The electric grid is the backbone of our modern society here in North America. Ensuring its reliability and security is paramount, which is where the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards come in. These standards provide a framework for securing the Bulk Electric System (BES) against cyber threats.

However, with the grid undergoing significant modernization and increased connectivity, meeting these stringent cybersecurity requirements presents a complex challenge for power utilities. More connected devices mean a larger attack surface, demanding a robust and phased approach to security.

Cisco’s Phased Approach to Industrial Threat Defense

Cisco recognizes that enhancing your security posture is a journey. We advocate for a phased approach, building foundational security elements that support subsequent steps, allowing utilities to improve security at their own pace while demonstrating value. The Cisco Industrial Threat Defense solution offers a modular and comprehensive set of capabilities designed to address the unique challenges of securing operational technology (OT) environments and achieving NERC CIP compliance.

How Cisco Solutions Help Address Key NERC CIP Requirements:

Cisco just published a solution brief describing the key NERC CIP requirements and how our portfolio can help utilities to comply. Here is a quick summary:

1. Visibility and Categorization (CIP-002, CIP-015):
   • Cisco Cyber Vision: Provides deep packet inspection embedded in the industrial network to automatically discover and inventory all grid assets, their communication patterns, and vulnerabilities. This visibility is fundamental for categorizing BES Cyber Systems (CIP-002) and is a core component of Internal Network Security Monitoring (INSM) (CIP-015). It helps identify risks and deviations from expected behavior.
   • Splunk OT Security Add-On: Aggregates data from various sources, including Cyber Vision, to provide asset classification visibility (CIP-002) and supports monitoring for INSM (CIP-015).
2. Electronic Security Perimeters (ESPs) and Access Control (CIP-005, CIP-007):
   • Cisco Industrial Routers and Secure Firewalls: Serve as the backbone for defining and enforcing ESPs. They offer comprehensive Next-Generation Firewall (NGFW) features, stateful inspection, application control, and integrated intrusion prevention (IDS/IPS) to manage electronic access and block threats at the perimeter (CIP-005, CIP-007). They can enforce unified security policies across distributed sites.
   • Cisco Secure Equipment Access (SEA): Provides a Zero-Trust Network Access (ZTNA) solution for secure remote access, crucial for managing vendor and remote user access to BES Cyber Systems. It enforces least privilege, just in time access and supports multi-factor authentication (MFA) as well as session monitoring/recording (CIP-005).
   • Cisco Catalyst Center and Identity Services Engine (ISE): Help manage security policies centrally across switching infrastructure, control physical port usage, and enforce access controls via IP ACLs or Security Group ACLs (CIP-007).
   • Splunk OT Security Add-On: Collects logs from firewalls, routers, switches, and access systems to monitor activity crossing the ESP boundary (CIP-005) and track ports, services, and system access control events (CIP-007).
3. System Security Management & Vulnerability Assessment (CIP-007, CIP-010):
   • Cisco Catalyst SD-WAN Manager and Catalyst Center: Enable centralized management of network device configurations, helping prevent unauthorized changes and facilitating the deployment of ‘golden’ configurations (CIP-010). They also support security event monitoring on network infrastructure (CIP-007).
   • Cisco Cyber Vision: Identifies vulnerabilities in discovered assets and highlights those actively exploited by bad actors to help prioritize patching. Also monitors deviations from network communication baselines (CIP-010).
   • Splunk OT Security Add-On: Aggregates logs from various sources (firewalls, endpoints, etc.) to track ports/services, security events, malware alerts, and supports baselining efforts (CIP-007, CIP-010). It also helps track compliance with log retention requirements (CIP-007).
4. Incident Reporting, Response, and Recovery (CIP-008, CIP-009):
   • Splunk: Acts as a central SIEM for collecting, correlating, and analyzing security events from across the network and security tools. It supports incident detection, investigation, and reporting, helping utilities meet the requirements for identifying and responding to cyber incidents (CIP-008).
   • Cisco Catalyst Center and Catalyst SD-WAN Manager: Provide monitoring and recovery capabilities for network equipment, supporting the restoration of network infrastructure in case of failure or attack (CIP-009).
   • Splunk OT Security Add-On: Provides dashboards to monitor notable security alerts (CIP-008) and brings in data from backup logs and Splunk environment status to support recovery plan requirements (CIP-009).
5. Information Protection & Supply Chain Risk (CIP-011, CIP-013):
   • Cisco Network Infrastructure & Security Policies: Enforce network segmentation and access controls to protect BES Cyber System Information (BCSI) from unauthorized access (CIP-011).
   • Cisco Security and Trust Organization: Cisco’s commitment to security is embedded in its Secure Development Lifecycle (SDL), certified for IEC 62443-4-1. Trustworthy technologies like image signing and secure boot ensure product integrity. The Cisco Product Security Incident Response Team (PSIRT) handles vendor-identified incidents and provides vulnerability information, patches, and mitigation advice (CIP-013). Cisco is also an active contributor to relevant industrial security standards.

