topic Re: Base Station Security in Wireless https://community.cisco.com/t5/wireless/base-station-security/m-p/30993#M22912 <HTML><HEAD></HEAD><BODY><P>The Base Station does not have anywhere near the security capabilities of the PIX. It also doesn't cost anywhere near what the PIX does. Where it gets the security it does have (in Base Station mode) is from PAT and its lack of support for static translations. As well, Telnets and HTTP access from the ethernet side (in Base Station mode) are disabled, so those out on the Internet pointing browsers and telnet clients at random addresses are not going to get access. That's why fresh from the box or a reset, administration has to be done from the radio side. </P></BODY></HTML> Mon, 07 Jan 2002 21:11:00 GMT rokibbe 2002-01-07T21:11:00Z Base Station Security https://community.cisco.com/t5/wireless/base-station-security/m-p/30992#M22911 <P>The 340 Base Station documents indicate use of NAT</P><P>when connected to DSL/Cable. I assume it is using</P><P>PAT (as opposed to NAT) as I did not see any</P><P>documentation implementing static/conduit/ACL</P><P>similar to a PIX.</P><P></P><P>The concern is: Does this unit have any capability</P><P>that refuses inbound requests? What is the danger</P><P>of installing one of these units without having</P><P>a firewall on the Internet side?</P><P></P> Mon, 05 Jul 2021 05:55:22 GMT https://community.cisco.com/t5/wireless/base-station-security/m-p/30992#M22911 cyee 2021-07-05T05:55:22Z Re: Base Station Security https://community.cisco.com/t5/wireless/base-station-security/m-p/30993#M22912 <HTML><HEAD></HEAD><BODY><P>The Base Station does not have anywhere near the security capabilities of the PIX. It also doesn't cost anywhere near what the PIX does. Where it gets the security it does have (in Base Station mode) is from PAT and its lack of support for static translations. As well, Telnets and HTTP access from the ethernet side (in Base Station mode) are disabled, so those out on the Internet pointing browsers and telnet clients at random addresses are not going to get access. That's why fresh from the box or a reset, administration has to be done from the radio side. </P></BODY></HTML> Mon, 07 Jan 2002 21:11:00 GMT https://community.cisco.com/t5/wireless/base-station-security/m-p/30993#M22912 rokibbe 2002-01-07T21:11:00Z