November 09, 2005
Rogue APs
Companies that deploy wireless networks have to guard against rogue access points (AP). The first step to guard against unauthorized access is to have a policy in place. Rogue access points that originate within the office premises are generally not malicious in nature even though they offer unauthorized access to a company network. An “evil twin” AP impersonates a genuine AP and can trick unsuspecting employees into parting with their user IDs and passwords and also critical company data.
Overlay systems can be deployed to sniff for rogue SSIDs. In-built systems in enterprise APs sniff for rogue APs by comparing the MAC addresses with a database that lists the authorized APs. Companies that invested in wireless networks during the early days may not be fully equipped to handle rogue APs. Also, there are enterprises that have an environment of wired and wireless network. Such companies should ideally invest in intrusion protection systems (IPSes).
--
Did you enjoy this post?
« CommuniGate Systems and Pingtel | Main | Microsoft a contender for AOL stake »
