Loading ...
Loading ...
Loading ...
Chapter 10 Wireless
NWA/WAC/WAX Series User’s Guide
110
Rogue APs
A rogue AP is a wireless access point operating in a network’s coverage area that is not under the
control of the network administrator, and which can potentially open up holes in a network’s security.
In the following example, a corporate network’s security is compromised by a rogue AP (RG) set up by
an employee at his workstation in order to allow him to connect his notebook computer wirelessly (A).
The company’s legitimate wireless network (the dashed ellipse B) is well-secured, but the rogue AP uses
inferior security that is easily broken by an attacker (X) running readily available encryption-cracking
software. In this example, the attacker now has access to the company network, including sensitive
data stored on the file server (C).
Figure 61 Rogue AP Example
Friendly APs
If you have more than one AP in your wireless network, you should also configure a list of “friendly” APs.
Friendly APs are wireless access points that you know are not a threat. It is recommended that you
export (save) your list of friendly APs often, especially if you have a network with a large number of
access points. Exported lists show MAC addresses in txt file format separated by line breaks.
Rogue AP Detection
This feature allows the Zyxel Device to monitor the WiFi signals for other wireless APs (see also Section
1.2.3 on page 15). Detected APs will appear in the Monitor > Wireless > Detected Device screen, where
the Zyxel Device will label APs with the criteria you select in Suspected Rogue AP Classification Rule as a
suspected rogue. The APs which you mark as either rogue or friendly APs in the Monitor > Wireless >
Detected Device screen will appear in the Wireless > Rogue AP screen. See Section 1.4 on page 19 to
Loading ...
Loading ...
Loading ...