Sign up for a customized personal demo with an AirTight expert.

-NIAP has created a new Protection Profile (PP) to evaluate IPS systems.  This PP is distinctly different and more rigorous than the "WLAN PP".  Furthermore, the legacy and integrated WIDS/WIPS vendors  that claim Common Criteria certification do not make this distinction and have only been tested to the "WLAN PP". 

The AirTight sensors included in our WIPS solution are "always on".  Even if the network connection is lost between the sensor and management appliance, the sensor will continue to enforce the last know policy and store event data indefinitely until the sensor connect is re-established.  Compare this to all other WIDS/WIPS products whose sensors will "sleep" after approximately 20 minutes of lost connection or when the buffers are full.  This is even more disturbing for the integrated AP/WIDS solutions because you can lose all event data showing the possible cause for the network failure.

Our unique ability to create proof statements to verify access points are on your wired networks is the key to automated policy enforcement.  Various types of Marker Packets are sent across the network and our sensors can quickly and accurately identify what type of device, which VLAN it is connected to, and where it is located.   Unlike legacy WIDS who compare CAM table entries to MAC addresses seen in the air, the AirTight WIPS is not prone to false positives or false negatives.  These Marker Packets also allow AirTight WIPS to detect data leakage from bridging clients on the wired network.

Our patented "Location Tracking Algorithm" provides the ability to obtain basic location information from a single sensor.  This includes both access points and wireless client devices.  Compare this to all other WIDS/WIPS vendors who require at least three sensors to detect a device before providing any location information.  Our LT algorithm also provides the most accurate location tracking in the industry. 

AirTight WIPS can be used to define and protect geographic boundaries from wireless devices (SCIFs and other "No-WiFi" environments).  Sensors will trigger proximity alerts for WiFi clients and access points that cross the configurable threshold.  AirTight WIPS can re-classify and quarantine client devices and access points that trigger the alert.

With just a few clicks of the mouse, the administrator can launch a full PCAP from any AirTight Sensor and stream it live to his/her console.  The data The PCAP can be easily configured to capture just the data from the specific wireless device, or the channel, or rotate on all channels in a band, or all information available in both bands. The PCAP can be viewed, filtered and stored by WireShark or OmniPeak.

The AirTight -10 sensors is a dedicated security device.  It contains no ability to become an access point.  If the sensor is physically compromised, it cannot become a WiFi communications device.   Compare this to all of the integrated solutions that use the same physical device for both AP and sensor functions.  This is especially critical for  "No-Wifi" environments where access points are not allowed.

The AirTight WIPS console provides the ability to designate specific location folders for specific administrators.  This allows a local administrator to access information only in his/her area of operation (this includes alarms, alerts, and reports), while upper level administrators can access all locations as needed. There is no additional cost for multiple administrative accounts.

AirTight offers a Manager of Managers (MoM) solution for WIPS.  The AirTight Manager will manage up to 25 WIPS appliance.  This is available as a VMware bundle or as an AirTight appliance and can manage up to 15,000 sensors from a single console.

The goal of AirTight WIPS is to enforce WiFi and no-WiFi policies without human action.  This can only be achieved when the airspace around the protected area is understood.  This means WiFi devices are accurately detected and classified as authorized, guest, external or rogue devices.  Once this is understood by the WIPS and policies are created, the WIPS can be configured to block any unauthorized associations, without harming neighboring networks.

AirTight WIPS provides a number of canned reports including compliance reports for various industries, including the DoD 8100.2.  All reports can be scheduled and delivered as needed.

Our patented Marker Packets allow AirTight WIPS to monitor up to 100 VLAN using a single sensor.  This feature allows us to protect both authorized WLANs and the VLANS they are associated to, as well as the wired VLANS that need to remain "no-WiFi".  The WIPS actively protects these wired VLANS from rogue access points and bridging clients connected to these networks.

AirTight WIPS integrates with the two largest WLAN vendors in the industry.  AirTight WIPS pulls vital information from the WLAN controllers (authorized APs, 1x authenticated clients, and location tracking information) which allow AirTight to provide better security and more accurate location tracking than the integrated solution alone.

Consider the following:

• Both the AirTight WIPS and legacy integrated solutions require a dedicated controller or management module
• For 24x7 monitoring, the integrated solutions must deploy dedicated sensors in addition to the access points required for WLAN capabilities
• AirTight WIPS is a dedicated enterprise security solution, while the integrated solutions offer security features as a subset to the WLAN product
• AirTight WIPS monitor and protects both the WLAN and wired enterprise network from wireless threats, while the integrated solutions focus mainly on protecting their WLANs.  Their solution to protect the enterprise wired network is not emphasized and can be very costly.
• AirTight WIPS allows for WLAN flexibility and variety, while the integrated solution locks you into a WLAN solution.  AirTight provides the ability for the security team to have a stable and secure solution regardless of which WLAN solution is selected by the networking team.
• AirTight WIPS provides accurate detection and classification, and automated and active policy enforcement, as compared to the integrated solutions that require human intervention to diagnose events and select a response.