So, we have a decent size wireless network that currently allows for guest access, as well as wireless access for internal users. The network is all Cisco access points (1231 and 1130). The guest SSID is secured by WPA passphrase which is given out to people that interact with guests (reception, project managers, sales folk, etc.). Naturally,everyone has this key now though :) The guest SSID is also separated from our internal network so those devices have zero access to internal network resources, only internet.
The internal wireless SSID does not broadcast and is secured by WPA passphrase which only IT knows (or is supposed to anyways). The problem is, if anyone is clever enough, they can easily get the key from a computer that has the network setup on it. If someone knows they key and leaves the company they still would have the ability to get on our wireless. We do not use a wireless controller, so changing the key every so often is a real pain, especially since we have to change the key on all of the computers that need access as well.
So, to my question. What do you folks do for wireless security. Is anyone in a setup similar to mine?