Security Basics mailing list archives
RE: Wireless security question
From: <adisegna () siscocorp com>
Date: Fri, 24 Dec 2004 10:14:18 -0500
Join the laptop to the domain. Push out a policy that disables the wireless services. If you have a central administration point for all APs ban the MAC address of the card. AD -----Original Message----- From: Liran Cohen [mailto:theog () tehila gov il] Sent: Thursday, December 23, 2004 3:43 AM To: Marty Cc: Sec Basic Subject: Re: Wireless security question Actually I don't think it is possible to prohibit wireless networks from laptops, since some laptops come with their wireless card built in, what more, I do believe that one should concentrate most of the efforts in finding the solution on one's network, and not on the clients side to solve such problems. How about creating a separate LAN for mobile devices? which will be heavily monitored and limited in it's services (maybe even wireless :) ) and require port authentication on every switch on you're LAN (IEEE 802.1X) so that you'll know who's connected where, and the laptop computers will be forced to that "special" LAN, on which you may restrict and monitor traffic easier. BTW, in my opinion, USB mass storage devices (disk on key etc...) pose a higher threat than Laptops. :) Liran Cohen TheOg Marty wrote:
Hi gang! Here is a question for you... We have a secure network with no wireless connections whatsoever. One of our laptop came in with credentials to log on to the network through the Ethernet cable BUT the person had just added a wireless card to his laptop. This situation actually came up and the person could see external wireless networks (from other companies around our building) and access Internet through there. Yeah I know they're stupid, but it's the real world! This seems like a potential threat for taking our data out the back door. Copy files accessed through our network to another network and voilà! No trace at all of the mischief. We monitor internet access and block non-company Email (Yahoo, Hotmail etc.). Suggestions? Thanks and Happy Holidays! Marty! __________________________________________________________ Lèche-vitrine ou lèche-écran ? magasinage.yahoo.ca
Current thread:
- RE: Wireless security question, (continued)
- RE: Wireless security question Harshul Nayak (Dec 23)
- Re: Wireless security question Tomas Wolf (Dec 23)
- Re: Wireless security question Liran Cohen (Dec 23)
- Re: Wireless security question Nelson Santos (Dec 28)
- Re: Wireless security question threepts (Dec 29)
- RE: Wireless security question Gross Barry D. (Dec 23)
- RE: Wireless security question Andrew Shore (Dec 23)
- RE: Wireless security question Justin Acquaro (Dec 23)
- RE: Wireless security question Andrew Shore (Dec 28)
- Re: Wireless security question Nicholas Diotte (Dec 28)
- RE: Wireless security question adisegna (Dec 28)
- RE: Wireless security question Omar Salvador Alcalá Ruiz (Dec 29)
- Re: Wireless security question Lim Ming Wei (Dec 30)
- RE: Wireless security question Dante LoScalzo (Dec 30)