CAPÍTULO II. MARCO TEÓRICO
2.2 Aproximación al fundamento interdisciplinar
2.2.2 Ciencias de la comunicación en el análisis interdisciplinar del objeto de estudio
2.2.2.4 Modelos de formación y nuevos retos en la enseñanza de la comunicación
This section provides device characteristics for the SonicWALL TZ 170 SP Wireless and the SonicWALL TZ 170 Wireless.
Table 13 SonicWALL TZ Series Wireless Device Characteristics
SonicWALL TZ 170 SP Wireless SonicWALL TZ 170 Wireless
Platform
Hardware
Processor:
SonicWALL Security Processor
RAM: 64 MB
Flash Memory: 8 MB
Interfaces:
(7) 10/100 Ethernet (1 WAN, 1 Optional, 1 5-Port LAN Switch) (1) v.92 Analog Modem
Access Point: 802.11b/g WLAN
Antennas:
Dual, External 5 dBi Diversity Dipole Antennas
Console: (1) Serial Port Dimensions: 9.07 x 6.63 x 1.63 inches (23.04 x 16.84 x 4.14 cm) Weight: 1.40 lbs (.64 kg) Power: 100V to 240V AC
Max Power Consumption: 10.6 W
Total Heat Dissipation: 36.1 BTU
Processor:
SonicWALL Security Processor
RAM: 64 MB
Flash Memory: 8 MB Interfaces:
(7) 10/100 Ethernet (1 WAN, 1 Optional, 1 5-Port LAN Switch)
Access Point: 802.11b/g WLAN
Antennas:
Dual, External 5 dBi Diversity Dipole Antennas
Console: (1) Serial Port Dimensions: 9.07 x 6.63 x 1.63 inches (23.03 x 16.84 x 4.14 cm) Weight: 1.40 lbs (.64 kg) Power: 100V to 240V AC
Max Power Consumption: 9.4 W
Total Heat Dissipation: 32.1 BTU
Security • Deep Packet Inspection hardware and firmware architecture
• Ships in 10 node configuration; upgradeable to 25 and Unrestricted nodes
Concurrent connections: 6,000
Stateful Throughput: 90 Mbps (bi-directional)
• Deep Packet Inspection hardware and firmware architecture
• 10/25/Unrestricted Node Configurations
Concurrent connections: 6,000
Stateful Throughput: 90 Mbps (bi-directional)
VPN • IPSec VPN, compatible with other IPSec-compliant VPN gateways
• Support two site-to-site VPN policies
• 3DES and AES
Performance: 30+ Mbps
• IPSec VPN, compatible with other IPSec-compliant VPN gateways
• Bundled VPN Client Sessions
• Optional Upgrade with 10 node SonicWALL TZ 170 Wireless (Maximum Sessions: 5)
• 1 with 25 node SonicWALL TZ 170 Wireless (Maximum Sessions: 50)
• 1 with Unrestricted node SonicWALL TZ 170 (Maximum Sessions: 50)
• Site-to-Site VPN Policies
• 2 with 10 node SonicWALL TZ 170 Wireless
• 10 with 25 node SonicWALL TZ 170 Wireless
• 10 with Unrestricted node SonicWALL TZ 170 Wireless
• 3DES and AES
Performance: 30+ Mbps
Value Added Services
The SonicWALL TZ 170 SP Wireless ships standard with the following SonicWALL security services:
• 30 days of Gateway Anti-Virus/Intrusion Prevention Service
• Content Filtering Service Premium Edition
• Network Anti-Virus (10 user license) and ViewPoint.
