Enabling/disabling airfortress encryption, Encrypting wired traffic, Zeroizing the access id – Fortress Technologies BreadCrumb Wireless Network User Manual

Page 46: Harris secnet11, 40 zeroizing the access id

Advertising
background image

Chapter 5. Using BCAdmin™

Enabling/Disabling AirFortress Encryption

AirFortress encryption is enabled and disabled on a BreadCrumb device using a checkbox on the General
tab of the BreadCrumb Properties window. Unlike the Access ID, this setting may be changed when
communicating wirelessly with the BreadCrumb device.

Important: Enabling and disabling AirFortress encryption in a BreadCrumb device has an immediate effect. If
you change this setting, you will have to change your BCAdmin workstation’s setting to match it in order to
communicate with the BreadCrumb device again.

Encrypting Wired Traffic

The BreadCrumb devices’ AirFortress support includes the ability to encrypt traffic from a wired
network provided that the BreadCrumb device’s ethernet interface is in either Gateway Mode or Gateway
(Ingress) Mode. With AirFortress enabled on a BreadCrumb device in one of these modes, encryption of
wired traffic entering the wireless network and decryption of wireless traffic entering a wired network is
completely automatic.

Tip: In addition to providing secure wireless extension of a wired network, this feature can be used to encrypt
communications from ethernet-enabled devices (such as cameras) for which an AirFortress client is not
available. For an example of this, see the Section called Encrypting a Video Feed in Chapter 6.

Zeroizing the Access ID

The BreadCrumb Access ID and other settings can be erased remotely or with physical access to the
BreadCrumb device by following the steps in the Section called Restoring Default Settings (Factory
Reset)
in Chapter 7.

Harris SecNET11

For security exceeding AES-256 encryption, Rajant provides support for Harris Corporation’s SecNet11
product family. You must specify when ordering your BreadCrumb devices that you require this feature;
each BreadCrumb radio will be replaced with a SecNet11 Plus PC card.

The SecNet11 Plus PC card has been certified as part of the National Security Agency (NSA)
Commercial COMSEC Evaluation Program (CCEP).

Tip: To learn more about the SecNet11, visit http://www.govcomm.harris.com/secure-comm/.

40

Advertising