Link to home
Start Free TrialLog in
Avatar of froodox
froodox

asked on

Monitor portable wifi hotspots in a area

We have a factory where a company laptop has been connected directly to a non company provided portable wifi hotspot.  This goes without saying this is a security risk.  I would like to find out who is doing this and why.

We have seen the hotspot appear periodically and I would like an application that tracks wifi access points coming into and out of range over a period of time, so that we can indentify the person and device responsible.  I have seen plenty of desktop (windows) and phone apps that show the access points at a point in time but none seem to track the history. Ideally I would like to see is a log of when the device is present on the factory floor (lunch breaks, shift changes, same times each day etc).

Thanks
Avatar of Craig Beck
Craig Beck
Flag of United Kingdom of Great Britain and Northern Ireland image

Why not just block company laptops from connecting to SSIDs that you haven't specified?

I'm obviously assuming here that you run a domain and the company laptop is a domain member?

You can use a GPO to specify which SSIDs are allowed, and disallow users from connecting to other SSIDs.
Avatar of froodox
froodox

ASKER

Thanks, we are doing that as well now so this will be avoided in the future but this is more to find out who was messing around in the first place and then subsequently find out why and what they might of done.
ASKER CERTIFIED SOLUTION
Avatar of Craig Beck
Craig Beck
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
> then subsequently find out why ...
Most-likely "why" is to have an unfiltered connection to the internet. i.e. if your company firewall blacklists sites like facebook, twitter, youtube, et al, providing their own connection via a MiFi device, or even using their cell phone as a bluetooth-connected data modem, allows them to access those sites anyway.