Cisco Cisco 5520 Wireless Controller デザインガイド

ページ / 58
1-41
Book Title
OL-xxxxx-xx
Chapter 1      Cisco Adaptive wIPS Management Deployment Guide, Release 8.0
  Adaptive WIPS Management Best Practices
Note
There is no regular expression support yet for SSID name configuration.
Step 2
In the Profile Configuration page of wIPS profile, highlight Honeypot AP detected signature and edit 
it to ensure that the MyWLAN SSID group is included as shown in the following screenshot:
Note
The Honeypot AP detected signature attack can only detect specified SSIDs with open 
authentication. If Any is chosen for SSID Group, it means that the alarm will be triggered by 
any SSID, and not those specific to configured SSIDs or SSID groups. Thus, administrators must 
be cautious on SSID group changes because they affect the scope of monitoring SSIDs. 
Notification
Forensic is the only option for Notification in alarm configuration. It means capturing over-the-air 
packets that trigger an aWIPS alarm for troubleshooting and analysis purposes.