RE: Wireless

[Paul Robertson <proberts () patriot net>]

On Fri, 9 Aug 2002, Scott, Richard wrote:

> Why not restrict access via MAC addresses on the wireless cards?  This would
> be a preventative measure.

That's only helpful for keeping people off a wireless network, not for 
keeping wireless off a wired one.  Let's say someone has a laptop with 
802.11b built-in-- containing and controlling the perimeter gets more 
difficult as the hardware transmits over multiple mediums.

Let's say your administrators are worried about layoffs and want to leave 
themselves a WAP-enabled backdoor into the company network, or the sales 
person who's been logged into the hotel/airport's wireless network on the 
road comes back into the office- 

I believe that there are better ways than doing periodic audits to 
determine this- I'm just curious as to how others are approaching these 
issues.

Thanks, 

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
proberts () patriot net      which may have no basis whatsoever in fact."
probertson () trusecure com Director of Risk Assessment TruSecure Corporation

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards