This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Restrict Wireless network connections.

Hello,

Is it possible to only allow certain SSID. For exemple i need to only allow users to connect to certain predifined Wireless network connections.

Thanks,

Hani,

:53853


This thread was automatically locked due to age.
  • Hello Hani,

    which product on what endpoints are you talking about? I'm not aware of this functionality in Endpoint.

    Christian

    :53857
  • Hello Christian,

    The product is sophos enterprise console 5.2.2. You have policy for device control. I did not find a way to restrict SSID. Not sure if it is possible.

    Regards.

    :53861
  • Hello Hani,

    thanks for the clarification. Device Control bases its decision only on the device - or better, with the device class it belongs to - and, in case of block bridged, the presence or absence of other active devices. It monitors only state changes (enable/disable), not the actual operation and the sole available actions are to disable the device or (for storage) set it to R/O.

    Thus, for example, you can't set the R/O attribute based on the file system on a medium or block (or allow) only specific network or short range connections. Think about it - if the wireless adapter would be disabled in response to a connection attempt to an "unknown" SSID you'd have a Catch22 - to re-enable the adapter one of the predefined SSIDs must be available but to detect the SSIDs the adapter has to be enabled. 

    Christian

    :53863
  • Hello Christian,

    We don't want to disable the wireless adapter but only allowing certain Wireless network connection  or SSID. The wireless adapder is always enabled but we can connect to a specific WLAN.

    Thanks,

    :53869
  • Hello Hani,

    as said, Device Control can only disable a wireless adapter or not. It is only aware of the device status not the connection status (and thus the connected or about to be connected SSID) so it can't even reset the adapter in case that connects to an unwanted SSID.

    Christian

    :53875