Security Basics mailing list archives
RE: Wireless security question
From: "Gross Barry D." <bd.gross () hosp wisc edu>
Date: Thu, 23 Dec 2004 09:00:03 -0600
Its hard to enforce technically so I agree you should have some policy. you could have a laptop dmz that this person gets connected to that has limited resources available to it. Also depending on how deep your pockets are there is also software out there that can check to see if the wireless card is disabled, if the laptop has patches, virus software..etc. -----Original Message----- From: Steve [mailto:securityfocus () delahunty com] Sent: Wednesday, December 22, 2004 4:56 PM To: Marty; Sec Basic Subject: Re: Wireless security question Policy against wireless, including cards. Remove his wireless card. One risk you have is his laptop latching on to hostile networks, once with worms/viruses, as well as the threat you note. ----- Original Message ----- From: "Marty" <groupecci () yahoo ca> To: "Sec Basic" <security-basics () securityfocus com> Sent: Wednesday, December 22, 2004 11:57 AM Subject: Wireless security question Hi gang! Here is a question for you... We have a secure network with no wireless connections whatsoever. One of our laptop came in with credentials to log on to the network through the Ethernet cable BUT the person had just added a wireless card to his laptop. This situation actually came up and the person could see external wireless networks (from other companies around our building) and access Internet through there. Yeah I know they're stupid, but it's the real world! This seems like a potential threat for taking our data out the back door. Copy files accessed through our network to another network and voilà! No trace at all of the mischief. We monitor internet access and block non-company Email (Yahoo, Hotmail etc.). Suggestions? Thanks and Happy Holidays! Marty! __________________________________________________________ Lèche-vitrine ou lèche-écran ? magasinage.yahoo.ca
Current thread:
- Wireless security question Marty (Dec 22)
- RE: Wireless security question Hamlesh Motah (Dec 22)
- Re: Wireless security question Steve (Dec 22)
- RE: Wireless security question Rob McShinsky (Dec 23)
- Re: Wireless security question Michael Puchol (Dec 28)
- RE: Wireless security question Rob McShinsky (Dec 23)
- RE: Wireless security question Harshul Nayak (Dec 23)
- Re: Wireless security question Tomas Wolf (Dec 23)
- Re: Wireless security question Liran Cohen (Dec 23)
- Re: Wireless security question Nelson Santos (Dec 28)
- Re: Wireless security question threepts (Dec 29)
- <Possible follow-ups>
- RE: Wireless security question Gross Barry D. (Dec 23)
- RE: Wireless security question Andrew Shore (Dec 23)
- RE: Wireless security question Justin Acquaro (Dec 23)
- RE: Wireless security question Andrew Shore (Dec 28)
- Re: Wireless security question Nicholas Diotte (Dec 28)
- RE: Wireless security question adisegna (Dec 28)
- RE: Wireless security question Omar Salvador Alcalá Ruiz (Dec 29)
- Re: Wireless security question Lim Ming Wei (Dec 30)
- RE: Wireless security question Dante LoScalzo (Dec 30)