LEAP Security Vulnerabilities??

Thu Jun 13 18:52:28 UTC 2002

If you're serious enough about security to find 128 WEP inadequate, I would
think you would be doing some sort of VPN or other SSL solution anyway,
making WEP redundant. Or am I missing something?

Best,

-Al Rowland

-----Original Message-----
From: Hyska, Jason [JJCUS] [mailto:JHyska1 at CORUS.JNJ.com]
Sent: Thursday, June 13, 2002 10:15 AM
To: nanog at merit.edu
Subject: LEAP Security Vulnerabilities??

I am well aware of the many security vulnerabilities that exist on wireless
networks as well as the inadequacies of WEP.  I was curious if anyone has
had any experiences with Cisco's LEAP authentication protocol?  I have
scoured the net for reviews or documents examining any potential
vulnerabilities, but have not been able to find any.  Any and all help or
information would be appreciated.

Thanks in advance, 
Jason Hyska 
Worldwide Information Security 
Johnson & Johnson 
jhyska1 at corus.jnj.com 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20020613/708d2a5f/attachment.html>