User guide

Summit WM Series WLAN Switch and Altitude Access Point Software Version 4.1 User Guide
179
8 Working with the Summit WM Series Spy
This chapter describes Summit spy concepts, including:
● Summit spy overview
● Enabling the Analysis and data collector engines
● Running Summit Spy scans
● Analysis engine overview
● Working with Summit spy scan results
● Working with friendly APs
● Viewing the Summit spy list of third-party APs
● Maintaining the Summit spy list of APs
● Viewing the Scanner Status report
Summit spy overview
The Summit spy is a mechanism that assists in the detection of rogue APs. Summit spy functionality
does the following:
Altitude AP:
● Runs a radio frequency (RF) scanning task.
● Alternating between scan functions, providing its regular service to the wireless devices on the
network.
Summit WM series switch:
● Runs a data collector application that receives and manages the RF scan messages sent by the
Altitude AP. RF data collector data includes lists of all connected Altitude APs, third-party APs, and
the RF scan information that has been collected from the Altitude APs selected to perform the scan.
● Runs an Analysis Engine that processes the scan data from the data collector through algorithms that
make decisions about whether any of the detected APs or clients are rogue APs or are running in an
unsecure environment (for example, ad-hoc mode).
NOTE
In a network with more than one Summit WM series switch, it is not necessary for the data collector to be
running on the same controller as the Analysis Engine. One controller can be a dedicated Analysis Engine while
the other controllers run data collector functionality. No more than one Analysis Engine can be running at a time.
You must ensure that the controllers are all routable.