A Unified Approach for Enhanced Security

Navigating NERC CIP compliance requires a strategic, solutions-based approach. Cisco provides the building blocks and integrated solutions to help power utilities secure their critical infrastructure, enhance visibility, and meet regulatory requirements effectively. Have a look at our NERC CIP Compliance Solution Brief to better understand the requirements and see how Cisco can help.

I will be presenting a webinar on July17th together with experts from Burns & McDonnell to discuss the new Internal Network Security Monitoring (INSM) CIP-015 standard and solutions available to help Utilities comply. Save the date and register now.

New partnership delivers simple and easy WireGuard VPN service to USG FLEX H Series firewall customers at no additional cost

ANAHEIM, California (June 26, 2025) Zyxel Networks, a leader in delivering secure, AI- and cloud-powered business and home networking solutions, today announced a new partnership with Tailscale, the leading identity-native connectivity platform. This integration brings simplified, scalable, and secure VPN connectivity to Zyxel Networks’ USG FLEX H Series firewalls, empowering small businesses and advanced users to build private, peer-to-peer networks with ease and at no additional cost.

Now available on Zyxel Networks USG FLEX H Series firewalls running uOS v1.32 and above, Tailscale’s WireGuard-based mesh VPN network is fully integrated into the firewall’s management interface. Once enabled, users can set up secure remote access in minutes without the need for complex configurations.

Streamlined VPN experience

The USG FLEX H Series firewalls now support a full suite of VPN protocols, including IPSec, SSL and WireGuard, to secure a wider range of use cases and endpoints. The Tailscale integration allows users to take advantage of a streamlined setup experience, which requires no server configuration or port forwarding. Devices automatically connect to the private network upon a few simple clicks, making the process accessible even to those with minimal networking experience.

Protected access control

With the Tailscale integration, firewall users can now create a peer-to-peer mesh network where devices communicate directly with each other via encrypted tunnels, instead of routing through a central server. This architecture reduces latency, boosts performance and scales efficiently as businesses grow. Furthermore, the service supports a wide range of operating systems, including Windows, macOS, Linux, iOS and Android, as well as embedded devices, and cloud services directly, allowing firewall users to extend VPN protection across all major endpoints–including mobile devices and BYOD environments.

For added convenience and security, users can log in to Tailscale using their existing identity providers such as Google Workspace, Microsoft Entra ID (Azure AD), Okta, OneLogin, or JumpCloud. Multi-Factor Authentication (MFA) can also be implemented through these accounts, providing an extra layer of protection while simplifying access control and user management.

“VPNs are essential for protecting data and supporting hybrid workforces, but they have often been too complex for smaller organizations with limited IT resources,” said Ken Tsai, President of Zyxel Networks. “This integration is the answer our customers have been asking for a simpler, faster and smarter way to enable secure connections across all their devices, wherever they are.”

“VPNs have a reputation for being slow, painful to set up, and impossible to manage. We started Tailscale to fix that, and now we’re excited to bring that simplicity to more people through our partnership with Zyxel Networks,” said Avery Pennarun, co-founder and CEO of Tailscale. “Zyxel’s reach in the SMB market means we can help a lot more teams skip the ‘VPN headache and just get back to work—securely.”

As part of the partnership’s launch, Zyxel Networks is offering eligible USG FLEX H Series customers free access to Tailscale’s Starter Plan. For more information, please visit https://community.zyxel.com/en/discussion/29583

For more information about Zyxel, its connectivity solutions, and the Zyxel Authorized Partner Program, visit www.zyxel.com/us and follow us on Facebook, X(formerly Twitter) and LinkedIn.

About Zyxel Networks

Zyxel Networks is a leading provider of secure, AI-powered cloud networking solutions for SMBs and the enterprise edge. We deliver seamless connectivity and flexible scalability through subscription services, all backed by robust security. With a reputation built on decades of unlocking potential and helping people adapt to the changing workplace, Zyxel Networks has earned the trust of over 1 million businesses across 150 markets.

