Configuring a Rogue Classification Policy

A user can create a rogue classification policy with rules at the zone and monitoring-group level. This allows automatic classification when specific rogue detection criteria is met.
Complete the following steps to create a rogue classification policy.
  1. Click Security > Access Control > WIPS & WIDS.
    This displays the Policy page.
  2. Select the zone from the system tree and click Create.
    This displays the Create Rogue Classification Policy page.

    Create Rogue Classification Policy

  3. Enter the following:
    1. Name: Type a name to identify the rogue classification policy.
    2. Description: Enter a short description for the rogue classification policy.
  4. Rogue Classification Rules
    1. Click Create. This displays Rogue Classification Rules window.
    2. Enter the following:
      • Name: Enter a rule name to identify.
      • Rule Type: Select a rule type for classification policy from the drop-down list.
      • Classification: Select a classification type to match the above criteria.
    3. Click OK to create rogue classification rules.
  5. Click OK to create Rogue Classification Policy.
Note: Click Configure or Delete to edit or delete a rogue classification policy respectively. To prioritize a classification rule, select the rule from the list and click Up or Down to position the rule.
Note: The user can use command line interface in SZ to disable or change threshold packets per seconds for CTS abuse, RTS abuse, Deauth flood, disassociation flood and other detection types.
  • To change the threshold detection follow the command: remote ap-cli <ap-mac> "set rogued <attack-type> <number pf packets>". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued rtsthreshhold 10"
  • To enable / disable flood detection follow the command : remote ap-cli <ap-mac> "set rogued <attack-type> enable/disable". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued rtsdetect enable"

Classifying a Rogue Policy

Parent topic: Wireless Intrusion Detection and Prevention System