Implementing a Secure Wireless Network for a Windows Environment

The goal of this paper is to be an easy to follow guide for configuring and securing a wireless network in a windows environment. Specifically we will at configuring Microsoft Internet Security and Acceleration (ISA) Server 2004, Microsoft Certificate Services Server, Microsoft Internet Authentication Service, various off-the-shelf wireless access points, and the steps involved for configuring a VPN for connecting wireless clients as part of a defense-in-depth approach to 802.11 wireless networking. In the interest of space, a domain model will be discussed in depth using WPA Radius, however deviations from that will be touched on so that companies can start with the configurations and equipment they have now, and then build on it later. Additionally, basic wireless sniffing / hacking techniques will be covered lightly, so that administrators can audit the security of their networks and feel confident with the end product.