Start by reviewing the security configuration settings in client radios, controllers, and access points. This includes confirming that encryption and authentication functions are configured correctly in relation to design specifications. For example, if design specifications indicate use of Advanced Encryption Standard (AES) encryption, ensure that the access points are configured to require AES encryption. Do not assume that the WLAN has the proper configuration, be certain to look at the configuration of the actual equipment. Once you are sure that the network’s security settings are correct, determine whether authorized client devices can successfully connect to the network using the applicable security mechanisms, such as AES encryption and 802.1X authentication. In addition to ensuring that it is possible to connect, verify that the actual security mechanism is in use. You can do so by running a wireless packet sniffer, which will identify the applicable security mechanism that correspond to the client device being tested.
Leave a Reply
You must be logged in to post a comment.