Dell PowerConnect W-Airwave User Manual page 177

Figure 123 RAPIDS > List Page Illustration (partial view)
Table 102
rules, refer to
Table 102 RAPIDS > List Column Definitions
Column
Ack
RAPIDS Classification
Threat Level
Name
Classifying Rule
Current Associations
Max associations
Controller
Classification
WMS Classification
AP
WMS Classification
Date
Confidence
Wired
Detecting APs
Location
SSID
Dell PowerConnect W-AirWave 7.4 | User Guide
details the column information displayed in
"Defining RAPIDS Rules" on
Description
Displays whether or not the rogue device has been acknowledged. Devices can be acknowledged
manually or you can configure RAPIDS so that manually classifying rogues will automatically
acknowledges them. Additionally, devices can be acknowledged by using Modify Devices link at the top
of the RAPIDS > List page. Rogues should be acknowledged when the AirWave user has investigated
them and determined that they are not a threat (see
Displays the current RAPIDS classification. This classification is determined by the rules defined on the
RAPIDS > Rules page.
This field displays the numeric threat level of the device, in a range from 1 to 10. The definition of threat
level is configurable, as described in
The threat level is also supported with Triggers (see
System Pages" on page
Displays the alpha-numeric name of the rogue device, as known. By default, AirWave assigns each
rogue device a name derived from the OUI vendor and the final six digits of the MAC address.
Clicking the linked name will redirect you to the RAPIDS > Detail page for that rogue device. Refer to
"Overview of the RAPIDS > Detail Page" on page
Displays the RAPIDS Rule that classified the rogue device
Rules" on page 174).
The number of current rogue client associations to this device.
The highest number of rogue client associations ever detected at one time.
Displays the classification of the device based on the controller's hard-coded rules.
NOTE: This column is hidden unless Offload WMS Database is enabled by at least one group on the
Groups > Basic page.
The AP that provided the information used to classify the device. Click the linked device name to be
redirected to the APs/Devices > Monitor page for that AP.
The date that WMS set the classification.
The confidence level of the suspected rogue. How confidence is calculated varies based on the version
of ArubaOS. When an ArubaOS controller sees evidence that a device might be on the wire it will up the
confidence level. If ArubaOS is completely sure that it is on the wire, it gets classified as a rogue.
Displays whether the rogue device has been discovered on one of your wired networks by polling
routers/switches, your SNMP/HTTP scans, or Dell WIP information. This column displays Yes or is blank
if wired information was not detected.
Displays the number of AP devices that have wirelessly detected the rogue device.
A designation of heard implies the device was heard over the air.
If the rogue has been placed in VisualRF, this column will display the name of the floor plan the rogue is
on as a link to the VisualRF Floor Plan View page.
Displays the most recent SSID that was heard from the rogue device.
Figure 123. For additional information about RAPIDS
page 172.
"Basic Configuration" on page
"Rogue Device Threat Level" on page
"Monitoring and Supporting AirWave with the
183).
179.
169).
173.
(see"Viewing and Configuring RAPIDS
Using RAPIDS and Rogue Classification | 177