Detection Level
Detection Policy
l
Detect Client Flood Attack
l
Detect Bad WEP
l
Detect CTS Rate Anomaly
l
Detect RTS Rate Anomaly
l
Detect Invalid Address Combination
l
Detect Malformed Frame— HT IE
l
Detect Malformed Frame— Association
Request
l
Detect Malformed Frame— Auth
l
Detect Overflow IE
l
Detect Overflow EAPOL Key
l
Detect Beacon Wrong Channel
l
Detect devices with invalid MAC OUI
The following table describes the detection policies that are enabled in the Client Detection
Custom settings
field.
Detection Level
Detection Policy
Off
All detection policies are disabled.
Low
l
Detect Valid Station Misassociation
Medium
l
Detect Disconnect Station Attack
l
Detect Omerta Attack
l
Detect FATA-Jack Attack
l
Detect Block ACK DOS
l
Detect Hotspotter Attack
l
Detect unencrypted Valid Client
l
Detect Power Save DOS Attack
High
l
Detect EAP Rate Anomaly
l
Detect Rate Anomaly
l
Detect Chop Chop Attack
l
Detect TKIP Replay Attack
l
IDS Signature— Air Jack
l
IDS Signature— ASLEAP
Table 26
- Client Detection Policies
Three levels of detection can be configured in the WIP Protection page—
Off
,
Low
, and
High
(as
shown in
Figure 128
)
.
Dell PowerConnect W-Series Instant Access Point
6.2.0.0-3.2.0.0
|
User Guide
179
|
Intrusion Detection System
Summary of Contents for PowerConnect B-RX4
Page 1: ...Dell PowerConnect W Series Instant Access Point 6 2 0 0 3 2 0 0 User Guide ...
Page 228: ...228 AirGroup Dell PowerConnect W Series Instant Access Point 6 2 0 0 3 2 0 0 User Guide ...
Page 248: ...248 Monitoring Dell PowerConnect W Series Instant Access Point 6 2 0 0 3 2 0 0 User Guide ...