WESM zl Management and Configuration Guide WT.01.28 and greater

12-53
Wireless Network Management
AP Detection
■ SSID—If a radio has an unapproved MAC address but one of your
WLAN’s SSIDs, this may signal a hacker phishing for passwords and other
sensitive data.
If this list becomes too long and unmanageable, you should take one or more of these
steps:
■ Lower the timeout value for unapproved APs. (See “Configuring AP Detection”
on page 12-40.)
■ Move legitimate APs to the approved APs list.
Allowing an Unapproved AP. Not all APs in the unapproved list are necessarily
rogue APs. Some may be APs adopted by another module or APs that belong to your
organization; others may belong to legitimate neighboring organizations.
To move an AP to the approved list, complete these steps:
1. Select the AP and click the Allow button.
As shown in Figure 12-37, the Web browser interface automatically fills in the
AP’s MAC address and SSID. It also fills in the next available index number.
Figure 12-37.Add Allowed AP Screen
2. If you so desire, you can change these settings. (For example, you could allow
the MAC address, but any SSID.)