Cisco Cisco 5508 Wireless Controller Referencia técnica
3
Rogue Management in a Unified Wireless Network using v7.4
Cisco WIPS Solution Overview
provides a summary of WIPS functionality that comes with WLC, WLC plus MSE, and WLC
plus MSE plus CleanAir.
Table 1
Cisco WIPS Comparison
Feature
BaseWIPS
(WLC)
(WLC)
Adaptive WIPS
(WLC and MSE)
(WLC and MSE)
Adaptive WIPS
(WLC plus MSE
plus CleanAir)
(WLC plus MSE
plus CleanAir)
Rogue access point and ad hoc rogue
detection, classification, location
tracking, and containment
detection, classification, location
tracking, and containment
Yes
Yes
Yes
Switchport tracing and disabling
Yes
Yes
Yes
Management frame impersonation
detection
detection
Yes
Yes
Yes
Rogue containment when WAN is down
Yes
Yes
Yes
Internal and external rogue access point
detection and containment times
detection and containment times
Yes
Yes
Yes
Smartphone tethering detection and
containment
containment
Yes
Yes
Yes
Location tracking and containment for
DoS attacker and non authorized device
that is trying to associate internal access
point
DoS attacker and non authorized device
that is trying to associate internal access
point
Yes
Yes
Yes
Wired Equivalent Privacy (WEP)
cracking detection
cracking detection
Yes
Yes
Yes
MAC spoofing rogue's detection and
containment
containment
Yes
Yes
Yes
Auto MAC learning and Internet
connection sharing (ICS) detection
connection sharing (ICS) detection
Yes
Yes
Yes
Internet connection sharing (ICS)
detection
detection
Yes
Yes
Yes
Enterprise-level alarm/event correlation
Yes
Yes
Yes
Attack signature threshold customization Yes
Yes
Yes
Off-channel rogue detection and location,
integrated into infrastructure
integrated into infrastructure
Yes
Yee
Yes
DoS signature updates
No
Yes
Yes
Wireless intrusion signature updates
No
Yes
Yes
Attack forensics (all signatures)
No
Yes
Yes
Non-Wi-Fi transmitter detection and
location
location
No
No
Yes
Non-Wi-Fi bridge detection and location
No
No
Yes
Non-Wi-Fi access point detection and
location
location
No
No
Yes
Layer 1 DoS attack location and detection No
No
Yes