A SERVICE OF

logo

540 Rogue Detection and Countermeasures
320657-A
Figure 21: Rogue Detection Algorithm
AP radio detects wireless packet.
No
Ye s
Ye s
Source MAC in
SSID in Permitted
Ignore List?
Device is not a threat.
SSID List?
Ye s
OUI in Permitted
Vendor List?
No
Source MAC in
Attack List?
No
Generate an alarm.
Classify device as a rogue.
No
Ye s
Issue countermeasures
(if enabled).
No
Rogue classification
Ye s
algorithm deems the
device to be a rogue?