Endpoint Protection

 View Only
Expand all | Collapse all

Allow EAPOL Wireless Traffic as a default in firewall rules?

  • 1.  Allow EAPOL Wireless Traffic as a default in firewall rules?

    Posted Sep 17, 2009 12:47 PM
    Hello.

    On SEP, the default configuration of firewall rules in NTP has three protocols allowed by default -- NDISUIO.SYS driver, RPD and EAPOL wireless traffic.  As I was only sure of what one of these three (RDP) were, I turned off (unchecked) these rules.

    ethernet type 0x888E is listed as  the details on Ports & Protocols for the EAPOL rule.

    I've never had an issue with any computer being able to connect wirelessly with this in place - until today.  For some reason on this one computer, if this protocol is not allowed, the PC can't establish a wireless connection at the home location.  I'm assuming this is a unique combo issue with the wireless router and the wireless nic as this PC with this rule not allowed can connect on other access points.

    Anyway, I was wondering if someone could shed light on this protocol and if it poses any security risk having it allowed.

    Appreciated.



  • 2.  RE: Allow EAPOL Wireless Traffic as a default in firewall rules?
    Best Answer

    Posted Sep 17, 2009 12:57 PM
    Greetings OIStaff,

    EAPOL is a protocol this is typically used to negotiate a wireless connection between a client and its access point. Setting this to allow will not create a security risk as it is set to Allow by default to let wireless connections function. If you are seeing a connectivity issues with wireless clients than set this to allow and it should resolve it.



  • 3.  RE: Allow EAPOL Wireless Traffic as a default in firewall rules?

    Posted Sep 18, 2009 12:10 AM
    Thanks John.