TOR-SS300ATC60SpectraGuard Access Point / Sensor

User Guide SpectraGuard ® Enterprise An AirTight ® Product A Comprehensive Wireless IPS and Performance Management Solution Version 6.7 Update 2 AirTight ® Networks, Inc., 339 N. Bernardo Avenue, # 200, Mountain View, CA 94043 http://www.airtightnetworks.com Product documentation is being enhanced continuously based on customer feedback. To obtain a latest copy of this document, visit http://www.airtightnetworks.com/home/support.html This page has been intentionally left blank. SpectraGuard® Enterprise User Guide 1 END USER LICENSE AGREEMENT Please read the End User License Agreement before installing SpectraGuard® Enterprise. The End User License Agreement is available at the following location -.http://www.airtightnetworks.com/fileadmin/pdf/AirTight- EULA.pdf. Installing SpectraGuard® Enterprise constitutes your acceptance of the terms and conditions of the End User License Agreement. DISCLAIMER THE INFORMATION IN THIS GUIDE IS SUBJECT TO CHANGE WITHOUT ANY PRIOR NOTICE. AIRTIGHT® NETWORKS, INC. IS NOT LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, OR ANY OTHER PECUNIARY LOSS) ARISING OUT OF THE USE OF OR INABILITY TO USE THIS PRODUCT. THIS PRODUCT HAS THE CAPABILITY TO BLOCK WIRELESS TRANSMISSIONS FOR THE PURPOSE OF PROTECTING YOUR NETWORK FROM MALICIOUS WIRELESS ACTIVITY. BASED ON THE POLICY SETTINGS, YOU HAVE THE ABILITY TO SELECT WHICH WIRELESS TRANSMISSIONS ARE BLOCKED AND, THEREFORE, THE CAPABILITY TO BLOCK AN EXTERNAL WIRELESS TRANSMISSION. IF IMPROPERLY USED, YOUR USAGE OF THIS PRODUCT MAY VIOLATE US FCC PART 15 AND OTHER LAWS. BUYER ACKNOWLEDGES THE LEGAL RESTRICTIONS ON USAGE AND UNDERSTANDS AND WILL COMPLY WITH US FCC RESTRICTIONS AS WELL AS OTHER GOVERNMENT REGULATIONS. AIRTIGHT IS NOT RESPONSIBLE FOR ANY WIRELESS INTERFERENCE CAUSED BY YOUR USE OF THE PRODUCT. AIRTIGHT AND ITS AUTHORIZED RESELLERS OR DISTRIBUTORS WILL ASSUME NO LIABILITY FOR ANY DAMAGE OR VIOLATION OF GOVERNMENT REGULATIONS ARISING FROM YOUR USAGE OF THE PRODUCT, EXPECT AS EXPRESSLY DEFINED IN THE INDEMNITY SECTION OF THIS DOCUMENT. LIMITATION OF LIABILITY AirTight will not be liable to customer or any other party for any indirect, incidental, special, consequential, exemplary, or reliance damages arising out of or related to the use of SpectraGuard® Enterprise under any legal theory, including but not limited to lost profits, lost data, or business interruption, even if AirTight knows of or should have known of the possibility of such damages. Regardless of the cause of action or the form of action, AirTight’s total cumulative liability for actual damages arising out of or related to the use of SpectraGuard® Enterprise will not exceed the price paid for SpectraGuard® Enterprise. Copyright © 2003–2012 AirTight® Networks, Inc. All Rights Reserved. AirTight® Networks, The AirTight logo, and SpectraGuard® are registered trademarks of AirTight® Networks. All other products and services are trademarks, registered trademarks, and service marks or registered service marks of their respective owners. This product contains components from Open Source software. These components are governed by the terms and conditions of the GNU Public License. To read these terms and conditions visit http://www.gnu.org/copyleft/gpl.html. This product is protected by one or more of U.S. patent Nos. 7,002,943, 7,154,874, 7,216,365, 7,333,800, 7,333,481, 7,339,914, 7,406,320, 7,440,434, 7,447,184, 7,496,094, 7,536,723, 7,558,253, 7,710,933, 7,751,393, 7,764,648, 7,804,808, 7,856,209, 7,856,656, 7,970,894, 7,971,253, 8,032,939; Australian patent No. 200429804; U.K. patent No. 2410154, Japanese patent No. 4639195 and any others listed at www.airtightnetworks.com/patents. More patents pending. i FEDERAL COMMUNICATIONS COMMISSION INTERFERENCE STATEMENT (Section 15.105) This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: -Reorient or relocate the receiving antenna. -Increase the separation between the equipment and receiver. -Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. -Consult the dealer or an experienced radio/ TV technician for help. CAUTION (Section 15.21) Any changes or modifications not expressly approved by the guarantee of this device could void the user's authority to operate the equipment. Labeling requirements (Section 15.19) (a) (3) This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. RF exposure warning This equipment must be installed and operated in accordance with provided instructions and the antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter. End-users and installers must be provide with antenna installation instructions and transmitter operating conditions for satisfying RF exposure compliance. This devi…

Text truncated - open the document above for the full version.

