Cisco Cisco 5520 Wireless Controller デザインガイド
1-3
Book Title
OL-xxxxx-xx
Chapter 1 Cisco Adaptive wIPS Management Deployment Guide, Release 8.0
Cisco Adaptive wIPS Introduction
Non-802.11 Threats
Cisco CleanAir® technology is an effective tool to monitor and manage your network's RF conditions.
The Cisco MSE extends those capabilities. The figure below shows the advantages of deploying
CleanAir enable Access points with a Cisco Adaptive wIPS solution.
The Cisco MSE extends those capabilities. The figure below shows the advantages of deploying
CleanAir enable Access points with a Cisco Adaptive wIPS solution.
Cisco Adaptive wIPS Introduction
While the complete Cisco wIPS solution is included in the introduction, this document will focus on all
aspects of the Over-the-Air wIPS detection. This document will go into detail on:
aspects of the Over-the-Air wIPS detection. This document will go into detail on:
•
Adaptive wIPS components / architecture
•
The wIPS deployment modes
Internet connection sharing
(ICS) detection
(ICS) detection
Yes
Yes
Yes
Enterprise-level alarm/event
correlation
correlation
Yes
Yes
Yes
Attack signature threshold
customization
customization
Yes
Yes
Yes
Off-channel rogue detection and
location, integrated into
infrastructure
location, integrated into
infrastructure
Yes
Yes
Yes
DoS signature updates
No
Yes
Yes
Wireless intrusion signature
updates
updates
No
Yes
Yes
Attack forensics (all signatures)
No
Yes
Yes
Feature
BaseWIPS
(WLC)
(WLC)
Adaptive WIPS
(WLC and MSE)
(WLC and MSE)
Adaptive WIPS
(WLC, MSE,
and CleanAir
Access Points)
(WLC, MSE,
and CleanAir
Access Points)
Feature
BaseWIPS
(WLC)
(WLC)
Adaptive WIPS
(WLC and MSE)
(WLC and MSE)
Adaptive WIPS
(WLC, MSE,
and CleanAir
Access Points)
(WLC, MSE,
and CleanAir
Access Points)
Non-Wi-Fi transmitter detection
and location
and location
No
No
Yes
Non-Wi-Fi bridge detection and
location
location
No
No
Yes
Non-Wi-Fi access point
detection and location
detection and location
No
No
Yes
Layer 1 DoS attack location and
detection
detection
No
No
Yes