User`s guide

What’s Next?
RoamAbout Switch Manager User’s Guide 8-17
• Rogue—RadiosusecountermeasuresagainstdevicesclassifiedbyMSSasrogues,butdo
notusecountermeasuresagainstdevicesclassifiedbyMSSasinterferingdevices.
• Configured—Causesradiostoattackonlydevicesspecifiedintheattacklistonthe
RoamAboutSwitch(on‐demandcountermeasures).Whenthisoptionisused,devices
foundtoberogues
byothermeans,suchaspolicyviolationsorbydeterminingthatthe
deviceisprovidingconnectivitytothewirednetwork,arenotattacked.
13. Todisableactivescanningforroguedevices,deselectEnableActiveScan.
Whenactivescanisenabled,radiossendprobeanyrequests(proberequestswithanullSSID
name),
tosolicitproberesponsesfromotheraccesspoints.Radiosalsopassivelyscanby
listeningforbeaconsandproberesponses.Whenactivescanisdisabled,radiosperform
passivescanningonly.
14. ClickFinishtosavethechangesandclosethewizard.
Verifying Countermeasures Are Being Taken Against the Rogue
Toverifythatcountermeasuresarebeingtakenagainsttherogue:
1. ClickontheAlarmsoptioninthemainRASMtoolbar.
2. Selecttherogueinthealarmlist.Thealarmdetailspanelfortherogueshowscountermeasure
activity.
Ifcountermeasuresstart,stop,andstartagain, theroguemayhaveleftthearea,then
returned,
oranotherAPinthecoverageareamayhavetakenovercountermeasureactivitiesfromthe
lastAPtodetecttherogue.
What’s Next?
Afteryouhavemanagedanyexistingfaults,youcancontinuetomonitoryournetwork.
•Forinformationaboutmonitoringyournetwork,referto“ManagingandMonitoringYour
Network”onpage 7‐1.
Caution: Countermeasures affect wireless service on a radio. When an AP radio is
sending countermeasures, the radio is disabled for use by network traffic, until the radio
finishes sending the countermeasures.