Advice please - Access point has insufficient protection - DHCP Proxy WPAD

JherekCarnelian

Hi all, I've just started seeing this alert in the security section of the app since upgrading to Fing 3.1.1
Access point has insufficient protection

and in See result I have:
Type    ETHERNET

Link speed    1 Gbit

DHCP    [router address]

DHCP Proxy WPAD

Can anyone help me to understand what this means and what I should do about it?
Thanks.

kshep15

I have the same question

Karl_From_Fing

@kshep15
@JherekCarnelian
I have created support tickets for both of you - please respond via email at your earliest convenience.

jjones7791

Same here, getting this warning as well and can't figure out why. 

Karl_From_Fing

Hey @jjones7791
I have created a support ticket for you in relation to this issue where we can troubleshoot futhter.

EstrellaJ

I'm also seeing this

Karl_From_Fing

Hey @EstrellaJ
I have created a support ticket for you in relation to this issue. Please respond at your earliest convenience. 

EstrellaJ

Thank you

TheDude

Please add me to the list as well
Thanks

jjones7791

Unfortunately experiencing this issue again.  @Karl_From_Fing , before you open a ticket, can you post here how exactly is fing checking that this service is not working correctly?

Edit: I've tried this now on both stock and custom firmware and still getting the same issue.  What confuses me with the little knowledge I have of WPAD, is this is not something I'm using on my home network, I don't use any proxies, so not sure why this would even come into play.  I'm seeing no errors anywhere else on any endpoint, my network, nothing, just this warning in Fing.  If you would please provide some technical explanation as to what exactly this service is looking for to come to this determination because from what I can tell, if you aren't using proxies, this shouldn't be a factor.  Thanks again.

Doing some digging and with some help from another forum, I've validated that my router is set to block WPAD requests via SSH commands and output below.  Is this possibly why Fing is showing this error?

# grep wpad /etc/dnsmasq.conf
dhcp-name-match=set:wpad-ignore,wpad
dhcp-ignore-names=tag:wpad-ignore

JherekCarnelian

It's six weeks since my initial post: after supplying logs to support and answering various questions there hasn't been any detailed feedback. It appears to me to be a false positive with an as yet unidentified cause.

Marc

JherekCarnelian said:

It's six weeks since my initial post: after supplying logs to support and answering various questions there hasn't been any detailed feedback. It appears to me to be a false positive with an as yet unidentified cause.

@Karl_From_Fing, anyway to see if support has an answer for @JherekCarnelian ?

Karl_From_Fing

@JherekCarnelian
I have just brought up your ticket to our development team again to see if we can find a faster resolution. All updates will come on the ticket itself. Apologies for the delay.

JherekCarnelian

Many thanks @Karl_From_Fing

jjones7791

@Karl_From_Fing please open another ticket for me as well.  Also can I get an answer at least at a high level regarding how this security feature is implemented?  What process or service is it looking at to come to this conclusion?  Thanks.

Karl_From_Fing said:

Hey @jjones7791
I have created a support ticket for you in relation to this issue where we can troubleshoot futhter.

King

Access point has insufficient protection

I am having the same issue.

reclifton

Just started having the same issue yesterday. Firewalla purple is running my primary router.

Oraclemaster

Same problem here

Karl_From_Fing

Hey everyone!
Is the issue that you are seeing WPAD enabled for all of you?

Sourface

I have the same issue.  On detail panel it says "DHCP Proxy WPAD    No  (a green shield check mark icon)"

King

Hi Karl

Yes, all of us have the problem

jjones7791

Karl_From_Fing said:

Hey everyone!
Is the issue that you are seeing WPAD enabled for all of you?

To clarify, if you are asking if WPAD is enabled, for me on my network the answer is no.  My router does not allow it which I've validated via my routers CLI.  I'm sure it's enabled by default on most web browsers, however that really doesn't have anything to do with this conversation.

The issue is Fing desktop stating there is security issue related to this AP security, which is confusing as it is since this protocol is more about using a DHCP proxy, which isn't necessarily AP related.

So I'll ask the question again that maybe your dev team can answer.  What check is the Fing software doing to come to this conclusion?  If it is giving this notification because WPAD is NOT enabled, then it would explain why we are seeing this, as I suspect most consumer routers block this as a default since this is something you would see more in a corp environment.

Oraclemaster

https://community.fing.com/discussion/comment/34537#Comment_34537

Me too

jakrzysztow

Might as well as to the thread! I too am seeing this from the Fing Android application but not the Fing Desktop application.

max2198

I am also seeing the same message on the Fing android app.  I have 5 Access points Secured with
WPA2- Enterprise the Wi-Fi that is built into my Modem/router is disabled  

JherekCarnelian

Hi @max2198 that's a bit different, the alert in the OP has the DHCP Proxy WPAD with a YES and an amber shield. Your message, I believe, is indicating that WPAD is not an issue for you.

Marc

@max2198 , click on the details and it should tell you more details on what it sees as being vulnerable and suggestions on how to solve for it.

max2198

Details is
Type: Ethernet
DHCP:  192.168.1.4
DHCP Proxy WPAD:   NO
Link speed:      1Gbps
first picture is the details 
It looks like it is detecting the Wired connection as a wireless connection. in View details  says "type: Ethernet"

Marc

When you're on the network tab, what does that tell you?  Also ethernet??

jjones7791

@Marc that is what I'm seeing fyi. Running on a Win10 box. Bottom is what I see when selecting "See result".

Kro

I have the same issue