Re: MAC level authentication or filtering

[Jerry Eblin <Jerry.Eblin () rrsc com>]

Dave,

      Depending on the types of switches you use at your location, it is
possible to set up MAC filtering on them. Intel, Cisco, Netgear, etc all
make switches that are capable of doing MAC filtering. As for being alerted
when something like this happens, you would have to investigate the
specific switch/vendor to see if they offer alert capabilities.

Jerry




                                                                           
             "David Nardoni"                                               
             <dnardoni@firstre                                             
             sponseconsulting.                                          To 
             com>                      <security-basics () securityfocus com> 
                                                                        cc 
             10/07/2004 12:53                                              
             PM                                                    Subject 
                                       MAC level authentication or         
                                       filtering                           
             Please respond to                                             
             <dnardoni@firstre                                             
             sponseconsulting.                                             
                   com>                                                    
                                                                           
                                                                           




I need a solution that will allow me to prevent a user from coming in to my
office and plugging in a laptop and gaining access to the network.

I have users that are currently using thin clients to connect to the main
server to do all their processing.  If a legitimate user turns bad and
decides to bring in a system (laptop) from home and connect it to the
network and proceed to use their proper username and password to gather
information from terminal services, I want to be able to recognize that
they
have plugged in an unauthorized system and keep them from gaining access to
the network.

I welcome all ideas no matter what vendor solution or no matter how simple
or complex.  If you need more info on the situation let me know.


Dave Nardoni CISSP
First Response Consulting Services, Inc.
dnardoni () firstresponseconsulting com