Your Organization Analysis

Transcription

1 Your Organization Analysis 7/25/22 Created By: MOREnet Company: Your Organization P o w e r e d b y A i r M a g n e t

2 Table Of Contents Chapter 82. RF Summary Chapter 2 Summary Chapter 3 Hierarchy By SSID List Chapter 4 Alarm Statistics P o we r e d b y Ai r Ma g n e t Page of 4:35: 7/25/22

3 Chapter 82. RF Summary Time Period: Description: 969/2/3 8:: This report contains data on the overall RF signal quality of the 82. network in terms of signal strength, noise level, and signal-to-noise ratio. It is very critical to note that there is sufficient coverage for all the devices and the RF environment has the minimum amount of noise possible. WLAN reliability and efficiency depend on the quality of the RF media. Be it 82.b/g/n at 2.4GHz or 82.a/n at the 5GHz RF spectrum, they are all susceptible to RF noise impact. A cordless phone, Bluetooth devices, microwave, wireless surveillance video camera, or baby monitor can all emit RF energy to disrupt WLAN service. Malicious attacks can manipulate the RF power at 2.4GHz or 5GHz spectrum with a high gain directional antenna to amplify the attack impact from a distance. Excessive noise causes WLAN devices in the target area to be out of wireless service. - Signal, Noise (2.4 GHz) (dbm) AP Signal Cross Interference Noise Signal/Noise (2.4 GHz) (db) Signal/Noise

4 2.4 GHz (dbm) Tx Ch Width AP Signal Cross Interference Noise Signal/Noise (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) (2.4GHz) P o we r e d b y Ai r Ma g n e t Chapter - 2 7/25/22 4:35:

5 Signal, Noise (2.4 GHz) (%) AP Signal Cross Interference Noise Signal/Noise (2.4 GHz) (%) Signal/Noise GHz (%) Tx Ch Width AP Signal Cross Interference Noise Signal/Noise (2.4GHz) 2 2(2.4GHz) 2 3(2.4GHz) 2 4(2.4GHz) P o we r e d b y Ai r Ma g n e t Chapter - 3 7/25/22 4:35:

6 5(2.4GHz) 2 6(2.4GHz) 2 7(2.4GHz) 2 8(2.4GHz) 2 9(2.4GHz) 2 (2.4GHz) 2 (2.4GHz) 2 2(2.4GHz) 2 3(2.4GHz) 2 4(2.4GHz) P o we r e d b y Ai r Ma g n e t Chapter - 4 7/25/22 4:35:

7 - Signal, Noise (5 GHz) (dbm) AP Signal Cross Interference Noise Signal/Noise (5 GHz) (db) Signal/Noise GHz (dbm) Tx Ch Width AP Signal Cross Interference Noise Signal / Noise 36(5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) P o we r e d b y Ai r Ma g n e t Chapter - 5 7/25/22 4:35:

8 6(5GHz) (5GHz) 2 -. (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) (5GHz) P o we r e d b y Ai r Ma g n e t Chapter - 6 7/25/22 4:35:

9 Signal, Noise (5 GHz) (%) AP Signal Cross Interference Noise Signal/Noise (5 GHz) (%) Signal/Noise GHz (%) Tx Ch Width AP Signal Cross Interference Noise Signal / Noise 36(5GHz) 2 4(5GHz) 2 44(5GHz) 2 48(5GHz) 2 52(5GHz) P o we r e d b y Ai r Ma g n e t Chapter - 7 7/25/22 4:35:

10 56(5GHz) 2 6(5GHz) 2 64(5GHz) 2 (5GHz) 2 4(5GHz) 2 8(5GHz) 2 2(5GHz) 2 6(5GHz) 2 2(5GHz) 2 24(5GHz) 2 28(5GHz) 2 32(5GHz) 2 36(5GHz) 2 4(5GHz) 2 49(5GHz) 2 53(5GHz) 2 57(5GHz) 2 6(5GHz) 2 65(5GHz) 2 P o we r e d b y Ai r Ma g n e t Chapter - 8 7/25/22 4:35:

11 Chapter 2 Summary Time Period: Description: 969/2/3 8:: This report shows detail information of the all the channels that the 82.a/b/g/n network uses in terms of channel utilization and throughput. Not only does the radio medium have bandwidth limitations, WLAN Access Points have limitations and can be overloaded by heavy traffic or a large number of associated clients. Like the wired LAN, excessive multicast and broadcast frames can put extra burden on the WLAN devices. Overloaded devices suffer from degraded performance and cause connectivity problems, for example, AP association table overflowed by large number of clients. 2 Total Frames / ( 5 GHz ) 8 Frames GHz s (2/4 MHz)

