Wi-Fi: Best Practices – Embedded vs Overlay Threat Sensors
Wi-Fi Threat Sensors provide Intrusion Detection (IDS) and Intrusion Protection (IPS) services, allowing administrators to actively monitor their Wireless environment for rogue APs, attacks, threats, interference, etc. There are two primary methods for deploying these sensors:
- Embedded – Simple and cost-effective monitoring and mitigation 24/7
- Overlay – Complex and costly monitoring and mitigation 24/7
| Embedded | Overlay | Advantage Defined | |
|---|---|---|---|
| Coverage | Large | Small | Overlay sensors are limited in coverage unless deployed 1 for 1 with APs, while embedded sensors automatically provide the same coverage area. |
| Monitoring | Dedicated | Dedicated | Overlay and Integrated sensors provide dedicated 24/7 monitoring. |
| Performance | Great | Great | Overlay and Integrated sensors do not impact client traffic while monitoring. |
| Management | Inclusive | Separate | Overlay sensors require a separate NMS, adding even more cost and complexity to the network. Embedded sensors use the same NMS as the rest of the network. |
| Cost | Free | Expensive | Overlay networks require additional radios, NMS, switch ports, cable drops, and installation costs. Embedded sensors are free – part of the product. |
| Threat Mitigation | Optimal | Inferior | Overlay sensors must relay the threat to a separate NMS to apply corrective action. Embedded sensors immediately detect and shield when a threat is detected. |
| Deployment | Simple | Complicated | Overlay sensors are independent systems, requiring separate deployments. Embedded sensors do not require any additional equipment or time. |
The Xirrus Wi-Fi Array is the only Wi-Fi device with an embedded Wi-Fi threat Sensor delivering dedicated 24/7 security.
The Xirrus Wi-Fi Array integrates 4, 8, or 16 802.11a/b/g radios and a high-gain directional antenna system with an onboard Gigabit Switch, Wi-Fi Controller, Wi-Fi Firewall, and dedicated Wi-Fi Threat Sensor into a single device.The Xirrus solution obsoletes traditional Wi-Fi offerings by delivering 2X more range, 4X more coverage, 8X more bandwidth, 14X more throughput per cable drop – using 75% fewer devices, cables, and switch ports with a fraction of the installation time over any other offering.