disable "View available wireless network"

[DigiBoy]

---

@jackdi Dili ipa access sa guest AP coz amo unta i block ang uban sites which is....dili pwde coz i.access man pud to sila sa guest, namely youtube, fs, fb...etc

they are all connected to one server...hmmm let me try limiting their MAC to certain sites only..wahahha..pa try nga...

brb

[jackdi]

@jackdi Dili ipa access sa guest AP coz amo unta i block ang uban sites which is....dili pwde coz i.access man pud to sila sa guest, namely youtube, fs, fb...etc

they are all connected to one server...hmmm let me try limiting their MAC to certain sites only..wahahha..pa try nga...

brb

Naa ra man diay nah!
All AP's connected to one server man diay!

Depende sa network software nga imo gamit, you can always block these off-limit websites from the server. No need to block their computers/MAC address.

In my previous work, we used Kerio.
Nya didto, i was able to block certain websites and softwares from connecting to the internet.
Exact examples nga ako gipang-block were: YM, ChikkaText, YouTube, *porn sites*, limewire and other P2P softwares.

Makita pod na nimo sa server kung usa nga sites ila gipang-access. If you find something new nga dili nila dapat ma-access, then block na pod na!

[DigiBoy]

ill try blocking those sites on specific computers only...as i said.. guests still connect to the APs and want to connect to those restricted sites ( restricted for employees )

upon checking... our prepaid wifi software doesnt have capability of blocking specific sites for specific mac..what it does is to block certain sites and thus, blocking both employee and guest from accessing it.

[jackdi]

ill try blocking those sites on specific computers only...as i said.. guests still connect to the APs and want to connect to those restricted sites ( restricted for employees )

upon checking... our prepaid wifi software doesnt have capability of blocking specific sites for specific mac..what it does is to block certain sites and thus, blocking both employee and guest from accessing it.

aw.. mao bah...

Here's my next wild suggestions:
Limit the access by login/passwords to the network.

* Like office log-in/password can only access this and that.
--maintain lang at least 3 passwords for office employees use (w/ limited access).

* While guest log-in/password can have unlimited access.
--maintain at least 10 passwords for the guest (w/ unlimited use).
--kini aron ma-rotate nimo ang pag-issue og access.
--then if this password has been compromised, change it.
--naa man ka 9 more passwords pa, so dili ma-affected ang uban.

Trouble with this is kinahanglan ikaw ra makahibaw sa mga passwords.
Or... you change the passwords for the guests every now and then.

Good luck!
;cool:

[DigiBoy]

hehe mas complicated lagi ni cya..compared to blocking MAC from APs..hehe

[jackdi]

hehe mas complicated lagi ni cya..compared to blocking MAC from APs..hehe

he-he-he!
If ako papilion, i would choose blocking them from the server.
Dili na ko need to go upstairs to configure the AP's.


In anyway, at least... naa ka options.
And as to which option to take, is all up to you.


Good Luck!

[p4ck3tsn1p3r]

@DigiBoy, you didn't mention about your current IT infrastructure but I will assume you already do the "IT Best Security Practices". Like separating your guess access and your company network access. You don't what your guess to connect to your LAN network. Right? Any determine hotel guess could compromise you data.

I will also assume that you've Windows XP, Windows 2000/2003 server, firewall (software or hardware) and several AP's in your hotel. Now, here's what you need to do;

1.) Identify which AP's are for guess access. Assigned an IP address different from your LAN network.

2.) Segment your guess access network and put in a demilitarized zone (DMZ).

3.) Define access rules in your firewall to allow traffic HTTP/HTTPS/DNS to DMZ only if you only allow hotel guess for browsing and secure Internet transaction.

4.) Install Internet Authentication Services (IAS) and create an employee AP by their corresponding name and IP address.

5.) In your server Active Directory create a Group Policy for "Wireless User" and add any user that's allowed to connect wirelessly to that employee AP.

6.) When they attempt to connect to another AP and they're not define in your policy then access will be denied. You can also see it in your log, since it is a per user authentication in your employee.

7.) Block any inappropriate sites and protocol in your firewall. Define firewall access rules for you LAN network like HTTP/HTTPS/DNS/. SMTP if have a mail server.

8.) Lastly, create a employee company policy for Internet usage and let them acknowledge what is the consequences if they violate that rules. Consult and show to your HR first.

That's the idea. You can search Google on how to implement it.

[sorry18]

add password or mac filtering.

[DigiBoy]

thanks sa feedback packet , thanks to all