Motorola Solutions WiNG 5.2.6 Reference Manual page 384

7 - 24 WiNG 5.2.6 Access Point System Reference Guide
11.Set the following
Name
Enable
Filter Expiration
12.Select OK
to the last saved configuration.The WIPS policy can be invoked at any point in the configuration process by
selecting
13.Select the
screen's configuration parameters.
MU Anomaly Event
Displays the name of the event tracked against the defined thresholds set
for interpreting the event as excessive or permitted.
Displays whether tracking is enabled for each MU Anomaly event. Use the
drop-down menu to enable/disable events as required. A green checkmark
defines the event as enabled for tracking against its threshold. A red "X"
defines the event as disabled, and not tracked by the WIPS policy. Each
event is disabled by default.
Set the duration a client is filtered. This creates a special ACL entry, and
frames coming from the client are silently dropped. The default setting is
0 seconds. For each violation, define a time to filter value (in seconds)
which determines how long received packets are ignored from an attacking
device once a violation has been triggered. Ignoring frames from an
attacking device minimizes the effectiveness of the attack and the impact
to the site until permanent mitigation can be performed.
to save the updates to the MU Anomaly configuration used by the WIPS policy Select
Activate Wireless IPS Policy
AP Anomaly tab. Ensure the
configurations:
from the upper, left-hand side, of the access point user interface.
Activate Wireless IPS Policy
Reset
option remains selected to enable the
to revert