Dell PowerConnect W-Airwave 7.2 Bedienungsanleitung PDF herunterladen (Seite 173)

Dell PowerConnect W AirWave 7.2 | User Guide Using RAPIDS and Rogue Classification | 173

After creating a new rule, select Add to return to the RAPIDS > Rules page. Select Save and Apply to have the

new rule take effect.

Deleting or Editing a Rule

To delete a rule from the RAPIDS rules list, go to the RAPIDS > Rules page. Select the check box next to the

rule you want to delete, and select Delete. The rule is automatically deleted from RAPIDS > Rules.

To edit any existing rule, select its pencil icon to launch the RAPIDS Classification Rule page (see Figure 118).

Edit or revise the fields as necessary, then select Save.

To change the sequence in which rules apply to any rogue device, drag and drop the rule to a new position in the

rules sequence.

Recommended RAPIDS Rules

 If Any Device Has Your SSID, Then Classify as Rogue

The only devices broadcasting your corporate SSID should be devices that you are aware of and are managed

by AWMS. Rogue devices often broadcast your official SSID in an attempt to get access to your users, or to

trick your users into providing their authentication credentials. Devices with your SSID generally pose a severe

threat. This rule helps to discover, flag, and emphasize such a device for prompt response on your part.

 If Any Device Has Your SSID and is Not an Ad-Hoc Network Type, Then Classify as Rogue

This rule classifies a device as a rogue when the SSID for a given device is your SSID and is not an Ad-Hoc

device. Windows XP automatically tries to create an Ad-hoc network if it can not find the SSID for which it is

searching. This means that user’s laptops on your network may appear as Ad-Hoc devices that are

broadcasting your SSID. If this happens too frequently, restrict the rule to apply to non-ad-hoc devices.

IP Address Rogue matches a specified IP address or subnet. Enter IP address or subnet information as

explained by the fields.

OUI Score Rogue matches manufacturer OUI criteria. You can specify minimum and maximum OUI score

settings from two drop-down lists. Select remove to remove one or both criteria, as desired.

Operating System Rogue matches OS criteria. Specify matching or non-matching OS criteria as prompted.

Wireless/Wireline Properties

Manufacturer Rogue matches the manufacturer information of the rogue device. Specify matching or non-

matching manufacturer criteria.

MAC Address Rogue matches the MAC address. Specify matching or non-matching address criteria, or use a

wildcard (*) for partial matches.

Dell Controller Properties

Controller Classification Rogue matches the specified controller classification.

Confidence Rogue falls within a specified minimum and maximum confidence level, ranging from 1 to 100.

Table 100 Properties Drop Down Menu (Continued)

Option Description

1 2 ... 168 169 170 171 172 173 174 175 176 177 178 ... 281 282

Keine Kommentare

Dell PowerConnect W-Airwave 7.2 Bedienungsanleitung Seite 173