ReefEdge Networks Offers Cost-Effective, Easy to Implement Solution for Cisco Customers with WLAN Security Concerns.

Business Editors/High-Tech Writers

FORT LEE, N.J--(BUSINESS WIRE)--April 19, 2004

ReefEdge Networks Enables IT Managers Who Bet On Cisco To Sleep Again;

Enhancements Go Beyond Security

ReefEdge Networks, a leading provider of interoperable, managed, and secure WLAN systems for multi-site enterprises, has announced the availability of the ReefEdge Cisco Compatible Wireless Security (CCWS) solution bundle. Built with the award-winning ReefSwitch technology, the ReefEdge CCWS is being offered to multi-site Cisco WLAN customers concerned with the potentially serious security issues recently discovered in Cisco's proprietary LEAP authentication protocol and WLAN management systems. The ReefEdge CCWS solution bundle is a starter kit consisting of three ReefSwitch 100A appliances, two Site-Manager Software licenses, one Multi-Site Manager software license, and two ReefSwitch 25s, along with installation and support services.

The ReefEdge CCWS is fully compatible within Cisco network environments and offers rapid, seamless integration without any requirement for extensive network re-calibration. The ReefEdge CCWS delivers robust, standards-based security along with a variety of additional benefits for the granular management of user bandwidth, quality of service (QoS), and mobility of Cisco wireless environments.

The ReefEdge announcement comes on the heels of two recent unrelated, but potentially serious wireless security warnings issued by Cisco.

"ReefEdge understands that customers who have purchased Cisco wireless gear need to protect their investment," said David Goretski, ReefEdge Chief Executive Officer. "Our ReefSwitch technology has proven to be both cost-effective and easy to deploy in Cisco environments and offers a range of benefits that go above and beyond security."

Cisco's LEAP Security Issue

A hacking tool called "Asleap, " which attacks vulnerabilities in network systems using Cisco's proprietary LEAP (Lightweight Extensible Authentication Protocol), has recently been made publicly available. LEAP is used to relay port access requests between clients, switches, access points, and RADIUS servers using 802.1X for authentication. The Asleap tool works by finding LEAP-protected networks, forcing users off their connections (de-authenticating them) to force a new authentication, capturing the transaction data, and starting a rapid and extensive dictionary attack on the password access. The source code was made widely available to potential hackers last week on Insecure.org. Cisco has pointed to the EAP-FAST protocol to fix the problem.

Cisco's WLSE and HSE Security Hole

In addition, but unrelated to the issue surrounding LEAP, Cisco has also announced an identical security hole in both the Wireless LAN Solutions Engine (WLSE) and the Hosting Solution Engine (HSE) management solutions. In both cases Cisco has said that a username and password coded into all releases of the products could give attackers complete control of the devices. Cisco's WLSE provides centralized management for the Cisco wireless LAN infrastructure. The HSE monitors and activates a variety of e-business services in Cisco data centers. Cisco has provided a software patch for the products on its website.

The ReefEdge Solution-Security and Beyond

With the ReefEdge Cisco Compatible Wireless Security solution bundle, ReefEdge Networks is offering existing Cisco customers a cost-effective, standards-based solution to not only secure their networks, but also build additional flexibility and utility into their WLAN by offering centralized management tools, zero-configuration hardware, support for multi-vendor environments (including access points, switches, legacy devices), advanced QoS, VLAN management, and mobility services.

ReefEdge products seamlessly integrate into the Cisco network architecture, augmenting Cisco access points, L2/3 switches, and WAN routers to provide advanced security and management services with minimal disruption of services or forklift upgrades. A typical solution entails the deployment of ReefSwitch appliances within the network data center to centrally manage and automate access point configuration, user security and policy management, and mobility services. Within buildings or at remote locations, ReefSwitches are deployed to provide authentication and encryption services for all wireless users and devices.

ReefSwitch technology leverages standards based authentication and encryption methods such as IPSec with 3DES/AES, or Wireless Protected Access (WPA) with TKIP, that have been proven secure and reliable in mission critical networks. ReefEdge integrates multiple encryption standards into a single platform, enabling the use of Layer-2 or Layer-3 encryption according to the client device capabilities and enterprise security policies.

"ReefEdge has a long history of addressing critical wireless-LAN security issues," said Craig Mathias, a Principal with the wireless advisory firm Farpoint Group (Ashland, MA). "Farpoint Group has long been a proponent of standards-based solutions to augment existing networks that can secure WLAN systems without requiring extensive network reconfiguration. We continue to recommend the approach taken by ReefEdge to all enterprise users of traditional access points."

For more information on implementing ReefEdge technology to secure your Cisco WLAN visit http://www.reefedge.com/reefedge/papers.do.

About ReefEdge

ReefEdge Networks (www.reefedge.com) is the leading provider of interoperable, managed and secure WLAN systems for multi-site enterprises. Through world-class channel partners and system integrators, ReefEdge has deployed award-winning, patented technology in customer locations around the world. Founded in 2000 and privately held, ReefEdge Networks is led by an executive team with extensive experience in the mobile wireless and data networking industries. ReefEdge Networks' corporate headquarters are in Fort Lee, NJ with sales offices across the U.S. and worldwide distribution.