RE: Wireless LAN detection

[Ron Yorgason <rony () nexsel com>]

There is a free 1 hour Web Seminar coming up on December 12, 2002.
Securing wireless networks:  A best practices approach

If you are interested in attending please email for more information
as attendance is very limited  mailto:rony () nexsel com  

Have a great day, Ron

Helping you in Defending, Enhancing, and Maintaining your Voice and Data
Interactions.



Toll free:  1-866-NEXSEL4 (639-7354) ext 1103 




-----Original Message-----
From: Boschmann, Armin [mailto:aboschmann () hydro mb ca]
Sent: Friday, December 06, 2002 11:45 AM
To: 'security-basics () lists securityfocus com'
Subject: Wireless LAN detection


We have a policy of no-wireless at our sites.  I want to audit this policy,
similar to war-dialing, or more correctly war-driving.  

My thinking is to find illegal wireless equipment in realtime.  My concern
is insiders (temporary employees, contractors, 'bad' employees) plugging in
a wireless access point, then accessing our network from the street, then
disconnecting.  So I am envisioning a computer with a wireless receiver that
will look for TCP/IP traffic, and tell me if it detects communications to
any of our computers.  

I can see several problems, such as distinguishing between our 192.168.x.x
addresses and those on WLANs of our neighbors.  Also I would have to harden
the wireless detection computer, and ideally not connect it to our network
at all yet have some means of notifying me (pager, cell modem).

Does anyone know of a product that does this?  Or if you think my approach
is suspect, suggest another one?


Armin Boschmann
aboschmann () hydro mb ca
Manitoba Hydro

Attachment: Ronald G. Yorgason (E-mail).vcf
Description: