Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Rogue AP warnings with WCS Cisco

Posted on 2013-12-04
4
Medium Priority
?
276 Views
Last Modified: 2013-12-25
Hi,

I´ve a WCSC with 3 controllers and dozens of AP configured. Since this enviroment was installed there are many warnings about Rogue AP.

For example:
Rogue AP '5c:33:8e:df:48:9d' with SSID 'Orange-151c' and channel number '9' is detected by AP 'ALO-R4-P4-AP42' Radio type '802.11b' with RSSI '-89' and SNR '6'.

Open in new window


What can I do? Must I enable a rogue policy in order to improve the wireless enviroment?

thanks and regards
0
Comment
Question by:heze54
  • 2
4 Comments
 
LVL 12

Expert Comment

by:Infamus
ID: 39697016
0
 

Author Comment

by:heze54
ID: 39697659
Hi,

I disabled this option

->Check the Detect and report Adhoc networks
0
 
LVL 47

Accepted Solution

by:
Craig Beck earned 1500 total points
ID: 39700852
Unless you've got an MSE, Infamus' link won't help you.  You can't use WIPS without an MSE.  You can use IDS but that's something different.

If you're only seeing Rogue AP alerts I'd not worry about it.  That's just telling you that the APs are seeing other wireless networks and alerting you to the fact.  Unless you see wired rogue APs, or rogue APs with the same SSID you don't need to worry too much.

On that note, I'd leave Rogue AP detection turned on and just acknowledge the events in WCS on a regular basis.
0
 
LVL 12

Expert Comment

by:Infamus
ID: 39701369
Thumbs up!
0

Featured Post

Cyber Threats to Small Businesses (Part 1)

This past May, Webroot surveyed more than 600 IT decision-makers at medium-sized companies to see how these small businesses perceived new threats facing their organizations.  Read what Webroot CISO, Gary Hayslip, has to say about the survey in part 1 of this 2-part blog series.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your computer hacked? learn how to detect and delete malware in your PC
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question