Wireless Access

Reply
Contributor II
Posts: 72
Registered: ‎05-22-2011

IDS Signature match and containment

Hi,

 

We are using OS 6.1 and we need to auto-contain systems that emits signatures that matches our IDS signatures. I looked at the documentation for containment of signals/ signatures that matches a specific IDS signature but it does not say how and where is this configured. Please provide some guidance if you know. Thanks.

 

Guru Elite
Posts: 20,819
Registered: ‎03-29-2007

Re: IDS Signature match and containment

You can only detect signatures and report them.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor II
Posts: 72
Registered: ‎05-22-2011

Re: IDS Signature match and containment

This is a surprise to me. Thanks.

Contributor II
Posts: 58
Registered: ‎09-22-2011

Re: IDS Signature match and containment

 

So we can´t contain a deauth attack? 

 

Regards.

MVP
Posts: 1,412
Registered: ‎11-30-2011

Re: IDS Signature match and containment

look at the last reply, you can do something if you use 6.4 and the client support 802.11w:

http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Block-deauth-attack-with-Aruba-WIPS/td-p/165634

 

but in general deauth attack is a tricky attack to mitigate, you cant prevent a client from sending things into the air.

Contributor II
Posts: 58
Registered: ‎09-22-2011

Re: IDS Signature match and containment

Ok, thanks.

Search Airheads
Showing results for 
Search instead for 
Did you mean: