- [Man] There's a feature
in modern enterprise wireless devices
that is called the Publicly Secure Packet Forwarding
or PSPF, right?
And this is a feature implemented
on wireless land controllers
and wireless access points to block wireless clients
from communicating with each other
or from communicating, you know,
with other wireless clients.
So the idea is that with PSPF enable,
your client cannot communicate with the other devices
on the wireless network, right?
So now for most W-line environments, so, you know
wireless line environments,
wireless client communicate only with devices
such as you know, web servers on the wire network
or, you know other resources internally,
or of course with devices on the internet.
Right? So now by enabling PSPF,
it actually protects the wireless clients
from being actually hacked by a wireless intruder.
That's quote on quote, right?
Now PSPF is actually somewhat effective
in protecting wireless clients
especially at wireless public networks, right?
Such as airports and hotels and coffee shops
and other, you know, places at college campuses
whenever the authentication is actually no
enabling anyone can actually associate to that access point.
And it prevents for, you know
you to actually see your neighbor's traffic, right?
Quote on quote, cause there's all a lot of techniques
that you can actually do to bypass that.
Right? So now some enterprise wireless devices
they also support WIPS so that means,
Wireless Intrusion Prevention Systems, right?
Like for example, Cisco has that
in their wireless land controllers and their wireless APs.
Right? So now those WIPS can actually
detect PSPF violations, right?
So if a client attempts to communicate with another client
then the WIPS can be actually configured
to raise an alarm for a potential attrition attack.
Right? So this alarm does not apply
if your wireless land deploys a wireless printer,
for example, or, you know, voiceover a WLAN right.
So applications, because these applications rely
on wireless client to client communication.
So again, if you actually have a wireless printer
how you gonna be able to print
if you're gonna communicate to it.
But so guess what, there are many printers
and voice over wireless land devices
that are often left with default passwords
or no passwords at all.
Right? So they're full of vulnerabilities.
So you can compromise one of those
and also potentially pivot across the wireless network.
Right? And the other thing is that I mean, you know
now with the proliferation of a lot of other devices,
especially in not only at home with things like Chromecast
and Apple TV, and some other ones that you need
communication to it, but also in the enterprise
they actually are using some of these type of devices.
You can compromise one of those devices
and potentially communicate to other clients in the network.
But again, you know
if you actually have a little bit more sophisticated type
of protections, like a WIPS,
like the Cisco devices actually have,
you can at least get alarms whenever somebody
is actually trying to do that type of attack.