Re: Wireless security question

From: Michael Puchol (mpuchol_at_sonar-security.com)
Date: 12/24/04

  • Next message: Danux: "Re: bridge detection" 
    Date: Fri, 24 Dec 2004 08:59:33 +0100
To: security-basics@securityfocus.com

    Hi Rob,

    Just FYI, Netstumbler scans by sending probes, and some APs are
    configured not to respond to probes (some Intel ones for example do this
    by default) - this means Netstumbler won't see those. If you are going
    to scan for security, and not for fun (wardriving, for example), I
    recommend Kismet, and if you have the budget, AiroPeek NX or AirMagnet -
    they are tailored to provide specific alarms to situations you can define.

    As for the matter at hand, I would harden GPs as you mention regarding
    hardware and network rights.

    Another thing you could do is disable the TCP/IP stack in the wireless
    adapter's configuration, that would certainly sterilize it.

    Best regards,

    Mike
    mother@netstumbler.com

    Rob McShinsky wrote:
    > If you have a Windows Domain and these machines are on that domain, you can
    > put a Group Policy in place that will disable the computers ability to
    > bridge connections, share connections, etc... Doing regular sweeps with a
    > product like netstumbler throughout your facilities can also find your
    > problem machines. These along with a known written company policy should
    > cover the company legally at least.
    >
    > Rob
    >
    > -----Original Message-----
    > From: Steve [mailto:securityfocus@delahunty.com]
    > Sent: Wednesday, December 22, 2004 5:56 PM
    > To: Marty; Sec Basic
    > Subject: Re: Wireless security question
    >
    > Policy against wireless, including cards. Remove his wireless card.
    >
    > One risk you have is his laptop latching on to hostile networks, once with
    > worms/viruses, as well as the threat you note.
    >
    >
    >
    > ----- Original Message -----
    > From: "Marty" <groupecci@yahoo.ca>
    > To: "Sec Basic" <security-basics@securityfocus.com>
    > Sent: Wednesday, December 22, 2004 11:57 AM
    > Subject: Wireless security question
    >
    >
    > Hi gang!
    >
    > Here is a question for you...
    >
    > We have a secure network with no wireless
    > connections whatsoever.
    >
    > One of our laptop came in with credentials to log
    > on to the network through the Ethernet cable BUT
    > the person had just added a wireless card to his
    > laptop.
    >
    > This situation actually came up and the person
    > could see external wireless networks (from other
    > companies around our building) and access
    > Internet through there. Yeah I know they're
    > stupid, but it's the real world!
    >
    > This seems like a potential threat for taking our
    > data out the back door.
    > Copy files accessed through our network to
    > another network and voilà! No trace at all of the
    > mischief.
    >
    > We monitor internet access and block non-company
    > Email (Yahoo, Hotmail etc.).
    >
    > Suggestions?
    >
    > Thanks and Happy Holidays!
    >
    > Marty!
    >
    >
    > __________________________________________________________
    > Lèche-vitrine ou lèche-écran ?
    > magasinage.yahoo.ca
    >
    >
    >
    >
    >
    >
    >
    >

  • Next message: Danux: "Re: bridge detection"

    Relevant Pages

    • Re: Vista client lost connection to secure wireless network ?
      ... We'll contact Dell to check if they can provide us with some other driver or we will see if we can order Intel NICs and put them in the laptops. ... wireless networks the PC has connected to, with your local wireless at the top. ... The laptop would connect flawlessly to my guest network, but not to the secure network that's configured according to Owen's documentation. ... By "deleting out that Wireless network config for that specific configuation and set it up again" do you mean flattening out the AP configs, the IAS configuration, etc. and redo all that configuration work? ...
      (microsoft.public.windows.server.sbs)
    • Re: Vista client lost connection to secure wireless network ?
      ... By "deleting out that Wireless network config for that specific configuation and set it up again" do you mean flattening out the AP configs, the IAS configuration, etc. and redo all that configuration work? ... Over time we have added a few laptops to the original network without any issue. ...
      (microsoft.public.windows.server.sbs)
    • Re: Wireless network w/ SBS
      ... my wireless card to acquire an IP address until after the user is logged on. ... non-RADIUS wireless configuration with an SBS network for almost 2 years. ... wireless router is providing DHCP services. ... Verify the Windows "Wireless Zero Configuration" service is set to a startup ...
      (microsoft.public.windows.server.sbs)
    • Re: Vista client lost connection to secure wireless network ?
      ... In the wireless properties on the laptop - you should see a list of wireless networks the PC has connected to, with your local wireless at the top. ... The laptop would connect flawlessly to my guest network, but not to the secure network that's configured according to Owen's documentation. ... By "deleting out that Wireless network config for that specific configuation and set it up again" do you mean flattening out the AP configs, the IAS configuration, etc. and redo all that configuration work? ...
      (microsoft.public.windows.server.sbs)
    • Re: Offline Files - How to reverse course
      ... while connected to the wired network as well. ... wireless instead of changing a bunch of configuration you're already happy ... configuration with Offline Files and Folder Redirection setup for "My ...
      (microsoft.public.windows.server.sbs)