With the release of firmware 11.10T, Cisco has made a number of security enhancements to its APs. I've read the SCG, and understand what it is that these enhancements are doing.
But in actuality, what is the net effect of implementing these new features? By using Enhanced MIC verification for WEP, and the Temporal Key Integrity Protocol, what do I gain? How secure do these features make a non-LEAP or EAP WLAN? Can enterprises now deploy secure WLANs without spending $6K+ on an ACS box?
Cisco's current LEAP solution, while very robust, is also extremely expensive for a small business, and makes no economic sense for small deployments (what about my house? Don't I deserve a secure WLAN connection?).
Suggestion: Cisco should offer a very watered-down version of the ACS that could fit on an AP, and only perform WLAN authentications. Most of my customers don't require the whole feature set of the ACS, and are only looking to secure their wireless networks. This software should be a free download (how's that for a dramatic statement?)
Thoughts?