Devices Tab SpectraGuard® Enterprise User Guide 51  If a Sensor is available, the system automatically selects a defending Sensor for an Authorized AP. The Quarantine status of the AP then appears as Quarantined.  If a Sensor is not currently available, the Quarantine status of the AP appears as Quarantine Pending. As soon as a Sensor is available, it starts defending the AP. The AP may appear as Quarantine Pending if it is not currently an active threat (the AP is inactive). The system keeps quarantining the AP until you manually remove it from quarantine.  Remove from Quarantine: Available only if the AP is manually Quarantined, this option enables you to stop quarantine on the AP, thereby enabling wireless communication.  Start DoS Prevention: Available only if the system has determined an AP to be under a DoS attack and DoS countermeasures have not already been started. This option enables you to start DoS countermeasure on a selected AP.  Stop DoS Prevention: Available only if DoS Prevention is initiated on the AP, this option enables you to manually terminate DoS countermeasure on a selected AP.  Enable Auto-quarantine: Enabled by default, this option ensures that the system automatically quarantines an AP, thereby honoring the specified Intrusion Prevention policy.  Disable Auto-quarantine: This option ensures that the system does not automatically quarantine an AP (regardless of the policies). Note: The menu items Block Wired Port, Mark Port as Unblocked, Move to Quarantine, Start DoS Prevention, and Enable Auto-quarantine are not visible only if the WIDS license is applied.  Add to Banned List: Enables you to add the selected AP to the Banned List to prevent the AP from engaging in wireless communication.  Remove from Banned List: Available only if the AP is already in the Banned List, this option enables you to remove the selected AP from the Banned List.  Start Troubleshooting: Opens the Troubleshoot tab of the AP Device dialog, which allows you to start a troubleshooting session in either Packet Level Mode or Event Level Mode. Click <Start Troubleshooting> to start troubleshooting.  Stop Troubleshooting: Available only if a troubleshooting session is in progress, this option enables manual termination of the session. Note: From SGE 6.2 release onwards, it is possible to start/ stop quarantine and troubleshooting on individual BSSID of the Merged AP.  Split: Enables you to split the merged APs.  Mark as Known: Enables you to mark an External AP as Known External AP. When an AP is marked as Known External AP, the row color changes to dark blue.  Mark as Unknown: Enables you to mark a Known External AP as Unknown External AP. An Unknown External AP’s row color is light blue.  Delete: Enables you to delete a selected AP.  Change Location: Opens the Location Tag dialog that enables you to:  View the complete list of locations  Change the location of the selected AP (see Manual Location Tagging)  Move to...: Enables you to categorize the AP in your network by moving it to the Authorized, Rogue, or External folder. Note: The menu items Block Wired Port, Mark Port as Unblocked, and Move to Quarantine appear only in the AP context-sensitive menu on the Devices screen and not in the AP context-sensitive menu on the Quarantined Devices dialog. All other items are available on both the menus. Note: Details, Performance, Events, Locate, Move to/Remove from Quarantine, Start/Stop DoS Prevention, and Start/Stop Troubleshooting are the only the menu items that appear in AP context-sensitive for the BSSIDs of the Merged APs as shown in the figure below. Devices Tab SpectraGuard® Enterprise User Guide 52 Merged AP Context-Sensitive Menu for the BSSIDs of the Merged APs AP Details Dialog To open AP Details dialog, right-click an AP row on the Devices screen, and select the Details menu item. The AP Details dialog has the following tabs: Properties, Events, Performance, Troubleshoot, and Locate. The Properties tab is displayed by default. Devices Tab SpectraGuard® Enterprise User Guide 53 AP Properties Tab Fields in the AP Properties Tab The AP Properties tab enables you to view and edit the properties of an AP.  MAC/Protocol: Select the MAC/Protocol from the drop-down list to display the relevant information of the selected BSSID. MAC/Protocol field appears only for merged APs. The Primary BSSID of the AP is shown in bold.  