Securing Wireless LANs with PEAP and Passwords

There's a wealth of excellent prescriptive Guidance from Microsoft Consultants which is available for free download at https://www.microsoft.com/technet/security/guidance

The wireless guide explains how to secure both large scale Enterprise networks and smaller scale networks.

https://www.microsoft.com/technet/security/guidance/peap_0.mspx

Here's an except:

"Wireless Local Area Network (WLAN) technology is a controversial topic. Organizations that have deployed WLANs are concerned about whether they are secure; those that have not deployed them are worried about missing out on user productivity benefits and lower ownership costs. There is still a good deal of confusion about whether a WLAN is safe to use for corporate computing.

Ever since weaknesses in first generation WLAN security were discovered, analysts and network security firms have strived to resolve these problems. Some of these efforts have contributed significantly to the cause of wireless security. Others have had their share of flaws: some introduce a different set of security vulnerabilities; some require costly proprietary hardware; and others avoid the question of WLAN security altogether by layering on another, potentially complex security technology such as virtual private networks (VPN).

In parallel, the Institute of Electrical and Electronic Engineers (IEEE), along with other standards bodies and consortia, have been diligently redefining and improving wireless security standards to enable WLANs to stand up to the hostile security environment of the early twenty–first century. Thanks to the efforts of standards bodies and industry leaders, "WLAN security" is no longer an oxymoron. WLANs can be deployed and used today with a high level of confidence in their security.

This document introduces two WLAN security solutions from Microsoft® and answers the questions about whether WLANs can be secure and which is the best way of securing them. "