+ Reply to Thread
Results 1 to 6 of 6
  1. Senior Member Lamini's Avatar
    Join Date
    May 2007
    Location
    East Coast
    Posts
    241

    Certifications
    A+ / NET+ / SEC+ / MCSA
    #1

    Default Method for detecting unauthorized devices

    Greetings all

    Im looking for a way to ensure no devices on a network have wireless capabilities, or lo jack installed, or gps enabled. Is there such a thing as software that does such a thing? Thank you
    Reply With Quote Quote  

  2. SS -->
  3. Senior Member
    Join Date
    Mar 2007
    Posts
    12,308
    #2
    You might want to look at kismet and/or netstumbler for the wireless stuff. There's a fairly comprehensive list of related programs here: http://www.wardrive.net/wardriving/tools/

    I don't know about lo jack, but for GPS, aren't the devices simply receiving signals? If so, I don't think you're going to be able to detect those.
    Reply With Quote Quote  

  4. Senior Member mamono's Avatar
    Join Date
    May 2007
    Location
    Cerritos, CA
    Posts
    778

    Certifications
    A+, Net+, Security+, Server+, i-Net+, CCNA Security, CCENT, MCITP:EST, MCDST, MCTS:Vista, HDI/CSR, HDI/SCA, HDI/DST, Apple, Dell
    #3
    You could check with your state law regarding jamming devices to block wifi. Setting up of port security on your switched network so that these devices cannot be plugged in.

    Lo Jack for laptops and computers? If that's the case like any network traffic, it can be blocked at Layer 3 by a router or firewall. You just need to know what you're looking for. Once having identified the traffic such as what protocol and port, then you should be able to prevent its propagation. If you're talking about the devices they use in cars, I thought that was GPS based.

    I'm not so sure about GPS, but that probably runs inline with what I mentioned for jamming. Check with your state laws to see the legality of that method. Some states allow it, some don't.
    Reply With Quote Quote  

  5. Senior Member Kasor's Avatar
    Join Date
    Jul 2003
    Location
    Statue of Liberty
    Posts
    893

    Certifications
    x^n
    #4
    I'm not sure what are you looking for. There are many products out on the market. You need to be more specific because you might need to get more than few of them together to get to the point to reach your business objective.
    Reply With Quote Quote  

  6. Certification Invigilator Forum Admin JDMurray's Avatar
    Join Date
    Jul 2003
    Location
    Surf City USA
    Posts
    10,597
    Blog Entries
    50

    Certifications
    GSEC, EnCE, CISSP, SSCP, CEH (ANSI), CASP, CCNA, CCENT, CWSP, CWNA, CWTS, Security+, Server+, Network+, A+, DHTI+, PDI+, MSIT InfoSec
    #5
    You are looking for network hardware and software audit solutions used to perform hardware inventories and software discovery. Google for "asset discovery" or "asset management" products for computer networks.
    Moderator of the InfoSec, CWNP, IT Jobs, Virtualization, Java, and Microsoft Developers forums at www.techexams.net
    --
    Blog: www.techexams.net/blogs/jdmurray
    LinkedIn: www.linkedin.com/in/jamesdmurray
    Twitter: www.twitter.com/jdmurray
    Reply With Quote Quote  

  7. Senior Member motogpman's Avatar
    Join Date
    Apr 2008
    Location
    Houston, Texas
    Posts
    410

    Certifications
    MCSA 2k3 (270/290/291/293), Sec+, Net+, Server+, A+, Cert. in EE
    #6
    We use Solarwinds and Track-it and using both to overlap do a good job of monitoring/auditing systems and the network to see what people have loaded/are using. We don't have the systems locked down too tight at the moment, but using these tools makes it easier to represent to the executive staff on the need and what people are loading onto the systems.


    I would imagine Netmon would be a quick way to check through out the day as well in your case.
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks