Overview
Introduction to the Rogue Management and aWIPS application short desc. NetFlow creates flow records by monitoring network traffic passing through the router. As a packet stream traverses a router interface, the packets are collected and an internal header is appended.
In releases earlier than Release 2.1.2.0, Rogue Management capabilities were provisioned as a part of device controllability. After a Catalyst Center upgrade, the provisioned Rogue Management subscriptions are not automatically removed from a previously discovered Cisco Wireless Controller. Rogue Management detection might be reported inconsistently on a newly discovered wireless controller.
The Rogue Management application is an optional package for Catalyst Center. Operating within Catalyst Center. After installation, the application helps you monitor threats from unauthorized access points (APs). You can access the Rogue Management functionality as a dashboard within Cisco Catalyst Assurance in the Catalyst Center GUI.
In Release 2.3.7 and later, the Rogue Management and aWIPS application package is applicable for virtual appliances (VAs).
Because the Cisco Advanced Wireless Intrusion Prevention System (aWIPS) is integrated with Catalyst Center, you can monitor the aWIPS signatures within the rogue and aWIPS dashboard.
This guide describes how to activate the rogue and aWIPS application package on Catalyst Center. This guide also explains prerequisites and configurations, describes how to monitor the rogue and aWIPS dashboard, and offers important notes and limitations.
The provisioning actions like rogue and aWIPS subscription enable and disable are supported for IPv6 deployment.
The provisioning actions like aWIPS profile configuration and manual containment or automatic containment for wired and wireless devices are not supported for IPv6 deployment.
The Rogue Management application supports these Cisco AireOS Controller models running Cisco AireOS Release 8.8.111.0 or later:
-
Cisco 3504 Wireless Controller
-
Cisco 5520 Wireless Controller
-
Cisco 8540 Wireless Controller
-
Cisco Mobility Express
These Cisco Catalyst 9800 Series Wireless Controller models support the Rogue Management application:
-
Cisco Catalyst 9800 Embedded Wireless Controller for Catalyst 9300 Series Switches
-
Cisco Catalyst 9800-40 Wireless Controller
-
Cisco Catalyst 9800-80 Wireless Controller
-
Cisco Catalyst 9800-CL Cloud Wireless Controller
-
Cisco Catalyst 9800-L Wireless Controller
-
Cisco Embedded Wireless Controller on Catalyst Access Points
The aWIPS application supports Cisco Catalyst 9800 Series Wireless Controller Release 17.1.x and later Cisco Catalyst 9100 Series Access Points, and Cisco 802.11ac Wave 2 Aironet Access Points.
These Cisco Catalyst 9800 Series Wireless Controller models support the aWIPS application:
-
Cisco Catalyst 9800 Embedded Wireless Controller for Catalyst 9300 Series Switches
-
Cisco Catalyst 9800-40 Wireless Controller
-
Cisco Catalyst 9800-80 Wireless Controller
-
Cisco Catalyst 9800-CL Cloud Wireless Controller
-
Cisco Catalyst 9800-L Wireless Controller
-
Cisco Embedded Wireless Controller on Catalyst Access Points