{"componentChunkName":"component---src-templates-articles-index-jsx","path":"/articles/deploying-wpa2-enterprise-encryption/","result":{"data":{"props":{"adsense":true,"adsenseMobile":false,"byLine":"","canonical":"https://staging.business.com/articles/deploying-wpa2-enterprise-encryption/","content":"\n<p>Today's IT teams spend countless hours keeping wireless enterprise networks safe from the perils that permeate the radio waves.</p>\r\n<p>Passive eavesdroppers can gather proprietary information, logins, and passwords. Intruders can steal bandwidth to transmit spam or use a network as a springboard to attack others. Even a low-tech attacker can harm a business by launching packet floods against its access points (APs) and nearby server.</p>\r\n<!-- START: business.com qt-widget code-->\r\n<p>\r\n<script src=\"https://widgets.business.com/qt-widget-v2/bdcQtWidget.min.js\" data-bdc-qt-widget=\"\" data-qt-pub-id=\"1000\" data-qt-offer-group-id=\"152\"></script><script>window.bdcQtWidget.init();</script></p>\r\n<!-- END: business.com qt-widget code-->\r\n<p>At the start of the millennium, the <strong>Wired Equivalent Privacy (WEP)</strong> security protocol provided security for wireless enterprises by encrypting data so that it was protected during transmission between endpoints. WEP used secret keys to encrypt data moving between the AP and receiving stations. Unfortunately, a decade ago, researchers discovered a flaw in WEP that allowed packet eavesdropping to recover the encryption key. Once developed into an exploit, software running on any off-the-shelf laptop could crack WEP in a matter of minutes. Inevitably, WEP was replaced in 2003 by the <strong>Wi-Fi Protected Access (WPA)</strong> security protocol and security certification program.</p>\r\n<p><em>[Looking for network security services? <a href=\"https://www.business.com/categories/network-security-services/\" target=\"_blank\" rel=\"noopener\">Check out our best picks</a>.]</em></p>\r\n<h2><strong>WPA: Deepening security authentication </strong></h2>\r\n<p>WPA (referred to as the draft IEEE 802.11i standard) addressed most of the known vulnerabilities of WEP. Primarily intended for wireless enterprise networks, WPA implemented several significant changes.</p>\r\n<p>First, it included the <strong>Extensible Authentication Protocol (EAP)</strong>, which was built on a secure public-key encryption system so that only authorized network users could access the network. Second, WPA improved data encryption through the <strong>Temporal Key Integrity Protocol (TKIP)</strong>; it scrambled the keys using a hashing algorithm to prevent tampering. Finally, a <strong>message-integrity check (MIC)</strong> feature was added to determine whether a hacker captured or altered packets passing between the access point and client.</p>\r\n<p>Within the year, however, a flaw was found in WPA that relied on older weaknesses in WEP and limitations of the MIC feature.</p>\r\n<h2><strong>WPA2: Tightening the encryption</strong></h2>\r\n<p>Available since 2004, WPA2 implements the mandatory elements of the IEEE 802.11i standard. And beginning in March 2006, WPA2 certification by the Wi-Fi Alliance became required for all new devices to bear the Wi-Fi trademark.</p>\r\n<p>WPA2 introduces the use of <strong>AES (Advanced Encryption Standard)</strong> algorithms and <strong>CCMP (Counter Cipher Mode with Block-Chaining Message Authentication Code Protocol)</strong> to tighten the security of both home networks and business enterprises. Dynamic encryption keys are distributed securely after a user logs in or provides a valid digital certificate. WPA2 can be implemented in one of two modes:</p>\r\n<ul>\n<li>\n<strong>Pre-Shared Key (PSK) Mode –</strong> For home Wi-Fi networks, the owner defines the encryption passphrase on the wireless router and other APs. That passphrase must then be entered by users when connecting to the network.</li>\r\n<li>\n<strong>Enterprise Mode – </strong>Organizations that want government-grade wireless security should use Wi-Fi Protected Access 2 Enterprise (WPA2-Enterprise). To improve the resiliency of mission-critical networks, WPA2-Enterprise was recently enhanced with Protected Management Frames, which further steal WPA2 against eavesdropping and packet forging. All Wi-Fi Certified devices support WPA2 for added protection.