Users Guide

Dell PowerConnect W-Series ArubaOS 6.1 | User Guide Wireless Intrusion Prevention | 537
Chapter 29
Wireless Intrusion Prevention
The ArubaOS Wireless Intrusion Prevention (WIP) features and configurations are discussed in this chapter.
WIP offers a wide selection of intrusion detection and protection features to protect the network against wireless
threats. Like most other security-related features of the Dell network, the WIP configuration is done on the
master controller in the network.
To use most of the features described in this chapter, you must install a Wireless Intrusion Protection
(RFprotect) license on all controllers in your network. If you install a RFprotect license on a master controller
only, an AP or AM terminated on a local controller will not provide the WIP features.
These features do not require an RFprotect license:
 Rogue AP classification techniques other than AP classification rules
 Rogue containment
 Wired containment
 Wireless containment without Tarpit
For details on commands see the ArubaOS Command Line Interface Reference document.
This chapter contains the following sections:
 “Reusable Wizard” on page537
 “Monitoring Dashboard” on page540
 “Rogue AP Detection” on page541
 “Intrusion Detection” on page544
 “Intrusion Protection” on page554
 “WLAN Management System” on page556
 “Client Blacklisting” on page558
Reusable Wizard
The WebUI’s reusable, intuitive, user-friendly Wizard provides steps to enable, define, or change:
 Integrated vs Overlay WLAN/WIP options
 Rules-based rogue classification
 Detection features for attacks against infrastructure
 Detection features for attacks against WLAN clients
 Protection features for attacks against infrastructure
 Protection features for WLAN clients
Figure 112 displays the WIP Wizard layout. Highlighting one of the previously configured rules reveals drop
down menus for changing values. Note that the reusable wizard includes robust online Help.