Close
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cybersecurity
    • Cybersecurity
    • Mobile

    How to WPA3 Can Boost Your Organization’s Wireless Security

    Written by

    Wayne Rash
    Published June 28, 2018
    Share
    Facebook
    Twitter
    Linkedin

      eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

      The Wi-Fi Alliance has begun certifying wireless devices that meet the new WPA3 standard in a move that will make wireless communications more secure and easier to manage, but it’ll be awhile before you can incorporate the new standard into your organization’s network. However, you can buy devices that are able to be upgraded to WPA3, and you can begin planning for the transition.

      The transition will be fairly straightforward, although for many installations it’ll mean having to buy new access hardware. At this point, only Cisco has said that current systems will be updated to support WPA3. “Cisco is committed to integrating WPA3 features into our Aironet Access Points and Wireless Controllers via a firmware upgrade so that our existing and new customers can take advantage of the capabilities offered by WPA3,” Greg Dorai, vice president for Cisco WLAN, said in a prepared statement.

      A number of other wireless vendors, including Aerohive, Arris, Aruba, Broadcom, Intel and Qualcomm, have said they’re going to start building products that support the WPA3 standard. However, actual products with support for WPA3 won’t start appearing on the market until late 2018, with most appearing in 2019.

      Once WPA3 infrastructure products begin appearing, the first steps will be to upgrade your access points, controllers and routers. Your existing WPA2 client devices will continue to work because part of the Wi-Fi Alliance’s standard is backward-compatible. When you reach the point where all of your devices are WPA3-compatible, you can turn off the support for WPA2.

      Right now, it’s not clear when you can expect to see client devices that support WPA3. The chip makers are going through the certification process now, but so far the Wi-Fi Alliance hasn’t announced that it’s certified anything and a search for WPA3 devices yields no results. This isn’t surprising considering that certification only began a few days ago. At some point, certified products will emerge and you will be able to start evaluating them.

      Getting Ready for WPA3

      In the meantime, you can begin getting ready for WPA3 by looking for devices on your network that use older standards, if you still have any. The new WPA3 infrastructure will not support the original WPA nor WEP. Considering that WPA2 has been around for 14 years, you probably won’t find many such devices, but if you do, it’s time for them to go because they’re insecure and can’t be made secure.

      Next, contact your wireless infrastructure vendor to determine whether there are plans to upgrade your devices to the new standard. Cisco has already said that its Aironet devices will receive a software update that will take care of it, but it’s not clear from what Cisco has said so far whether all of its Aironet APs and controllers will receive the upgrades, or just the most recent versions.

      The next step is to consider your specifications for future hardware purchases. It’s likely that devices with built-in WiFi, such as laptops, tablets and phones, will include support for WPA3 when they’re shipped in 2019. While it’s possible that devices made in 2018 and earlier may be able to be upgraded, I wouldn’t count on it.

      WPA3 is intended to have improved support for the internet of things (IoT), but that really means new devices. While WPA3 infrastructure will support IoT devices designed for WPA2, this is an area where you may run into issues, if only because some legacy devices use older standards, which won’t be supported. This could especially affect the healthcare industry, where for reasons that remain unclear, devices seem to have been built without any capability for updates.

      On the other hand, some manufacturing equipment is running even older wireless standards that rely on obsolete wireless buses that don’t even meet the original WiFi standards. If you still have such equipment, you already know it’s not secure. Perhaps this is the time to think about upgrading those networks as well.

      WPA3 Versions for the Home and Enterprise

      It’s worth noting that the Wi-Fi Alliance has divided WPA3 into two types, one for home use and one for the enterprise. The home version of the standard is quite secure and is what you’ll encounter in uses ranging from small offices to airports.

      The enterprise version of WPA3 is intended for highly secure applications for the government, financial institutions and the like. Despite the fact that the Wi-Fi Alliance doesn’t say you should use you the enterprise version for most business uses, you should. It has better encryption, and it can handle penetration attempts more effectively.

      A couple of important changes are that WPA3 access points are no longer subject to dictionary attacks in which the handshake between devices is recorded and then subjected to a brute-force means of learning the password. With the new system, you have to start over after each failed attempt at a password, which makes an attempt to crack the password take dramatically longer.

      In addition, WPA3 uses forward secrecy, which means that even if someone figures out the password to your access point, they can’t go back and use it on previously recorded data.

      Another important change is that open networks will still encrypt data, so you won’t have to worry about someone reading your email while you’re at the airport. Unfortunately, that still doesn’t prevent someone from setting up a man-in-the-middle attack or using a bogus access point. Still, it’s a huge improvement of the current situation in which nothing is encrypted on an open network.

      Overall, WPA3 is a needed change that’s been a long time coming. Once it’s in place, consider moving to it as rapidly as you can. It will make your network much more secure.

      Wayne Rash
      Wayne Rash
      https://www.eweek.com/author/wayne-rash/
      Wayne Rash is a content writer and editor with a 35-year history covering technology. He’s a frequent speaker on business, technology issues and enterprise computing. He is the author of five books, including his most recent, "Politics on the Nets." Rash is a former Executive Editor of eWEEK and a former analyst in the eWEEK Test Center. He was also an analyst in the InfoWorld Test Center and editor of InternetWeek. He's a retired naval officer, a former principal at American Management Systems and a long-time columnist for Byte Magazine.

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      MOST POPULAR ARTICLES

      Artificial Intelligence

      9 Best AI 3D Generators You Need...

      Sam Rinko - June 25, 2024 0
      AI 3D Generators are powerful tools for many different industries. Discover the best AI 3D Generators, and learn which is best for your specific use case.
      Read more
      Cloud

      RingCentral Expands Its Collaboration Platform

      Zeus Kerravala - November 22, 2023 0
      RingCentral adds AI-enabled contact center and hybrid event products to its suite of collaboration services.
      Read more
      Artificial Intelligence

      8 Best AI Data Analytics Software &...

      Aminu Abdullahi - January 18, 2024 0
      Learn the top AI data analytics software to use. Compare AI data analytics solutions & features to make the best choice for your business.
      Read more
      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Video

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2024 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×