|
Wireless Networking Security Tips |
|
- Set up Access Points (AP's) in the center of building if possible, or use a directional antenna to point the RF signals into the building and not into the street or parking lot
- Connect AP's to the net using switches instead of hubs to minimize traffic sniffing threats
- Have some form of authentication like Active Directory or RADIUS
- Change the AP's important default settings from their factory configurations that are common knowledge; Subnet, Password, SSID, and WEP Key
- Utilize MAC Access Lists to control WLAN access
- Change all passwords, especially the administrator, on a regular basis
- Separate your WLAN from your regular network, place it outside the firewall, or behind it's own firewall
- Survey your site regularly for rouge AP's, as they can pop up anywhere and anytime
- Disable DHCP and use static IP Assignment
- Encrypt all WLAN traffic (e.g., VPN, TTSL, SSL, IPSEC, LEAP, and EAP)
- Enable the highest WEP encryption possible
- Disable Beacon and Broadcast SSID
- Increase WLAN user and administrator awareness through consistent training of personnel that will be utilizing the WLAN
|
