Home page logo

basics logo Security Basics mailing list archives

RE: Wireless security question
From: "Dante LoScalzo" <Dante () gunnip com>
Date: Thu, 30 Dec 2004 08:30:02 -0500

Not true, the policy is still applied as long as she is using her domain logon (credentials cached locally).  I've gone 
through this with some of our field techs who liked to bypass the proxy, but weren't able to surf the web when they 
went home-- how they cried...

-----Original Message-----
From: threepts () whaddu com [mailto:threepts () whaddu com] 
Sent: Wednesday, December 29, 2004 1:39 PM
To: Nelson Santos
Cc: Marty; Sec Basic
Subject: Re: Wireless security question

If she is running windows XP, I believe an easier way would be to place her in an OU and create a policy for her that 
disables the Wireless Zero Configuration service. That should stop it from atleast associating with the other access 
points. When she got home, the policy wouldnt be applied seeing as she wasnt on the domain any longer. Just my 2 cents.


  What about Hardware Profiles? You could create a new one and then 
disable the wireless card in it. Then ask the user to use the new 
profile anytime she's on your network.

Happy Holidays,

Nelson Santos

On Wed, 22 Dec 2004 11:57:10 -0500 (EST), Marty <groupecci () yahoo ca>
Hi gang!

Here is a question for you...

We have a secure network with no wireless connections whatsoever.

One of our laptop came in with credentials to log on to the network 
through the Ethernet cable BUT the person had just added a wireless 
card to his laptop.

This situation actually came up and the person could see external 
wireless networks (from other companies around our building) and 
access Internet through there. Yeah I know they're stupid, but it's 
the real world!

This seems like a potential threat for taking our data out the back 
Copy files accessed through our network to another network and voilà! 
No trace at all of the mischief.

We monitor internet access and block non-company Email (Yahoo, 
Hotmail etc.).


Thanks and Happy Holidays!


Lèche-vitrine ou lèche-écran ?

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]