12 4K Total Bytes / ( 5 GHz ) 2K K Bytes 8K 6K 4K 2K K GHz s (2/4 MHz) Frequency Scan (ms) Frames Bytes # of APs # of STAs GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz GHz 25

13 4 5.7 GHz GHz GHz 25 3, GHz 25 6, GHz GHz

14 32 Total Frames / ( 2.4 GHz ) Frames GHz s (2/4 MHz) 8K Total Bytes / ( 2.4 GHz ) 7K 6K 5K Bytes 4K 3K 2K K K GHz s (2/4 MHz) Media n Frequency Scan (ms) Frames Bytes # of APs # of STAs 82.G 2.42 GHz 25,382 28, G 2.47 GHz , G GHz , G GHz 25 54,6

15 5 82.G GHz , G GHz , G GHz , G GHz 25 29, G GHz , G GHz , G GHz 25 2,986 74, G GHz , G GHz , G GHz ,687 P o we r e d b y Ai r Ma g n e t Chapter 2-5 7/25/22 4:35:3

16 Chapter 3 Hierarchy By SSID List Time Period: Description: 969/2/3 8:: This report shows the hierarchical relationship among the SSIDs used in the wireless network and the access points and stations that are using these SSIDs. This report also includes specific device information such as MAC address, Media Type, SSID,, Security settings used and the times when the device was first and last seen by AirMagnet. A WLAN Access Point has only limited resources and therefore it can service only a limited number of clients. When the limit is reached, additional clients may be rejected in service, or lead to degraded performance for the existing clients. When designing a WLAN equipment deployment and provisioning for service, this limitation should be considered. After deployment, the limitation may be challenged by the growing number of users therefore requires constant monitoring for under-provisioned deployment. This gives great details on the wireless assets and various options for viewing and managing your device hierarchy per access point. Astra Security First Seen Last Seen Cisco:6:95:C2-GN(Michael) Cisco:6:97:72-GN(Uriel) Cisco:6:94:82-GN(Gabriel) Cisco:EB:A:C2-GN(Seraphiel) WPA2-Personal 7/25/2 4:27:39 7/25/2 4:34:3 WPA2-Personal 7/25/2 4:27:39 7/25/2 4:34:3 WPA2-Personal 7/25/2 4:27:36 7/25/2 4:34: WPA2-Personal 7/25/2 4:27:36 7/25/2 4:34: Paradise Security First Seen Last Seen Cisco:6:95:C-GN(Michael) 38:E7:D8:B3:C4:E7-GN Apple:D:CA:C-GN 2:C:7:A4:2D:CA-AG F:7B:CB:25:A4:55-BG Cisco:6:97:7-GN(Uriel) Cisco:6:94:8-GN(Gabriel) 64:A7:69:72:DF:A5-GN C8:AA:2:7:F6:5-GN Cisco:EB:A:C-GN(Seraphiel) Intel:2A:4F:3-GN 88:53:2E:EB:FF:96-GN C:AB:A7:AC:5:E- 3:69:4B:E3:89:9B-BG C:F8:DA:63:8:9E- WPA2-Enterprise 7/25/2 4:27:39 7/25/2 4:34:3 Unknown 7/25/2 4:27:4 7/25/2 4:34:2 WPA2-Enterprise 7/25/2 4:29:7 7/25/2 4:3:59 WPA-Personal 7/25/2 4:28:6 7/25/2 4:33: WPA2-Enterprise 7/25/2 4:27:37 7/25/2 4:33:47 WPA2-Enterprise 7/25/2 4:27:39 7/25/2 4:34:3 WPA2-Enterprise 7/25/2 4:27:36 7/25/2 4:34: WPA2-Enterprise 7/25/2 4:27:39 7/25/2 4:33:22 WPA2-Enterprise 7/25/2 4:27:52 7/25/2 4:3:7 WPA2-Enterprise 7/25/2 4:27:36 7/25/2 4:34:2 WPA2-Enterprise 7/25/2 4:29:7 7/25/2 4:32:45 WPA2-Personal 7/25/2 4:29:28 7/25/2 4:33:59 Unknown 7/25/2 4:28: 7/25/2 4:34:3 Unknown 7/25/2 4:28:6 7/25/2 4:29:9 Unknown 7/25/2 4:28:25 7/25/2 4:33:27 Unknown Security First Seen Last Seen C4:A:CB:EB:98:B-B C:AA:7:C7:7A:4-GN(ap-53-) Unknown 7/25/2 4:27:48 7/25/2 4:27:48 WPA2-Enterprise 7/25/2 4:27:4 7/25/2 4:34:3 P o w e r e d b y A i r M a g n e t Chapter 3-7/25/22 4:35:3

