Wireless Security Review

Assessment & Compliance Services Division

847.221.0200 halock.com

Solution Overview
Solution
At-a-Glance:
 Locate and identify broad-
casting wireless network
devices
 Determine the security of
selected devices through
hands on review and wire-
less “sniffing” techniques
 Attempt to gain access to
wireless access points
 Evaluate access control and
ensure principles of least
privilege are utilized
 Evaluate wireless encryption
Wireless security is
rapidly gaining adoption
as a low cost alternative to
traditional wired
networks. With the
deployment of a wireless
network, new and unique
security threats are
introduced to the
organization.
Understanding these
threats and adequately
mitigating the associated
risks is critical to securing
the network infrastructure and underlying information assets.

 Ensure wireless configura-

tion adequately protects
information assets and does
not introduce vulnerabilities
into the environment
 Test the operational effec-
tiveness of security policies,
procedures, and standards
The organization will provide Halock with physical access to the locations indicated in the scope
section below to scan for wireless networks. Using both wireless network sniffing and onsite
physical inspection, Halock will attempt to identify rogue wireless networks and access points.
The objective of this review is to identify the wireless access points broadcasting from within The
organization’s offices and determine the security of the devices.

Professional Services Included: Pricing:

 Pricing varies based on the

 Conduct interviews with technical staff to  Review monitoring and logging configura- size, complexity, and depth of
determine role and function of known wire- tions testing
less devices
 Each physical location re-
 Determine the likelihood an attacker could
viewed typically ranges from
 Review placement and role of each device as crack the encryption methods in use $2,500 to $5,000
documented in The organization’s topology
diagrams  Documentation of findingss

 Assess configuration of typical wireless de-

vices and adherence to hardening standards

 Sweep for wireless SSIDs and document the

presence of wireless devices

1834 Walden Office Square, Suite 150 * Schaumburg, IL 60173 * 847.221.0200 * www.halock.com
 847.221.0200 halock.com

Wireless Security Review: Scope Worksheet

The following locations will be visited:

LOCATION PURPOSE

The following aspects of wireless security will be reviewed:

Wireless Access Point Configuration
Client Wireless Security
Rouge Access Point Sweep

The following documents are typically reviewed:

Network Topology Diagrams Wireless Standards User Wireless Access Policy

The following resources are typically interviewed during the review:

Network Administrator Facilities Manager

1834 Walden Office Square Suite 150 * Schaumburg, IL 60173 * 847.221.0200 * www.halock.com