Wireless Networks - are they really safe? (page 2 of 2)

It is worth considering to limit the number of dynamic DHCP addresses that can connect to the number of people on the network, by doing this it will be easy to recognize any unauthorized connections.

In addition wireless access points will allow the configuration of signal strength and also direction so that the access points themselves can be placed as centrally as possible in the room and thus as far as possible from outer walls of the buildings. This combined with limited signal strength and direction so that the wireless users are just within the range will prevent anyone outside of that range having access. - possibly! Some wireless network cards now come with a powerful antenna capable of detecting signals up to hundreds of meters away.
Use encryption 128bit WEP.

This can be cracked as previously explained but it is another layer of defense that will hopefully encourage the potential hacker to overlook your network and look further a field for a network that is more interesting and a little less secure. RADIUS encryption servers are also available to increase security but they are generally quite expensive, as with all systems there are open source options available which tend to be free.

Limit access points. Access points are like modems on a network, they create the perfect backdoor and are difficult to detect. Just like someone in your company can bring along a modem, connect it to his PC and to the phone line to get access, an access point works in pretty much the same way. Only authorized access points that the network admin knows about should be installed and locked so that the configuration cannot be changed, of course it is obvious that strong passwords authentification should be used and changed on a regular basis in line with your security policy.

Disable SSIDS broadcasting. Purchase an access point with the option to disable the SSID broadcasting of your access point so that scanners cannot pickup on the name of the network. If this is not an option on the access point that you have then ensure that you change the name from the default and do not use the name or address of your company. Not the most secure but again placing another layer of defense against attack.

So if you really want a wireless network, make sure you secure it properly with WEP, purchase a RADIUS server if you can afford it and follow the simple steps above top control the human element of security, but remember if you want to take to the airwaves then you must be aware of the possible consequences.