P.K. SHARMA

Cyber security intelligence, AI governance, practitioner analysis

Wireless and radio

Wireless controller (WLC): what it is and how it is attacked

The single system that configures and watches every wireless access point.

Also known as

  • WLC
  • wireless LAN controller
  • AP controller
  • cloud-managed wireless

Typing any of them into the editor finds this object.

Why it matters on a security diagram

One change here reaches every access point at once, including the settings that decide which wireless network reaches which part of the internal network.

How it gets attacked, and what reduces it

How it gets attacked

  • Administrator access reachable from the ordinary staff network
  • Cloud-managed estates where the vendor account, not the network, is the real control plane
  • Configuration pushed to every site at once, so one wrong setting removes segmentation everywhere

What reduces it

  • Keep administration on a separate path, not on the staff network
  • Put a phishing-resistant second factor on the vendor account, which is the real control plane
  • Stage configuration changes rather than pushing to every site at once

Where it sits

Group
Wireless and radio · The parts of the network that travel through the air, and how far they reach.
Whose side, by default
Ours · Belongs to the organisation the diagram is about.
Catalogue identifier
wireless-controller

Reviewed . CC BY 4.0.

Others in wireless and radio

The wireless and radio group lists all 11 of them side by side.

Wireless controller on your own diagram

Open the editor, press N, and type WLC. The object is placed and connected to whatever was selected, and Tab adds the next one already joined to it. Nothing is uploaded: the page is served with a Content Security Policy that forbids the browser from making any outbound request at all.

Open the diagram maker