Viewing Wids Ap Rogue Classification Information; Figure 321: Wids Ap Rogue Classification - D-Link DWL-8600AP User Manual

D-Link UWS User Manual
Command Buttons
The page includes the following button:
• Refresh—Updates the page with the latest information.

Viewing WIDS AP Rogue Classification Information

The Wireless Intrusion Detection System (WIDS) can help detect intrusion attempts into the wireless network
and take automatic actions to protect the network. The DWS-4000 Series switch allows you to activate or
deactivate various threat detection tests and set threat detection thresholds. The WIDS AP Rogue
Classification page provides information about the results of these tests. If an AP has been classified as a
rogue, this page provides information about which tests the AP might have failed to trigger the classification.
If an AP is classified as a rogue, the system provides additional information to identify the threat type that
caused the switch to classify the AP as a rogue.
The WIDS RF Security encompasses three functions:
• Detect wireless devices by listening to control and data frames in the air.
• Classify whether the wireless device is a threat by comparing the received data to various databases as
well as sending trace frames into the wired network and listening for the trace frames on the wireless
network.
• Take action to protect the network from threats.
These changes can be done without disrupting network connectivity. Since some of the work is done by access
points, the switch needs to send messages to the APs to modify its WIDS operational properties.
To view information about another AP detected through the RF Scan, return to the main Rogue/RF Scan page
and click the MAC address of the AP with the information to view.
D-Link
Oct. 2015

Figure 321: WIDS AP Rogue Classification

Monitoring Status and Statistics
Unified Wired and Wireless Access System
Page 494