The SonicWALL TZ 170 Wireless ships standard with the following SonicWALL security services:
• 30 days of Gateway Anti-Virus/Intrusion Prevention Service
• Content Filtering Service Premium Edition
Network • NAT • DHCP • PPPoE • PPTP • NAT • DHCP • PPPoE • PPTP
Warranty • One-year warranty for repair or replacement of any defective product due to manufacturer's defects
• 90 days support and firmware updates
• Access to SonicWALL electronic support tools
• One-year warranty for repair or replacement of any defective product due to manufacturer's defects
• 90 days support and firmware updates
• Access to SonicWALL electronic support tools
Standards TCP/IP, UDP, ICMP, HTTP, HTTPS, RADIUS, IPSec, ISAKMP/IKE, SNMP, L2TP, DHCP, PPPoE, PPTP
TCP/IP, UDP, ICMP, HTTP, RADIUS, IPSec, ISAKMP/IKE, SNMP, L2TP, DHCP, PPPoE, PPTP
Regulatory Compliance
FCC Class B, ICES Class B, CE, C-Tick, VCCI, BSMI, MIC, UL, cUL, TUV/GS, CB, NOM
FCC Class B, ICES Class B, CE, C-Tick, VCCI, BSMI, MIC, UL, cUL, TUV/GS, CB, NOM
Certifications ICSA Firewall 4.0 ICSA IPSec 1.0D FIPS 140-2
Pending: Common Criteria and EAL-2
ICSA Firewall 4.0 ICSA IPSec 1.0D FIPS 140-2
Pending: Common Criteria and EAL-2
Environment Temperature: 40-105 °F, 5-40 °C Humidity: 10-90% non-condensing Temperature: 40-105 °F, 5-40 °C Humidity: 10-90% non-condensing MTBF 7.5 years 7.9 years
Table 13 SonicWALL TZ Series Wireless Device Characteristics
Glossary
3DES: A more secure variant of the Data Encryption Standard for encryption, Triple DES (3DES) extends the DES key to 168 bits in length.
802.11: A family of IEEE standards for wireless networking (WLANs). 802.11b supports transmissions up to 11 Mbps. 802.11g supports transmissions up to 54 Mbps. Both 802.11b and 802.11g operate in the 2.4GHz range.
access point: A device that primarily performs the wireless-to-wired bridging function by converting frames on a 801.11 network to another type of network.
Advanced Encryption Standard(AES): A recent U.S. government encryption standard designed as the replacement for the aging Data Encryption Standard (DES).
Authentication Back End (ABE): Consists of a Web server to host content for user interaction and an authentication server to provide directory services for authenticating wireless hotspot users for managing network access.
Deep Packet Inspection (DPI): An advanced form of network packet filtering that examines the data part of passing packets, searching for malicious code embedded in the data.
Dynamic Host Configuration Protocol (DHCP): An allocation of IP addresses to computers on the network automatically without assigning a computer a static (fixed) IP address. Commonly deployed in conjunction with NAT to share a single public IP address across a network by assigning private IP addresses to network clients.
Extensible Authentication Protocol (EAP): An extension of Point-to-Point Protocol that provides support for multiple authentication methods, such as token cards, Kerberos, one-time passwords, certificates, public key authentication and smart cards. In wireless communications using EAP, a user requests connection to a WLAN through and access point, which then requests the identity of the user and transmits that identity to an authentication server, such as RADIUS. EAP enables flexible exchange of authentication protocols. Common EAP types used by WPA include EAP-PEAP, EAP-TLS, and EAP-TTLS.
– EAP-PEAP (Protected Extensible Authentication Protocol): An authentication for WLAN clients using only server-side digital certificates by creating an encrypted Secure Sockets Layer (SSL) or Transport Layer Security (TLS) tunnel between the client and the authentication server. The tunnel then protects the subsequent user authentication exchange.
– EAP-TLS(Transport Layer Security): An IETF protocol that provides privacy and data integrity between client/server communications with data encryption, encapsulation and authentication between the server and the WLAN client.
– EAP-TTLS(Tunneled Transport Layer Security): A protocol that provides encapsulated security via an end-to-end tunnel to transfer the client's credentials without having to use a certificate on the client.
Faraday cage: An enclosure with no apertures (holes, slits, windows or doors) made of a perfectly conducting material. No electric fields are produced within the Faraday cage by the incidence of external fields upon it or by currents flowing on the perfect conductor; that is, the perfectly conducting enclosure is a perfect electromagnetic shield. If no electrical energy sources are within the Faraday cage, then there will be no electric fields within, since none can penetrate the conducting enclosure.
hardware failover: The capability of a mission-critical device, such as a SonicWALL security gateway, to automatically failover to a backup device in the event of a hardware failure on the primary unit.
