RE: Wireless security question

• Previous message: cc: "pings"
• Maybe in reply to: Marty: "Wireless security question"
• Next in thread: Nicholas Diotte: "Re: Wireless security question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Fri, 24 Dec 2004 12:33:57 -0000
To: "Liran Cohen" <theog@tehila.gov.il>, "Marty" <groupecci@yahoo.ca>

Remove the drivers then don't allow users to install then.

Very much agree with the USB point :)

-----Original Message-it----
From: Liran Cohen [mailto:theog@tehila.gov.il]
Sent: 23 December 2004 08:43
To: Marty
Cc: Sec Basic
Subject: Re: Wireless security question

Actually I don't think it is possible to prohibit wireless networks from
laptops, since some laptops come with their wireless card built in, what
more, I do believe that one should concentrate most of the efforts in
finding the solution on one's network, and not on the clients side to
solve such problems. How about creating a separate LAN for mobile
devices? which will be heavily monitored and limited in it's services
(maybe even wireless :) ) and require port authentication on every
switch on you're LAN (IEEE 802.1X) so that you'll know who's connected
where, and the laptop computers will be forced to that "special" LAN, on
which you may restrict and monitor traffic easier.

BTW, in my opinion, USB mass storage devices (disk on key etc...) pose a
higher threat than Laptops. :)

Liran Cohen
TheOg

Marty wrote:
> Hi gang!
>
> Here is a question for you...
>
> We have a secure network with no wireless
> connections whatsoever.
>
> One of our laptop came in with credentials to log
> on to the network through the Ethernet cable BUT
> the person had just added a wireless card to his
> laptop.
>
> This situation actually came up and the person
> could see external wireless networks (from other
> companies around our building) and access
> Internet through there. Yeah I know they're
> stupid, but it's the real world!
>
> This seems like a potential threat for taking our
> data out the back door.
> Copy files accessed through our network to
> another network and voilà! No trace at all of the
> mischief.
>
> We monitor internet access and block non-company
> Email (Yahoo, Hotmail etc.).
>
> Suggestions?
>
> Thanks and Happy Holidays!
>
> Marty!
>
>
> __________________________________________________________
> Lèche-vitrine ou lèche-écran ?
> magasinage.yahoo.ca

• Previous message: cc: "pings"
• Maybe in reply to: Marty: "Wireless security question"
• Next in thread: Nicholas Diotte: "Re: Wireless security question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]