Hi. Greetings.
We have activated IDS Aruba Central in a new group. In the past we only had a few categories, but two days ago we configured "detect_client_flood" in the infraestructure.
Now we have a lot of events like these:
Client flood Infrastructure Critical 2m 1s 00:00:00:00:00:00 AP1238PB04
Client flood Infrastructure Critical 17m 29s 00:00:00:00:00:00 AP2400PB03
I attach a screenshot.
We think is due to the people that pass near to the branches or personal devices that are not connect to the wireless infraestructure. Am I wrong?
Is possible create a threshold for this events? Is possible for Ap?
Thanks a lot.
Javier Palomo.