topic Re: Security attacks on 802.1x in Wireless

Security attacks on 802.1x

l.crowder — Mon, 05 Jul 2021 05:58:45 GMT

I saw this from another mailing list. We now have a many AP's installed at our HQ. While the Cisco solution seemed to be the best solution when I started researching; how worried should I be now?

Did you see the new posting about the flaws in 802.1X?

Follow this link,

http://www.linuxsecurity.com/articles/network_security_article-4457.html

Re: Security attacks on 802.1x

b.speltz — Mon, 25 Feb 2002 15:05:45 GMT

Have you looked at http://www.cisco.com/warp/customer/cc/pd/witc/ao350ap/prodlit/1327_pp.htm?

Re: Security attacks on 802.1x

brian.carter — Thu, 28 Feb 2002 14:43:52 GMT

These two articles aren't related to the same vulnerability. The U of M paper describes problems with the proposed 802.1x security features such as session-hijacking and man-in-the-middle attacks.

As far as the risk or level of concern; the potential for serious damage is there, but this type of attack requires some effort and isn't likely to be seen outside of a contrived attack. If you think your organization is at risk for targeted attacks, you might consider IPSEC over wireless or just don't use wireless at all.

Re: Security attacks on 802.1x

aonibala — Thu, 28 Feb 2002 15:43:12 GMT

If you enabled the MIC, WEP Key Hashing, LEAP using RADIUS, your WLAN is secure!

To enabled all security features you must upgrade to the latest NDIS, Firmwares, and ACU.

Audie

Re: Security attacks on 802.1x

brian.carter — Mon, 04 Mar 2002 16:17:07 GMT

The article in question talks about man-in-the-middle attacks that are possible even with 802.1x enabled. The problem is that 802.1x does not provide two-way authentication or security association (rogue access-points).

I don't think that this type of problem is likely to be widely exploited, but it isn't fair to say that 802.1x makes your WLAN secure.

Re: Security attacks on 802.1x

aonibala — Mon, 04 Mar 2002 16:26:42 GMT

Allow me to clarify, WLAN is secure using Cisco LEAP (expensive), MIC, WEP Key Hashing, Dynamic Session Key, and Non-Broadcast SSID.

The ACS RADIUS authentication give two-way authentication, and MIC/WEP hashing/Dynamic Key Session will stop man-in-the-middle and session hijacking attacks. I'm not even surprise if NSA can not break-in aside from brute force decrypting the 128-bit Dynamic Session Key.

Audie Onibala