</li>\r\n</ul>\n<h3><strong>Deploying WPA2-Enterprise</strong></h3>\r\n<p>WPA2-Enterprise deployment includes installing a RADIUS server (or establishing an outsourced service), configuring access points with the encryption and RADIUS server information, configuring your operating system with the encryption and IEEE 802.1x settings, and then connecting to your secure wireless enterprise.</p>\r\n<h3><strong>Enterprise authentication and communication: The RADIUS server and EAP</strong></h3>\r\n<p>The standard for passing EAP over a network is IEEE 802.1x. In this authentication framework, the user who wants to be authenticated is the <em>supplicant</em>. The RADIUS (remote authentication dial-in user service) server doing the authentication is the <em>authentication server</em>, and the device at the AP, such as a laptop or smartphone, is the <em>authenticator</em>.</p>\r\n<p>Users are assigned login credentials to enter when connecting to the network; they don't see the actual encryption keys, and the keys aren't stored on the device. This protects the wireless network against terminated employees or lost devices. The authentication is port-based so that when a user attempts to connect to the network, communication is allowed through a virtual port for the transfer of login credentials. If authentication is successful, encryption keys are securely passed out and the user receives full access.</p>\r\n<h3><strong>RADIUS server options</strong></h3>\r\n<p>Once you decide on which of the following RADIUS server options to use, you will set it up in the corresponding EAP, AP, and user settings.</p>\r\n<ul>\n<li>\n<a href=\"http://technet.microsoft.com/en-us/network/bb643147.aspx\" target=\"_blank\" rel=\"noopener\">Windows Server</a><strong> -- </strong>if you have a Windows Server set up, you can use either the Internet Authentication Service (IAS) in Windows Server 2003 or the Network Policy Server (NPS) in Windows Server 2008.</li>\r\n<li>\n<a href=\"http://freeradius.org/\" target=\"_blank\" rel=\"noopener\">FreeRADIUS</a> -- this server is a free open source project and the preferred choice of advanced IT personnel. It is available for the Linux, Mac OS X, and Windows platforms.</li>\r\n<li>Outsourced Services -- if you have multiple offices or lack technical IT expertise, a hosting service is a good option. Many services provide more than just RADIUS server hosting. They can also help with the setup process, do user on-boarding, and provide real-time reporting functionality. In addition, many companies offer mobile applications that make configuring mobile devices quick and painless for Apple iOS, Android, and Kindle Fire users. Check out <a href=\"http://www.nowiressecurity.com/service.htm\" target=\"_blank\" rel=\"noopener\">No Wires Security</a> and <a href=\"http://www.serverplus.com/index.php\" target=\"_blank\" rel=\"noopener\">ServerPlus</a> to learn more.</li>\r\n</ul>\n<h3><strong>EAP options</strong></h3>\r\n<p>Your EAP choice depends on the level of security you need and your server/client specs. Although there are more than ten <a href=\"http://technet.microsoft.com/en-us/library/cc770622(v=ws.10).aspx\" target=\"_blank\" rel=\"noopener\">EAP types</a>, these three are the most popular:</p>\r\n<ul>\n<li>PEAP (Protected EAP) -- this protocol authenticates users through the usernames and passwords they enter when connecting to the network. It is one of the easiest EAP types to implement.</li>\r\n<li>TLS (Transport Layer Security) -- although this EAP type requires more time to implement and maintain, TLS is very secure because both client and server validation is done with SSL (secure socket layer) certificates. Instead of connecting to the network with usernames and passwords, end-user devices or computers must have an SSL certificate file. You control the certificate authority and distribute the client certificates.</li>\r\n<li>TTLS (Tunneled TLS) --  this version of TLS doesn't require security certificates and reduces network management time. However, because TTLS doesn't have native support in Microsoft Windows, it requires a third-party client.</li>\r\n</ul>\n<p>The steps for configuring the APs with the encryption and RADIUS server information -- and for configuring your operating system with the IEEE 802.1x setting -- depend on your server and client specs. Consult your hardware and software manufacturers for guidance.</p>\r\n<h2><strong>Standards and the Wi-Fi Alliance</strong></h2>\r\n<p>There's no end to the task of protecting against data theft and managing risk and compliance in the wireless enterprise. Key challenges in wireless security vary widely and continue to evolve because every enterprise is different. Some IT teams struggle with the impact of BYOD (bring your own device) while others seek ways to allow guest access without compromising security of mission-critical systems. The <a href=\"http://www.ieee802.org/11/\" target=\"_blank\" rel=\"noopener\">IEEE 802.11</a> working group and <a href=\"http://www.wi-fi.org/\" target=\"_blank\" rel=\"noopener\">Wi-Fi Alliance</a> continue to address emerging enterprise needs in the space as best they can. In addition, major platform vendors often provide ways to assist in the management of security measures, helping to reduce the resources needed and overall time spent on IT management.</p>\r\n<p>Wi-Fi continues to grow and adapt to business needs. While 2.4 GHz may be the norm in modern wireless networking, IEEE 802.11 specifications provide for many more options. Wireless network products using the Wi-Fi brand may operate in the 2.4, 3.6, 5, and 60 GHz frequency bands. Published in December 2013, amendment IEEE 802.11ac builds on IEEE 802.11n (October 2009) to include wider channels in the 5 GHz band, more spatial streams, higher order modulation, and the addition of multi-user MIMO (multiple input/multiple output).</p>\r\n<p>\"The emergence of IEEE 802.11ac doesn't necessitate changes in the current industry-standard security protocols,\" says Kevin Robinson, director of program marketing for the Wi-Fi Alliance. \"Wi-Fi CERTIFIED 'ac' <em>does</em> present an opportunity for enterprises using old equipment to migrate to a newer infrastructure and depart from earlier security mechanisms.\"</p>\r\n<p>The Wi-Fi Alliance is in the early stages of developing a certification program known as <a href=\"https://www.nsa.gov/ia/programs/suiteb_cryptography/\" target=\"_blank\" rel=\"noopener\">Suite B</a> for a set of encryption methods focused on encryption, key exchange, and related technologies for securing ultra-sensitive security domains. Suite B will likely be the next level of wireless protection. Until then, we have Wi-Fi with WPA2 and Protected Management Frames, which should suffice for the vast majority of modern organizations.</p>\r\n<p>Make sure your group has adopted the latest technologies described here. Enjoy the convenience and productivity of Wi-Fi, but do it safely.</p>\n","docType":"article","guid":"articles_2a4ad2313ef967ecbd6550a2ff362dcc","lastModified":"2018-07-11T14:26:00.000Z","published":"2018-07-11T14:26:00.000Z","structuredData":null,"subtitle":"The IEEE 802.11ax draft standard promises improved range, throughput and resiliency.","template":"v1","title":"Wireless Security In The Enterprise: Deploying WPA2-Enterprise","type":"article","author":{"avatar":null,"bio":"The purpose of our community is to connect small business owners with experienced industry experts who can address their questions, offer direction, and share best practices.","name":"business.com editorial staff","image":null,"slug":null,"social":{"facebook":"","linkedin":"https://www.linkedin.com/company/business-com-/","twitter":"https://twitter.com/businessdotcom","website":"https://www.business.com/"},"status":"enabled","title":null,"type":"Old BDC Member","user":{"imagePath":"https://staging.business.com/images/uploads/user/profile/b14a2c1fa0158a2f46854597139a2067ee8ef.jpg","profile":{"company":"","jobTitle":"","website":"https://www.business.com/"}}},"breadcrumbs":null,"channels":{"primary":{"name":"Technology","slug":"technology"},"sub":{"name":"Security","slug":"security"}},"meta":{"robots":"index, follow","description":"Today's