help

Wireless security

You need to consider the security of your wireless network. Unlike signals that travel down a wire, wireless radio signals aren’t physically confined to cables and equipment.

They radiate as far as their signal will allow - 50 or more metres if obstacles and interference are low. This means that any wireless user within range of your network can potential connect to it, browse through your files, and even piggy-back off your Internet connection. Fortunately, there are a number of simple steps you can take to increase security.

  • Enable WEP or WPA Encryption: The main method by which wireless networks are protected today is called Wireless Equivalent Privacy, or WEP. Some newer routers and access points support Wi-Fi Protected Access, or WPA offering enhanced security over WEP. It is important to enable security on your access point or router. When enabling encryption you should use a non-obvious encryption key. Choose the highest level of encryption too - most modern wireless devices support up to 128bit WEP encryption.
  • Use non-obvious WEP keys and periodically change them: You should avoid using obvious security keys. Using simple keys like 123456, all ones, or the word 'password' make security easier to breach. Keys should be changed periodically to help to keep your wireless network more secure.
  • Secure your wireless router or access point: All wireless routers and access points should require a password to access their administration features. You should change the password from the default to use a unique password that you can remember.
  • Use MAC address based Access control: Many routers and access points allow you to control which machines are able to access the wireless network. This is specified by the MAC address of the PC. Each MAC address is unique to a PC's wireless card, so using this method prevents other machines from connecting to your network.

To find out your MAC address:

  • Go to start and select RUN, in the RUN BOX type CMD and then click on OK. You are now on the MS-DOS window. In MS-DOS window type the command ipconfig /all and press enter (That is IPconfig space forward slash type ALL). This will display all the information about your network adaptors. Your MAC address is displayed under Physical address and is 12 characters long.
  • Don't send the SSID: Wireless access points and routers have the ability to stop the network Short Set Identifier (SSID) from being sent out. By switching the SSID broadcast off on your wireless network you can hide the network from people scanning for other networks. While not broadcasting your network does not provide total security it adds another layer to your protection.
  • Install firewalls: Many people mistakenly believe that the firewall component of their broadband router is keeping their network 100 per cent protected. However, in the age of spyware and trojans, outbound protection is arguably as important as its inbound relative, so gear up every PC on your network with personal firewall software. A personal firewall will help you to control what can enter and leave individual PCs and, by extension, your network.

21-07-2008