Cisco Cisco 5508 Wireless Controller Designanleitung
1-4
Book Title
OL-xxxxx-xx
Chapter 1 Cisco Adaptive wIPS Management Deployment Guide, Release 8.0
Cisco Adaptive wIPS Introduction
•
Off-channel vs. On-channel wIPS scanning
•
wIPS communication protocols
•
wIPS Configuration and Profile Management
•
wIPS Alarm Flow
•
Deployment Considerations
•
Forensics
•
Licensing and Support
•
A Step by Step Configuration Guide
Cisco Adaptive wIPS System Architecture
This document will address the wIPS solution for Over-the-Air Attacks. Cisco’s Adaptive Wireless
Intrusion Prevention System (wIPS) is made up of a number of components that work together to provide
a unified security monitoring solution. In addition to the WLAN Controllers, Access Points and Prime
Infrastructure components that currently comprise Cisco’s Unified Wireless Networking solution; the
wIPS portion introduces two additional components. These additional hardware components include
Access Points in wIPS mode and the Mobility Services Engine running the wIPS service software.
Intrusion Prevention System (wIPS) is made up of a number of components that work together to provide
a unified security monitoring solution. In addition to the WLAN Controllers, Access Points and Prime
Infrastructure components that currently comprise Cisco’s Unified Wireless Networking solution; the
wIPS portion introduces two additional components. These additional hardware components include
Access Points in wIPS mode and the Mobility Services Engine running the wIPS service software.
Component Functions in an Adaptive Wireless IPS Deployment
•
wIPS Mode Access Point—A wIPS mode access point is any access point in Monitor Mode, Local
Mode with wIPS, or with the WSM module. This term will be used to group access points capable
of wIPS.
Mode with wIPS, or with the WSM module. This term will be used to group access points capable
of wIPS.
•
wIPS Monitor Mode Access Point(s) – Provides constant channel scanning with attack detection and
forensics (packet capture) capabilities.
forensics (packet capture) capabilities.