Security, WIDS/WIPS and Aruba ECS

Reply
Occasional Contributor II
Posts: 86
Registered: ‎04-13-2009

Wips-wids-info and configuration

Hi,

I was wondering if anyone has any Best Practice documentation on configuring WIDS/WIPS. I have the User Guide, but that does not have enough information for me. :D I need real life type of configuration parameters, and details. I appreciate any assistance.

Thanks,

** M.T.
Guru Elite
Posts: 19,964
Registered: ‎03-29-2007

IDS/IPS Configuration

mtran,

The ArubaOS 3.4 user guide makes it very clear what each option in WIDS is for. There are many applications for IDS/IPS and not many people want to discuss or describe exactly what they are doing. There are some attacks that are attempted, but mostly dealt with by using strong encryption, policy-based firewalling, so it is not worth reporting those attacks, because they fail. There are other attacks, like IP spoofing on an unencrypted SSID, where you DO want that attack reported. The short answer is that your IDS/IPS that you put in place must match your needs and deal with what you are really concerned about. The whitepaper here: http://www.arubanetworks.com/pdf/technology/whitepapers/wp_Banning_WLAN.pdf discusses some approaches that you can take to deal with some common wifi threats.
Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Search Airheads
Showing results for 
Search instead for 
Did you mean: