Wireless Security Review

Wireless security is rapidly gaining adoption as a low cost alternative to traditional wired networks. With the deployment of a wireless network, new and unique security threats are introduced to the organization. Understanding these threats and adequately mitigating the associated risks is critical to securing the network infrastructure and underlying information assets. The organization will provide Halock with physical access to the locations indicated in the scope section below to scan for wireless networks. Using both wireless network sniffing and onsite physical inspection, Halock will attempt to identify rogue wireless networks and access points. The objective of this review is to identify the wireless access points broadcasting from within The organization's offices and determine the security of the devices.

Solution At-a-Glance:
  • Locate and identify broadcasting wireless network devices
  • Determine the security of selected devices through hands on review and wireless "sniffing" techniques
  • Attempt to gain access to wireless access points
  • Evaluate access control and ensure principles of least privilege are utilized
  • Evaluate wireless encryption
  • Ensure wireless configuration adequately protects information assets and does not introduce vulnerabilities into the environment
  • Test the operational effectiveness of security policies, procedures, and standards

Network Device Hardening Review:

Using a combination of analysis tools and manual reviews, Halock will analyze the configurations of network devices such as core routers, network switches, and firewalls to identify security risks and evaluate adherence to security best practices.

System Hardening Review:

Halock evaluates the configurations of key client and server systems to ensure proper hardening and security configurations. Each system is evaluated using a combination of software tools and manual hands-on review techniques, aimed at identifying security risks associated with the configuration or the operating systems and related services.