WiFi Manager scans the entire wireless network for Access points broadcasting their SSID. When such an Access point is found, this alert is raised.
What is a SSID ?
SSID is an acronym for Service Set Identifier. This is a sequence of characters that uniquely names a wireless LAN and differentiates one WLAN from another. To participate in a wireless LAN all devices must use the same (case sensitive) SSID as that of the wireless LAN.
Why do Access points broadcast their SSIDs ?
For any device / user to join a wireless LAN they should know the SSID of the WLAN. To make the process of joining the wireless LAN simple for the mobile clients, the Access points broadcast their SSID in the beacon frames.
What are the problems associated with such broadcast of SSID ?
By broadcasting the SSID the Access point is announcing that such and such SSID is being used in the network. Though this is not the only information that is required to join the wireless LAN, this is one of the vital information which hackers can exploit.
Should we disable the broadcast of SSID in the Access point ?
Well, it depends on the type of network that the Access point is serving. If the Access point is serving a public network or is for the purpose of giving internet access to the guests of the corporate, then broadcasting the SSID will help its users and make the process of joining the WLAN simpler. If on the other hand the Access point is being used by the corporate users for official purpose, then disabling the broadcast will make sense.
Note : Access points can support multiple SSIDs, and can be configured as to which SSID they should broadcast.
Will the hackers not be able to find the SSID if we disable their broadcast in Access point ?
No, there are other ways to find it even if the broadcast of SSID is disabled in the Access point. Though this needs some effort by the hacker.
What can Wireless LAN Administrators do ?
If that particular WLAN is not meant for public use then the administrators can disable the broadcast of that SSID.
Alarm Details Image
WiFi Manager discovered that a Cisco 1200 AP is broadcasting its SSID
Most AP vendors support the configuration for SSID broadcast. Cisco Aironet AP can be configured from the Internet browser or through WiFi Manager(see sample below).
Turning off SSID broadcast for Access Point through the WiFi Manager interface.
Turning off SSID broadcast for Cisco Aironet Access Point through the browser interface.
|
