Configure your filters by using logical constructs of AND, OR, and NOT that are available for use when creating and adding multiple filter criteria to your rule. These logical constructs are explained below.
AND - All the conditions defined for this rule must be met for the actions to be triggered.
OR - One or more of the conditions defined for this rule set must be met for the actions to be triggered.
NOT (AND) - This is the opposite condition of the AND construct. None of the selected conditions should meet for the action to be triggered.
NOT (OR) - This is the opposite condition of the OR construct. One or more of the specified filter conditions must not be met for the action to be triggered.
The available filters are:
Important
In the Alarm Action Manager, the order of filters within the rule defines how the filters are applied. For example, if you want create a rule to sanction only BSSs, the first filter should be defined as DeviceType=Include BSS before defining other rules such as DeviceManufacturer or DeviceSSID. Setting the DeviceType=Include BSS as the first filter will cause all wireless client devices to be ignored.