Re: Prevent wireless clients from connecting to rogue access points?

["Adam Newhard" <atnewhard () microstrain com>]

This isn't meant to sound cocky, but yeah it's a security risk b/c if
they're getting on rogue access points it means someone's not using any
security what so ever for their ap's.  As long as you do yourself the favor
of filtering mac's and using wep (not like it's that strong anyways), you've
done your part.  The other thing is then to prevent your users from changing
their settings or at least restricting them as much as you can to keep their
lives functional and everyone's butt safe.  Then, go track down those other
ap's and get on their cases to mac filter and wep.  If the keys don't match
people shouldn't be able to get on (figuring your users are the normal i
need a fast computer for word type)...duh.  if the ap's your people are
getting on are open and corporate, getting them to close their ap's
shouldn't be hard...a simple move to their boss (done correctly) using a few
buzz words should do the trick.
adam

----- Original Message ----- 
From: "Kip Sr." <kipsr1 () yahoo com>
To: <security-basics () securityfocus com>
Sent: Saturday, August 09, 2003 8:40 PM
Subject: Prevent wireless clients from connecting to rogue access points?


> Hi there!
>
> We've seen a few cases in our office where some of our
> clients are automatically connecting to rogue WAPs and
> picking up an IP address. It's a bit of a security
> issue, since now the system is connected to our
> corporate network as well as someone else's network.
> Has anyone dealt with this issue? Any suggestions on
> how to prevent this? Most machines running XP.
>
> Thanks
> Kip, CISSP
>
>
>
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
>
> --------------------------------------------------------------------------
-
> --------------------------------------------------------------------------
--
>



---------------------------------------------------------------------------
----------------------------------------------------------------------------