User's Manual
Dell PowerConnect W-AirWave 7.4 | User Guide Using RAPIDS and Rogue Classification | 177
Figure 123 RAPIDS > List Page Illustration (partial view)
Table 102 details the column information displayed in Figure 123. For additional information about RAPIDS
rules, refer to “Defining RAPIDS Rules” on page172.
Table 102 RAPIDS > List Column Definitions
Column Description
Ack Displays whether or not the rogue device has been acknowledged. Devices can be acknowledged
manually or you can configure RAPIDS so that manually classifying rogues will automatically
acknowledges them. Additionally, devices can be acknowledged by using Modify Devices link at the top
of the RAPIDS > List page. Rogues should be acknowledged when the AirWave user has investigated
them and determined that they are not a threat (see “Basic Configuration” on page 169).
RAPIDS Classification Displays the current RAPIDS classification. This classification is determined by the rules defined on the
RAPIDS > Rules page.
Threat Level This field displays the numeric threat level of the device, in a range from 1 to 10. The definition of threat
level is configurable, as described in “Rogue Device Threat Level” on page 173.
The threat level is also supported with Triggers (see “Monitoring and Supporting AirWave with the
System Pages” on page 183).
Name Displays the alpha-numeric name of the rogue device, as known. By default, AirWave assigns each
rogue device a name derived from the OUI vendor and the final six digits of the MAC address.
Clicking the linked name will redirect you to the RAPIDS > Detail page for that rogue device. Refer to
“Overview of the RAPIDS > Detail Page” on page 179.
Classifying Rule Displays the RAPIDS Rule that classified the rogue device (see“Viewing and Configuring RAPIDS
Rules” on page 174).
Current Associations The number of current rogue client associations to this device.
Max associations The highest number of rogue client associations ever detected at one time.
Controller
Classification
Displays the classification of the device based on the controller’s hard-coded rules.
NOTE: This column is hidden unless Offload WMS Database is enabled by at least one group on the
Groups > Basic page.
WMS Classification
AP
The AP that provided the information used to classify the device. Click the linked device name to be
redirected to the APs/Devices > Monitor page for that AP.
WMS Classification
Date
The date that WMS set the classification.
Confidence The confidence level of the suspected rogue. How confidence is calculated varies based on the version
of ArubaOS. When an ArubaOS controller sees evidence that a device might be on the wire it will up the
confidence level. If ArubaOS is completely sure that it is on the wire, it gets classified as a rogue.
Wired Displays whether the rogue device has been discovered on one of your wired networks by polling
routers/switches, your SNMP/HTTP scans, or Dell WIP information. This column displays Yes or is blank
if wired information was not detected.
Detecting APs Displays the number of AP devices that have wirelessly detected the rogue device.
A designation of heard implies the device was heard over the air.
Location If the rogue has been placed in VisualRF, this column will display the name of the floor plan the rogue is
on as a link to the VisualRF Floor Plan View page.
SSID Displays the most recent SSID that was heard from the rogue device.