A rogue access point is an unauthorized AP that is attached to your authorized network infrastructure. Unlike an authorized AP, a rogue AP poses a greater threat because it is connected to your network. Once the AP is connected to the network, malicious users can gain access to the wired infrastructure through the air. Check out our detailed blog post on the basics of rogue APs and clients.
An authorized access point is an AP that has been seen operating in your airspace but has not been authorized to do so. Unauthorized APs can be neighboring devices set up by outside users for malicious attacks. An unauthorized AP is considered rogue once if it successfully is connected to your authorized network infrastructure.
In the same security risk realm of rogue APs, an unauthorized client is a wireless device that has not connected to the network or been approved for use. Unauthorized clients are often found in environments without policies in place or equipment to detect wireless activity.
A rogue client is an unauthorized client device that has been found communicating and accessing an authorized network .Rogue clients are considered a serious security risk since malicious users can connect them to a network from inside or outside the enterprise.
An accidental association is when an unauthorized device connects to an unauthorized AP because of the wireless network’s configuration to search for all other networks. While both are security concerns, accidental associations can either be malicious or non-malicious. A neighboring access point could be an AP that is physically outside the enterprise perimeter but still transmitting into your airspace. Neighboring APs are commonly found in multi-tenant buildings and pose little to no security risk.
Check out our app, WiFi Scanner for Windows, which is a perfect tool for identifying and mitigating rogue access points. Click the link below to try it for free for 14 days.