17 C:AA:7:C7:7A:42-GN(ap-53-) 98:C:82:45:D2:89-GN 98:C:82:7:D:C5-GN C:F8:DA:63:8:76-GN C:F8:DA:63:8:82-GN EC:55:F9:5E:22:7E-BG EC:55:F9:5E:22:8-GN EC:55:F9:5E:23:C6-GN 7C:E9:D3:B:D7:B8-GN C:F8:DA:63:76:83-GN C:F8:DA:63:8:8-BG EC:55:F9:5E:23:A3-BG EC:55:F9:5E:23:D5-GN Apple:CD:2:3F-BG 4:46:65:F6:8:A-GN 28:6A:BA:C4:D6:82-6:D8:9:5A:D:9B-BG EC:55:F9:5E:23:B9-GN 6:D8:9:5A:9:39-GN B8:7:C2:4B:E:BD-GN D:23:DB:6:F8:E5-GN D8:B3:77:3F:76:2-GN EC:55:F9:5E:23:B5-BG EC:55:F9:5E:26:53-GN EC:55:F9:5E:26:55- Intel:C2:5A:5-BG :F4:B9:A:3:2-2:2:55:6:94:8-2:2:55:6:95:C- 2:22:9:EB:A:C- 4:C:CE:A7:E2:D6-8:46:7:ED:37:FB- C:AB:A7:B2:EF:2D- E:AA:7:C7:7A:4-24:AB:8:B:7C:97-3C:D:F8:9:DD:37-4C:B:99:DB:D9:B6-GN 6:FA:CD:67:F6:A7-GN 64:B9:E8:A:29:2D- 68:A8:6D:E:4:6E-GN 7C:6D:62:9:F3:6A-BG WPA2-Personal 7/25/2 4:27:39 7/25/2 4:34:3 Unknown 7/25/2 4:27:52 7/25/2 4:3:33 Encrypted 7/25/2 4:28:53 7/25/2 4:33:25 Encrypted 7/25/2 4:28:4 7/25/2 4:34:3 Encrypted 7/25/2 4:28:4 7/25/2 4:33:5 Encrypted 7/25/2 4:27:4 7/25/2 4:34:3 Encrypted 7/25/2 4:27:4 7/25/2 4:34:3 Encrypted 7/25/2 4:27:39 7/25/2 4:34:3 Unknown 7/25/2 4:29:43 7/25/2 4:29:43 Encrypted 7/25/2 4:27:4 7/25/2 4:34:3 Encrypted 7/25/2 4:28:54 7/25/2 4:3:59 Encrypted 7/25/2 4:27:4 7/25/2 4:34:3 Encrypted 7/25/2 4:27:4 7/25/2 4:33:5 Encrypted 7/25/2 4:27:39 7/25/2 4:34:3 Encrypted 7/25/2 4:27:36 7/25/2 4:32:45 Unknown 7/25/2 4:3:43 7/25/2 4:3:43 Encrypted 7/25/2 4:28:3 7/25/2 4:33:22 Unknown 7/25/2 4:27:36 7/25/2 4:33:47 Encrypted 7/25/2 4:27:49 7/25/2 4:34: Encrypted 7/25/2 4:28:25 7/25/2 4:3:5 Encrypted 7/25/2 4:28: 7/25/2 4:29:52 Unknown 7/25/2 4:28: 7/25/2 4:32:8 Encrypted 7/25/2 4:28:3 7/25/2 4:32:57 Encrypted 7/25/2 4:28: 7/25/2 4:33:47 Encrypted 7/25/2 4:28:38 7/25/2 4:33:47 Encrypted 7/25/2 4:29:4 7/25/2 4:33: Unknown 7/25/2 4:28:4 7/25/2 4:28:4 Unknown 7/25/2 4:3:55 7/25/2 4:3:55 Unknown 7/25/2 4:3: 7/25/2 4:3: Unknown 7/25/2 4:29:52 7/25/2 4:29:52 Unknown 7/25/2 4:3:7 7/25/2 4:3:57 Unknown 7/25/2 4:28:54 7/25/2 4:28:54 Unknown 7/25/2 4:29:43 7/25/2 4:29:43 Unknown 7/25/2 4:28:7 7/25/2 4:28:7 Unknown 7/25/2 4:3:8 7/25/2 4:3:8 Unknown 7/25/2 4:33:38 7/25/2 4:33:38 Unknown 7/25/2 4:3:44 7/25/2 4:3:44 Unknown 7/25/2 4:3:3 7/25/2 4:3:32 Unknown 7/25/2 4:32:8 7/25/2 4:32:8 Unknown 7/25/2 4:3:57 7/25/2 4:32: Unknown 7/25/2 4:29:5 7/25/2 4:3:33 P o w e r e d b y A i r M a g n e t Chapter 3-2 7/25/22 4:35:3

