D-Link DWS-4026 [616/741] Wids security

ConfiguringAdvancedSettings

D-Link UnifiedWiredandWirelessAccessSystem

November2011 Page616

D‐LinkUWSUserManual

WIDSSecurity

TheD‐LinkUnifiedSwitchWirelessIntrusionDetectionSystem(WIDS)canhelpdetectintrusionattemptsinto

thewirelessnetworkandtakeautomaticactionstoprotectthenetwork.

WIDSAPConfiguration

TheWIDSAPConfigurationpageallowsyoutoactivateordeactivatevariousthreatdetectiontestsandset

threatdetectionthresholdsinordertohelpdetectrogueAPsonthewirelessnetwork.Thesechangescanbe

donewithoutdisruptingnetworkconnectivity.Sincesomeoftheworkisdonebyaccesspoints,theswit

ch

needstosendmessagestotheAPstomodifyitsWIDSoperationalproperties.

ManyofthetestsarefocusedonidentifyingAPsthatareadvertisingmanagedSSIDs,butarenotinfact

managedAPs.DetectingsuchanAPmeansthatanetworkiseithermiss‐configuredorthatahackersetupa

hon

eypotAPintheattempttocollectpasswordsorothersecureinformation.

Althoughoperationalmoderadioscandetectmostthreat s,thesentryradiosdetectthethreatsfaster,

especiallywhenapotentialrogueisoperatingonadifferentchannelfromanyofthemanagedAPradios.The

numberofdeploy

edsentryradiosshouldbesufficienttoprovidecoveragebyonesentryradioinevery

geographicallocationwithinthenetwork.Adensersentrydeploymentmaybedesirableinordertoimprove

rogueorinterferersignaltriangulation.

Figure396:WIDSAPConfiguration

Note:TheclassificationsettingsontheWIDSAPConfigurationpagearepartoftheglobal

configurationontheswitchandmustbemanuallypushedtootherswitchesinordertosynchronize

thatconfiguration.