0
votes
1answer
50 views

Do all captive portal solutions work the same way? (cookie, vs MAC address, vs other?)

While traveling and having to interact with a number of broken captive portal implementations I've overheard other passengers having usability issues with iPads, Phones, computers depending on the ...
2
votes
3answers
113 views

Is there any point securing a “guest” wifi network with WPA?

We have a guest wifi network setup on a separate VLAN, using an open connection (e.g. NO wpa/wep). A (semi-technical) customer recently complained that he wasn't happy about his traffic not being ...
1
vote
1answer
72 views

Switch to switch encryption over a wireless bridge (TrustSec?)

I am planning to connect an existing Cisco 3750 switch to a 3560C switch over a wireless PTP bridge. The bridge will be WPA2 protected, but I am looking for an additional measure of security between ...
-4
votes
1answer
1k views

Does adding ?.jpg after url really bypasses wifi security? And how? [closed]

So I stumbled upon the following lifehack the other day: I currently don't have access to an airport with expensive WiFi but it seems that adding ?.jpg to any url doesn't cause any problems with ...
-3
votes
1answer
186 views

Can I block android phones from my company wireless network? [duplicate]

Network is password protected, all employees have access to password. Company policy is only company approved and provided devices are allowed on network. We can not tell who is logging in on ...
0
votes
0answers
51 views

wifi network connection selection restriction

I'm dealing with the following scenario. C1 - computer 1 used for work. Windows 7 with limited user account for worker. R1 -- is wifi router 1. This router is allowed to be accessed by C1. It is ...
0
votes
1answer
109 views

LEAP vs EAP/TLS?

I am given a choice between: LEAP Wireless Client ID 802.1x (EAP/TLS) Wireless Client ID (Digital Certificates) To connect to a wireless network. What are the differences? Which one would you ...
4
votes
2answers
305 views

Best security practice for small networks - wifi, lan,

We regularly setup small networks for clients in different locations to allow them to work on different products now the question what should be the best security practice. Currently we have a wifi ...
3
votes
1answer
800 views

How do I go about Improving wireless security at the office (Radius? Certs?)

EDIT 1: Our environment is mixed, majority OSX with a few Windows and Linux boxes. More importantly, Android and Apple cellphones will also need wireless access on a regular basis. We have a redhat ...
6
votes
3answers
549 views

Corporate Wireless policies

Our corporate laptops are restricted to only allow internet access through our proxy (connection profile in Internet Explorer pushed through a GPO). On a remote/3rd party connection this is allowed by ...
5
votes
6answers
3k views

Why would you use EAP-TTLS instead of PEAP?

As I understood EAP-TTLS and PEAP share same level of security when implemented in wireless networks. Both only provide server side authentication via certificate. The drawback of EAP-TTLS can be ...
1
vote
1answer
59 views

Security Certificate Exception

I am dealing with a small issue of certificate. In our wifi hotspot, every user is given a different username and password. In order to access any website, after connecting to wifi, login credentials ...
2
votes
1answer
178 views

Setup wifi router to allow connection only when a certificate is installed

I'm not sure if this is in scope of SF, but I'd like to setup a router so that it will only allow connections when a certain certificate is available on the client machine. The question is - is it ...
0
votes
1answer
74 views

Which brands of wireless routers and DSL modems care about security? [closed]

Which vendors have established a strong security process during development where they educate firmware developers about security issues, arrange security engineers to review the code, accept ...
0
votes
1answer
61 views

Wireless ARP make network unusable rather than capturing a packet

I try to do arp-poisoning on my wireless network using ethercap (same method as using on wired). It make the victim network unusable rather than forward packet to attacker computer. Why ?
0
votes
3answers
70 views

Securing data sent to an unencrypted WiFi AP

The business plan of a project I'm involved in assumes selling certain WiFi-enabled devices to end users. All these devices originally have an unencrypted connection and a standard SSID. The problem ...
0
votes
3answers
208 views