Hypertext Transfer Protocol(HTTP): A set of rules for transferring files (text, graphic, images, sound, video, and other multimedia files) on the World Wide Web. HTTP is an application protocol that runs on top of the TCP/IP suite of protocols.
Hypertext Transfer Protocol over Secure Socket Layer (HTTPS): A Web protocol that encrypts and decrypts pages for secure connections.
Internet Key Exchange (IKE): A protocol for managing keys in public key cryptography systems. intrusions: Malicious network attacks that exploit network vulnerabilities, such as weaknesses in operating systems or applications.
IPSec: An international group organized under the International Engineering Task Force (IETF) developed the Internet Protocol Security (IPSec) protocol. IPSec provides a framework for a set of protocols for security at the network or packet processing layer of network communication. IPSec is especially useful for implementing virtual private networks. IPsec is based on the latest crytographic technologies, ensuring strong authentication and privacy capabilities.
Internet Security Association and Key Management Protocol (ISAKMP): A definition for the framework for any number of key-exchange protocols, including Internet Key Exchange (IKE). Lightweight Hotspot Messaging (LHM): A definition for the method and syntax for communications between a wireless access device (such as a SonicWALL TZ 170 Wireless or
SonicPoint) with a SonicWALL PRO Series security appliance (such as a SonicWALL PRO 5060) and an Authentication Back-End (ABE) for the purpose of authenticating hotspot users and providing them with managed network access.
Network Address Translation (NAT): The translation of an IP address used within one network to a different IP address known within another network. Typically, a company maps its local private IP addresses to one or more public IP addresses. NAT is primarily used to conserve the number of public IP addresses a company needs and provides some security. NAT is included as part of a router or firewall. network access rule: A defined rule created to block or allow specified traffic to pass through a firewall.
network address object: A defined entity based on one of four object classes: address, user, service, and schedule. These address objects allow the administrator to create a single reusable object for multiple references throughout the SonicOS Enhanced management interface, such as for network access rules or NAT policies.
network gateway: A computer server or security device that acts as an entrance to another network. Typically controls the traffic flows and security protections at the intersection of networks.
The Point-to-Point Protocol over Ethernet (PPPoE): A combination of the Point-to-Point Protocol (PPP), commonly used in dial-up connections, with the Ethernet protocol, which supports multiple users in a local area network. PPPoE is commonly used for DSL connections.
Point-to-Point Tunneling Protocol (PPTP): A Microsoft encapsulation protocol for virtual private networking based on the Internet standard Point-to-Point Protocol (PPP).
Remote Authentication Dial-In User Service (RADIUS): A client/server protocol that enables remote access servers to communicate with a central server to authenticate users and authorize their access to the requested system or service.
Service Set Identifier (SSID): A unique string of characters that identifies a wireless network. Virtual Private Network (VPN): A method for providing secure access across the public Internet. A VPN maintains privacy through data encryption and authentication, creating a tunnel between two points.
Wired Equivalent Privacy (WEP): An earlier security standard for ciphering individual data frames on IEEE 802.11 wireless LANs. WEP was intended to provide minimal privacy. Wi-Fi Protected Access (WPA), ratified by the IEEE in 2003, supersedes WEP with enhanced security protection.
WiFiSec: A SonicWALL technology that uses IPSec as the basis for WLAN security and beyond. Incorporated in SonicWALL’s Global VPN Clients running on wireless clients and SonicWALL wireless gateways, WiFiSec provides the same crytographic technologies used by IPSec for wireless networks. wireless bridge: An access point that allows communication between network segments.
wireless client: Any client device on a wireless network.
Wireless Guest Service (WGS): A configurable user service to provide guest user accounts with Internet access.
WLAN: A wireless local area network in which a user can connect to a LAN through a wireless (radio) connection. The 802.11 standard specifies the technologies for the wireless LANs.
Wi-Fi Protected Access (WPA): A newer security standard for wireless networks designed to replace WEP. WPA provides more sophisticated data encryption that WEP and also provides enhanced user authentication. WPA’s encryption method is the TKIP. WPA is a subset of the upcoming IEEE 801.11i security standard.