enterprises are adopting WiFi with WPA2 and Protected Management Fames to keep their organizations secure.","title":"Wireless Security: How to Deploy WPA2-Enterprise - business.com"},"parsedContent":{"toc":[{"id":"wpa-deepening-security-authentication","title":"WPA: Deepening security authentication "},{"id":"wpa2-tightening-the-encryption","title":"WPA2: Tightening the encryption"},{"id":"standards-and-the-wi-fi-alliance","title":"Standards and the Wi-Fi Alliance"}],"json":[{"component":"p","children":["Today's IT teams spend countless hours keeping wireless enterprise networks safe from the perils that permeate the radio waves."]},{"component":"p","children":["Passive eavesdroppers can gather proprietary information, logins, and passwords. Intruders can steal bandwidth to transmit spam or use a network as a springboard to attack others. Even a low-tech attacker can harm a business by launching packet floods against its access points (APs) and nearby server."]},{"component":"p","children":[{"component":"QtWidget","props":{"bdcQtWidget":"","qtPubId":"1000","qtOfferGroupId":"152"}},{"component":"script","children":["window.bdcQtWidget.init();"]}]},{"component":"p","children":["At the start of the millennium, the ",{"component":"strong","children":["Wired Equivalent Privacy (WEP)"]}," security protocol provided security for wireless enterprises by encrypting data so that it was protected during transmission between endpoints. WEP used secret keys to encrypt data moving between the AP and receiving stations. Unfortunately, a decade ago, researchers discovered a flaw in WEP that allowed packet eavesdropping to recover the encryption key. Once developed into an exploit, software running on any off-the-shelf laptop could crack WEP in a matter of minutes. Inevitably, WEP was replaced in 2003 by the ",{"component":"strong","children":["Wi-Fi Protected Access (WPA)"]}," security protocol and security certification program."]},{"component":"p","children":[{"component":"em","children":["[Looking for network security services? ",{"component":"Link","props":{"href":"https://www.business.com/categories/network-security-services/","target":"_blank","rel":"noopener"},"children":["Check out our best picks"]},".]"]}]},{"component":"h2","props":{"id":"wpa-deepening-security-authentication"},"children":[{"component":"strong","children":["WPA: Deepening security authentication "]}]},{"component":"p","children":["WPA (referred to as the draft IEEE 802.11i standard) addressed most of the known vulnerabilities of WEP. Primarily intended for wireless enterprise networks, WPA implemented several significant changes."]},{"component":"p","children":["First, it included the ",{"component":"strong","children":["Extensible Authentication Protocol (EAP)"]},", which was built on a secure public-key encryption system so that only authorized network users could access the network. Second, WPA improved data encryption through the ",{"component":"strong","children":["Temporal Key Integrity Protocol (TKIP)"]},"; it scrambled the keys using a hashing algorithm to prevent tampering. Finally, a ",{"component":"strong","children":["message-integrity check (MIC)"]}," feature was added to determine whether a hacker captured or altered packets passing between the access point and client."]},{"component":"p","children":["Within the year, however, a flaw was found in WPA that relied on older weaknesses in WEP and limitations of the MIC feature."]},{"component":"h2","props":{"id":"wpa2-tightening-the-encryption"},"children":[{"component":"strong","children":["WPA2: Tightening the encryption"]}]},{"component":"p","children":["Available since 2004, WPA2 implements the mandatory elements of the IEEE 802.11i standard. And beginning in March 2006, WPA2 certification by the Wi-Fi Alliance became required for all new devices to bear the Wi-Fi trademark."]},{"component":"p","children":["WPA2 introduces the use of ",{"component":"strong","children":["AES (Advanced Encryption Standard)"]}," algorithms and ",{"component":"strong","children":["CCMP (Counter Cipher Mode with Block-Chaining Message Authentication Code Protocol)"]}," to tighten the security of both home networks and business enterprises. Dynamic encryption keys are distributed securely after a user logs in or provides a valid digital certificate. WPA2 can be implemented in one of two modes:"]},{"component":"ul","children":[{"component":"li","children":[{"component":"strong","children":["Pre-Shared Key (PSK) Mode –"]}," For home Wi-Fi networks, the owner defines the encryption passphrase on the wireless router and other APs. That passphrase must then be entered by users when connecting to the network."]},{"component":"li","children":[{"component":"strong","children":["Enterprise Mode – "]},"Organizations that want government-grade wireless security should use Wi-Fi Protected Access 2 Enterprise (WPA2-Enterprise). To improve the resiliency of mission-critical networks, WPA2-Enterprise was recently enhanced with Protected Management Frames, which further steal WPA2 against eavesdropping and packet forging. All Wi-Fi Certified devices support WPA2 for added protection."]}]},{"component":"h3","children":[{"component":"strong","children":["Deploying WPA2-Enterprise"]}]},{"component":"p","children":["WPA2-Enterprise deployment includes installing a RADIUS server (or establishing an outsourced service), configuring access points with the encryption and RADIUS server information, configuring your operating system with the encryption and IEEE 802.1x settings, and then connecting to your secure wireless enterprise."]},{"component":"h3","children":[{"component":"strong","children":["Enterprise authentication and communication: The RADIUS server and EAP"]}]},{"component":"p","children":["The standard for passing EAP over a network is IEEE 802.1x. In this authentication framework, the user who wants to be authenticated is the ",{"component":"em","children":["supplicant"]},". The RADIUS (remote authentication dial-in user service) server doing the authentication is the ",{"component":"em","children":["authentication server"]},", and the device at the AP, such as a laptop or smartphone, is the ",{"component":"em","children":["authenticator"]},"."]},{"component":"p","children":["Users are assigned login credentials to enter when connecting to the network; they don't see the actual encryption keys, and the keys aren't stored on the device. This protects the wireless network against terminated employees or lost devices. The authentication is port-based so that when a user attempts to connect to the network, communication is allowed through a virtual port for the transfer of login credentials. If authentication is successful, encryption keys are securely passed out and the user receives full access."]},{"component":"h3","children":[{"component":"strong","children":["RADIUS server options"]}]},{"component":"p","children":["Once you decide on which of the following RADIUS server options to use, you will set it up in the corresponding EAP, AP, and user settings."]},{"component":"ul","children":[{"component":"li","children":[{"component":"a","props":{"href":"http://technet.microsoft.com/en-us/network/bb643147.aspx","target":"_blank","rel":"noopener nofollow"},"children":["Windows Server"]},{"component":"strong","children":[" -- "]},"if you have a Windows Server set up, you can use either the Internet Authentication Service (IAS) in Windows Server 2003 or the Network Policy Server (NPS) in Windows Server 2008."]},{"component":"li","children":[{"component":"a","props":{"href":"http://freeradius.org/","target":"_blank","rel":"noopener nofollow"},"children":["FreeRADIUS"]}," -- this server is a free open source project and the preferred choice of advanced IT personnel. It is available for the Linux, Mac OS X, and Windows platforms."]},{"component":"li","children":["Outsourced Services -- if you have multiple offices or lack technical IT expertise, a hosting service is a good option. Many services provide more than just RADIUS server hosting. They can also help with the setup process, do user on-boarding, and provide real-time reporting functionality. In addition, many companies offer mobile applications that make configuring mobile devices quick and painless for Apple iOS, Android, and Kindle Fire users. Check out ",{"component":"a","props":{"href":"http://www.nowiressecurity.com/service.htm","target":"_blank","rel":"noopener nofollow"},"children":["No Wires Security"]}," and ",{"component":"a","props":{"href":"http://www.serverplus.com/index.php","target":"_blank","rel":"noopener nofollow"},"children":["ServerPlus"]}," to learn more."]}]},{"component":"h3","children":[{"component":"strong","children":["EAP options"]}]},{"component":"p","children":["Your EAP choice depends on the level of security you need and your server/client specs. Although there are more than ten ",{"component":"a","props":{"href":"http://technet.microsoft.com/en-us/library/cc770622(v=ws.10).aspx","target":"_blank","rel":"noopener nofollow"},"children":["EAP types"]},", these three are the most popular:"]},{"component":"ul","children":[{"component":"li","children":["PEAP (Protected EAP) -- this protocol authenticates users through the usernames and passwords they enter when connecting to the network. It is one of the easiest EAP types to implement."]},{"component":"li","children":["TLS (Transport Layer Security) -- although this EAP type requires more time to implement and maintain, TLS is very secure because both client and server validation is done with SSL (secure socket layer) certificates. Instead of connecting to the network with usernames and passwords, end-user devices or computers must have an SSL certificate file. You control the certificate authority and distribute the client certificates."]},{"component":"li","children":["TTLS (Tunneled TLS) --  this version of TLS doesn't require security certificates and reduces network management time. However, because TTLS doesn't have native support in Microsoft Windows, it requires a third-party client."]}]},{"component":"p","children":["The steps for configuring the APs with the encryption and RADIUS server information -- and for configuring your operating system with the IEEE 802.1x setting -- depend on your server and client specs. Consult your hardware and software manufacturers for guidance."]},{"component":"h2","props":{"id":"standards-and-the-wi-fi-alliance"},"children":[{"component":"strong","children":["Standards and the Wi-Fi Alliance"]}]},{"component":"p","children":["There's no end to the task of protecting against data theft and managing risk and compliance in the wireless enterprise. Key challenges in wireless security vary widely and continue to evolve because every enterprise is different. Some IT teams struggle with the impact of BYOD (bring your own device) while others seek ways to allow guest access without compromising security of mission-critical systems. The ",{"component":"a","props":{"href":"http://www.ieee802.org/11/","target":"_blank","rel":"noopener nofollow"},"children":["IEEE 802.11"]}," working group and ",{"component":"a","props":{"href":"http://www.wi-fi.org/","target":"_blank","rel":"noopener nofollow"},"children":["Wi-Fi Alliance"]}," continue to address emerging enterprise needs in the space as best they can. In addition, major platform vendors often provide ways to assist in the management of security measures, helping to reduce the resources needed and overall time spent on IT management."]},{"component":"p","children":["Wi-Fi continues to grow and adapt to business needs. While 2.4 GHz may be the norm in modern wireless networking, IEEE 802.11 specifications provide for many more options. Wireless network products using the Wi-Fi brand may operate in the 2.4, 3.6, 5, and 60 GHz frequency bands. Published in December 2013, amendment IEEE 802.11ac builds on IEEE 802.11n (October 2009) to include wider channels in the 5 GHz band, more spatial streams, higher order modulation, and the addition of multi-user MIMO (multiple input/multiple output)."]},{"component":"p","children":["\"The emergence of IEEE 802.11ac doesn't necessitate changes in the current industry-standard security protocols,\" says Kevin Robinson, director of program marketing for the Wi-Fi Alliance. \"Wi-Fi CERTIFIED 'ac' ",{"component":"em","children":["does"]}," present an opportunity for enterprises using old equipment to migrate to a newer infrastructure and depart from earlier security mechanisms.\""]},{"component":"p","children":["The Wi-Fi Alliance is in the early stages of developing a certification program known as ",{"component":"a","props":{"href":"https://www.nsa.gov/ia/programs/suiteb_cryptography/","target":"_blank","rel":"noopener nofollow"},"children":["Suite B"]}," for a set of encryption methods focused on encryption, key exchange, and related technologies for securing ultra-sensitive security domains. Suite B will likely be the next level of wireless protection. Until then, we have Wi-Fi with WPA2 and Protected Management Frames, which should suffice for the vast majority of modern organizations."]},{"component":"p","children":["Make sure your group has adopted the latest technologies described here. Enjoy the convenience and productivity of Wi-Fi, but do it safely."]}]},"resource":null,"sponsorship":{"sponsorType":"no-sponsor","name":null,"thumbnail":null,"bio":null,"slug":null,"status":null,"social":{"website":null,"linkedin":null,"twitter":null,"facebook":null}},"thumbnail":{"path":"https://staging.business.com/images/content/5d0/1910b5a215e5d7d8b4580/1500-0-","caption":"Undrey/Shutterstock","isBlurred":false},"bestPicks":null},"related":{"relatedArticles":[{"title":"Network Hardware & Assembly: LAN 102","canonical":"https://www.business.com/articles/local-area-network-hardware-assembly/","slug":"local-area-network-hardware-assembly","thumbnail":"https://www.business.com/images/content/5b1/a9a3551ee47a94d8b457a/1500-0-","dek":"Scott Mueller explains LAN hardware and assembly.","lastModified":"2018-07-11T14:46:00Z","published":"2018-07-11T14:46:00Z","sponsored":false},{"title":"Networking Basics: LAN 101","canonical":"https://www.business.com/articles/local-area-network-wi-fi-networking-basics/","slug":"local-area-network-wi-fi-networking-basics","thumbnail":"https://www.business.com/images/content/5b1/a9c8551ee47a74d8b4580/1500-0-","dek":"Learn about the glue that holds our networks together in this LAN primer.","lastModified":"2018-07-11T14:22:00Z","published":"2018-07-11T14:22:00Z","sponsored":false},{"title":"Cloud Encryption: Using Data Encryption in The Cloud","canonical":"https://www.business.com/articles/cloud-data-encryption/","slug":"cloud-data-encryption","thumbnail":"https://www.business.com/images/content/5d0/8eac17b437482458b4578/1500-0-","dek":"Data security remains a top concern in cloud adoption.","lastModified":"2018-07-03T12:10:00Z","published":"2018-07-03T12:10:00Z","sponsored":false},{"title":"Why You Should Care About IEEE 802.11ax","canonical":"https://www.business.com/articles/what-is-802-11-ax-wi-fi/","slug":"what-is-802-11-ax-wi-fi","thumbnail":"https://www.business.com/images/content/5ed/525b79c658a347e8b4572/1500-0-","dek":"The IEEE 802.11ax draft standard promises improved range, throughput and resiliency.","lastModified":"2020-06-09T16:49:00Z","published":"2018-07-11T14:35:00Z","sponsored":false},{"title":"Best Enterprise Gear for the 802.11ac Wi-Fi Standard","canonical":"https://www.business.com/articles/80211-ac-access-points/","slug":"80211-ac-access-points","thumbnail":"https://www.business.com/images/content/5d1/372b07b43740a028b4588/1500-0-","dek":"Here's what to look for in 802.11ac enterprise gear.","lastModified":"2018-07-11T14:20:00Z","published":"2018-07-11T14:20:00Z","sponsored":false},{"title":"PowerShell: Everything You Need to Know","canonical":"https://www.business.com/articles/powershell-everything-you-need-to-know/","slug":"powershell-everything-you-need-to-know","thumbnail":"https://www.business.com/images/content/5b8/998581039eb8f738b457b/1500-0-","dek":"What you need to know to unlock Microsoft PowerShell's full capabilities.","lastModified":"2018-09-05T17:00:00Z","published":"2018-09-05T17:00:00Z","sponsored":false},{"title":"Decoding the Hierarchy of Data Protection","canonical":"https://www.business.com/articles/data-protection-hierarchy/","slug":"data-protection-hierarchy","thumbnail":"https://www.business.com/images/content/5ad/e2b331039eba5148b456a/1500-0-","dek":"What are your options for protecting your data and how do you decide on a