Preventing local network access on wireless network

On our current network, we have a wireless router and a gigabit 16-port switch. If a machine connects to the wireless network, they have access to all of the local machines in the network. This can be ...
0
votes
2answers
743 views

unable to sniff traffic despite network interface being in monitor or promiscuous mode

I'm trying to sniff out my network's wireless traffic but am having issues. I'm able to put the card in monitor mode, but am unable to see any traffic except broadcasts, multicasts and probe/beacon ...
1
vote
1answer
86 views

Securing open access point

I need to have multiple yet unknown devices to connect to an open wireless AP. I plug various mesurement instruments on this wireless network I also have an existing network with multiple desktops ...
2
votes
3answers
489 views

Why are Wireless Networks more vulnerable to ARP Poisoning?

I have heard a lot of people mention that wireless networks are far more vulnerable to ARP poisoning attacks. Why would this be so? Why could you not employ similar protections as for a switched ...
1
vote
2answers
3k views

How can I enable WPA2 on Windows 7 when sharing an ethernet connection over wireless?

I have shared my ethernet connection over wireless in Windows 7 using the method outlined in the accepted answer here: Windows 7 - wireless connection sharing. My wireless card is a TP-Link ...
2
votes
5answers
393 views

Mitigating risks of HTTP session hijacking on open WiFi networks with VPS

The new Firefox extension Firesheep highlights the fact that HTTP login sessions can be easily hijacked if the data can be sniffed, which is trivial on an open WiFi network. I would like to set up ...
1
vote
1answer
185 views

Ubuntu - 3G Wireless Internet Security

I have a standalone Ubuntu 10.04 server (+ gnome) with a wireless 3G internet connection that is used to download data from an ftp server, process it, and then upload it again. Remote administration ...
-1
votes
5answers
1k views

How to encrypt my web traffic?

I am using a wireless LAN (or sometimes a wired connection) connection for web surfing and any one from my campus can use the network. I simply want to encrypt my all data which is going between my ...
1
vote
1answer
2k views

WPA2 Group Key Renewal — Will connection be dropped?

I used to set my WiFi security using WEP to support legacy WiFi dongles that can't handle WPA (or other new encryption scheme). Recently, I've dumped those old dongles and got new ones. I am now ...
2
votes
2answers
458 views

Best method for secure WiFi use in open setting?

I would like to use the most efficient and safest method of securing my wireless traffic in an "open" setting such as free WiFi in a coffee shop. What's more efficient and more secure: a SOCKS proxy ...
0
votes
1answer
724 views

HP MSM410 WAP Wireless security mode: restrict to default gateway or off?

I have an HP MSM410 wireless access point and when I first configured it I couldn't access any other devices on the network, but I could access the internet fine. I figured out that this was because ...
2
votes
2answers
617 views

How to pragmatically control acces to Wi-Fi network

Considering this scenario, At coffee bar you order the drink and get bill for that, On bill there is key for Wi-Fi network which is going to be valid for next X hours. I want to try realize something ...
1
vote
1answer
97 views

NAP solutions for windows network

I am looking for a NAP solution for a network. Either an Appliance or software to run on a windows server. I have played with windows server 2008 r2 NAP but i dont think this is going to be a good ...
14
votes
1answer
8k views

WEP/WPA/WPA2 and wifi sniffing

I know that WEP traffic can be "sniffed" by any user of the WIFI. I know that WPA/WPA2 traffic is encrypted using a different link key for each user, so they can't sniff traffic... unless they ...
1
vote
1answer
85 views

Automated VLAN creation with residential Wireless devices

We've got a few WRT devices from Linksys here, and the issue has arisen to deploy them in a relatively small environment, However, in the interest of manageability we'd like to be able to ...
2
votes
2answers
2k views

Can HTTPS traffic over an unencrypted wireless network be viewed by others?

