Security, WIDS/WIPS and Aruba ECS

Reply
MVP
Posts: 289
Registered: ‎11-04-2008

How to deal with Null Probe Response?

Hello,

Since I installed a local controller Aruba 200 and four AP65s at a remote site, Air-Wave IDS has reported hundred of Null-Probe-Response a day from mac address 00:00:00:00:00:00.
According to Aruba document, WIP includes Null-Probe-Response protection. I do have WIP and FW license in this controller.

Do I need to do anything to response to this attack? The attacker’s mac-address is 00:00:00:00:00:00, so I tried “#stm add-blacklist-client 00:00:00:00:00:00” but it didn’t work.
My AOS version 3.4.2.0

Any suggestions, ideas are appreciated

Trinh
~Trinh Nguyen~
Boys Town
Search Airheads
Showing results for 
Search instead for 
Did you mean: