Security

Ask something
Discussion Locked

Securing a wired lan when adding wireless

0 helpful
6 replies

by jamied

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Our emoployees want to add wireless access to our network. What is the best way to secure our network from unauthorized wireless access. Some of the data stored on the wired netsork is protected health information covered by HIPAA

6 replies

by hal 9000

But depending on just how much access to the network that is required this could be a hard one while still retaining Data Security.

What you will need to add is just what OS's are being used, how many computers are involved and how they are arranged, Domain/s P 2 P or whatever. Also the wireless connections what will they be Notebooks or full blown workstations? And will they need full access to the DATA?

The answer will depend on just what is required and just how happy the Sys Admin will be in opening up the network to potential unauthorized access and all the legal implications that go along with that.

If all the wireless connections will be notebooks and only used for field visits then it would be a fairly simple matter but if you are talking workstations it would be better to wire then up and keep the security that you currently have.

It also depends on what the established network already has as well so we will need to at the very least know the basics like is there any form of Internet connection, if there is what is used to isolate the data from outside sources and just how many servers are in use and what they do. Like file servers Mail Servers and the like.

If you would like to post a bit more detail I will attempt to answer your question but as you have not provided enough detail it is impossible to know just how to answer your question so you get the right answer.

But honestly the trick to getting the answer that you need to hear is in knowing what to ask and what detail to give so that we have a chance of helping you.

Col

by craig herberg

To keep your network from unauthorized wireless access, do the following:

1. Turn off SSID broadcast
2. Change SSID to one that is very difficult to guess
3. Change router password to a secure one
4. Use MAC access list on router to only allow access to those in list
5. Use WPA2 AES encryption and complex network key passphrases

You should probably use a RADIUS server (in-house or a service) to manage access.

Be sure to change the SSID and encryption key periodically, and change the router password regularly.

Good luck.

Craig Herberg

by craig herberg

That's an interesting article, but perhaps a bit misleading regarding the value of MAC filtering and SSID hiding. No doubt, they can be cracked; however, they do help take the wireless network out of the wide open public domain, and require more sophisticated attacks to get by them. But please don't expect them to protect our launch codes.

by angry_white_male

If you can at all avoid it - don't install a WLAN. Too many security holes... not to mention lousy performance compared to a 100 MBPS wired network.

WLAN off a dedicated internet line is good for the visitor's area so they can check their mail and log into their company's network... but for serious day-to-day computing, it simply isn't worth the hassle.

Spend the money, wire the place up correctly.

by jmgarvin

You are going to have a bear of a time getting your wifi network HIPAA compliant. Just wire the place up and save wireless for later.

This discussion is closed to new replies.