The risk of being ignored is not that the company’s wireless is more equipped, but rather that public areas are being tangled and bypassed. Staff members have access to visitors’ web-brushing videos, outsiders are dipping office WiFi into the inner network, people try to get their addresses directly by way of certification, which is small, building up a back door to the inside.
The public area needs an independent visitor network.
The public areas of the lobby, conference rooms, waiting areas are separated from the physical logic of the company’s network and the individual visitors are certified separately.
Authentication cannot be a vacuum.
Some companies have a loose public area certification system, which allows them to go on or not to be certified. The inner network is half-opened by the fact that they can get a cell number. To authenticate the true record, it is not an error. Real check also needs to be conducted: the frequent use of off-site equipment triggers secondary confirmation, so don't let automatic release become unattended, public sector people have a looser access, and businesses often have the most looser mouth in the lobby.
Private connections must recognize limits.
The private connection is a major disaster area, where the employee can cross a single address and use a wireless router.
Address assignment is a cover.
The certificate is bypassed by a forged or fraudulent web address that is directly connected to the Internet.
Service set identifications distinguish between hidden strategies
The Wireless and Visitors Wireless (WWW) are separated by different service set signs. It is also important to be guided: public areas have a clear name of who is the visitor, who is the employee, and the staff has wrong access. And it is obvious that the logo is clearly written for which purpose the outsiders can be guessed, either not connected or wrong, with which they can experience and safety.
The anomaly terminal must recognize the disposal.
The identification must also include a list of the company’s white list, a temporary list of visitors, an unusual black list, and a clear three-tiered list of equipment.
The traffic must be able to monitor anomalies.
Public area traffic is monitored: who is downloading large quantities, who is sweeping the port and who is detecting horizontally. The unusual flow is a premonition of a net or attack. Monitoring also takes a baseline: what normal public area traffic looks like, it deviates from the baseline before warning against normal fluctuations, it is an anomaly that the baseline false alarm is inundated, and the value of wireless surveillance by companies is within the baseline.
The system is to be introduced to everyone.
The cross-linking is not a technical one, but it is to be reported to every employee: no private connection, no borrowing of accounts and finding out unusual reports. The worker is the front-end eye in the public sector. It also has red lines: the penalties for personal connections and debits are clear. Don't make it feel that the company's wireless mouths are unwittingly opened by its employees, so the message is secure.
Monitor data to be safely operated.
Public area certification and traffic data are required to be in the overall safe operation of an enterprise, which is abnormally triggering a general warning or combined disposal. The problem is hidden in the public domain. There are indicators for doing so: net intercepts, attempts bypassed, private disposals.
Regular Red Blue Fight.
Public sector security cannot be seen on its own, and it can be regularly fought red-blue: simulation of outsiders to swipe the net, simulations to bypass certification, see where the defense leak is. The fight comes out of a hole that is real, harder than self-searching. It also takes a remix: every time a hand moves back into a protective rule, no remunerative confrontation is done for nothing, the Wireless Zone of an Enterprise should be tested by the minds of its opponents, and one's mouth is not easy to find.
The indicators must be kept good.
Indicators to prevent dampness are expected to continue: the number of net intercepts, attempts to bypass, and the number of private disposals decline every month. The reason for indicator fluctuations is not a touchdown.
The wireless certification system is secure and bypassed. The public area is the main battleground where security is strictly secured. Independent visitor networks, authentications, private connections, address protection, service-set differentiation, unusual terminal disposal, traffic monitoring, system promotion, data entry. Nine things happen: the public zone is no longer the back door to the inner network; the staff members ' video-painting and outsiders’ girdle are blocked in the isolation zone; the company's wireless is turned from the loosest gate into the most tight layer.