Security Threats Facing Wireless Networks - Cisco WVC200 - Wireless-G PTZ Internet Camera Administration Manual

Planning Your Wireless Network

Security Threats Facing Wireless Networks

Security Threats Facing Wireless Networks
WVC210 Wireless-G PTZ Internet Video Camera With 2-Way Audio Administration Guide
Cisco wants to make wireless networking as safe and easy for you as possible.
The current generation of Cisco products provide several network security
features, but they require specific action on your part for implementation. So, keep
the following suggestions in mind whenever you are setting up or using your
wireless network. Also see
WVC210, page 88.
Wireless networks are easy to find. Hackers know that in order to join a wireless
network, wireless networking products first listen for "beacon messages." These
messages can be easily decrypted and contain much of the network's information,
such as the network's SSID (Service Set Identifier). Here are the steps you can
take to prevent intruders:
Change the administrator's password regularly—With every wireless networking
device you use, keep in mind that network settings (SSID, WEP keys, etc.) are
stored in its firmware. Your network administrator is the only person who can
change network settings. If a hacker learns the administrator's password, he, too,
can change those settings. So, make it harder for a hacker to get that information.
Change the administrator's password regularly.
SSID—There are several things to keep in mind about the SSID:
• Do not broadcast it
• Make it unique
• Change it often
Most wireless networking devices will give you the option of broadcasting the
SSID, meaning that the SSID can be seen by anyone who is scanning for an
available wireless network. While this option may be more convenient for your
users, it is also convenient for hackers. So, don't broadcast the SSID.
Wireless networking products come with a default SSID set from the factory. (The
Cisco default SSID is "ciscosb".) Hackers know these defaults and can use them to
find your network, even if you are not broadcasting the SSID. Change your SSID to
something unique and that does not identify your company or the networking
products you use.
Change your SSID regularly so that any hackers who have gained access to your
wireless network will have difficulty finding it again.
Setting Security Precautions on the Cisco
2
6