Dell PowerConnect W-Airwave 7.1 Manual de usuario descargar pdf (Pagina 206)

206 | Using RAPIDS and Rogue Classification Dell PowerConnect W AirWave 7.1 | User Guide

Rogue Device Threat Level

The threat level classification adds granularity for each general RAPIDS classification. Devices of the same

classification can have differing threat scores, which is based on the classifying rule, ranging from 1 to 10, with a

default value of 5. This classification process can help identify which of two rogues is likely to be a greater threat.

Alerts can be defined and based on threat level; this is helpful for sorting rogue devices.

Threat level and classification are both assigned to a device when a device

matches a rule. Once classified, a

device’s classification and threat level change only if a device is classified by a new rule or is manually changed.

Threats levels can be manually defined on the RAPIDS detail page when the RAPIDS classification is manually

overridden or you can edit the rule to have a higher threat level.

Viewing and Configuring RAPIDS Rules

To view the RAPIDS rules that are currently configured on AWMS, navigate to the RAPIDS > Rules page

(Figure 135). Table 105 defines the content of the RAPIDS

> Rules page.

Figure 135 R

APIDS > Rules Page Illustration

Score of 2 Indicates any device in which the OUI belongs to a manufacturer that produces wireless (802.11) equipment.

Score of 3 Indicates that the OUI matches a

block that contains APs from vendors in the Enterprise and SOHO market.

Score of 4 Indicates that the OUI matches a

block that belonged to a manufacturer that produces SOHO access points.

Table 105 RAPIDS > Rules Page

Field Description

Default Classification Sets the classification that a rogue device receives when it does not match any rules.

Add New

RAPIDS

Classification Rule

Click this button to create a RAPIDS classification rule.

Rule Name Displays the name of any rule that has been configured. Rule names should be descriptive and

should convey the core purpose for which it was created.

Classification Displays the classification that devices receive if the

y meeting the rule criteria.

Threat Level Displays the numeric threat level for the rogue device that pertains to the rule. Refer to “Rogue

Device Threat Level” on page206 for additional information.

Enabled Displays the status of the rule, whether enabled or disabled.

Table 104 Device OUI Scores

Score Description

1 2 ... 201 202 203 204 205 206 207 208 209 210 211 ... 333 334

Sin comentarios

Dell PowerConnect W-Airwave 7.1 Manual de usuario Pagina 206