User Manual Part 6

Administration Tab
SpectraGuard® Enterprise User Guide
273
A policy is collection of SSID templates attached to that location. You can apply an SSID template from the parent or
create it locally; if you wish to customize the WLAN policy for that location. Other templates may be available to be
attached but are not part of the WLAN policy and will not be used for AP classification.
The SSID Templates section lists the SSID templates that are available at a particular location. You must apply the
templates from the available list to create the WLAN policy at that location. A new AP or an existing Authorized AP
is compared against the applied SSID templates to determine if it is a Rogue or Mis-configured AP. The SSID
templates created at other locations can be applied to a selected location but cannot be edited or deleted. The edit and
delete operations are possible only at the location where the template is created. The table shows the following
details:
 SSID: Name of the SSID
 Guest SSID?: Indicates if it is a Guest SSID
 Template Name: Name of the SSID template
 Apply Here?: Enables you to apply the SSID template to the selected location. New and existing Authorized
APs are evaluated against all applied SSID templates to determine if they are Rogue or Mis-configured.
 : Click these icons to perform the following:
 Copy the selected SSID template to another location.
 Edit the SSID template. This option is enabled only at the location where the template was created.
 View the SSID template.
 Delete the template. This option is enabled only at the location where the template was created and only
if the template is not applied at any other child locations of the location where it was created.
Determining Policy Compliance
An AP is considered as being compliant to the Authorized WLAN Policy if:
 It is not connected to a No Wi-Fi network for its location
 Its SSID matches with one of the templates attached at that location
 Is connected to one of the networks specified in that template
 Conforms to the other settings in that template (except the Authentication Framework, as this setting is not a
property of the AP itself but of the backend authentication system)
Note: If the template specifies certain allowed AP capabilities (such as Turbo, 802.11n, and so on.), the AP may or
may not have those capabilities. However, if a capability is not selected, the AP must not have that capability to be
considered as compliant.
With location-based policies, you can specify (or attach) different sets of SSID templates for different locations.
However, you cannot attach more than one template with the same SSID at any one location.