{"id":97633,"date":"2020-10-20T02:42:47","date_gmt":"2020-10-20T00:42:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq"},"modified":"2020-10-20T02:42:47","modified_gmt":"2020-10-20T00:42:47","slug":"private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","title":{"rendered":"Private PSK (Pre-Shared Key) \u2013 caratteristiche e possibilit\u00e0 della piattaforma ExtremeCloud IQ","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Il WPA3 \u00e8 gi\u00e0 stato adottato e, da luglio 2020, \u00e8 obbligatorio per i dispositivi che ottengono la certificazione dalla WiFi-Alliance; il WPA2 non \u00e8 stato annullato e non verr\u00e0. Entrambi, WPA2 e WPA3, supportano le modalit\u00e0 PSK ed Enterprise, ma nella nostra articolo proponiamo di esaminare la tecnologia Private PSK e i vantaggi che pu\u00f2 offrire.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 caratteristiche e possibilit\u00e0 della piattaforma ExtremeCloud IQ\" src=\"\/wp-content\/uploads\/2020\/10\/098108c3884a2214168bd2d320d8e9f9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nI problemi di WPA2-Personal sono noti da tempo e, in gran parte, sono gi\u00e0 stati risolti (Priority Management Frames, correzioni per la vulnerabilit\u00e0 KRACK, ecc.). Il principale difetto rimanente di WPA2 con l'uso di PSK \u00e8 che le password deboli possono essere facilmente violate attraverso attacchi di forza bruta. In caso di compromissione e di cambio della password, sar\u00e0 necessario riconfigurare tutti i dispositivi connessi (e i punti di accesso), il che potrebbe risultare un processo piuttosto laborioso (per affrontare il problema delle \"password deboli\", la WiFi-Alliance raccomanda di utilizzare password con una lunghezza di almeno 20 caratteri).<\/p>\n<p>Un'altra questione che a volte non pu\u00f2 essere risolta tramite WPA2-Personal \u00e8 l'assegnazione di diversi profili (vlan, QoS, firewall\u2026) a gruppi di dispositivi connessi allo stesso SSID.<\/p>\n<p>Con WPA2-Enterprise \u00e8 possibile risolvere tutti i problemi descritti sopra, ma a un prezzo:<\/p>\n<ul>\n<li>La necessit\u00e0 di avere o implementare un PKI (Public Key Infrastructure) e certificati di sicurezza;<\/li>\n<li>Possono sorgere difficolt\u00e0 nell'installazione;<\/li>\n<li>Possono sorgere difficolt\u00e0 nel troubleshooting;<\/li>\n<li>Non rappresenta una soluzione ottimale per i dispositivi IoT o per l'accesso degli ospiti.<\/li>\n<\/ul>\n<p>\nUna soluzione pi\u00f9 radicale ai problemi di WPA2-Personal \u00e8 il passaggio a WPA3, il cui principale miglioramento \u00e8 l'uso di SAE (Simultaneous Authentication of Equals) e PSK statici. WPA3-Personal risolve il problema dell'\"attacco dizionario\", ma non fornisce un'identificazione unica durante l'autenticazione e, di conseguenza, la possibilit\u00e0 di assegnare profili (poich\u00e9 viene comunque utilizzata una password statica comune).<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 caratteristiche e possibilit\u00e0 della piattaforma ExtremeCloud IQ\" src=\"\/wp-content\/uploads\/2020\/10\/6ea0cbf3ec9e5f2decef500cf9a04cd1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nInoltre, \u00e8 necessario considerare che oltre il 95% dei client esistenti attualmente non supportano WPA3 e SAE, mentre il WPA2 continua a funzionare con successo su miliardi di dispositivi gi\u00e0 rilasciati.<\/p>\n<p>Per risolvere i problemi esistenti o potenzialmente possibili descritti sopra, l'azienda Extreme Networks ha sviluppato la tecnologia Private Pre-Shared Key (PPSK). PPSK \u00e8 compatibile con qualsiasi client Wi-Fi che supporta WPA2-PSK e consente di ottenere un livello di sicurezza paragonabile a quello raggiunto con WPA2-Enterprise, senza la necessit\u00e0 di costruire un'infrastruttura 802.1X\/EAP. Private PSK \u00e8 fondamentalmente WPA2-PSK, ma ogni utente (o gruppo di utenti) pu\u00f2 avere una propria password generata dinamicamente. La gestione di PPSK \u00e8 del tutto simile a quella di PSK, poich\u00e9 l'intero processo \u00e8 automatizzato. Il database delle chiavi pu\u00f2 essere memorizzato localmente sugli access point o nel cloud.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 caratteristiche e possibilit\u00e0 della piattaforma ExtremeCloud IQ\" src=\"\/wp-content\/uploads\/2020\/10\/878f418cf07e2ffd94d22cd5b42388fd.