topic Re: What is the best way/practice to discover and manage the Rogue APs and Clients? in Aerohive Migrated Content

What is the best way/practice to discover and manage the Rogue APs and Clients?

nathan_biya — Wed, 11 Apr 2018 00:42:42 GMT

What is the best way/practice to discover and manage the Rogue APs and Clients?

Re: What is the best way/practice to discover and manage the Rogue APs and Clients?

samantha_lynn — Wed, 11 Apr 2018 21:30:38 GMT

If you are using HiveManager NG, you'd want to enable WIPS (Wireless Intrusion Prevention System). This will detect unauthorized access points in the area. You can read more about how it does this at the following two links:

https://thehivecommunity.aerohive.com/s/article/WIPS-Understanding-In-Net-Rogue-detion

https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-wireless-intrusion-prevention-system.htm

To enable WIPS you will want to go to Configure> Open the Network Policy> Go to Additional Settings> Select WIPS on the left hand side menu (last option)> Toggle WIPS to "ON". This will show you the settings available for WIPS. That second link above has instructions on how to set this up and information on what each option means.

Once you have this enabled, push a configuration update to your APs, and they should begin detecting rouge devices. To see the results of this scanning, you will want to go to Monitor> Security. Here you can see any rouge APs that have been detected. You can mitigate any rouge APs you find, to reduce any harmful effects they may have on your network.

Hope this helps!

Re: What is the best way/practice to discover and manage the Rogue APs and Clients?

nathan_biya — Wed, 11 Apr 2018 22:33:28 GMT

Thank you Sam, will check them out.

Re: What is the best way/practice to discover and manage the Rogue APs and Clients?

AnonymousM — Wed, 10 Jul 2019 16:36:30 GMT

@Sam Pirok wondering if you have any material on the compatibility of WIPS with Mac Book Pros. We have found that to avoid the 4-6% dropped packets, when pinging the gateway, WIPS must be disabled from the NP. Other clients types are fine. Not many customers are Mac shops, so has not been any issue before.

Regards