AP Name: Click and specify the name used to identify the AP in the AP Name dialog. Click Save. The new AP name automatically displays in the Device Name field in the header of the AP Details dialog. AP Name Dialog Classification: Specifies the classification of the AP–Authorized, Rogue, External, or Indeterminate. This automatically displays in the Classification field in the header of the AP Details dialog. Click to open the AP Classification dialog. Here, you can change the AP classification to Authorized, Rogue, or External. Click <OK> to move the AP to the selected folder. Devices Tab SpectraGuard® Enterprise User Guide 54 AP Classification Dialog Device Tag: Click to specify text that provides additional information about the AP in the Device Tag dialog; for example, Hawaii Conference Room, Bldg 15 – Cubicle G2, or Executive Area. Click Save to save the device tag. AP Device Tag Dialog  MAC Address: Specifies the unique 48-bit address of the AP/ 802.11 PHY modes used by the AP. MULTIPLE displays, if For All BSSIDs is selected in the MAC/Protocol field.  Location: Enables you to view the name of the AP’s location and the complete list of locations. This automatically displays in the Location field in the header of the AP Details dialog.  Click to open the Location Tag dialog. Here, you can view the complete list of locations and choose a location for the AP. To view the list of locations, you must first set up your list of locations on the Locations screen as explained in the section (see Working with Location Folders and Location Nodes). AP Locat…

Text truncated - open the document above for the full version.

Locations Tab SpectraGuard® Enterprise User Guide 121 Placing Locations on a Location Folder with an Attached Image The system enables you to place locations on a location folder that has an attached image. This helps you identify the physical position of each of the locations. The locations placed on the attached image are indicated by colored circles. A green circle indicates that the location is Secure, while a red circle indicates that the location is Vulnerable. Use the following steps to place locations on the attached image and view their details: 1. In the Location tree, select a location folder. 2. Under Available Locations, drag and drop the required locations on the attached image. 3. To view details about the location hold the mouse cursor over the colored circle. 4. To go to a particular location placed on the image, do one of the following:  Click the colored circle representing the location.  Point to the colored circle representing the location, then right-click and select Jump to this location. Note: You can traverse to a particular location node by following step 4 until you reach the destination location node. Placing Locations on a Location Folder with an Attached Image and Viewing Details Detaching an Image Use the following steps to detach an image: 1. In the Location tree, select the location from which you wish to detach an image. 2. Do one of the following:  Right-click and from the resulting context-sensitive menu, select Detach Image.  Click the Detach Image from floor icon in the right corner. Locations Tab SpectraGuard® Enterprise User Guide 122 Detaching an Image from a Location 3. Click Yes in the Confirm dialog to remove the selected image. Note: On detaching an image, all the placed locations go back to the Available Locations list. Importing a Planner file into a Location Node The system enables you to specify a layout for each location node using a blank canvas, a layout image, or a .SPM file exported from Planner. Use the following steps to import a Planner file: 1. In the Location tree, select the location node into which you wish to import the .SPM file and then right- click. 2. From the resulting context-sensitive menu, select Import Location. Importing a Location 3. In the Select SpectraGuard Planner (.spm) File dialog, browse to the appropriate Planner exported .SPM file and then click Open. Creating your Layout This section shows you how to place devices on your floor map, view details of the layout, reset your canvas, and edit floor properties. Locations Tab SpectraGuard® Enterprise User Guide 123 Placing APs and Sensors on the Floor map and Viewing Details The system enables you to place APs and Sensors on the floor map to view live RF coverage maps for a location node and perform on-floor location tracking of visible 802.11 devices. Use the following steps to place APs and Sensors on the floor map and view their details: 1. In the Location tree, select a location node. 2. Under Available Devices, select either the APs or the Sensors tab, then drag and drop the APs or Sensors on your floor map. As soon as you drag and drop the APs or Sensors on your floor map, the RF views of the APs or Sensors are displayed. 