Security, WIDS/WIPS and Aruba ECS

Super Contributor I

How to deal with Null Probe Response?


Since I installed a local controller Aruba 200 and four AP65s at a remote site, Air-Wave IDS has reported hundred of Null-Probe-Response a day from mac address 00:00:00:00:00:00.
According to Aruba document, WIP includes Null-Probe-Response protection. I do have WIP and FW license in this controller.

Do I need to do anything to response to this attack? The attacker’s mac-address is 00:00:00:00:00:00, so I tried “#stm add-blacklist-client 00:00:00:00:00:00” but it didn’t work.
My AOS version

Any suggestions, ideas are appreciated

~Trinh Nguyen~
Boys Town
Search Airheads
Showing results for 
Search instead for 
Did you mean: