Wireless Access

Hi,

We are using OS 6.1 and we need to auto-contain systems that emits signatures that matches our IDS signatures. I looked at the documentation for containment of signals/ signatures that matches a specific IDS signature but it does not say how and where is this configured. Please provide some guidance if you know. Thanks.

You can only detect signatures and report them.

This is a surprise to me. Thanks.

So we can´t contain a deauth attack? 

Regards.

look at the last reply, you can do something if you use 6.4 and the client support 802.11w:

http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Block-deauth-attack-with-Aruba-WIPS/td-p/165634

but in general deauth attack is a tricky attack to mitigate, you cant prevent a client from sending things into the air.

Ok, thanks.