Cisco Catalyst Center Rogue Management and aWIPS Application Quick Start Guide, Release 3.1.x

PDF

Enable or disable aWIPS or aWIPS forensic capture

Updated: December 15, 2025

Want to summarize with AI?

Log in

Overview

After containment is initiated, it takes some time for the Containment Status column to get an update with another wireless containment status.

Catalyst Center allows you to enable or disable aWIPS or aWIPS forensic capture at the site level. Enable or disable aWIPS for all Cisco Catalyst 9800 Series Wireless Controllers in a network.

Procedure

1.

From the main menu, choose Design > Network Settings.
2.

Click the Wireless tab.
3.

In the left pane, ensure that Global is selected.

Note
The sites, buildings, and floors inherit the settings from the global level. Settings saved at the site, building, or floor level override the global network settings.
4.

Click AP Profiles.
5.

In the AP Profile table, hover your cursor over Add, and select AP Profile for IOS-XE.
6.

Click the Security tab.
7.

To enable aWIPS, click the aWIPS toggle button.

By default, aWIPS is enabled at the global level.
8.

(Optional) To disable aWIPS, click the aWIPS toggle button.
9.

To enable forensic capture, click the Forensic Capture toggle button.

Note
To enable forensic capture, aWIPS must be enabled. If you disable aWIPS when forensic capture is enabled, forensic capture also disables.
10.

Click Save.

Note
After you configure aWIPS or aWIPS Forensic Capture settings, provision or reprovision a device to apply the changes.
11.

(Optional) To reset the aWIPS and Forensic Capture Enablement settings, click Reset.

Note

If you are migrating from a Catalyst Center release earlier than Release 2.3.2.0, configure the network settings with aWIPS or aWIPS Forensic Capture settings. This ensures that configurations are updated in the wireless controllers.

AP join profiles on devices use the aWIPS or aWIPS Forensic Capture settings. When a Cisco Catalyst 9800 Series Wireless Controller device is provisioned, all AP join profiles associated with the device are fetched, and these actions take place:

  • Default AP join profiles inherit the aWIPS or aWIPS Forensic Capture settings from the site assigned to the device.

  • Custom profiles, which are created using Catalyst Center as part of row AP provisioning, inherit the aWIPS or aWIPS Forensic settings from the Country site level for which the corresponding row AP profile is created.

  • Custom profiles created using Catalyst Center as part of mesh AP provisioning inherit the settings from the floor site level for the corresponding row AP profile.

  • Custom AP join profiles created outside Catalyst Center do not inherit the settings.