User's Manual

You can configure the following options:
l Infrastructure Detection Policies — Specifies the policy for detecting wireless attacks on APs.
l Client Detection Policies — Specifies the policy for detecting wireless attacks on clients.
l Infrastructure Protection Policies — Specifies the policy for protecting APs from wireless attacks.
l Client Protection Policies — Specifies the policy for protecting clients from wireless attacks.
l Containment Methods — Prevents unauthorized stations from connecting to your Cloud Network Manager
network.
Each of these options contains several default levels that enable different sets of policies. An administrator can
customize enable or disable these options accordingly.
The detection levels can be configured using the IDS pane. The following levels of detection can be configured in
the WIP Detection page:
l Off
l Low
l Medium
l High
The following table describes the detection policies enabled in the Infrastructure Detection Custom settings field.
Detection level Detection policy
Off Rogue Classification
Low
l Detect AP Spoofing
l Detect Windows Bridge
l IDS Signature — Deauthentication Broadcast
l IDS Signature — Deassociation Broadcast
Medium
l Detect Adhoc networks using VALID SSID — Valid
SSID list is auto-configured based on AP
configuration
l Detect Malformed Frame — Large Duration
High
l Detect AP Impersonation
l Detect Adhoc Networks
l Detect Valid SSID Misuse
l Detect Wireless Bridge
l Detect 802.11 40MHz intolerance settings
l Detect Active 802.11n Greenfield Mode
l Detect AP Flood Attack
l Detect Client Flood Attack
l Detect Bad WEP
l Detect CTS Rate Anomaly
l Detect RTS Rate Anomaly
l Detect Invalid Address Combination
l Detect Malformed Frame — HT IE
l Detect Malformed Frame — Association Request
l Detect Malformed Frame — Auth
l Detect Overflow IE
l Detect Overflow EAPOL Key
l Detect Beacon Wrong Channel
l Detect devices with invalid MAC OUI
Table 17: Infrastructure detection policies
The following table describes the detection policies enabled in the Client Detection Custom settings field.
HP Cloud Network Manager | User Guide Wireless configuration | 44