Penetration Testing mailing list archives

Re: [PEN-TEST] Penetrating Wireless Networks


From: "Weiss, Bill" <bill_weiss () ATT NET>
Date: Fri, 9 Mar 2001 13:28:33 -0700

Rafael Coninck Teigao(rafael () SAFECORE NET)@Fri, Mar 09, 2001 at 03:10:19PM -0300:
"van der Kooij, Hugo" wrote:

I wouldn't use it this way. If you need security use an IPSEC tunnel from
WS to server.

    I thought about it... What is WS? Anyway, I was thinking to make just the
wireless part encrypted so the mobile client can access anything, even if it
is outside the tunnel.

WS = workstation.  And, he's right, an encrypted tunnel to the server is always
the correct way to go.  Encrypting the link from workstation to access point
would be a decent start, though.


Current thread: