Configuring a Wireless Rogue Access Point MAC Address Threshold
- Last Updated: August 28, 2024
- 5 minute read
The threshold will alert when any MAC addresses listed here broadcast SSID's in the given time interval.
Track devices using banned MAC addresses that behave like access points and broadcast SSIDs to wireless clients. See access point masquerading and SSID collisions between new and obsoleted access points, IoT devices using private networks, and more.
Configure a Wireless Rogue Access Point MAC Addresses threshold:
- Name. Used in the Threshold library and the title on the Alert Center Dashboard.
- Notification Policy. (Optional) Select the notification policy to apply to this threshold. The policy initiates notifications when an item is outside the configured threshold limits.
- Threshold Check Interval. Enter a time interval for Alert Center to check the WhatsUp Gold database for items that are out of the threshold limits.
Automatically resolve items no longer out of threshold. Select this option if you want Alert Center to automatically resolve items when they return to the value within the threshold limit.
注: Notification policies are optional for most thresholds. If you do not select a
notification policy, no notifications are generated for the threshold, but a dashboard
report listing the out of threshold items still appears on the Alert Center Home
page.
Add Condition Rules:
- Duration. Compile a running total of all unrecognized SSID events during this time range or "rolling interval."
- Banned MAC Addresses. Enter any rogue MAC addresses separated by commas.
选择应用的设备
- 应用到所有设备。默认情况下,阈值会监控所有适用的主机。
排除设备。选择以构建或应用排除列表。 - 单击将此阈值应用于特定设备以选择应用阈值的主机。 注: 配置阈值检查间隔时间时,请设置成比趋势相关阈值(例如使用率)采样间隔时间更长。配置状况检查临界值时,请将其配置成与取样间隔时间相同(或类似)。