Security for Wireless network

1. ENABLE WEP! 70-80% of wireless access points do not have the Wireless Encryption Protocol that is standard with all Wi-Fi (802.11b) products enabled. Manufacturers have erred on the side of ease of installation, so most products come with WEP disabled by default. For better protection use 128(104)-bit products, rather than the 64(40)-bit products.
2. Periodically change encryption keys
3. Disable the broadcasting of SSID. Some products have a option to not respond to the general ?are there any networks around? beacon probe, so it is more difficult for unauthorized users to discover the network.
4. Pick an SSID name that does not convey target identification information. Don?t use street address, don?t use company name, and don?t use the default. Why attract attention?
5. Place transmitters toward the center of a building to minimize leakage outside.
6. Perform a site survey and take steps to reduce RF levels outside the intended area of use.
7. Turn off DHCP to make it more difficult for an unauthorized user to obtain an IP address.
8. For more security, choose products that allow only certain MAC addressed cards to attach to the network. This can be hard to manage and MAC addresses can be forged.
9. For more security, choose products that integrate with a RADIUS authentication server.
10. For the best security, run a Virtual Private Network over the wireless network.
11. Periodically audit the wireless network to ensure the security settings are as expected and that there are no rogue transmitters bypassing the corporate firewall.
12. Contract a reputable WAN fluent consultant (me?) to evaluate your security and instillation practices.
13. Turn it off. Why attract attention?