Dell PowerConnect W-AirWave 7.6 User Manual page 194

Figure 122:
RAPIDS > Detail Page Illustration
Important things to remember regarding the information in the device detail page are:
Users with the role of Admin can see all rogue AP devices.
l
Active rogue clients associated with this AP are listed in the Current Rogue Client Associations table. Selecting
l
a linked MAC address will take you to the Clients > Client Detail page, where you can view fingerprinting and
device details.
Users with roles limited by folder can see a rogue AP if there is at least one discovering device that they can see.
l
The discovery events displayed are from APs that you can see on the network. There may be additional discovery
l
events that remain hidden to certain user roles.
Each rogue device frequently has multiple discovery methods, all of which are listed.
l
As you work through the rogue devices, use the Name and Notes fields to identify the AP and document its
l
location.
You can use the global filtering options on the RAPIDS > Setup page to filter rogue devices according to signal
l
strength, ad-hoc status, and discovered by remote APs.
VisualRF uses the heard signal information to calculate the physical location of the device.
l
If the device is seen on the wire, RAPIDS reports the switch and port for easy isolation.
l
If you find that the rogue belongs to a neighboring business, for example, you can override the classification to a
l
neighbor and acknowledge the device. Otherwise, it is strongly recommended that you extract the device from
your building and delete the rogue device from your system. If you delete a rogue, you will be notified the next
time it is discovered.
Most columns in the Discovery Events list table on this page can be filtered using the funnel icon (
l
To update a rogue device:
1. Select the Identify OS for Suspected Rogues option if an IP address is available to obtain operating system
information using an nmap scan. Note that if you are running wireline security software on your network, it may
identify your AirWave as a threat, which you can ignore.
2. Select the Ignore button if the rogue device is to be ignored. Ignored devices will not trigger alerts if they are
rediscovered or reclassified.
182 | Using RAPIDS and Rogue Classification Dell PowerConnect W-AirWave 7.6 | User Guide
).