An email has just turned up in my inbox with the above heading - having just gone through a process of having to reconfigure my son’s wireless setup (he likes to play) I decided to take a read.

Here’s the full article but be warned it is quite lengthy.

It is summarised at the end with the 22 points the author thinks you should heed and I re-create those here:

1. Update the firmware on the AP and on all of the STAs.
2. Change the administrator’s password to a very complex one that you can remember and or document.
3. If the AP allows you to do so, change the name of the administrator’s account.
4. Disable DHCP on the LAN side of the AP and use Static IP addressing on the STAs.
5. Change the default IP address of the AP to something that will work for your STAs.
6. Use the strongest authentication and encryption that the AP and STAs can all use.
7. Turn off the broadcasting of the SSID in the Beacon frame.
8. Use a non default SSID that neither identifies you, your business, your location, or the location of the AP.
9. Place a space or two at the end of the SSID. (War Drivers will not see them)
10. Implement a MAC filter allowing only your STAs to connect.
11. Turn the transmit power down on the AP to just what is required for desired coverage.
12. Use a non-overlapping channel, preferably not channel 6.
13. Change your PHY to 5GHz if possible.
14. Use Anti-Spyware on your STAs.
15. Use a personal firewall on the STAs.
16. Use end point protection software if possible.
17. Install the AP in a physically safe location.
18. Do not disclose your configurations to others.
19. Limit the number of allowed associations to just your STAs.
20. When not in use, turn off the AP.
21. If there is a breach in security, change all security settings as soon as possible.
22. If you are unable to configure the AP securely, consult a trained and certified professional to do so on your behalf.

Some of these are just downright obvious (#6, 17), well they are to me and others I don’t totally agree with (#7, 20) but hey the author works for AirDefense so what do I know?

Anyway - would be interested in your responses and whether you agree or not with the above?

[tags]AirDefense, SOHO, wireless, cwnp[/tags]