Cisco Catalyst Center Rogue Management and aWIPS Application Quick Start Guide, Release 3.2.x

PDF

Basic setup workflow

Updated: May 5, 2026

Want to summarize with AI?

Log in

Overview

Guides you through the basic setup workflow for the Rogue Management and aWIPS application in Catalyst Center. This includes installing the package, discovering devices, designing the network hierarchy, and configuring optional integrations like Cisco ISE and Cisco Spaces/CMX to ensure effective threat monitoring and management.

Procedure

1.

Install Catalyst Center.

For more information, see the Cisco Catalyst Center Installation Guide.
2.

Download and install the Rogue and aWIPS application package.

For more information, see Download and Install the Rogue Management and aWIPS application package.
3.

Enable the Rogue and aWIPS application in the Assurance > Rogue and aWIPS window.

This enables rogue reporting on both the Cisco Wireless Controller and Cisco Catalyst 9800 Series Wireless Controllers.

To access the Rogue and aWIPS application, log in to Catalyst Center. From the main menu, choose Assurance > Rogue and aWIPS.
4.

Discover devices such as Cisco Wireless Controller and APs using the Discovery feature.

Discover Cisco Wireless Controllers using the management IP address instead of the service port IP address.

Note

If the device is removed from Catalyst Center without enabling a configuration cleanup, the older subscriptions remain intact. If you add the device again to Catalyst Center, existing telemetry subscriptions cause data to flow in, and the dashboard displays rogue and aWIPS threat data. To correct the telemetry subscriptions, assign the device to a site.
5.

Make sure that the discovered devices are listed in the Device Inventory window.

The devices should be reachable and in Managed state in the Device Inventory window.
6.

Design your network hierarchy by adding sites, buildings, and floors so that later, you can easily identify where to apply design settings or configurations.

You can either create a new network hierarchy or import an existing network hierarchy from Cisco Prime Infrastructure into Catalyst Center.
7.

Add the location information of APs and position the APs on the floor map to get a coverage heatmap visualization.
8.

(Optional) If your network uses Cisco Identity Services Engine (ISE) for user authentication, you can configure Cisco Catalyst Assurance for Cisco ISE integration. This enables you to see more information about wired clients, such as the username and operating system, in Cisco Catalyst Assurance. For more information, see "About Cisco ISE Configuration for Catalyst Center" in the Cisco Catalyst Assurance User Guide.
9.

(Optional) Create access groups that permit or restrict user access to specific Catalyst Center functions and sites. The Rogue and aWIPS feature behavior depends on the user role and site defined in the access group. For more information, see "Catalyst Center user role permissions", "Configure site-based, role-based access control" and "Impact of SRBAC on Catalyst Center features" in Cisco Catalyst Center Administrator Guide.

10.

Start using the Cisco Rogue and aWIPS application.
11.

(Optional) Integrate and synchronize Cisco Spaces/Cisco Connected Mobile Experiences (CMX) with Catalyst Center. For more information, see "About Cisco Connected Mobile Experiences Integration" in the Cisco Catalyst Assurance User Guide.

You can get the precise location details for a specific rogue AP on the floor map by using the detecting AP's strongest signal strength or the x and y coordinates from Cisco CMX.

Note

If Cisco Spaces/Cisco CMX is not integrated with Catalyst Center, the site map displays the rogue AP near the detecting AP with the strongest RSSI.