice over IP. 802. 11e will define managed classes of service for data, voice, and video applications. 802. 11i includes all the security features of 802. 1x and WPA plus AES. [. . . ] The SONY advantage lies in broad support for all major authentication types, giving enterprise customers the freedom to select an authentication method that is appropriate for their unique environments and security risk assessments. Support for LEAP Single Sign-on, profile import/export, and restricted user rights. Managed product lifecycles and software upgrades. · Manageability ­ ­ ­ · Performance ­ Partnering with leading WLAN-technology providers. ­ SONY notebooks feature display mounted, dual-band, diversity antenna design enabling users to stay connected over longer distances and to maximize throughput at all points in the network coverage area. [. . . ]