D-Link DWS-4026 [619/741] Wids client configuration

ConfiguringAdvancedSettings

D-Link UnifiedWiredandWirelessAccessSystem

November2011 Page619

D‐LinkUWSUserManual

WIDSClientConfiguration

TheD‐LinkUnifiedSwitchWirelessIntrusionDetectionSystem(WIDS)canhelpdetectintrusionattemptsinto

thewirelessnetworkandtakeautomaticactionstoprotectthenetwork.Thesettingsyouconfigureonthe

WIDSClientConfigurationpagehelpdeterminewhetheradetectedclientisclassifiedasarogue.Clients

classifiedasro

guesareconsideredtobeathreattonetworksecurity.

Aspartofthegeneralassociationandauthenticationprocess,wirelessclientssend802.11management

messagestoAPs.TheWIDSfeaturetracksthefollowingtypesofmanagementmessagesthateachdetected

clientsends:

•ProbeRequests

•802.11AuthenticationRequests.

•802.11De‐AuthenticationRequests.

Inordertohe

lpdeterminewhetheraclientisposingathreattothenetworkbyfloodingthenetworkwith

managementtraffic,thesystemkeepstrackofthenumberoftimestheAPreceivedeachmessagetypeand

thehighestmessageratedetectedinasingleRFScanreport.OntheWIDSClien

tConfigurationpage,youcan

setthresholdsforeachtypeofmessagesent,andtheAPsmonitorwhetheranyclientsexceedthosethresholds

ortests.

Figure397:WIDSClientConfiguration

Note:TheclassificationsettingsontheWIDSClientConfigurationpagearepartoftheglobal

configurationontheswitchandmustbemanuallypushedtootherswitchesinordertosynchronize

thatconfiguration.