RAPIDS Rogue AP Detection Module
Secure your organization from one of the most dangerous hazards of WiFi installations – rogue APs. On average, AirWave customers find 67 unauthorized 'rogue' access points on their network when they install RAPIDS. More often than not, the 'culprit' responsible for the rogue device is not a malicious intruder, but a naive employee who installed the AP without security settings enabled -- and without understanding the implications of their actions.
An add-on to AMP, RAPIDS™ automatically detects and locates unauthorized access points through a combination of RF scanning and wireline "fingerprinting." The RAPIDS software uses your existing, authorized APs to scan the RF airspace for any unauthorized devices. You can even turn your WiFi-enabled Windows devices into additional RF sensors with the optional AirWave Management Client (AMC) software.
However, we know that wireless detection isn't enough, since not all rogues will be within range of an authorized wireless device. So RAPIDS also scans your wired network to determine whether any unknown devices are connected. Even if you do not yet have an authorized wireless LAN, you can use RAPIDS to make sure no rogues are on your network.
| Feature | Description | Benefit |
| Wireless scanning via existing APs | Uses your existing, authorized wireless access points to scan the RF environment to detect any other APs within range | Highly accurate detection of rogue APs that are within RF range of your existing WiFi infrastructure |
| Wireline scanning | Scans your wired network (via SNMP, HTML, and other methods) to identify the fingerprints of any potential unauthorized APs. Compares results to AirWave's database of 9,000+ entries to determine the most likely rogues. | Allows you to detect rogues in remote offices and other locations far from any authorized WiFi access points or sensors. Provides port location information to allow you to disable the port if desired. |
| Rogue scoring | Assesses all the information gathered about the each device on your network, including both wireless and wireline scans, and assigns each device a score from 5 (definite rogue) to 1 (lowest threat) reflecting the likelihood that the device is a rogue. | Allows you to focus your attention on the devices that are the most likely to be true unauthorized rogue APs. |
| OS interrogation | Queries a suspect device to determine its operating system | Eliminates 'false positive results' (a device running Mac OSX is significantly less likely to be a rogue AP than a device running an embedded OS from a WiFi vendor). |
| Rogue location | Uses RF data from existing APs to triangulate the location of rogue devices and display them on a VisualRF map. | Helps you determine the physical location of rogue devices |
| Automated alerts | Generates automatic, high-priority alerts than can be emailed to a specified distribution list when rogues are detected. Alerts contain all known information from both wireless and wired network scans. | You know the instant a potential rogue is detected. |
| AirWave Management Client | Optional client software that allows you to use WiFi-enabled Windows devices as RF scanners to detect and report rogues. | Increases the number of RF data points, making rogue detection more likely and location information more accurate. |
