John Navas <(E-Mail Removed)> hath wroth:
>On Wed, 24 Jan 2007 21:14:11 -0800, Jeff Liebermann
><(E-Mail Removed)> wrote in
><(E-Mail Removed)>:
>
>>On Thu, 25 Jan 2007 02:41:07 GMT, decaturtxcowboy
>><nope_none_@nowayspam.com> wrote:
>>
>>>dave wrote:
>>>> Is there a web site which has a good tutorial for implementing a
>>>> wireless network in a public area such as a hospital?
>>
>>>The best for you would be to call a local company with experience in this.
>>
>>I agree. Hospitals have HIPAA security requirements which greatly
>>restrict what can be done with wireless. I strongly suggest you find
>>someone with a clue on both the technical and legal aspects of
>>wireless. There's more to security than just enabling encryption.
>True, if the wireless will serve both the hospital and the public, but
>not if the wireless is a separate service provided just to and for the
>public.
I beg to differ. HIPAA wireless security is more than just
encryption, authorization, and authentication. It's also about how to
prevent laptops from carrying off sensitive patient information. It's
about tracking users, logging access, and detecting penetrations. It's
about encrypted records, asset tracking, NAC/NAP, certificates, VPN's,
and possibly some biometrics. I have to deal with a few such systems
and they are nailed down rather tightly, much more than the common
corporate WLAN.
The one public access wireless in a hospital that I know about has
it's own DSL line and absolutely no physical connection to the
hospital network.
A mix of interesting articles and manure on wireless in hospitals:
<http://www.hipaadvisory.com/tech/wireless.htm>
--
Jeff Liebermann
(E-Mail Removed)
150 Felker St #D
http://www.LearnByDestroying.com
Santa Cruz CA 95060
http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558