3. To view details about the AP or Sensor hold the mouse cursor over the appropriate device. 4. Double-clicking the AP or Sensor displays the AP or Sensor Details screen in the Devices tab. Placing APs and Sensors on the Floor map and Viewing Details 5. Right-click the AP or Sensor the following menu items appear.  Delete: Deletes the device  Set Coordinates: Select Set Coordinates to move the device to the specified coordinates. Enter the X and Y Coordinate in the Set Coordinates dialog. Set Coordinates Locations Tab SpectraGuard® Enterprise User Guide 124  Change RF Property: Select RF Property to change the RF properties of the device. In AP RF Properties dialog, select the Interface name from the Interface drop-down list. Enter Transmit Power (mW) and Transmission Calibration Factor (dB). Click Apply and then OK. AP RF Properties dialog  In the Sensor RF Properties dialog select the Interface name from the Interface drop-down list. Enter Reception Calibration Factor (dB). Click Apply and then OK. Sensor RF Properties dialog Setting Coordinates and Deleting Devices from a Floor map The system enables you to set the coordinates of APs and Sensors placed on the floor map for precise positioning. You can delete APs and Sensors from your floor map so that the deleted devices can be placed again on the floor map. Such devices become available under Available Devices. Use the following steps to set the coordinates of a device or delete a device. 1. Right-click an AP/Sensor placed on the floor map. Do one of the following from the resulting menu:  Select Set Coordinates to open a dialog where you can specify the X and Y coordinates of the selected device. To set the coordinates, click OK.  Select Delete to remove the AP/Sensor from the floor map. Resetting your Canvas The system enables you to reset a canvas to revert to a blank canvas. This option removes all folders and location information from a location folder. It removes all device and location information, including the background image and/or any imported Planner file from a location node. All placed devices go back to the Available Devices list. The system retains the original size and the location name in the sub-list of locations. Use the following steps to reset a canvas: 1. In the Location tree, select the location at which you wish to reset the canvas and then right-click. 2. From the resulting context-sensitive menu, select Reset Canvas. 3. Click Yes on the Confirm dialog to reset the canvas. Editing Floor Properties The system enables you to edit the properties of an existing floor map to change its name and dimensions. Use the following steps to edit the floor properties: 1. In the Location tree, select the location node whose properties you wish to edit and then rig…

Text truncated - open the document above for the full version.

Forensics Tab SpectraGuard® Enterprise User Guide 171 Location dialog Note: The first row in the Client based threat displays the Event Time, while rest of the rows displays the Start/End Time of Association. This is valid for all Client based threats, except Ad hoc. Client Based Threat – Prevention Tab Prevention Tab shows the details of the Quarantine status of the association in the Association tab. Forensics Tab SpectraGuard® Enterprise User Guide 172 Client Based Threat Details – Prevention Tab The fields in Prevention Tab are as follows:  Client  AP  Association Start Time  Association End Time  Quarantine: Specifies the action taken on both the devices in the association. Even if one of device is quarantined, the association is Quarantined, else it is Not Quarantined. Click Quarantined, the Quarantine Details dialog opens. Click Not Quarantined, the Not Quarantined Reason dialog opens. C lient Based Threat – Admin Tab Admin Tab shows all the administrator actions taken on the Client during the Event Start Time and Event End Time. Forensics Tab SpectraGuard® Enterprise User Guide 173 Client Based Threat Details – Admin Tab The fields in Admin Tab are as follows:  User: Specifies the name of the user who took action on the threat.  Action: Specifies the action taken by the user for the Client based threat, such as Client added to quarantine, Client name changed.  