Monitoring Status and Statistics
D-Link Unified Wired and Wireless Access System
Oct. 2015 Page 521
D-Link UWS User Manual
Figure 342: WIDS Client Rogue Classification
The following table shows information about the security test performed on the detected client.
Command Buttons
The page includes the following button:
Table 310: WIDS Client Rogue Classification
Field Description
MAC Address The Ethernet MAC address of the detected wireless client.
Test Description Identifies the tests that were performed, which includes the following:
• Client is denied access in the Known Client Database.
• Client exceeds the configured rate for transmitting 802.11 authentication
requests.
• Client exceeds the configured rate for transmitting probe requests.
• Client exceeds the configured rate for transmitting de-authentication requests.
• Client exceeds the maximum number of failing authentications.
• Known Client is authenticated with an Unknown AP.
• Client OUI is not in the OUI Database
Condition Detected Indicates whether the result of the test was true or false.
Reporting MAC
Address
Identifies the MAC address of the AP that reported the test results.
Radio Identifies which physical radio on the reporting AP was responsible for the test
results.
Test Config Shows whether this test is configured to report rogues. Each test can be globally
enabled or disabled to report a positive result as a rogue.
Test Result Shows whether this test reported the device as rogue. In some cases the test may
report a positive result, be enabled, but not report the device as rogue because the
device is allowed to operate in this mode.
Time Since First Report Time stamp indicating how long ago this test first detected the condition.
Time Since Last Report Time stamp indicating how long ago this test last detected the condition.