Securing a LAN Organizations often do not have the security built into their inf

Question

Securing a LAN

Organizations often do not have the security built into their infrastructure that is required as the organization grows. When the need for security increases, someone is often assigned the responsibility of determining what security measures need to be improved.

A network administrator at PPI came to you with a new task. PPI has a LAN using TCP/IP. They want the network to be secure but also to gain the most return for the smallest investment. You have been asked to advise the Global Communications team on LAN security:

Explanation / Answer

A) Two additional security measures that i would advise are :

1) Lock Down All Access Points
The next step of wireless/Wired LAN security involves the basics of configuring all access points to implement the best practices of wireless/wired LAN security and requires little or no additional cost other than a little time and effort.

They should also configure access points to disable the broadcast mode where the access point constantly broadcasts its SSID as a beacon in search for stations with which to connect. By turning this default feature off, stations must know the SSID in order to connect to the access point.

It is known that, most enterprise-class access points allow you to limit which stations can connect to it based on filtering of Media Access Control (MAC) addresses of authorized stations. While not foolproof, MAC address filtering provides basic control over which stations can connect to your network.

2) Intrusion Detection & Protection
Security mangers rely on intrusion detection and protection to ensure that all components of 802.11 wireless LANs are secure and protected from wireless threats and attacks. While many organizations have already deployed intrusion detection systems for their wired networks, only a wireless LAN-focused intrusion detection system can protect your network from attacks in the airwaves before the traffic reaches the wired network.

An effective intrusion detection system is needed to protect wireless LANs from the known and the developing attacks to wireless LANs.

For Example, AirDefense

Related Questions

Navigate

• Browse (All)
• Browse S
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.