Wireless Controller User Manual300Invalid SSID from a managed AP: This test checks whether a known managed APis sending an unexpected SSID. The SSID reported in the RF Scan is compared to thelist of all configured SSIDs that are used by the profil e assigned to the managed AP.If the detected SSID doesn't match any configured SSID then the AP is marked asrogue.AP is operating on an illegal channel: The purpose of this test is to detect hackersor incorrectly configured devices that are operating o n channels that are not legal inthe country where the wireless system is set up. Note: In order for the wireless systemto detect this threat, the wireless network must contain one or more radios thatoperate in sentry mode.Standalone AP with unexpected configuration: If the AP is classified as a knownstandalone AP, then the controller checks whether the AP is operating with theexpected configuration parameters. You configure the expected parameters for thestandalone AP in the local or RADIUS Valid AP database. This test may detectnetwork misconfiguration as well as potential intrusion attempts. The followingparameters are checked:• Channel Number• SSID• Security Mode• WDS Mode.• Presence on a wired network.Unexpected WDS device detected on network: If the AP is classified as a Managedor Unknown AP and wireless distribution system (WDS) traffic is detected on theAP, then the AP is considered to be Rogue. Only stand -alone APs that are explicitlyallowed to operate in WDS mode are not reported as rogues by this test.Unmanaged AP detected on wired network: This test checks whether the AP isdetected on the wired network. If the AP state is Unknown, then the test changes theAP state to Rogue. The flag indicating whether AP is detected on the wired networkis reported as part of the RF Scan report. If AP is managed and is detectedon the network then the controller simply reports this fact and doesn't change the APstate to Rogue. In order for the wireless system to detect this threat, the wirelessnetwork must contain one or more radios that operate in sentry mode
