Home → Best Practices → Network Security → Wireless

1.5. Wireless

• Must Have Practices

  • Must use at minimum WPA2/AES encryption on the SSID

  • Use of multiple SSIDs to segment traffic

    • Guest and production at a minimum

    • Each SSID should be segmented on separate vlans and use ACL (access control lists) to limit access between these network segments

• Best Practices

  • Newer Security Methods

    • Use 802.1x authentication for clients

    • PPSK (Personal Pre Shared Key)

  • Separation of guest and production networks can also be done using a single SSID via  the wireless network vendor

  • Consider password rotations