Network Management

Does anyone know how to setup RAPIDS to detect wired rogue APs? I read that scheduling an HTTP scan to run daily is an option, but where would this be configured and setup? Would the RAPIDS rule accomplish this: Device discovered via wireline fingerprint scan? Running 8.2.8.1.Thanks.

Hello,

for wired rogue's we need to add wired switches on Airwave and enable the rule to read the Wireline Fingerprint scan as shown below:

Thanks Fayyaz, but is not that the default rule? I found something online that states you need to run HTTP scans or OS scanning..is this it?

Yes Kyle,

sorry for the late reply. we will need the add the rule, as i shown in the screen shot above and Add a Network scan under Device setup --> Communication --> Discover tab on Airwave GUI, using which Airwave will do nmap/snmp on the network and try to get the http wireline finger printing to classify a rogue device. However, easier and more reliable to find the wired rogue device is by adding the wired switches to the Airwave but then depending upon the resources available on Airwave.