OPSEC Partners

Product Description: The AirWave Management Platform™ is a flexible, easy-to-implement, network management solution specifically designed to make Wireless LANs as manageable and secure as wired networks.

Enterprises implementing large WLANs take advantage of the AMP™ platform by:

1. Improved network performance through effective real-time monitoring and reporting
2. Reduced support costs and superior ROI through efficient troubleshooting and device management
3. Effective end-to-end security by incorporating the enforcement of security policies into network management.

The AirWave Management Platform™ (AMP) is a network management solution specifically designed to enable IT organizations to manage their wireless LANs and all connected devices from a single console. Without AMP, IT organizations typically must develop rudimentary "homegrown" solutions and devote significant manual labor to the management of their WLANs. As a result, WLAN management costs skyrocket and network performance falls far below acceptable enterprise standards.

The AirWave Management Platform has a flexible architecture that allows it to be installed quickly and easily in virtually any existing network environment, allowing administrators to gain full control over their WLAN without reconfiguring their network infrastructure. AMP customers see immediate benefits upon installation:

• Reduced support costs and improved ROI
  AMP eliminates expensive manual processes and lowers WLAN support costs by automating routine management tasks, such as detecting and configuring new network devices, changing radio settings, updating firmware, and maintaining strict configuration management. AMP enables the IT staff to control the network efficiently from a central location, greatly reducing the Total Cost of Ownership (TCO) of a wireless network.
• Superior network performance
  AMP dramatically improves wireless network performance by providing real-time monitoring of all network devices, enabling network administrators to identify and correct potential problems before users are affected. AMP is vendor-agnostic management solution that supports access points and client devices from all major manufacturers.
• End-to-end security
  Through its relationship with Check Point, AirWave fully integrates authentication information and correlates it with data from all connected wireless devices. AMP alerts the IT organization to the presence of rogue users and Access Points, and ensures that network devices are configured in compliance with security policies.

The AirWave Management Platform is the first OPSEC-certified product to:

1. Detect and alert IT of the presence of rogue users and Access Points
2. Enable detailed tracking of both authenticated and unauthenticated users on the WLAN
3. Improve network management by correlating connected network devices to Check Point authentication IDs
4. Provide a turn-key wireless management solution that leverages a company's Check Point VPN server and existing LAN infrastructure
5. Offer a secure tunneling solution that ensures that all traffic from select AirWave-enabled access points is routed directly to the Check Point VPN server, eliminating the need to reprogram network routers and switches

AMP and VPN-1 integrate seamlessly via the LEA API. This integration enables AMP to validate that each wireless device associated with the WLAN is an authenticated user. AMP collects device MAC and IP information and utilizes the LEA API to query VPN-1 server for user name and authentication status.

User name and authentication status provide two major benefits. First by retrieving authentication status on devices, the AMP can send Alerts on possible Rogue users. AMP's Rogue user detection and built-in Rogue Access Point detection combine with Check Point's VPN-1 server to deliver the highest security level possible for current WLAN implementations. Secondly, user information obtained from UAA increases AMP's ability to deliver better management and monitoring metrics to the customers. Managing a WLAN via real user names opposed to MAC or IP information is much easier.