No need to apologize, were all here to learn from others experience.
That's what this forums all about. 

Basics for secure wireless computing.

1. Disable SSID broadcasts.
2. Enable WEP encryption.
3. Use Mac filtering if possible.
4. Know your wireless footprint.

Explanations:
1. By disabling SSID broadcasts, you effectively make your wireless
network disappear. Only authorized clients that have he correct SSID can
connect to your network. Even Netstumbler can't see the network.

2. Use WEP even though it can be cracked, it's better that no
encryption. Also cracking the WEP key would require a steady network
flow to capture enough packets the begin working on the key. Most
Wardrivers, aren't going to have access to your system long enough to
worry about it, they see WEP enabled and move on. There are too many
unencrypted networks out there already, why waste time working on one
that has encryption turned on.

3. By setting Mac filters on your AP's you can effectivly control who's
able to connect to them for use. Granted, it's not going to be an easy
solution to implement if you had hundreds of users that could possibly
connect to a given AP. But if you maintained strict control of AP access
to those who really need it you limit the exposure for abuse to your
network.

4. Do a walk through with a wireless laptop to see where your hotspots
for your network are. It's always a good thing to know that if you have
a big hotspot with access available to video store parking lot next door
to your office. That's a good place for wardrivers to stop and park to
leech off your network. By knowing your footprint, you can reposition
your AP's to minimize the amount of bleed through that you have
available. 


Hope this helps.


-- 
Christopher Rector, MCSE
Computer Information Specialist
Southern Illinois University
School of Medicine
Department of Ob/Gyn
217-545-9182

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to