Without an access point authentication method like LEAP, 802.11 is just not useable in a business environment. Even if you treat your wireless network like the internet and require users to VPN into the core network (a great idea), people can use you wireless network like their private internet. I have seen several large wireless networks be used as the backbone between several home networks. The unauthorized users could not access any data due to the IPSec/Firewalls, but that was not their goal. All they wanted was connectivity from one access point to another. So college students playing Quake were enjoying the company?s investment in a wireless campus.

Also, there is no way to both prevent signal leakage and maintain usability without tempest shielding your building. A high gain unidirectional antenna can attach to an access point through a concrete wall from a quarter mile away. So if you think your safe because you are using patch antennas and carefully placing your access points, your wrong.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/75/11963#11963