From the course: Certified Ethical Hacker (CEH)

Unlock this course with a free trial

Join today to access over 24,800 courses taught by industry experts.

Introducing wireless countermeasure

Introducing wireless countermeasure

From the course: Certified Ethical Hacker (CEH)

Start my 1-month free trial Buy for my team

Introducing wireless countermeasure

“

- Some best practices for wireless deployments. The SSID is not a password. While you can prevent the broadcasting of an SSID, it can still be determined just by sniffing the air, so an SSID is not a password. Change the default username and password for your routers and access points. You can disable SSID broadcast. Again, it's more security through obscurity. Disable remote administration of your devices on what's called the WAN side or the northbound side. Don't forget about physical security. If I can plug into the router, then I might be able to manipulate it. Filter MAC addresses if administratively feasible. Remember that at the enterprise layer or level filtering of MAC addresses for thousands of hosts is not really scalable. Use WPA3 or 2, don't use WEP. Don't put identifying information in your SSID. So, if your company is example.com, your SSID should be something like cabinet or soap or whatever. It should not be example.com. Use firewalls and IDS. Consider higher-level…

Contents