The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,

   How would disabling this option make security better? A hidden eduroam SSID is stil covered by the security settings for the home RADIUS server, so th client will not connect to a rouge network. With eduroam connections mostly happen without thee user intervention anyway.

Cheers

Tomasz Wolniewicz

W dniu 11.09.2019 o 19:13, Toni Pérez pisze:

Hello!

We can see in Windows 10 profile that nonBroadcast optioin is enabled/true (the option to connect to networks which do not broadcast their network name or SSID).
I have not verified other operating systems.

For security reasons, would it be possible to disable (false) this option in eduroam CAT?

You can verify this option with cmd -->
    netsh wlan show profiles name="eduroam"
    or
    netsh wlan export name="eduroam"

Best regards,

Toni Pérez
Universitat de les Illes Balears

------------------------------------------------------------------------------------

<?xml version="1.0"?>
<WLANProfile xmlns="http://www.microsoft.com/networking/WLAN/profile/v1">
    <name>eduroam</name>
    <SSIDConfig>
        <SSID>
            <hex>656475726F616D</hex>
            <name>eduroam</name>
        </SSID>
        <nonBroadcast>true</nonBroadcast>
    </SSIDConfig>
    <connectionType>ESS</connectionType>
    <connectionMode>auto</connectionMode>
    <autoSwitch>false</autoSwitch>

.....

------------------------------------------------------------------------------------

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576