User's Guide

Security Profiles
Security Profiles (also part of Appliance Platform) define the security configurations of sanctioned
wireless clients on your wireless LAN. Refer to Security Profilesi under the Appliance Platform topic.
Wired Network Monitoring
Wired Network Monitoring is used to monitor the wired network devices in your system. You can
generate an alarm policy for your wired network by selecting any of the following conditions:
• New device detected on the wired network. Using the Known Vendors button, you can select the
wired equipment vendors used in your network. Any vendor selected in the list will generate a lower
severity alarm condition.
• Sanctioned wired device detected at dierent location in tree hierarchy than when originally
discovered.
• Sanction device no longer observed. You must specify a minimum time for the device to have not
been seen on your network.
To detect new devices on your network, existing devices must be classified as sanctioned. The Mass
Wired Network Device Classification button opens a dialog where you can sanction all or a selection of
devices at one time. Typically, this process should be done when you initially configure policies or after
major network changes.
To turn on Wired Network Monitoring, you should always enable it at the appliance level by selecting
the Enable configuration checkbox. When you do, all the other network levels are also monitored.
Then, if you have a level that needs to be monitored using dierent settings, you can monitor that level
by selecting the network level from the network tree, overriding the inherited Wired Network
Monitoring (select Override settings radio button), and then defining dierent settings for Wired
Network Monitoring.
Security & Compliance
Legacy Content
1074 Extreme AirDefense User Guide for version 10.5.