DWC-2000 User Manual

Loading ...

D-Link DWC-2000 User Manual 67

Section 6 - Securing Your Network

WIDS

The Wireless Intrusion Detection System (WIDS) can help detect intrusion attempts into the wireless network

and take automatic actions to protect the network.

Congure AP WIDS Settings

Path: Wireless > General > WIDS > AP WIDS Security

The WIDS AP Conguration page allows you to activate or deactivate various threat detection tests and set threat

detection thresholds in order to help detect rogue APs on the wireless network. These changes can be done

without disrupting network connectivity. Since some of the work is done by access points, the controller needs

to send messages to the APs to modify its WIDS operational properties.

Note: The classication settings on the WIDS AP Conguration page are part of the global conguration on the

controller and must be manually pushed to other controllers in order to synchronize that conguration.

Many of the tests are focused on identifying APs that are advertising managed SSIDs, but are not in fact managed

APs. Detecting such an AP means that a network is either miss‐congured or that a hacker set up a honeypot AP

in the attempt to collect passwords or other secure information.

Although operational mode radios can detect most threats, the sentry radios detect the threats faster, especially

when a potential rogue is operating on a dierent channel from any of the managed AP radios. The number

of deployed sentry radios should be sucient to provide coverage by one sentry radio in every geographical

location within the network. A denser sentry deployment may be desirable in order to improve rogue or interferer

signal triangulation.

To congure WIDS AP:

1. Go to Wireless > General > WIDS > AP WIDS Security tab.

Loading ...

D-Link DWC-2000 Wireless Controller