WIPS and switch logs show an employee laptop bridging the city WLAN to a personal hotspot via Windows Internet Connection Sharing. How should this be treated?
Select an answer to reveal the explanation.
Short Explanation
That laptop just became a soft rogue onboarding random networks into yours. Call it a policy violation and shut the bridge down. Whitelisting ICS is how soft rogues get a parade.
Full Explanation
Unauthorized bridging or Internet Connection Sharing can create soft-rogue paths that bypass WLAN security and segmentation. Detection plus endpoint policy and user remediation is appropriate; encouraging or facilitating bridging increases exposure.