Time: Specifies the time when the user action was taken Note: Client Based Threat – Misassociation, Unauthorized Association, Bridging Client, and Banned Client have the same fields for the tabs Association, Prevention, and Admin. However Client Based Threat – Ad hoc has some different fields as discussed in the section below. Client Based Threat – Ad hoc Client – Ad hoc Threat displays only all the Clients participating in the Ad hoc connection. To open the Client – Ad hoc Threat Details dialog, select the Client – Ad hoc threat row on the Forensics screen,and click Details. The Client – Ad hoc Threat Details dialog opens. Forensics Tab SpectraGuard® Enterprise User Guide 174 Client – Ad hoc Threat Details dialog Note: The Client – Ad hoc Threat Details dialog does not have All Device Filter icon Client Ad hoc Threat – Association tab The fields in Association Tab are as follows:  Client  Association Start Time  Association End Time  Locate: Click Locate, the Location dialog opens. In this case only the Client name appears in the Locate Device drop down list. Select Start Time of Ad hoc Connection and End Time of Ad hoc Connection from At drop down list. Click Locate the location of the selected device at the selected time is displayed. Client Ad hoc Threat – Prevention tab Click on Prevention Tab in the Client – Ad hoc Threat Details dialog. Forensics Tab SpectraGuard® Enterprise User Guide 175 Client – Ad hoc Threat Details – Prevention tab The fields in Prevention tab are as follows:  Client  Association Start Time  Association End Time  Quarantine: Specifies quarantine action taken on the devices during the Ad hoc connection. Click Quarantined, the Quarantine Details dialog opens. Click Not Quarantined, the Not Quarantined Reason dialog opens. Client Ad hoc Threat – Admin Tab Click on Admin Tab in the Client – Ad hoc Threat Details dialog. Forensics Tab SpectraGuard® Enterprise User Guide 176 Client – Ad hoc Threat Details – Admin tab The fields in Admin tab are as follows:  User  Action: Displays all the actions taken on all the Clients participating in the Ad hoc connection  Time Forensics Tab – User Saved Settings The following User choices made during browsing of Forensics Tab are saved by the system.  Time Filter These settings are saved on log out as well as movement to other tabs on the Console. Administration Tab SpectraGuard® Enterprise User Guide 177 Administration Tab Introduction The system is highly customizable and can be configured to suit the needs of your enterprise. The Administration screen allows you to perform various administrative activities such as event, device, and user management, configure the system and location settings, and enable integration with SAFE and third party applications. Administration Screen The Administration screen includes two panes. On the left, you see policy groups categorized into global policies and local policies; Global policies are grouped under the Global tab while Local policies are grouped under the Local tab. On the right, you see the details of the selected policy node. The following figure displays the Administration tab. Global tab Administration Tab SpectraGuard® Enterprise User Guide 178 Local Tab Global Policies Global policies are the policies that are applicable to the entire system. A superuser or an administrator with rights to the root location can modify the global policies. Click the Global tab on the Administration screen to view the policies groups under this tab. Event Settings The Event Settings option enabled you to configure the following event settings in the system.  Hotspot SSID's  Event Regeneration  Vulnerable SSID's Vulnerable SSID APs have well known default SSIDs and many users may not change these SSIDs when deploying the APs. Therefore it is highly likely that APs using default SSIDs are present in the enterprise neighborhood. If an enterprise Client probes for a default SSID, it is at risk of connecting to the neighborhood AP without the user necessarily knowing about it. Also if an enterprise AP uses a default SSID, such an AP may attract undesirable Clients to connect to it. If you consider an SSID to be vulnerable to hackers, you can open the Vulnerable SSIDs screen and enter the SSID under SSID (ASCII character string). Click Add and then Apply to place the SSID in your database. If an AP point with a vulnerable SSID is detected, the system generates an event. Note: Commonly known SSIDs are listed by default. To enter a blank SSID: no string, click <Add> without entering any text. The list shows the SSID a…

Text truncated - open the document above for the full version.

