Users Guide
209 | Using RAPIDS and Rogue Classification Dell Networking W-AirWave 8.2.4 | User Guide
This rule classifies a device as a rogue when the SSID for a given device is your SSID and is not an Ad-Hoc
device. Windows XP automatically tries to create an Ad-hoc network if it can not find the SSID for which it is
searching. This means that user’s laptops on your network may appear as Ad-Hoc devices that are
broadcasting your SSID. If this happens too frequently, you can restrict the rule to apply to non-ad-hoc
devices.
l If More Than Four APs Have Discovered a Device, then Classify as Rogue
By default, W-AirWave tries to use Signal Strength to determine if a device is on your premises. Hearing device
count is another metric that can be used.
The important concept in this scenario is that legitimate neighboring devices are only heard by a few APs on
the edge of your network. Devices that are heard by a large number of your APs are likely to be in the heart of
your campus. This rule works best for scenarios in large campuses or that occupy an entire building. For
additional rules that may help you in your specific network scenario, contact Dell support at
dell.com/support.
Using RAPIDS Rules with Additional W-AirWave Functions
Rules that you configure on the RAPIDS > Rules page establish an important way of processing rogue devices
on your network, and flagging them for attention as required. Such devices appear on the following pages in W-
AirWave, with additional information:
l RAPIDS > List—Lists rogue devices as classified by rules.
l RAPIDS > Rules—Displays the rules that classify rogue devices.
l RAPIDS > Overview—Displays general rogue device count and statistical information.
l System > Triggers—Displays triggers that are currently configured, including any triggers that have been
defined for rogue events.
l Reports > Definitions—Allows you to run New Rogue Devices Report with custom settings.
l VisualRF—Displays physical location information for rogue devices.
Viewing Rogues on the RAPIDS > List Page
To view a rogue AP, select the RAPIDS > List tab and select a rogue device type from the Minimum
Classification drop-down menu (see Figure 112). You can sort the table columns (up/down) by selecting the
column head. Most columns can be filtered using the funnel icon ( ). The active links on this page launch
additional pages for RAPIDS configuration or device processing.
The columns in the default view for the RAPIDS > List page is defined in Dell Networking W-AirWave and cannot
be modified. However, you can create a new view for this page that returns custom information based on the
filter parameters and data columns you selected when creating that new view. For more information on creating
custom views, see "Creating CustomViews" on page 1.