What WIPS actually do ?

[prashan]

Hi Team,

I configured WIPS option in HM based on Detect rogue access points based on hosted SSIDs and encryption type and Enable rogue client reporting

When I go to monitoring->Security I only see unathorized APs and Clients. Is that what WIPS mean ?

Hope I'm not asking foolish question 🙂

[prashan]

Thank you Sam. If it is rouge AP, how can i classify as rouge one ?

[samantha_lynn]

Right, if you think these are actual rouge APs you can mitigate them to protect your network. However, before you do so, you should research the wireless standards and legislature for your area as there are strict rules around mitigation and when it is allowed. In general it is pretty restricted so be sure your local area statutes and laws allow this function.

[prashan]

I dont find Rogue option in Classify

[samantha_lynn]

WIPs is meant to find unauthorized devices and clients in your network space so that you are aware of where potential attacks could come from. It gives you the option to mitigate any unknown devices in your network to protect against malicious or unwanted clients. You can either classify the devices that WIPS has found for you as Neighbors, which are known devices that you trust are not malicious towards your network, or you can classify them as Rouge and mitigate them.

You can read more about what WIPS does here: https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-wireless-intrusion-prevention-system.htm?Highlight=WIPS