Hello,
I'm quite new to Aruba Wireless and trying to understand how to prevent/remedy these Disassociated Broadcast Attacks which are identified as exploits.
Currently Running Mobility Master 8.7.1.6>WLC's in a cluster on 8.7.16>Airwave is running 8.2.13.1 and then we also have ClearPass.
The biggest concern would be b
y sending disassociation frames to the broadcast address (FF:FF:FF:FF:FF:FF), an attacker can disconnect all stations on a network for a widespread DoS. It seems like it's happening from multiple MAC addresses within the "Attacker" column. Are these legitimate events/something I should look into more? How would I go about resolving this?
Please let me know if any additional info might be needed.
Thank you,
Eric Berg