CWSP: Enterprise Wi-Fi Security

The CWSP certification is a professional level wireless LAN certification for the CWNP Program.

Enterprise Wi-Fi Security (CSWP) is a four-day instructor-led course that uses the latest enterprise wireless LAN security and auditing equipment to teach, in detail, the most up-to-date WLAN intrusion and DoS tools and techniques. You will learn about functionality of the 802.11i amendment to the 802.11 standard, the inner-workings of each EAP type used with wireless LANs today, and every class and type of WLAN security solution available on the market from wireless intrusion prevention systems to wireless network management systems.

What's Included

• Comprehensive study materials, including official CWNP courseware
• Remote lab access

Prerequisites

• CWNA

Course Objectives

• WLAN security technology and solutions
• WLAN security policy, concerns, and auditing practices
• Layer vulnerabilities and analysis
• WLAN mobile endpoint security solutions
• WPA/WPA2 Personal and Enterprise configurations
• WLAN management and monitoring
• IEEE 802.11 Authentication and Key Management (AKM)

Course Outline

Module 1: Security Fundamentals

• Security Basics
• CWNA Security Review
• Industry Organizations
• Terminology
• Wireless Vulnerabilities

Module 2: Wireless Security Challenges

• Network Discovery
• Pseudo-Security
• Legacy Security Mechanisms
• Network Attacks
• Recommended Practices

Module 3: Security Policy

• Defining Security Policies
• Policy Enforcement
• Policy Management
• Policy Types

Module 4: Understanding Authentication

• Passphrase Authentication
• AAA
• RBAC
• RADIUS
• 802.1X
• EAP

Module 5: Authentication and Key Management

• Robust Security Networks (RSN)
• RSN Information Element
• RSN Authentication and Key Management (AKM)

Module 6: Encryption

• Encryption Fundamentals
• Encryption Algorithms
• WEP
• TKIP
• CCMP

Module 7: Security Design Scenarios

• Virtual Private Networks (VPN)
• Remote Networking
• Guest Access Networks

Module 8: Secure Roaming

• Roaming Basics and Terminology
• Preauthentication
• PMK Caching
• Opportunistic Key Caching (OKC)
• 802.11r FT
• Proprietary Roaming
• Voice Enterprise

Module 9: Network Monitoring

• Wireless Intrusion Prevention Systems (WIPS)
• WIPS Deployment Models
• WIPS Policy
• Threat Mitigation
• Location Services
• WNMS
• Protocol Analysis
• Spectrum Analysis

Labs

• Lab 1: WLAN Connectivity
• Lab 2: 802.1X/EAP Configuration
• Lab 3: Wireless Intrusion Prevention Systems (WIPS)
• Lab 4: Using Laptop-based Protocol and Spectrum Analyzers
• Lab 5: Fast Secure Roaming
• Lab 6: Network Attacks and Auditing