topic Re: SSID name in Wireless

SSID name

AshishRao6500 — Mon, 05 Jul 2021 18:34:29 GMT

Hey Guys,

I am looking for SSID names for employee and guest networks. What are the factors to consider when choosing a good SSID name for a financial institution ?

Thank you !!

Re: SSID name

balaji.bandi — Tue, 21 Jan 2020 17:47:02 GMT

This is totally Local significant any name, i would not suggest use any Company name, as name suggest security risk, rather i normal or general name.

Example :

GUESTXX - guess Wireless

CORPXX - Coporate users. ( XX your number)

Re: SSID name

cmarva — Tue, 21 Jan 2020 17:58:40 GMT

and on top of that, being a financial institution with all the compliances that have to be met, you probably wouldn't be broadcasting the corporate ssid anyway. But as Balaji mentions, it's more or less arbitrary how you name it, so if you just want to shake the boggle can and put some letters together, that's fine too.

Re: SSID name

Scott Fella — Tue, 21 Jan 2020 18:20:48 GMT

Really comes down to opinions and security folks. Guest can just be guest. Some companies don’t want their names in the SSID and some do. You can start by making it very simple, guest and corp and then go from there. Just has to make sense to you, operations and the users.

Re: SSID name

AshishRao6500 — Tue, 21 Jan 2020 18:30:23 GMT

So when you say wouldn't be broadcasting the corporate SSID anyways. Is it best to keep the SSID hidden ?? so when users want to connect to the Corp ssid they enter the ssid name manually followed by the password.

Re: SSID name

cmarva — Tue, 21 Jan 2020 19:26:23 GMT

it mostly comes down to what compliances your organization has to meet. I mean, I have worked at a place where every SSID was broadcast, I have worked at a place that did not broadcast any SSID other than guest, and I've worked at a place that was kinda in the middle. Each place had different compliance needs. To be honest, most any security/hardening documentation that you look at, like DISA stigs or something like that, will outright say do not broadcast any SSIDs. But again, the most important thing is to meet any security compliances first.

Re: SSID name

balaji.bandi — Tue, 21 Jan 2020 19:27:32 GMT

we expect Corporate Device(pre-build ) to be certificate-based authentication against SSID, rather entering SSID, with AD authentication second part of authentication for security reasons.