Wireless Local Area Network (WLAN): Security Risk Assessment and Countermeasures
Nwabude Arinze Sunday
- 37 -
•
WLAN Infrastructure Hardening Wireless
access points
(WAPs), switches, gateways,
web portals, DNS/DHCP servers, and other devices connected to
WLANs often need to be hardened to resist network-borne attacks. Recommendations of penetration test results might be countermeasures,
like changing AP defaults, disabling unnecessary services, eliminating unused ports, using stronger admin passwords
or authentication methods, disabling wireless- side management and restricting wired-side to specific IP addresses and/or
VLANs, using AP filters to prevent route updates or LAN broadcasts from getting to the wired network, fine-tuning DoS thresholds, and applying firmware upgrades/patches.
Share with your friends: