I know the OP is looking for cheap/free solutions, but we use Cisco Wireless LAN Controllers for rogue AP detection, (auto/manual)containment, and WIPS. Works pretty good.

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Murda Mcloud
Sent: Thursday, November 12, 2009 5:53 PM
To: 'Steven Bonici'; security-basics (at) lists.securityfocus (dot) com [email concealed]
Subject: RE: Rouge Wireless AP

How about NetStumbler? Or mini stumbler? They find any wireless ap's and
tell you how strong their signals are and SSID's if needed. It's 'free' so
feel free to donate!

http://www.netstumbler.com/

What is harder is tracking them down or triangulating position. NetStumbler
has some GPS integration which could help you with 'maps'.

> >-----Original Message-----
> >From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
> >On Behalf Of Steven Bonici
> >Sent: Thursday, November 12, 2009 5:28 AM
> >To: security-basics (at) lists.securityfocus (dot) com [email concealed]
> >Subject: Rouge Wireless AP
> >
> >
> >We have residential homes with PC's installed, Internet access, and I
> >know there are people installing there own wireless Aps during overnight
> >shifts because they ones we have installed are secured. I know there
> >are a lot of ways to find out, but is there any relatively small
> >application that can be installed on a PC to identify either the rouge
> >AP or laptop connecting to the network?
> >
> >Thanks - Steven
> >
> >-----------------------------------------------------------------------
-
> >Securing Apache Web Server with thawte Digital Certificate
> >In this guide we examine the importance of Apache-SSL and who needs an
> >SSL certificate. We look at how SSL works, how it benefits your company
> >and how your customers can tell if a site is secure. You will find out
> >how to test, purchase, install and use a thawte Digital Certificate on
> >your Apache web server. Throughout, best practices for set-up are
> >highlighted to help you ensure efficient ongoing management of your
> >encryption keys and digital certificates.
> >
> >http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be44
2f
> >727d1
> >-----------------------------------------------------------------------
-

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]