Secure your Wi-Fi Connection with a VPN

WSPA’s Amy Wood (@TVAmy) had a great segment on last night (2011-02-07) in which she had Doug Cone (@nullvariable) a local web/graphics “devsigner” discussing the dangers of using public Wi-Fi. You can find that story here.

He demonstrated a tool which allows even the most novice of “hackers” to see a list of others who are using any given open wireless access point. He did this at a coffee shop and then went around and scared the bejeebus out of people by showing them how much information was at his fingertips.

In a discussion on Facebook the other day with Doug and Russell Tripp (@RussellTripp), I suggested that those two get together and product a video showing the same information in depth and then explaining how to protect yourself from this all-too-real security threat. I believe they may be doing that as a follow-up to the WSPA story and will post that information here as a reply when that becomes a reality.

In the mean time, I thought I give some info about one tool that is both readily available and super-affordable that you can use to secure your connection when using a public Wi-Fi hotspot. That tool is a VPN, or Virtual Private Network. Yes, the same VPN technology that has been around for a very long time and used in businesses and larger corporations, and it is so easy, a caveman could do it. (I’m sure a lawsuit is forthcoming for my use of that slogan)

A VPN connection established to your home will allow you to connect to the open wireless network of your choice, build a “tunnel” to your home connection, and then send all traffic through the wireless network through the encrypted tunnel, providing a very secure transport.

All that is needed is a VPN capable router or firewall at your home. But wait, you say you can’t afford a Cisco ASA 5505 (or WatchGuard or SonicWALL security appliance). That’s okay, you don’t need one.

You may already have a compatible home router that can be setup with the free DD-WRT (the website http://www.dd-wrt.com has a list of compatible routers) which provides VPN capability to your 40 dollar Linksys or similar device!

The setup is pretty straight-forward once the device end is ready. Connecting takes only seconds.

The VPN is not just for Microsoft Windows, but also Apple Mac OSX, iPad, linux, freebsd, solaris, etc. Most smartphones including Android, iPhone, Windows Mobile and Blackberry should have the ability to utilize your VPN too.

If you don’t have a compatible router, you could optionally use OpenVPN on your PC, and last but not least, you could use the OpenVPN HOSTED service. The hosted solution comes with a price tag, but for many it may be worth it to protect their privacy.

If you are fortunate enough to work for a company with a VPN already in place, you could probably use that as an option, assuming the IT policy permits you to do so.

Should you require assistance in Greenville or the Upstate for your personal or business VPN needs, we are partners with Cisco, WatchGuard, SonicWALL, ZyXEL and have a solution that is right for you. Call 864.990.4748 or email info@homelandsecureit.com.

Cisco offers a full line of Gigabit and switches, routers and firewalls

Have you noticed retrieving files from your server is feeling slower? Accessing a database on your network is sluggish? Moving large files takes a long time? Chances are good that you are using a 10/100 Megabit infrastructure, and that by simply replacing a few components, you could move to Gigabit speeds, possibly a 10x increase in speed, or more if you are using really old hubs and not switches! It’s like steroids for your business network!

As more and more data is stored, and multi-media files become larger due to better resolution and sampling rates, and reliance on server or network based storage increases, the network that you have used reliably for years may be showing its age.

Did you know that gigabit ethernet technology has been around for many years? In fact, your computers and servers, if purchases in the last few years probably already feature Gigabit NICs (Network Interface Cards), and all that may be holding you back from greater speeds on your LAN may be a change in hubs/switches and possibly some wiring & cabling upgrades?

Most business owners are not aware of that fact, nor has it been brought to their attention by their network support specialists. There’s good news too! Gigabit components have dropped in price considerably and it is not that much more to upgrade a piece of hardware to Gigabit than it is to replace a failing piece with a 10/100 component!

But be warned, there are some gotchas…  You might be purchasing a Gigabit switch and think that will be all you need and the wiring may not support the throughput, or you might find if you maintain a mixed mode, that some 10/100/1000 switches may not work with certain 10/100 cards, and the most popular is purchasing a cheap component and actually seeing a reduction in speed because it doesn’t support “jumbo frames”. So if you have any questions, consult your computer service professional or network support professional. Also, if you planning on a VoIP (Voice over IP) phone system, you may want to take that into consideration so you do not have to upgrade switches again to PoE (Power over Ethernet).

Homeland Secure IT offers a free evaluation, so feel free to call us if your business is in Greenville or the Upstate and let us look over what you have and see what it takes to get you up to speed! With Google high speed fiber internet possibly coming to the Upstate, wouldn’t it be nice if your computers/servers could actually use that speed?

We offer Cisco, Linksys, TRENDnet, NetGear, SMC, D-Link, SonicWALL, WatchGuard, HP ProCurve, Dell, ZyXEL, Intel, Sun, Belkin, 3Com and many other Gigabit network products!

So you are a student and on a budget,  and you decide that you don’t need to get your own internet connection since some stupid person in your complex has a very strong signal, and fortunately for you the connection is open! Sounds super? Well not so fast… How do you know that the access point you are connecting to has not be specifically setup to harvest information that is transmitted over it?

The AP could be collecting every keystroke you type, on every website you visit. Imagine all your banking information, logins and passwords to your favorite sites. Given enough time, all the key elements needed to steal your identity could be obtained easily.

What about checking email while on the road? Sure, find an open access point and go crazy, but keeping in mind that anything sent through the air may just be intercepted is a good idea. Save the online banking for your secure connection only.

Here is an example of what some people think about open access points…