Wireless Security

[ITILer]

Hello,

Just a quick question of those in the know.

I am securing one of my companies branches with regrards wireless.

I understand the basics of wireless security but not to sure about the following senario.

If a user is using a wireless client in a public place (starbucks or the like) and connects to a web page that is supported by HTTPS is it still a secure link. I know the question sound's stupid.

I am thinking of adding ISA so I can VPN all traffic from mobile clients, but wondering if this may be over kill for one HTTPS site.

Thank you for your time reading this.



Dyls
--------------------
MCSA 2003, CWNA, Security+, ITIL-F

 

[NoCalAdmin]

your sites security is what you need to be concerned about, not the users uplink. Any further security measures is a waste of time and resources. Your presumption is correct. It's an overkill

Tom

 

[Beowulf005]

Wouldn't someone listening (wireless packet sniffer) at the public place be able to view all the content the client is viewing because the public place dosn't use any WPA etc. ?

When frustrated remember, in the computer world there is almost always a backdoor.

 

[NoCalAdmin]

yeah if they captured enough of a packet and can break the encryption........ what, 6 month key break generation for WPA? And then you broke a packet only.....not any complete piece of data or access.

Tom

 

[NoCalAdmin]

misread you post

yeah the possibiliy of grabbing your unsecured packets are there... but.... you would have to gather and piece all the packets and arrange them for each piece of data you've gathered. Not probable.

Tom