Is your WiFi painfully slow when it should be blazing fast? WiFi channel overlap is likely the issue. It’s like trying to have a conversation at a rock concert – everyone’s shouting, but nobody can understand a word.

For network professionals, understanding and addressing WiFi channel overlap can make the difference between a high-performing network and one that constantly disappoints users. Poor channel planning can cut network capacity in half. For businesses, this directly impacts operations through slower connections, dropped calls, and frustrated users.

In this blog, we’ll explore what channel overlap is, how it affects performance across different frequency bands, and provide practical solutions to identify and fix these issues.

WiFi Channels Explained: 2.4GHz vs 5GHz vs 6GHz

WiFi channels function like highway lanes. When too many devices use overlapping frequencies, performance suffers dramatically. Regional regulations affect which channels are available in different countries across all frequency bands.

2.4GHz Band

• Only channels 1, 6, and 11 are WiFi non-overlapping channels
• Offers better range but suffers from significant congestion
• In North America, channels 1-11 are available, while some regions permit up to channel 13 (Japan exclusively allows channel 14

The WiFi channel overlap chart above shows why channels 1, 6, and 11 are preferred – they don’t overlap with each other.

5GHz Band

• Provides 25 non-overlapping channels (quantity varies by country)
• Less crowded but doesn’t reach as far
• Supports multiple channel widths: 20/40/80/160MHz
• Many 5GHz channels are labeled as “DFS” (Dynamic Frequency Selection). These channels share the same frequencies that weather and military radar systems use. WiFi devices must monitor for radar signals and switch channels if detected. Regulations for these channels vary by country.

6GHz Band (WiFi 6E and WiFi 7)

• Delivers 59 non-overlapping channels in the US
• Offers clean, uncluttered spectrum without legacy device interference
• Supports channels up to 320MHz wide with WiFi 7
• Not all countries have approved 6GHz for WiFi use, with varying amounts of spectrum allocated in different regions

How WiFi Channel Overlap Causes Interference

Two types of interference result from WiFi channel overlap.

Co-Channel vs. Adjacent Channel Interference

Older WiFi standards use CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance), which works like a polite conversation. Before transmitting, devices first listen to see if the channel is clear. If they detect another transmission, they wait a random period before trying again.

Here’s why CSMA/CA works well with co-channel interference but fails with partial overlap:

• With co-channel interference (same channel): Devices can properly “hear” each other and politely take turns. Performance slows as more devices join, but the system remains functional.
• With adjacent channel interference (overlapping channels): Devices can’t properly detect transmissions on partially overlapping channels. They incorrectly think the channel is clear and transmit anyway, causing signal corruption when the transmissions collide. This leads to data loss and constant retransmissions.

Newer WiFi 6/6E/7 standards use OFDMA (Orthogonal Frequency Division Multiple Access), which divides the channel into smaller resource units that can be assigned to different devices simultaneously. This is like converting a single-lane road into multiple lanes, allowing more efficient handling of traffic. While OFDMA reduces co-channel interference significantly, it still cannot fully solve adjacent channel interference problems.

How to Check WiFi Channel Overlap

How to check if your WiFi has channel overlap issues, requires specialized tools. NetAlly’s solutions reveal what’s actually happening in your wireless environment:

• AirCheck G3 PRO – Handheld analyzer that immediately displays channel usage patterns and identifies WiFi channel overlap
• EtherScope nXG – Provides comprehensive analysis of both WiFi and wired networks

How to check WiFi channel overlap symptoms: Watch for fluctuating performance, unexpected disconnections, and the frustrating combination of strong signal but poor throughput.

Best Practices for WiFi Channel Planning

Quick Channel Selection Guide

Effective channel planning means configuring access points, so they don’t interfere with each other. For 2.4GHz, always use channels 1, 6, and 11 because they don’t overlap. For 5GHz, start with channels that don’t require radar detection (36-48 and 149-165) before using DFS channels.

The 6GHz band works with both WiFi 6E and WiFi 7 devices and offers much more space for wider channels. For outdoor deployments, 6GHz requires checking a database (AFC) before transmitting to protect existing users.