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nLe password possono essere generate automaticamente, con la possibilit\u00e0 di impostare in modo flessibile la lunghezza\/resilienza, il periodo o la scadenza, il modo di consegna all'utente (via email o SMS):<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 caratteristiche e possibilit\u00e0 della piattaforma ExtremeCloud IQ\" src=\"\/wp-content\/uploads\/2020\/10\/0ba90a70c476ab853bf564816c16f3cb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 caratteristiche e possibilit\u00e0 della piattaforma ExtremeCloud IQ\" src=\"\/wp-content\/uploads\/2020\/10\/c826ae0d8971d2e997ab8fd9d7c3f160.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00c8 anche possibile configurare il numero massimo di client che possono connettersi utilizzando un PPSK o persino impostare il 'MAC-binding' sui dispositivi connessi. Su richiesta dell'amministratore di rete, qualsiasi chiave pu\u00f2 essere facilmente revocata, e l'accesso alla rete sar\u00e0 negato senza la necessit\u00e0 di riconfigurare tutti gli altri dispositivi. Se al momento della revoca della chiave il client \u00e8 connesso, l'access point lo disconnetter\u00e0 automaticamente dalla rete.<\/p>\n<p>Tra i principali vantaggi di PPSK, si notano:<\/p>\n<ul>\n<li>facilit\u00e0 d'uso con un alto livello di sicurezza;<\/li>\n<li>la mitigazione degli attacchi di tipo dizionario \u00e8 affrontata con password lunghe e robuste, che ExtremeCloudIQ \u00e8 in grado di generare e distribuire automaticamente;<\/li>\n<li>possibilit\u00e0 di assegnare profili di sicurezza diversi a vari dispositivi connessi a uno stesso SSID;<\/li>\n<li>si adatta perfettamente per l'accesso ospite sicuro;<\/li>\n<li>ottimo per l'accesso sicuro quando i dispositivi non supportano 802.1X\/EAP (scanner manuali o dispositivi IoT\/VoWiFi);<\/li>\n<li>un uso e un miglioramento di successo per oltre 10 anni.<\/li>\n<\/ul>\n<p>\nQualsiasi domanda emersa o residua pu\u00f2 sempre essere rivolta ai membri del nostro ufficio \u2013 <noindex><a rel=\"nofollow\" href=\"mailto:\/\/cis@extremenetworks.com\">cis@extremenetworks.com<\/a><\/noindex>.<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/extremenetworks\/blog\/523890\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438 WPA2, \u0438 WPA3 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0440\u0435\u0436\u0438\u043c\u0430\u0445 PSK \u0438 Enterprise, \u043d\u043e \u043c\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e Private PSK, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0441 \u0435\u0451 \u043f\u043e\u043c\u043e\u0449\u044c\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97634,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97633","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ExtremeCloud IQ | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-20T00:42:47+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-20T00:42:47+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Private PSK (Pre-Shared Key) - caratteristiche e possibilit\u00e0 della piattaforma ExtremeCloud IQ | ProHoster","description":"WPA3 \u00e8 gi\u00e0 stato adottato e da luglio 2020 \u00e8 obbligatorio per i dispositivi che passano la certificazione nella WiFi-Alliance; WPA2 non \u00e8 stato annullato e non \u00e8 previsto di farlo.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ExtremeCloud IQ | ProHoster","og:description":"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.","og:url":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-20T00:42:47+00:00","article:modified_time":"2020-10-20T00:42:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97633","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:16:25","updated":"2022-09-30 19:05:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/97633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=97633"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/97633\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/97634"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=97633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=97633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=97633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}