Motorola Solutions WiNG 5.2.6 Reference Manual page 382

7 - 22 WiNG 5.2.6 Access Point System Reference Guide
6. Select OK
invoked at any point in the configuration process by selecting
left-hand side, of the access point user interface.
7. Select the
screen's configuration parameters. This option need to remain selected to apply the WIPS configuration to the
access point profile.
The Excessive tab displays by default, with additional MU Anomaly and AP Anomaly tabs also available.
The Excessive tab lists events with the potential of impacting network performance. An administrator can enable
or disable event filtering and set the thresholds for the generation of the event notification and filtering action.
An Excessive Action Event is an event where an action is performed repetitively and continuously. DoS attacks
come under this category. Use the Excessive Action Events table to select and configure the action taken when
events are triggered.
8. Set the configurations of the following
Name
Enable
to update the settings. Select
WIPS Events tab. Ensure the
Figure 7-9 Wireless IPS screen - WIPS Events, Excessive tab
Displays the name of the excessive action event. This column lists the
event being tracked against the defined thresholds set for interpreting the
event as excessive or permitted.
Displays whether tracking is enabled for each event. Use the drop-down
menu to enable/disable events as required. A green checkmark defines the
event as enabled for tracking against its threshold values. A red "X"
defines the event as disabled and not tracked by the WIPS policy. Each
event is disabled by default.
Reset to revert to the last saved configuration. The WIPS policy can be
Activate Wireless IPS Policy
Activate Wireless IPS Policy
Excessive Action Events:
from the upper,
option remains selected to enable the