Possible theft of bandwidth?

[rebel998]

A client has a Neotel router with built in Wireless AP.

Since going over to Neotel they're usage has been exceedingly high.

After a query we see that the "upload data" was the culprit and this mostly happened on Sundays.(When no-one is at the office.)

I suspect someone joins the network wirelessly over weekends to allow data to be downloaded by someone else?

I intend securing the wireless network with WPA and MAC filtering. I'll disable SSID broadcast as well.

Are there any further measures I could take?
All the PCs are switched off after hours so it couldn't be MS updates etc.

The router is an MV 400 3G Gateway.

 

[skusku]

Change the wireless password so only you know it and then make the changes to all pc's in the office. Maybe this guy brings his own personal laptop on a Sunday and leeches the internet like crazy...
Also you can secretly install a camera and checks who pitches for work on a Sunday...

 

[deepdiver]

Upload that sounds like torrents possibly.
Mac filtering is a plus but would also make sure that you are at least running WPA2 Passphrase( and pass is longer that 8 letters)
Other than these easy fixes you would have to install a PC inline with the router running some type of firewall( ie ISA -"microsoft whore" or ipcop or pfsense) Which actually might be a plan anyway(I am just saying for better security)

 

[The_Unbeliever]

Upload that sounds like torrents possibly.
Mac filtering is a plus but would also make sure that you are at least running WPA2 Passphrase( and pass is longer that 8 letters)
Other than these easy fixes you would have to install a PC inline with the router running some type of firewall( ie ISA -"microsoft whore" or ipcop or pfsense) Which actually might be a plan anyway(I am just saying for better security)

As said before.

1. Disable wireless completely on the device. Get a proper wireless AP. Set it up with a good, strong password etc, and connect it to the network.
2. Then, firewall the whole shebang. So everybody's traffic (including the wireless AP) have to pass through the firewall.
3. Monitor. Block. Punish.

 

[Venomous]

/agrees

As said before.

1. Disable wireless completely on the device. Get a proper wireless AP. Set it up with a good, strong password etc, and connect it to the network.
2. Then, firewall the whole shebang. So everybody's traffic (including the wireless AP) have to pass through the firewall.
3. Monitor. Block. Punish.

 

[shovenose]

SSID broadcasting is the biggest myth in wireless security.

Close all your programs. Make sure windows updates is off and watch your network usage. If it goes to 1 percent then theres something nasty on your pc

 

[riverdusty]

To solve this problem at our office we installed a firewall/router (IPCop with Traffic control and reporting).
We found that an employee was leaving a hidden computer under a desk that was doing 100+G a month in torrents.
The firewall logged his ip/mac/usage/logs/etc. He had to apologize and his privileges were revoked.
He was also fired but still comes to the office. His dad is the boss. heh.

 

[bond007]

SSID broadcasting is the biggest myth in wireless security.

Correct dont even bother disabling it. Most important thing to do (if you think an external party is bumming off the wireless) is to change encryption to WAP or WAP2.. And remember when setting up passwords to use a number and symbol, this makes it about a million times harder to brute hack. Password must also not be a word you can find in the dictionary, this just makes it too easy.

Another option is just to put wireless off over the weekend