Motorola Solutions AP-6511 Access Point System Reference Guide
8-18
13.Set the configurations of the following MU Anomaly Events configurations:
14.Select OK to save the updates to the MU Anomaly configuration used by the WIPS policy Select Reset
to revert to the last saved configuration.
15.Select the AP Anomaly tab.
Name Displays the name of the MU Anomaly event. This column lists the event
being tracked against the defined thresholds set for interpreting the event
as excessive or permitted.
Enable Displays whether tracking is enabled for each MU Anomaly event. Use the
drop-down menu to enable/disable events as required. A green checkmark
defines the event as enabled for tracking against its threshold values. A
red “X” defines the event as disabled and not tracked by the WIPS policy.
Each event is disabled by default.
Filter Expiration Set the duration the anomaly causing client is filtered. This creates a
special ACL entry and frames coming from the client are silently dropped.
The default setting is 0 seconds. For each violation, define a time to filter
value in seconds which determines how long received packets are ignored
from an attacking device once a violation has been triggered. Ignoring
frames from an attacking device minimizes the effectiveness of the attack
and the impact to the site until permanent mitigation can be performed.