Administration Tab SpectraGuard® Enterprise User Guide 271 Creating a Configuration Template for an Authorized SSID  Create SSID Template allows you to specify the details for creating a new SSID as follows:  Authorized SSID: Displays the name of the SSID that you have added earlier  This is a Guest SSID: Select this option if this SSID is a Guest SSID used to provide Wi-Fi connectivity to visitors and guests. Though APs with Guest SSID are Authorized, they may be treated differently than APs that are used by employees for corporate access. Making an SSID as Guest allows you to specify additional classification and prevention policies related to Guest SSIDs. Refer to the sections Client Auto-Classification and Intrusion Prevention Policy for more details on classifying Guest SSIDs  Template Name: Name of the SSID template  Apply this SSID template at current location: Select this option to apply this SSID template to the current location. The WLAN policy at a location consists of SSID templates applied at that location. If the template is not applied at this location, it will not be a part of the WLAN policy Administration Tab SpectraGuard® Enterprise User Guide 272  Description: Write a short description to help identify the SSID template  Network Protocol allows you to select the allowed 802.11 protocols for the SSID:  Any: Allow APs with any network protocol for this SSID  Select: Specify the 802.11 protocol on which the system allows the APs connected to the network to operate–802.11 a, 802.11 b/g, and 802.11b only  AP Capabilities allows you to select the additional capabilities that Authorized APs may have. If you select any of these advanced capabilities, the classification logic allows APs with and without these capabilities. Select one of the following:  Any: Allow APs with any special capability for this SSID  Select: Specify if the AP uses any Turbo/Super techniques used by Atheros to get higher throughputs– Turbo, 802.11n, and SuperAG  Cisco MFP (802.11w) allows you to make classification decisions on Cisco Management Frame Protection(MFP) capability if 802.11w checkbox is selected under Security Settings:  Any: Policy does not check for MFP; both Cisco MFP enabled and disabled APs are classified as Authorized  Select: Policy checks for MFP  Cisco MFP Enabled: Select to classify only Cisco MFP supporting APs as Authorized APs  Cisco MFP Disabled: Select to classify non-Cisco MFP supporting APs as Authorized APs  Security Settings allows you to select the security protocol(s) for the SSID:  Any: Allow any security protocol for this SSID.  Select: Specify the exact security protocol(s) for this SSID from the list: 802.11i, WPA, Open, and WEP.  Encryption Protocols allows you to select encryption protocol(s) for the SSID:  Any: Allow any encryption protocol (including no encryption) for this SSID.  Select: Specify the exact encryption protocol(s) for this SSID from the list: WEP40, WEP104, TKIP, and CCMP. Note that encryption protocols selection panel gets enabled only when WPA or 802.11i is selected.  Authentication Framework allows you to select authentication protocol(s) for the SSID:  Any: Allow any authentication protocol (including no authentication) for this SSID.  Select: Specify the exact authentication protocol(s) for this SSID from PSK and 802.1x (EAP). Note that authentication protocols selection panel gets enabled only when WPA or 802.11i is selected.  Authentication Types allows you to select the allowed higher layer authentication types that Clients can use while connecting to the SSID. Authentication types do not determine the classification of APs, but are used to raise an event if a Client uses non-allowed authentication type. The system raises this event only if the system sees authentication protocol handshake frames.  Any: Allow any higher layer authentication type for Clients connecting to this SSID.  Select: Specify the exact authentication type(s) that Clients can use (only if 802.1x is selected) from the list: PEAP, EAP-TLS, LEAP, EAP-TTLS, EAP-FAST, and EAP-SIM.  Allowed Networks allows you to select the network(s) where wireless traffic on the SSID is to be mapped through Authorized APs:  Any: Allow wireless traffic on this SSID to be mapped to any network.  Select Networks: Specify the exact networks where wireless traffic on this SSID is to be mapped through Authorized APs. You can either choose from networks that are discovered automatically by the system or add new networks that are not yet discovered by the system.  Click <Select Networks> to open Allowed Networks for SSID dialog where you can move a network from Networks Monitored by the System to Allowed Networks for this SSID and add or delete networks.  Under Allowed AP Vendors, select one of the following:  Any: Allow APs manufactured by any vendor to connect to the system.  Select Vendors: Select the manufacturer of the AP for the specified SSID. SSID Templates Administration Tab SpectraGuard® Enterprise User Guide 273 A policy is collection of SSID templates attached to that location. You can apply an SSID template from the parent or create it locally; if you wish to customize the WLAN policy for that location. Other templates may be available to be attached but are not part of the WLAN policy and will not be used for AP classification. The SSID Templates section lists the SSID templates that are available at a particular location. You must apply the templates from the available list to create the WLAN policy at that location. A new AP or an existing Authorized AP is compared against the applied SSID templates to determine if it is a Rogue or Mis-configured AP. The SSID templates created at other locations can be applied to a selected location but cannot be edited or deleted. The edit and delete operations are possible only at the location where the template is created. The table shows the following details:  SSID: Name of the SSID  Guest SSID?: Indicat…

Text truncated - open the document above for the full version.