Windows7 Virtual AP – Why is it a big deal now?

Windows7 Virtual AP – Why is it a big deal now?

Ever since WiFi radios were available, there have been open source and priced software that allowed users to convert their client cards into APs. While these were available only on Linux based operating systems to start with; ‘Soft AP’ drivers and software has been available for most operating systems for at least a few years now. Also available were USB devices that operate as an AP. In addition; the WiFi interface could always have been put into ad-hoc mode, allowing other clients to connect to it, effectively creating the same vulnerability as a soft AP

So, why is soft AP suddenly a big deal when Windows7 provides this as a built in option in the OS?

Here are a few reasons why Windows7 Virtual AP is something the security administrators should be worried about.

The Operating System provides for it:

Now that this feature is provided as a part of your daily use software, user’s perception of threat from it will all but disappear.

Earlier to Windows7, a specialized operating system or at least additional software needed to be installed before users could create a soft AP; this is a large barrier for most people; or at least it forced users to think twice. In case of most enterprise assets, installing additional software would be restricted in any case. True; you can still use features like Active Directory Group Policies to prevent laptop users from turning on the soft AP, but setting up group policies is cumbersome and complicated; and in this specific case administrators will have to prohibit the use of entire ‘net’ set of commands.

The Need to Connect:

Users now have a complete zoo of devices that need to connect to each other. Smart phones, cameras, music players, gaming consoles, etc. all come with built in WiFi. If the Laptop can also function as an AP, it is so much more convenient than installing a physical AP. Also, remember this network travels with the Laptop! And if the laptop has 3G connectivity, the soft AP is even more ‘needed’ as all the other devices can get to the internet – even on the go!

And when these laptops come into the enterprise, it is almost given that that the soft AP will continue to function.

Simultaneous operation:

One huge difference between the earlier soft AP implementations and the one provided with Windows7 is that in earlier cases the operation was limited to one operation at a time. When the card was configured as a soft AP, it could not operate as a client and vice-versa.

With Windows7 as both operations (AP and client) can operate simultaneously, users do not have to bother with switching the mode of operation and hence it is all the more likely that home or on the road configuration will continue to operate even when the laptop is in the enterprise environment.

Jatin Parekh

Jatin Parekh brings 19 years of industry experience and has been with AirTight Networks, Inc. for 7 years. Jatin was formerly Vice President of Product Management with CoreObjects, Inc. where he helped multiple startups get off the ground with well-defined and clearly focused products. Prior to CoreObjects, Jatin has run his own startup. He also spent 3 years with CGI (formerly called IMR); where he started and developed their Euro conversion practice; and 5 years with Oracle Financial Services Software Limited (formerly i-Flex Solutions and Citicorp Information Technology Industries Limited); where he helped nurture their early products and has been a part of the company as it grew from a mere handful to several hundred in strength.
Jatin is Bachelor of Engineering (Electronics) from University of Mumbai.

Jatin Parekh Windows 7, Wireless security Rogue AP, Soft AP, Windows7