Summit WM User Guide, Software Version 5.3 263
9 Working with the Summit WM series Spy
This chapter describes Summit WM series Spy concepts, including:
z "Summit WM series Spy overview" on page 263
z "Enabling the Analysis and data collector engines" on page 264
z "Running Summit WM series Spy scans" on page 265
z "Analysis engine overview" on page 267
z "Working with Summit WM series Spy scan results" on page 268
z "Working with friendly APs" on page 270
z "Maintaining the Summit WM series Spy list of APs" on page 271
z "Viewing the Scanner Status report" on page 272
Summit WM series Spy overview
The Summit WM series Spy is a mechanism that assists in the detection of rogue APs. Summit WM
series Spy functionality does the following:
Altitude AP:
z Runs a radio frequency (RF) scanning task.
z Alternating between scan functions, providing its regular service to the wireless devices on the
network.
NOTE
If a Wireless AP is part of a WDS link you cannot configure it to act as a scanner in Summit WM series Spy.
Summit WM Controller:
z Runs a data collector application that receives and manages the RF scan messages sent by the
Wireless AP. RF data collector data includes lists of all connected Wireless APs, third-party APs, and
the RF scan information that has been collected from the Wireless APs selected to perform the scan.
z Runs an Analysis Engine that processes the scan data from the data collector through algorithms that
make decisions about whether any of the detected APs or clients are rogue APs or are running in an
unsecure environment (for example, ad-hoc mode).
NOTE
In a network with more than one Summit WM Controller, it is not necessary for the data collector to be running
on the same controller as the Analysis Engine. One controller can be a dedicated Analysis Engine while the other
controllers run data collector functionality. No more than one Analysis Engine can be running at a time. You
must ensure that the controllers are all routable.
To Next Page
Loading...
