Alarm Categories
The nine alarm categories are as follows:
- Anomalous BehaviorDevices that operate outside of their normal behavior settings
and generate events that could indicate anomalous or suspicious activity.
- ExploitsEvents caused by a potentially malicious user actively interacting on
your Wireless LAN using a laptop/PC as a wireless attack platform.
- InfrastructureEvents that are generated based on the SNMP traps received from
the infrastructure devices.
- PerformanceWireless LAN traffic that exceeds set performance thresholds for
devices.
- Platform HealthEvents that provide information about the state of the AirDefense
Services platform and the Sensors which report back to the appliance.
- Policy ComplianceWireless LAN traffic that violates established or default
policies for devices.
- ReconnaissanceMonitors and tracks external devices that are attempting to
monitor your Wireless LAN.
- Rogue ActivityUnauthorized Devices detected by AirDefense which pose a risk to
the security of your network.
- VulnerabilitiesDevices that are detected to be susceptible to attack.