Motorola WiNG 4.4 Reference Manual page 37

1.2.5.6 WIPS
The Motorola Solutions Wireless Intrusion Protection Software (WIPS) monitors for any presence of unauthorized rogue
Access Points. Unauthorized attempts to access the WLAN is generally accompanied by anomalous behavior as intruding
MUs try to find network vulnerabilities. Basic forms of this behavior can be monitored and reported without needing a
dedicated WIPS. When the parameters exceed a configurable threshold, the switch generates an SNMP trap and reports
the result via the management interfaces. Basic WIPS functionality does not require monitoring APs and does not perform
off-channel scanning.
NOTE: When converting an AP300 to an Intrusion Detection Sensor, the conversion
requires approximately 60 seconds.
NOTE: When using an AP-5131 for use with WIPS and as a sensor you must first
configure the WIPS server IP Addresses before converting the AP-5131 to a sensor.
1.2.5.7 Rogue AP Detection
The switch supports the following techniques for rogue AP detection:
• RF scan by Access Port on all channels
• SNMP Trap on discovery
• Authorized AP Lists
• Rogue AP Report
• Motorola Solutions RFMS Support
NOTE: The Motorola Solutions RF Management Software is recommended to plan the
deployment of the switch. Motorola Solutions RFMS can help optimize the positioning
and configuration of a switch in respect to a WLAN's MU throughput requirements and
can help detect rogue devices. For more information, refer to the Motorola Solutions Web
site.
Overview 1 - 21