
A Wireless network operating in ad-hoc mode
(peer-to-peer networking) is usually not protected by the security rules when
compared to enterprise deployed Wireless infrastructure networks using Access
Points.

Ad-hoc Mode Networking ( Peer-to-Peer)
Bypasses Enterprise Security Infrastructure
|
Peer-to-peer networking
lacks the necessary security measures such as 802.1x
user authentication and the dynamic key encryption. As a
result, ad-hoc networks risk exposing data in the air
(as data is not encrypted). In addition, weak
authentication may allow unauthorized devices to
associate. If the ad-hoc mode clients are also connected
to the wired network, the entire enterprise wired
network is at risk. An Ad-hoc mode client station should
be investigated as a rogue because of the high risk
imposed. An attacker may setup an ad-hoc network
independently of a legitimate AP for the purpose of
association and probing. This might be the case if your
AP has been probed in conjunction with this event.
Ad-hoc clients should be investigated thoroughly as
rogue clients, and it is advisable that enterprises
always stick to no-adhoc-networking policy as
much as possible. |
|
|

Ad-hoc Nodes Connected To Wired Network
Jeopardize Wired LAN Security
Limitations of ad-hoc mode WiFi
wireless networking:
- WiFi devices in ad hoc mode offer
minimal security against unwanted incoming connections. For example,
ad-hoc WiFi devices cannot disable SSID broadcast like
infrastructure mode devices can. Attackers generally will have
little difficulty connecting to your ad-hoc device if they get
within signal range.
- Signal strength indications
accessible when connected in infrastructure mode will be unavailable
to you in ad-hoc mode. Therefore, you will face some difficulty
whenever re-positioning an ad-hoc device to achieve a better signal.
- The WiFi networking standards
(including 802.11g) require only that ad-hoc mode communication
supports 11 Mbps bandwidth.
You should expect that WiFi devices supporting 54 Mbps or higher in
infrastructure mode, will drop back to a maximum of 11 Mbps when
changed to ad-hoc mode. Ad-hoc mode should generally be viewed as
"slower" than infrastructure mode for this reason.
|