User's Guide

AirTight Management Console Configuration
87
Configure Event Notification
The occurrence of certain events needs to be notified to external entities like Syslog, SNMP, Arcsight and
OPSEC. This configuration is done using the Configuration->Events->Configuration option.
Different types of events occur when the WLAN is functional. These are classified as security,
performance and system events by AirTight Management Console.
Each of these types is listed in the respective tab on the Configuration page.
Security events indicate security vulnerability or breach in your network. Security events are further
classified as follows.
x Misconfigured AP events
x DoS events
x Reconnaissance events
x Rogue AP events
x Man-in-the-middle events
x Ad hoc events
x Cracking events
x MAC spoofing events
x Misbehaving clients events
x Prevention events
Performance events indicate problems in the wireless network. Performance events are further classified
as follows.
x Coverage events
x Configuration events
x Bandwidth events
x Interference events
System events indicate the system health. System events are further classified as follows.
x Troubleshooting events
x Sensor events
x Server events
There are multiple events under each of the security, performance and system event sub-categories.
Some events need to be displayed on the console when they occur. Users or administrators need to be
notified by email when certain events occur. Configure the settings for the events occurring in AirTight
Management Console using the Configuration page.
Do either or all of the following to configure settings for individual events in either of the tabs Security,
Performance, and System, based on your requirement.
x Select the Display check box that corresponds to the event that you want to appear on the
Events page.
x Select the Email check box that corresponds to the event for which you want to send e-mail
notifications to users configured under Configuration->Events->Email Recipients.
x Select the Notify check box that corresponds to the event for which you want notifications sent to
external agents such as SNMP, Syslog, ArcSight, and OPSEC.
x Select the Vulnerability check box that corresponds to the event that makes the WLAN
vulnerable. If any of these events occur, the Security Status widget on the Dashboard displays
the status as Vulnerable.
x Select the option High, Medium, or Low based on the severity of each event.