A municipal SOC sees both PSK and 802.1X AKMs advertised on the sam…

Question

A municipal SOC sees both PSK and 802.1X AKMs advertised on the same RSN-capable city SSID. How should the assessor interpret that mix?

Accepted Answer

Different clients may negotiate different authentication paths, including weaker ones if the AP still offers them — Think of two doors on one building: some folks use the shared key door, others use the badge door. If both are open, weaker walk-ups can still sneak in that shared-key path. The SOC should not assume 'Enterprise-looking' equals Enterprise-only.

Answer

Multiple AKMs always mean every client must complete both PSK and 802.1X before traffic flows

Answer

Advertising two AKMs automatically upgrades all Personal clients to Enterprise mutual authentication

Answer

The beacon is malformed and no client can associate until only one AKM remains

A municipal SOC sees both PSK and 802.1X AKMs advertised on the same RSN-capable city SSID. How should the assessor interpret that mix?

Short Explanation

Full Explanation