3 ms·
Corporate WiFi networks are capable of Creating multiple SSID’s tied to different VLAN’s. Creating a VLAN with client isolation while using WPA2 personal should
by godzillabrennus 6y ago
Corporate WiFi networks are capable of Creating multiple SSID’s tied to different VLAN’s. Creating a VLAN with client isolation while using WPA2 personal should be trivial.
Giving that network a VLAN to exist on with just an internet gateway should be trivial.
Coupling the VLAN with client isolation should be adequate for most companies.
Any reasonably administered corporate network should be able to then provide company issued devices with more reasonable security.
Posture assessment and other aspects of network management are important for compliance.
None of that should scare anyone. You can still stream music in the bathroom while offering more security for corporate devices.
- rocqua 6y agoIs that going to prevent phones and laptops in random places from automatically connecting to a spoofed network? To my knowledge, it will not. So you'd need that SSID and VLAN to be something like a guest wifi. Preferably with a key that rotates often enough that people will not try and remember the network. Cause otherwise, it just became a whole lot easier to get a layer 1 MitM on anyone who has that network on auto connect.