Deleting Or Editing A Rule - Dell PowerConnect W-Airwave User Manual

Table 99
dialog box (see
the RAPIDS > Rules page.
Table 99 Properties Drop Down Menu
Option
Wireless Properties
Detected on WLAN
Detecting AP Count
Encryption
Network type
Signal Strength
SSID
Wireline Properties
Detected on LAN
Fingerprint Scan
IP Address
OUI Score
Operating System
Wireless/Wireline Properties
Manufacturer
MAC Address
Dell Controller Properties
Controller Classification
Confidence
After creating a new rule, select Add to return to the RAPIDS > Rules page. Select Save and Apply to have the
new rule take effect.

Deleting or Editing a Rule

To delete a rule from the RAPIDS rules list, go to the RAPIDS > Rules page. Select the check box next to the
rule you want to delete, and select Delete. The rule is automatically deleted from RAPIDS > Rules.
To edit any existing rule, select its pencil icon to launch the RAPIDS Classification Rule page (see
Edit or revise the fields as necessary, then select Save.
Dell PowerConnect W-AirWave | User Guide
defines the drop down menu options that are at the bottom left of the RAPIDS Classification Rule
Figure 120). Once all rule settings are defined, select Add. The new rule automatically appears in
Description
Classifies based on how the rogue is detected on the wireless LAN.
Classifies based on the number of managed devices that can hear the rogue. Enter a numeric
value and select At Least or At Most.
Classifies based on the rogue matching a specified encryption method. Note that you can select
for 'no encryption' with a rule that says "Encryption does not match WEP or better".
Rogue is running on the selected network type, either Ad-hoc or Infrastructure.
Rogue matches signal strength parameters. Specify a minimum and maximum value in dBm.
Classifies the rogue when it matches or does not match the specified string for the SSID or a
specified regular expression.
NOTE: For SSID matching functions, AMP processes only alpha-numeric characters and the
asterisk wildcard character (
example, the string of ethersphere-* matches the SSID of ethersphere-wpa2 but also
the SSID of ethersphere_this_is_an_example (without any dashes).
Rogue is detected on the wired network. Select Yes or No.
Rogue matches fingerprint parameters.
Rogue matches a specified IP address or subnet. Enter IP address or subnet information as
explained by the fields.
Rogue matches manufacturer OUI criteria. You can specify minimum and maximum OUI score
settings from two drop-down lists. Select remove to remove one or both criteria, as desired.
Rogue matches OS criteria. Specify matching or non-matching OS criteria as prompted by the
fields.
Rogue matches the manufacturer information of the rogue device. Specify matching or non-
matching manufacturer criteria.
Rogue matches the MAC address. Specify matching or non-matching address criteria, or use a
wildcard (*) for partial matches.
Rogue matches the specified controller classification.
Rogue falls within a specified minimum and maximum confidence level, ranging from 1 to 100.
*
). AMP ignores all other non-alpha-numeric characters. For
Using RAPIDS and Rogue Classification | 171
Figure 120).