Choose channel widths based on how many access points you have:

• Home/Small Office: Wider channels (40/80/160/320MHz) give faster speeds when you have fewer access points
• Medium Business: Mix of 40MHz on 5GHz and 80MHz on 6GHz balances speed and capacity
• High-Density Environment: Narrower channels (20/40MHz) allow more non-overlapping channels to be used

For networks with multiple access points, plan their placement and channel assignments carefully to minimize overlap. A channel overlap chart like that available on NetAlly tools helps you see which channels will conflict with each other.

How to Fix WiFi Channel Overlap Problems

1. Assess – Determine which channels your network and neighbors currently use with a WiFi channel overlap chart
2. Implement – Switch to WiFi non-overlapping channels (e.g. 1, 6, 11 on 2.4GHz)
3. Adjust Power – Lower power settings to prevent signals from access points using the same channel to overlap with each other
4. Verify – Measure throughput in previously problematic areas

If forced to choose, even when it’s busier, go with the crowded channels instead of the overlapping ones.

To effectively resolve WiFi channel overlap issues and boost network performance, explore NetAlly’s purpose-built tools: the AirCheck G3, AirMagnet Survey PRO, EtherScope nXG, and CyberScope Air.

Your guests judge your hotel within minutes of arrival. They expect lightning-fast WiFi, seamless entertainment systems, and flawless connectivity throughout their stay. But behind every five-star digital experience lies something most hoteliers never think about: the cables hidden in your walls.

In this white paper, we discuss structured cabling, which takes a standardized approach to network infrastructure. Instead of chaotic point-to-point connections, it creates an organized foundation that supports multiple technologies through a single, unified system.

Learn about the benefits of structured cabling versus traditional piecemeal approaches, how you can implement structured cabling in your hotel, and how WorldVue and our partner Cabling Solutions LLC can help with comprehensive structured cabling solutions for both new construction and retrofit projects.

Download Full White Paper

Simplify Network Operations Without Sacrificing Scalability: Smarter Network Design Starts Here. RUCKUS offers a free Design My Network session where you’ll connect with an expert, talk through what’s working (and what’s not), and walk away with a personalized plan that makes sense for your environment.

If you’re responsible for keeping your organization connected—whether it’s across a campus, a hospital system, a stadium, or multiple offices—you’re likely being asked to do more with less. More users. More devices. More expectations. Meanwhile, resources and headcount aren’t exactly scaling at the same pace.

And let’s be honest – Most networks weren’t built for this kind of pressure.

If your infrastructure feels like a patchwork of short-term fixes and aging equipment, now might be the time to rethink your network design. Not by starting from scratch, but by building something smarter, more scalable, and easier to manage.

When the Network Becomes the Bottleneck

It’s easy for networks to grow in pieces—one vendor here, a new platform there—until suddenly you’re juggling more tools than time. The result? Slower performance, inconsistent coverage, and troubleshooting that eats up half your day.

Simplifying how your network is built and managed frees up your team to focus on actual priorities—not putting out fires or dealing with user complaints. And the right design doesn’t just solve problems now. It gives you a solid foundation for what’s coming next.

Why Automation Isn’t Optional Anymore

If your team is constantly buried in manual tasks, configuring access, onboarding devices, managing security — you’re not alone. But you also don’t have to live that way.

When automation is baked into the network from day one, things just work better. Devices get online faster. Policies stay consistent. Problems get flagged before they become support tickets.

Done right, automation isn’t about replacing people;, it’s about giving them back time and control. And when your team has space to be strategic instead of reactive, everything runs smoother.

Build It for How You Actually Work

There’s no one-size-fits-all when it comes to networks. What works for a hospital won’t work for a convention center. What works for your HQ might not work for your branch offices.

That’s why design matters. It should reflect how your people work, how your spaces are used, and where performance matters most. A smart design makes it easier to scale, maintain, and support without overcomplicating things.

When changes occur, as they inevitably do, you are prepared to adapt without needing to start from scratch.

See What’s Possible 

Take Dr Pepper Ballpark. RUCKUS helped them rethink their network to handle packed stadium crowds, on-site vendors, and day-to-day operations—without adding complexity for their IT team.

Better coverage, smoother performance, less stress. That’s what smart design looks like.
Read the full story if you’re curious.

Let’s Make Your Network Easier to Run

If your current setup feels clunky or like it’s barely holding on, this is a chance to reset. RUCKUS offers a free Design My Network session where you’ll connect with an expert, talk through what’s working (and what’s not), and walk away with a personalized plan that makes sense for your environment.

No pressure. Just a chance to figure out what “smarter” could look like for you.