strategy?","lastModified":"2018-04-23T19:00:00Z","published":"2018-04-23T19:00:00Z","sponsored":false},{"title":"How to Select the Right Encryption Key Management Solution","canonical":"https://www.business.com/articles/encryption-key-management-considerations/","slug":"encryption-key-management-considerations","thumbnail":"https://www.business.com/images/content/5b3/b6aae92a3a480118b457d/1500-0-","dek":"Encryption key management is a necessary component of effective data protection.","lastModified":"2018-07-03T12:06:00Z","published":"2018-07-03T12:06:00Z","sponsored":false},{"title":"How to Do a Cybersecurity Risk Assessment","canonical":"https://www.business.com/articles/cybersecurity-risk-assessment/","slug":"cybersecurity-risk-assessment","thumbnail":"https://www.business.com/images/content/5d2/2b53d5a215efd708b457a/1500-0-","dek":"Learn how to find the vulnerabilities and risks in your network before hackers do.","lastModified":"2019-08-09T13:30:00Z","published":"2019-08-09T13:30:00Z","sponsored":false},{"title":"Mobile Wallet Guide: Google Pay vs. Apple Pay vs. Samsung Pay - 08-05","canonical":"https://staging.business.com/articles/google-pay-vs-apple-pay-vs-samsung-pay/","slug":"google-pay-vs-apple-pay-vs-samsung-pay","thumbnail":"https://staging.business.com/images/content/5c5/afd7f54d26d67178b458d/1500-0-","dek":"Edit 07-24 - subtitle","lastModified":"2019-08-05T20:58:00Z","published":"2018-06-21T16:05:00Z","sponsored":null},{"title":"Mobile Wallet Guide: Google Pay vs. Apple Pay vs. Samsung Pay","canonical":"https://www.business.com/articles/google-pay-vs-apple-pay-vs-samsung-pay/","slug":"google-pay-vs-apple-pay-vs-samsung-pay","thumbnail":"https://www.business.com/images/content/5c5/e0a269c658a457c8b4591/1500-0-","dek":"You no longer need to carry a bulky wallet filled with numerous credit cards or cash.","lastModified":"2018-06-21T16:06:00Z","published":"2018-06-21T16:05:00Z","sponsored":false},{"title":"Endpoint Protection vs. Anti-Malware: What You Need to Know","canonical":"https://www.business.com/articles/endpoint-protection-vs-anti-malware-business/","slug":"endpoint-protection-vs-anti-malware-business","thumbnail":"https://www.business.com/images/content/5ad/527d892a3a45a3e8b4592/1500-0-","dek":"Learn which cybersecurity solution is best for your business.","lastModified":"2017-04-17T12:00:00Z","published":"2017-04-17T12:00:00Z","sponsored":false}],"relatedReviews":[{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df908cc5a215e8c4a8b4568/conferencecall_Antonio_Diaz_Getty.jpg","canonical":"https://staging.business.com/categories/best-conference-call-services/","title":"The Best Conference Call Services of 2021","dek":"Which conference call service is right for your business in 2021? We review the top-rated services.","slug":"best-conference-call-services","lastModified":"2021-03-17T18:17:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5e00d4787b43745d6a8b456e/Laptop_undrey_getty.jpg","canonical":"https://staging.business.com/categories/employee-monitoring-software/","title":"The Best Employee Monitoring Software of 2021","dek":"We've narrowed down the best employee monitoring software for businesses. Check out our best picks and reviews.","slug":"employee-monitoring-software","lastModified":"2021-03-05T15:40:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df905909c658a7e538b4567/Faxing_junce_Getty.jpg","canonical":"https://staging.business.com/categories/online-fax-services/","title":"The Best Online Fax Services of 2021","dek":"Online fax services are growing as more companies divest from conventional fax machines in favor of an automated, scalable and cost-effective option. Here's a look at some of the best online fax services on the market. ","slug":"online-fax-services","lastModified":"2021-03-02T16:07:00Z"}],"relatedSponsoredArticles":null}},"pageContext":{"displayModified":"2018-07-11T14:26:00.000Z","template":"v1","title":"Wireless Security In The Enterprise: Deploying WPA2-Enterprise","meta":{"robots":"index, follow"},"docType":"articles","slug":"deploying-wpa2-enterprise-encryption","canonical":"https://staging.business.com/articles/deploying-wpa2-enterprise-encryption/","skipTOC":false}},"staticQueryHashes":[]}