Siemens SCALANCE W1750D UI, Руководство по настройке

Страница: 441 / 570

SCALANCE W1750D UI
Configuration Manual, 02/2018, C79000-G8976-C451-02
441
Intrusion Detection
27
The Intrusion Detection System (IDS) is a feature that monitors the network for the presence
of unauthorized APs and clients. It also logs information about the unauthorized APs and
clients, and generates reports based on the logged information.
The IDS feature in the SCALANCE W network enables you to detect rogue APs, interfering
APs, and other devices that can potentially disrupt network operations.
This chapter describes the following procedures:
● Detecting and Classifying Rogue APs
● OS Fingerprinting
● Configuring Wireless Intrusion Protection and Detection Levels
● Configuring IDS
27.1 Detecting and Classifying Rouge APs
A rogue AP is an unauthorized AP plugged into the wired side of the network.
An interfering AP is an AP seen in the RF environment but it is not connected to the wired
network. While the interfering AP can potentially cause RF interference, it is not considered a
direct security threat, because it is not connected to the wired network. However, an
interfering AP may be reclassified as a rogue AP.
To detect the rogue APs, click the IDS link in the SCALANCE W main window. The built-in
IDS scans for access points that are not controlled by the VC. These are listed and classified
as either Interfering or Rogue, depending on whether they are on a foreign network or your
network.
Figure 27-1 Intrusion Detection