Users Guide

Column Description
RSSI
Displays Received Signal Strength Indication (RSSI) designation, a measure of the power
present in a received radio signal.
Network Type
Displays the type of network in which the rogue is present, for example:
l Ad-hoc—This type of network usually indicates that the rogue is a laptop that attempts to
create a network with neighboring laptops, and is less likely to be a threat.
l AP—This type of network usually indicates an infrastructure network, for example. This
may be more of a threat.
l Unknown—The network type is not known.
Encryption Type
Displays the encryption that is used by the device. Possible contents of this field include
the following encryption types:
l Open—No encryption
l WEP—Wired Equivalent Privacy
l WPA—Wi-Fi Protected Access
Generally, this field alone does not provide enough information to determine if a device is
a rogue, but it is a useful attribute. If a rogue is not running any encryption method, you
have a wider security hole than with an AP that is using encryption.
Ch
Indicates the most recent RF channel on which the rogue was detected.
NOTE: It can be detected on more than one channel if it contains more than one radio.
LAN MAC Address The LAN MAC address of the rogue device.
LAN Vendor Indicates the LAN vendor of the rogue device, when known.
Radio MAC
Address
Displays the MAC address for the radio device, when known.
Radio Vendor Indicates the radio vendor of the rogue device, when known.
OS
This field displays the OS of the device, as known. OS is the result of a running an OS port
scan on a device. An IP addresses is required to run an OS scan. The OS reported here is
based on the results of the scan.
Model
Displays the model of rogue device, if known. This is determined with a fingerprint scan,
and this information may not always be available.
IP Address
Displays the IP address of the rogue device. The IP address data comes from fingerprint
scans or ARP polling of routers and switches.
Last Discovering
AP
Displays the most recent AP to discover the rogue device. The device name in this column
is taken from the device name in AirWave. Click the linked device name to be redirected to
the APs/Devices > Monitor page for that AP.
Switch/Router Displays the switch or router where the device’s LAN MAC address was last seen.
Port Indicates the physical port of the switch or router where the rogue was last seen.
Notes Indicates any notes about the rogue device that may have been added.
Last Seen Indicates the date and time the rogue device was last seen.
Table 103: RAPIDS > List Column Definitions (Continued)
Dell Networking W-AirWave 8.0 | User Guide Using RAPIDS and Rogue Classification | 210