Frequency of changing SSID?
Policies for establishing that SSID?
Minimizing SSID broadcast?
I don't think the above 3 items have any security merit, as trying to
"hide" your SSID is not a security measure at all. Anybody who can
sniff wireless traffic can grab the SSID very easily broadcast or
non-broadcast. There are seveal wireless devices that will not work
properly unless you broadcast the SSID.
On 4/12/06, Alexander Bolante <alexander.bolante@gmail.com> wrote:
From a design perspective, I think it would also be good for you to
have a security checklist:
WLAN Security:
Frequency of changing SSID?
Policies for establishing that SSID?
Minimizing SSID broadcast?
Access point location to reduce eavesdropping?
Locking management interfaces?
Use static IPs vs. DHCP?
MAC-based access restrictions?
Network Security:
Placement in a DMZ?
Use a firewall and setup ACLs/rules that enable access only for known
MAC/IP addresses?
Consider using an IDS if you plan on maintaining the solution?
That's a start. Hopefully then your solution's risk will really just
boil down to physical security.
Good luck, but have fun!
Thanks!
Alexander
On 4/9/06, Edmond Chow <echow@videotron.ca> wrote:
Hello List,
I am looking to put together a home network for a high-end client of mine
and would like your opinion on what type of equipment to use.
Here's an overview of his requirement:
- Two MACs (for his kids) on a wireless network
- Two PCs on a wired network - these two PCs have sensitive information on
them. These computers would not be used for remote access but only for
internet and email access. I am thinking of adding hard drive encryption to
these two computers.
I'm thinking of three approaches and would like your thoughts:
#1 - Use a cable modem with non-wireless router for his two PCs and use a
separate DSL modem with wireless router for his two MACs. Double the monthly
cost for internet access but there is no chance that hackers entering
through the MACs will be able to access his PCs.
#2 - Use a router (I was thinking of something like an Astaro router or
Cisco router) for the PCs and then connect a Linksys wireless router with
WPA security to the first router. The wireless router would be used for the
two MACs.
#3 - Use a wireless router with WPA security for the wireless MACs and then
hard wire the two PCs to the non wireless router ports on the back of the
wireless router.
Any thoughts you would have would be greatly appreciated. Any manufacturers
and or models you could suggest would also be much appreciated.
Thanks.
Regards,
Edmond
-------------------------------------------------------------------------
This List Sponsored by: Webroot
Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise
http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------
--
Alexander Bolante | Alexander.Bolante@gmail.com
-------------------------------------------------------------------------
This List Sponsored by: Webroot
Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise
http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------
-------------------------------------------------------------------------
This List Sponsored by: Webroot
Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise
http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------
