You can configure the following options:

•Infrastructure Detection Policies — Specifies the policy for detecting wireless attacks on APs.

•Client Detection Policies — Specifies the policy for detecting wireless attacks on clients.

•Infrastructure Protection Policies — Specifies the policy for protecting APs from wireless attacks.

•Client Protection Policies — Specifies the policy for protecting clients from wireless attacks.

•Containment Methods — Prevents unauthorized stations from connecting to your Cloud Network Manager network.

Each of these options contains several default levels that enable different sets of policies. An administrator can customize enable or disable these options accordingly.

The detection levels can be configured using the IDS pane. The following levels of detection can be configured in the WIP Detection page:

•Off•Low•Medium•High

The following table describes the detection policies enabled in the Infrastructure Detection Custom settings field.

Table 17: Infrastructure detection policies

Detection level

Detection policy

 

 

Off

Rogue Classification

 

 

 

Low

•

Detect AP Spoofing

 

•

Detect Windows Bridge

 

• IDS Signature — Deauthentication Broadcast

 

• IDS Signature — Deassociation Broadcast

 

 

 

Medium

•

Detect Adhoc networks using VALID SSID — Valid

 

 

SSID list is auto-configured based on AP

 

 

configuration

 

• Detect Malformed Frame — Large Duration

 

 

 

High

•

Detect AP Impersonation

 

•

Detect Adhoc Networks

 

• Detect Valid SSID Misuse

 

•

Detect Wireless Bridge

 

• Detect 802.11 40MHz intolerance settings

 

• Detect Active 802.11n Greenfield Mode

 

• Detect AP Flood Attack

 

• Detect Client Flood Attack

 

•

Detect Bad WEP

 

• Detect CTS Rate Anomaly

 

• Detect RTS Rate Anomaly

 

• Detect Invalid Address Combination

 

• Detect Malformed Frame — HT IE

 

• Detect Malformed Frame — Association Request

 

• Detect Malformed Frame — Auth

 

•

Detect Overflow IE

 

• Detect Overflow EAPOL Key

 

• Detect Beacon Wrong Channel

 

• Detect devices with invalid MAC OUI

 

 

 

The following table describes the detection policies enabled in the Client Detection Custom settings field.

HP Cloud Network Manager User Guide

Wireless configuration 44