<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: WIPS alerts in ExtremeWireless (WiNG)</title>
    <link>https://community.extremenetworks.com/t5/extremewireless-wing/wips-alerts/m-p/79654#M7347</link>
    <description>Jeff, &lt;BR /&gt;
&lt;BR /&gt;
When you enabled the events, you must have configured some thresholds. Check the WIPS Events --&amp;gt; Excessive tab.  The Event is triggered when the sensor finds a certain number of probe requests within a certain time interval (say Y). Both these fields are configurable and the default number is 30 scans for one client. So if you configure the  time interval (Y) to 1 minute, then it is easy to trigger the event.&lt;BR /&gt;
&lt;BR /&gt;
Please check what values are configured. For these events, you can configure thresholds depending upon how aggressive detection you want. &lt;BR /&gt;
&lt;BR /&gt;
regards,&lt;BR /&gt;
Sukhdeep</description>
    <pubDate>Wed, 20 Mar 2019 18:10:41 GMT</pubDate>
    <dc:creator>Sukhdeep_Singh_</dc:creator>
    <dc:date>2019-03-20T18:10:41Z</dc:date>
    <item>
      <title>WIPS alerts</title>
      <link>https://community.extremenetworks.com/t5/extremewireless-wing/wips-alerts/m-p/79653#M7346</link>
      <description>I've enabled WIPS on several APs &amp;amp; their controller.  I enabled all alerts available in the WIPS policy I created.&lt;BR /&gt;
I'm receiving many "excessive scanning" alerts from numerous devices but I can't find any information about this situation. What is "excessive scanning"?  Does it pose a threat?&lt;BR /&gt;
Is there any best practice document available for setting up/maintaining WING WIPS?&lt;BR /&gt;
&lt;BR /&gt;
Thanks!&lt;BR /&gt;
Jeff</description>
      <pubDate>Tue, 19 Mar 2019 03:06:55 GMT</pubDate>
      <guid>https://community.extremenetworks.com/t5/extremewireless-wing/wips-alerts/m-p/79653#M7346</guid>
      <dc:creator>Jeff_Roberts</dc:creator>
      <dc:date>2019-03-19T03:06:55Z</dc:date>
    </item>
    <item>
      <title>Re: WIPS alerts</title>
      <link>https://community.extremenetworks.com/t5/extremewireless-wing/wips-alerts/m-p/79654#M7347</link>
      <description>Jeff, &lt;BR /&gt;
&lt;BR /&gt;
When you enabled the events, you must have configured some thresholds. Check the WIPS Events --&amp;gt; Excessive tab.  The Event is triggered when the sensor finds a certain number of probe requests within a certain time interval (say Y). Both these fields are configurable and the default number is 30 scans for one client. So if you configure the  time interval (Y) to 1 minute, then it is easy to trigger the event.&lt;BR /&gt;
&lt;BR /&gt;
Please check what values are configured. For these events, you can configure thresholds depending upon how aggressive detection you want. &lt;BR /&gt;
&lt;BR /&gt;
regards,&lt;BR /&gt;
Sukhdeep</description>
      <pubDate>Wed, 20 Mar 2019 18:10:41 GMT</pubDate>
      <guid>https://community.extremenetworks.com/t5/extremewireless-wing/wips-alerts/m-p/79654#M7347</guid>
      <dc:creator>Sukhdeep_Singh_</dc:creator>
      <dc:date>2019-03-20T18:10:41Z</dc:date>
    </item>
  </channel>
</rss>

