Reply to thread

Message

<blockquote data-quote="ForgottenSeer 58943" data-source="post: 673338">A few corrections/suggestions I would like to make about this article;The reason an SSID should not be a common, easy name because most of the common ones are broken and lists are available on the darkweb rainbow tables. Since the SSID name is used to salt the encryption key.SSID&#039;s should also contain _optout_nomap for example:&nbsp; 5S5fXNSf5ukF_optout_nomap would be a good, secured WiFi SSID with the required command line switches to reduce spying/telemetry.RogueAP Detection/Suppression and WIDS should actually both be used, not either or, as they both serve completely different functions. RogueAP detection is great, but requires monitoring. If your device has passive and/or active Rogue AP detection ALONG WITH suppression that is ideal as any On-Wire RAP would be suppressed via ARP poisoning.Also remember AP Isolation and Guest Policies. AP Isolation keeps WiFi devices from being able to talk to each other. Guest Policy keeps devices from being able to talk within the subnet to other devices. BOTH should be on in most cases!</blockquote>

[QUOTE="ForgottenSeer 58943, post: 673338"] A few corrections/suggestions I would like to make about this article; The reason an SSID should not be a common, easy name because most of the common ones are broken and lists are available on the darkweb rainbow tables. Since the SSID name is used to salt the encryption key. SSID's should also contain _optout_nomap for example: 5S5fXNSf5ukF_optout_nomap would be a good, secured WiFi SSID with the required command line switches to reduce spying/telemetry. RogueAP Detection/Suppression and WIDS should actually both be used, not either or, as they both serve completely different functions. RogueAP detection is great, but requires monitoring. If your device has passive and/or active Rogue AP detection ALONG WITH suppression that is ideal as any On-Wire RAP would be suppressed via ARP poisoning. Also remember AP Isolation and Guest Policies. AP Isolation keeps WiFi devices from being able to talk to each other. Guest Policy keeps devices from being able to talk within the subnet to other devices. BOTH should be on in most cases! [/QUOTE]

Verification