Tuesday, 1 May 2007

Wireless Access (WiFi)

Business Destroying Security Flaws - Wireless Access

Are you currently running a wireless network?If so, do you really need it? (eg is there a network point close by which could be used instead?)

Wireless networks are your weakest point of access. If you have, or are considering setting up your ownwireless network, be aware that the default setup in most wireless routers configure the connection with absolutely no security – that is, anyone within range can connect to and use your connection to the internet, or worse, access your confidential files!

Did you know that in many capital cities around the world you will find “chalk” markings on the footpaths outside buildings? These chalk markings tell other like-minded people what wireless networks are available and what security (if any) is enabled – so that person sitting on that park bench with their laptop or in that car outside your office could be accessing your wireless network right now…you might want to take a moment right now to look out your window!
If you must run a wireless network, be sure to turn on encryption and go the next step by setting a list of approved devices to connect to your network.

Recommendations:

1. Turn off wireless networks if they are not critical to your business.

2. Turn on encryption if you must use a wireless network.

3. Lock down your wireless network to fixed MAC addresses.

Each computer has a unique MAC address, it’s like its DNA. These are hard coded into the machines and are difficult (not impossible) to replicate. Once the wireless connection is established, you can instruct most wireless routers to restrict access to only those chosen MAC addresses. This can be a little annoying if you regularly have new users wanting to connect to your wireless network, but is worth the investment in time.

Once setup, I also recommend you turn off the “broadcast” option in your wireless router - this will ensure that your network is not “advertised” to anyone else within wireless range.

Intellitech I.T. Solutions Ltd. - Representatives (UK & Europe) for SecureStix

No comments: