User Manual Part 2

Devices Tab
SpectraGuard® Enterprise User Guide
51
If a Sensor is available, the system automatically selects a defending Sensor for an Authorized AP.
The Quarantine status of the AP then appears as Quarantined.
If a Sensor is not currently available, the Quarantine status of the AP appears as Quarantine
Pending. As soon as a Sensor is available, it starts defending the AP. The AP may appear as
Quarantine Pending if it is not currently an active threat (the AP is inactive). The system keeps
quarantining the AP until you manually remove it from quarantine.
Remove from Quarantine: Available only if the AP is manually Quarantined, this option enables you to
stop quarantine on the AP, thereby enabling wireless communication.
Start DoS Prevention: Available only if the system has determined an AP to be under a DoS attack and DoS
countermeasures have not already been started. This option enables you to start DoS countermeasure on a
selected AP.
Stop DoS Prevention: Available only if DoS Prevention is initiated on the AP, this option enables you to
manually terminate DoS countermeasure on a selected AP.
Enable Auto-quarantine: Enabled by default, this option ensures that the system automatically quarantines
an AP, thereby honoring the specified Intrusion Prevention policy.
Disable Auto-quarantine: This option ensures that the system does not automatically quarantine an AP
(regardless of the policies).
Note: The menu items Block Wired Port, Mark Port as Unblocked, Move to Quarantine, Start DoS Prevention, and
Enable Auto-quarantine are not visible only if the WIDS license is applied.
Add to Banned List: Enables you to add the selected AP to the Banned List to prevent the AP from
engaging in wireless communication.
Remove from Banned List: Available only if the AP is already in the Banned List, this option enables
you to remove the selected AP from the Banned List.
Start Troubleshooting: Opens the Troubleshoot tab of the AP Device dialog, which allows you to
start a troubleshooting session in either Packet Level Mode or Event Level Mode. Click <Start
Troubleshooting> to start troubleshooting.
Stop Troubleshooting: Available only if a troubleshooting session is in progress, this option enables
manual termination of the session.
Note: From SGE 6.2 release onwards, it is possible to start/ stop quarantine and troubleshooting on individual BSSID of the
Merged AP.
Split: Enables you to split the merged APs.
Mark as Known: Enables you to mark an External AP as Known External AP. When an AP is
marked as Known External AP, the row color changes to dark blue.
Mark as Unknown: Enables you to mark a Known External AP as Unknown External AP. An
Unknown External AP’s row color is light blue.
Delete: Enables you to delete a selected AP.
Change Location: Opens the Location Tag dialog that enables you to:
View the complete list of locations
Change the location of the selected AP (see Manual Location Tagging)
Move to…: Enables you to categorize the AP in your network by moving it to the Authorized,
Rogue, or External folder.
Note: The menu items Block Wired Port, Mark Port as Unblocked, and Move to Quarantine appear only in the AP
context-sensitive menu on the Devices screen and not in the AP context-sensitive menu on the Quarantined Devices dialog.
All other items are available on both the menus.
Note: Details, Performance, Events, Locate, Move to/Remove from Quarantine, Start/Stop DoS Prevention, and
Start/Stop Troubleshooting are the only the menu items that appear in AP context-sensitive for the BSSIDs of the Merged
APs as shown in the figure below.

Summary of content (70 pages)