If I were to log in to - let's say - Gmail.com (which uses HTTPS by default), can my login and password be intercepted if I'm on an unencrypted wireless network? And if I still have the login cookie ...
2
votes
6answers
239 views

Wireless Password

I have a security policy question: I want to know how other admins handle the WIFI password in the office. Does everyone know it? Do you enter it in for the user or guest every time and keep it a ...
0
votes
3answers
3k views

What is the best way to setup a public and private wireless access point on the same home network? [closed]

For my home network (with internet provided from a cable modem) I would like to setup a secure wireless access point that I use for all of my personal connections (home PC, iPhone, Xbox, etc) and also ...
0
votes
3answers
116 views

Can an external server be used to encrypt all traffic

My work takes me to a number of places with WiFi connection. I want to be able to encrypt the traffic between my laptop and the internet. Can I do this with a VPN server? What is the best way to get ...
4
votes
4answers
2k views

Will MAC filtering increase Wifi security?

I've always thought that you should enable MAC filtering to increase Wifi security (in addition to using WPA2). Now I've found this article (Wireless LAN security hall of shame) that says MAC ...
1
vote
2answers
835 views

Disable (disconnect from) WiFi on XP/Vista when cable is connected

We have a problem in office when a user connects to our LAN without disconnecting from WiFi network he was previously on (a free WiFi provided by building owners). At a minimum, firewall log entries ...
1
vote
3answers
932 views

looking for wifi router with restricted access to LAN

I need to set up a separate Wifi network for guests, and am looking for a decent router which can be part of the LAN but restrict access so that it can only route to the gateway/WLAN. Are there any ...
0
votes
2answers
564 views

Restrict destination IPs from a WiFi connection?

I'm a developer and not a sysadmin, so I'm going to ask this question the best I can. I am working on a web application for mobile devices. Since it is in development, it is only available on our ...
0
votes
4answers
3k views

Securing Guest Wireless Network

I need to setup a guest wireless network at the office for visitors to connect to. What are your recommendations in terms of how to secure it without putting too much of a support burden on myself? ...
0
votes
1answer
432 views

Where can I download airchat?

I'm a penetration tester currently conducting a security test on our company's network, and have already verified most of the hosts on the network are secure. But I saw this video I heard of this type ...
0
votes
1answer
138 views

How can I secure CISCO Radius?

Cisco offers a WLAN system that allows admins to restrict WiFi access to authenticated users. However, the following statement bothers me: Use the secure https://1.1.1.1/login.html. .... ...
0
votes
1answer
782 views

Wireless guest access with HP ProCurve 420

We have a HP ProCurve 420 wireless access point hooked up to our LAN, which then connects to the internet though a gateway router. Is it possible to set up a guest SSID, which can access the internet ...
6
votes
4answers
369 views

How secure are wireless networks?

If I'm on an open wireless network, can a 3rd party capture packets and see all the internet traffic to and from my computer? What if WPA encryption is used, but someone has the key already? If I use ...
3
votes
4answers
4k views

How serious is a problem is multi-homed networks?

Multi-homed is the term that I have heard for being connected to a LAN at the same time as being connected to the internet via something like a wireless connection. I have heard that this is so ...
2
votes
6answers
533 views

Tips for connecting online wirelessly in a hotel/cafe setting

I'll most likely be using TeamViewer or LogMeIn to connect securely to another machine. While that connection is secure, my laptop is still on a simple hotel/cafe connection. What is recommended for ...
2
votes
1answer
524 views

Restricting access on wireless vlan

We have 2 wireless networks set up using vlans on a system of HP Wireless Access points. The first is intended for staff, and uses WPA2+radius to authenticate to our AD server, and puts the user on ...
5
votes
8answers
365 views

Wireless Hotspot Security

We have concerns about our staff using wireless hotspots to connect to our LAN. We use a VPN to connect to our network and they can then transfer data using a proprietary application. What little web ...
10
votes
3answers
1k views

Security considerations of WPA versus WPA2?

As we replacing our existing WEP infrastructure across multiple offices, we are weighing the value of upgrading to WPA versus WPA2 (both PSK). We have several different types of devices that do not ...
3
votes
6answers
4k views

Simple Wifi Authentication System for small non profit

I am working (volunteering) with a small non profit that currently has 7 desktop computers and 4 laptops. I am facing a new problem and not sure how to proceed. This non profit has a number of guest ...