Chapter 11 Rogue AP

Figure 81 “Honeypot” Attack

11.3 Configuring Rogue AP Detection

You can configure the ZyXEL Device to detect rogue IEEE 802.11a (5 GHz - NWA-3160 only) and IEEE 802.11b/g (2.4 GHz) APs.

If you have more than one AP in your wireless network, you must also configure the list of “friendly” APs. Friendly APs are the other wireless access points in your network, as well as any others that you know are not a threat (those from neighboring networks, for example). It is recommended that you export (save) your list of friendly APs often, especially if you have a network with a large number of access points.

You can choose to scan for rogue APs manually, or to have the ZyXEL Device scan automatically at pre-defined intervals.

You can also set the ZyXEL Device to email you immediately when a rogue AP is detected (see Chapter 15 on page 175 for information on how to set up email logs).

11.3.1 Rogue AP: Configuration

Click ROGUE AP > Configuration. The following screen appears.

 

137

ZyXEL NWA-3160 Series User’s Guide