- Fabrication of data is a high security concern
- Interception of (most) data is a low security concern
- Destruction of data is a medium security concern (everything is backed up, but production would be crippled for hours)
I just came into a new IT position. Currently our WAP is setup with the WPA protocol and a MAC access list.
Personally I think with 60 end users and over 100 wireless devices that constantly grows and changes, managing the mac address list is ridiculous, especially since it is being duplicated over 3 WAPs manually.
Even if a malicious user got on our network, the damage they could do is somewhat controlled through group policy. The building is so big, it's just as likely someone unauthorized will just sit at a terminal and try to break stuff, I've made most users have very limited access to company data so that should be minimized.
I would like to take the approach of just not giving anyone the key since WPA encrypts the key on the users system anyway. It seems like the WPA key being secret is secure enough for wifi, am I just misinformed and is my way acceptable for my security conditions? It seems like having physically unsecured computers is just as dangerous. I'de rather not worry about wifi when it has a key on it whereas my 100s of ethernet outlets do not.