Monitor Unsanctioned APs for ExtremeWireless WiNG

This feature is available only for ExtremeWireless WiNG access points (APs) that have WIDS enabled.

Unsanctioned (rogue) access points are devices that are detected in a sanctioned radio coverage area but have not been deployed by the network administrator as a known device. Authorized access points and clients are generally known to the administrators and conform with the organization‘s security policies. Unsanctioned access points should be filtered to avoid jeopardizing the data within a managed network.

To monitor unsanctioned ExtremeWireless WiNG APs:

  1. From the menu, do one of the following actions:
    • To view all unsanctioned APs, select Monitor > Devices > Unsanctioned APs.
    • To view unsanctioned APs assigned to a site, select Monitor > Sites. From the Sites list, select an ExtremeWireless WiNG site, and select the Unsanctioned APs tab.)
  2. A list of rogue and unsanctioned APs displays.
  3. Review the list to help determine what actions your organization wants to take. Select a column heading to reorder the rows in a way that makes sense for you.
    Threat Type The classification of the AP as an unsanctioned device.
    BSSID The Basic Service Set (BSS) that the unsanctioned access point belongs to. (A BSS is a set of stations that can communicate with one another.) Select the link to view further details for this unsanctioned access point.
    Security Type The security type in use on the unsanctioned access point.
    SSID The Service Set ID (SSID) of the network to which the detected unsanctioned access point belongs.
    Vendor The manufacturer name for the unsanctioned access point.
    Last Seen Channel The last channel on which the unsanctioned access point was detected.
    rss (dBm) The signal strength of the detected unsanctioned access point.
    First Seen The timestamp when this unsanctioned access point was first detected.
    Site The tenant-managed site where this unsanctioned access point was discovered.
    Top Reporter The user assigned name of the access point that reported this unsanctioned access point.
  4. (Optional) Select an AP in the list and use the icons to refresh the list, reset the columns to the default order, print the information displayed in the table, or export the data.