Dell W-7030 AOS 6.4.x User Guide - Page 536

Figure 70 WIP Monitoring Dashboard Detecting Rogue APs The most important WIP functionality is the ability to classify an AP as a potential security threat. An AP is considered to be rogue if it is both unauthorized and plugged in to the wired side of the network. An AP is considered to be interfering if it is seen in the RF environment but is not connected to the wired network. While the interfering AP can potentially cause RF interference, it is not considered a direct security threat since it is not connected to the wired network. However, an interfering AP may be reclassified as a rogue AP. Understanding Classification Terminology APs and clients are discovered during scanning of the wireless medium, and they are classified into various groups. The AP and client classification definitions are in Table 105 and Table 106. Table 105: AP Classification Definition Classification Description Valid AP An AP that is part of the enterprise providing WLAN service. Interfering AP An AP that is seen in the RF environment but is not connected to the wired network. An interfering AP is not considered a direct security threat since it is not connected to the wired network. For example, an interfering AP can be an AP that belongs to a neighboring office's WLAN but is not part of your WLAN network. Neighbor AP A neighboring AP is when the BSSIDs are known. Once classified, a neighboring AP does not change its state. Dell Networking W-Series ArubaOS 6.4.x | User Guide Wireless Intrusion Prevention | 536