18 9:27:E4:5B:5:28-98:C:82:59:A:D3-GN 98:C:82:78:2C:B7-GN C:F8:DA:63:69:95- C:F8:DA:63:78:5A- CC:8:E:7A:88:3D-B D4:2:6D:2F:44:37-BG EC:55:F9:5E:23:B4- EC:85:2F:96:3A:6B-GN Symbol:DA:BD:6A-B Unknown 7/25/2 4:27:52 7/25/2 4:27:52 Unknown 7/25/2 4:33:38 7/25/2 4:33:38 Unknown 7/25/2 4:28:4 7/25/2 4:28:4 Unknown 7/25/2 4:27:36 7/25/2 4:27:49 Unknown 7/25/2 4:28:4 7/25/2 4:28:4 Unknown 7/25/2 4:27:39 7/25/2 4:33:3 Unknown 7/25/2 4:27:52 7/25/2 4:33:5 Unknown 7/25/2 4:28:4 7/25/2 4:33:5 Unknown 7/25/2 4:32:57 7/25/2 4:33:5 Unknown 7/25/2 4:27:48 7/25/2 4:27:48 Vacation Security First Seen Last Seen Cisco:6:95:C-BG(Michael) Cisco:6:97:7-BG(Uriel) Cisco:6:94:8-BG(Gabriel) Cisco:EB:A:C-BG(Seraphiel) WPA-Personal 7/25/2 4:27:39 7/25/2 4:34:3 WPA-Personal 7/25/2 4:27:4 7/25/2 4:34:3 WPA-Personal 7/25/2 4:27:36 7/25/2 4:34: WPA-Personal 7/25/2 4:27:36 7/25/2 4:34: P o w e r e d b y A i r M a g n e t Chapter 3-3 7/25/22 4:35:3

19 Chapter 4 Alarm Statistics Time Period: Description: 969/2/3 8:: This report provides a statistical view of Top- policy violations (Security IDS/IPS and Performance Intrusion) that have occurred on the 82. network. This report provides pie-charts and lists all the policy violations on the basis of severity of the violations such as critical, urgent, warning and information. An insecure network can usually be fixed by reconfiguring some of the network equipment, by using additional software or hardware and always being in the forefront of implementing the latest security standards to provide good security for sensitive data such as employee salary data or company financial information. Critical Severity Information Urgent Information 7 3.6% Warning % Urgent 5 4.8% Critical 8.% Total: 25.% Warning Count AP PHY Data Rate Anomaly Missing performance options AP broadcasting SSID AP operating in Mixed-mode Device unprotected by 82.x Top- Alarms WPA or 82.i pre-shared key used Device unprotected by Fortress encryption Device unprotected by other encryption Rogue AP by wireless media type Alarm Title Greenfield-capable BSS operating in mixed-mode AP PHY Data Rate Anomaly Missing performance options AP broadcasting SSID Device unprotected by 82.x AP operating in Mixed-mode WPA or 82.i pre-shared key used Device unprotected by Fortress encryption Device unprotected by other encryption Rogue AP by wireless media type Greenfield-capable BSS operating in mixed-mode

20 Alarm Summary Table by Severity Severity: Information # of Alarms Alarm Title Device using open authentication 3 Missing performance options 4 Sub Total: 7 Severity: Warning # of Alarms Alarm Title Excessive Low Speed Transmission on Device Probing for APs with overloaded APs 2 Excessive roaming or re-associations Overlapping Legacy BSS Condition (OLBC) exists 2 HT-enabled AP with OLBC 5 OLBC detected on channel not implementing prote 2 AP operating in Mixed-mode Mixed-mode AP not implementing protection mech 2 Greenfield-capable BSS operating in mixed-mode 6 AP PHY Data Rate Anomaly 4 Device Unprotected by EAP-TLS Sub Total: 47 Severity: Urgent # of Alarms Alarm Title Device unprotected by 82.x AP broadcasting SSID 2

21 Device unprotected by Fortress encryption 8 WPA or 82.i pre-shared key used Device unprotected by EAP-FAST Device unprotected by other encryption 8 Device unprotected by 82.i/AES Sub Total: 5 Severity: Critical # of Alarms Alarm Title Rogue AP by wireless media type 8 Rogue station by wireless media type 2 Sub Total: Total 25 P o we r e d b y Ai r Ma g n e t Chapter 4-3 7/25/22 4:35:5