rotect confidential data. Deploy intruder detection on Rogue access points or other unauthorised the WLAN to detect activity can be detected by intrusion detection unauthorised access or software. This is a standard feature of activity wireless switches, described in the Section "Wireless LAN Switches or Controllers, p. 48". When hardware is upgraded If access points are left with their secure ensure that configuration settings configuration settings when they are disposed are reset prior to disposal of, this sensitive information could be used of old equipment to attack the network. Enable and regularly review Access point logs provide a basis for periodic access point logs auditing of network traffic - both authorised and unauthorised. Many intrusion detection tools can be configured to effectively perform this task automatically. refine the parameter list or to warn the WLAN manager of an intrusion attempt and initiate countermeasures such as blocking an identified rogue device from associating or maintaining a connection with the WLAN. Intrusion detection software can also monitor network activity to detect any attacks on the WLAN, such as DoS attacks or session highjacking, and to ensure that all authorised devices are complying with the security policies in force. Wireless Hotspot Security Wi-Fi hotspots provide public wireless connections to the Internet at convenient locations such as coffee shops, hotel and airport lounges. The requirement for easy public accessibility means that encryption is not Wireless LAN Security Table 8-10: Intrusion Detection Parameters Security parameter Description Authorised RF PHY specifications Identifies which PHY layer standards are being operated in the WLAN (e.g. 802.11a, 802.11b/g). Authorised RF channel usage Indicates which RF channels individual access points are configured to use. Authorised device MAC addresses Similar to MAC access control at the access point level, but extended to the whole WLAN. SSID policy Lists authorised SSIDs. Equipment vendor Indicates the 