ā05-28-2020 01:46 PM
Hi,
I recently enabled onboard WIPS functionality on my WING 7.2.1. (Rogue AP detection plus all wips events) and got a lot of "ap-ssid-broadcast-in-beacon" events with MAC addresses of APs out of my system/control.
I cannot find any explenation of this event in WING documentation. Do you know what does it mean exactly? Is it dangerous? Do you know any place where wips evets are described more
extensively?
Regards
Solved! Go to Solution.
ā05-28-2020 09:25 PM
This appears to be an informational event seen by your onboard wips > WING AP / sensors which are detecting neighboring devices / APs that have their SSIDās configuration set to broadcast. Every wireless router (or wireless access point) has a network name assigned to it. The technical term is a Service Set Identifier (SSID). By default, a router will broadcast its SSID in beacons, so all users within its range can see the network on their PC or other device.For your own security purposes you should not have your own SSIDās configured to ābroadcastā .
ā08-24-2020 07:09 PM
Thank you for the feedback, we will work on creating a knowledge article for this topic. If you can think of other articles you would like to see created, please donāt hesitate to let us know.
ā08-18-2020 01:50 PM
Dear Extreme Networks !
Ever think of issuing a document which disrebes this events for extreme WING ?
Now I feel that I have useles tool because it detects some events (maybe some of them are really dangerous) but I dont know what they mean.
Regards,
ā06-25-2020 07:21 AM
And nex one:
ad-hoc-violation
auth-server-failures
ā06-22-2020 09:54 AM
Thank you Chris for that detailed explanation.
Iām gonna disable this event therefore as not very useful.
I have recently noticed couple more. Can you also expleain on them?
dos-assoc-or-auth-flood
dos-unicast-deauth-or-disassoc
eap-flood
Thanks in advanced!