Arista Networks SS300ATC60 SpectraGuard Access Point / Sensor User Manual 2

AirTight Networks, Inc. SpectraGuard Access Point / Sensor Users Manual 2

UserManual.wiki >

Arista Networks >

SS300ATC60 User Manual >

Users Manual-2 HTML Version

Users Manual-2

Devices Tab

SpectraGuard® Enterprise User Guide

 If a Sensor is available, the system automatically selects a defending Sensor for an Authorized AP.

The Quarantine status of the AP then appears as Quarantined.

 If a Sensor is not currently available, the Quarantine status of the AP appears as Quarantine

Pending. As soon as a Sensor is available, it starts defending the AP. The AP may appear as

Quarantine Pending if it is not currently an active threat (the AP is inactive). The system keeps

quarantining the AP until you manually remove it from quarantine.

 Remove from Quarantine: Available only if the AP is manually Quarantined, this option enables you to

stop quarantine on the AP, thereby enabling wireless communication.

 Start DoS Prevention: Available only if the system has determined an AP to be under a DoS attack and DoS

countermeasures have not already been started. This option enables you to start DoS countermeasure on a

selected AP.

 Stop DoS Prevention: Available only if DoS Prevention is initiated on the AP, this option enables you to

manually terminate DoS countermeasure on a selected AP.

 Enable Auto-quarantine: Enabled by default, this option ensures that the system automatically quarantines

an AP, thereby honoring the specified Intrusion Prevention policy.

 Disable Auto-quarantine: This option ensures that the system does not automatically quarantine an AP

(regardless of the policies).

Note: The menu items Block Wired Port, Mark Port as Unblocked, Move to Quarantine, Start DoS Prevention, and

Enable Auto-quarantine are not visible only if the WIDS license is applied.

 Add to Banned List: Enables you to add the selected AP to the Banned List to prevent the AP from

engaging in wireless communication.

 Remove from Banned List: Available only if the AP is already in the Banned List, this option enables

you to remove the selected AP from the Banned List.

 Start Troubleshooting: Opens the Troubleshoot tab of the AP Device dialog, which allows you to

start a troubleshooting session in either Packet Level Mode or Event Level Mode. Click <Start

Troubleshooting> to start troubleshooting.

 Stop Troubleshooting: Available only if a troubleshooting session is in progress, this option enables

manual termination of the session.

Note: From SGE 6.2 release onwards, it is possible to start/ stop quarantine and troubleshooting on individual BSSID of the

Merged AP.

 Split: Enables you to split the merged APs.

 Mark as Known: Enables you to mark an External AP as Known External AP. When an AP is

marked as Known External AP, the row color changes to dark blue.

 Mark as Unknown: Enables you to mark a Known External AP as Unknown External AP. An

Unknown External AP’s row color is light blue.

 Delete: Enables you to delete a selected AP.

 Change Location: Opens the Location Tag dialog that enables you to:

 View the complete list of locations

 Change the location of the selected AP (see Manual Location Tagging)

 Move to…: Enables you to categorize the AP in your network by moving it to the Authorized,

Rogue, or External folder.

Note: The menu items Block Wired Port, Mark Port as Unblocked, and Move to Quarantine appear only in the AP

context-sensitive menu on the Devices screen and not in the AP context-sensitive menu on the Quarantined Devices dialog.

All other items are available on both the menus.

Note: Details, Performance, Events, Locate, Move to/Remove from Quarantine, Start/Stop DoS Prevention, and

Start/Stop Troubleshooting are the only the menu items that appear in AP context-sensitive for the BSSIDs of the Merged

APs as shown in the figure below.

Devices Tab

SpectraGuard® Enterprise User Guide

Merged AP Context-Sensitive Menu for the BSSIDs of the Merged APs

AP Details Dialog

To open AP Details dialog, right-click an AP row on the Devices screen, and select the Details menu item. The AP

Details dialog has the following tabs: Properties, Events, Performance, Troubleshoot, and Locate. The Properties tab

is displayed by default.

Devices Tab

SpectraGuard® Enterprise User Guide

AP Properties Tab

Fields in the AP Properties Tab

The AP Properties tab enables you to view and edit the properties of an AP.

 MAC/Protocol: Select the MAC/Protocol from the drop-down list to display the relevant information of the

selected BSSID. MAC/Protocol field appears only for merged APs. The Primary BSSID of the AP is shown in

bold.

 AP Name: Click and specify the name used to identify the AP in the AP Name dialog. Click Save. The

new AP name automatically displays in the Device Name field in the header of the AP Details dialog.

AP Name Dialog

Classification: Specifies the classification of the AP–Authorized, Rogue, External, or Indeterminate. This

automatically displays in the Classification field in the header of the AP Details dialog. Click to open the AP

Classification dialog. Here, you can change the AP classification to Authorized, Rogue, or External. Click <OK> to

move the AP to the selected folder.

Devices Tab

SpectraGuard® Enterprise User Guide

AP Classification Dialog

Device Tag: Click to specify text that provides additional information about the AP in the Device Tag dialog;

for example, Hawaii Conference Room, Bldg 15 – Cubicle G2, or Executive Area. Click Save to save the device tag.

AP Device Tag Dialog

 MAC Address: Specifies the unique 48-bit address of the AP/ 802.11 PHY modes used by the AP.

MULTIPLE displays, if For All BSSIDs is selected in the MAC/Protocol field.

 Location: Enables you to view the name of the AP’s location and the complete list of locations. This

automatically displays in the Location field in the header of the AP Details dialog.

 Click to open the Location Tag dialog. Here, you can view the complete list of locations and choose a

location for the AP. To view the list of locations, you must first set up your list of locations on the Locations

screen as explained in the section (see Working with Location Folders and Location Nodes).

AP Location Tag Dialog

 Placed on Floormap?: Indicates if the AP is placed on the floor map.

 Currently Active?: Indicates if the AP is currently active.

 Up/Down Since: Specifies the time since the AP is up/down.

 Network: Shows additional information about the IP Address and subnet that identifies the network

on which the AP is located.

 IP Address: Click to open the IP Address dialog. Specify the IP address for an Authorized or

Indeterminate AP. This field is disabled for Rogue and External APs.

Devices Tab

SpectraGuard® Enterprise User Guide

AP IP Address Dialog

 Basic Link Rates (Mbps): Displays a comma separated list of link rates supported by the AP.

 Vendor: Specifies the name of the AP manufacturer, which is inferred from the first three bytes of

the MAC address.

 SSID: Specifies the unique identity that prospective Clients use to recognize the network.

MULTIPLE is displayed, if For All BSSIDs is selected in the MAC/Protocol field.

 Is Guest SSID?: Indicates if the SSID is a guest SSID.

 Protocol: An 802.11 device could implement and use protocols a, b/g or a/b/g. The protocol decides

the PHY layer properties and capabilities of the device.

 Channel: Specifies the channel number on which the AP operates.

 Security: Shows the security settings for the AP. If this option is enabled, the AP enforces WEP

encryption on the wireless link. MULTIPLE is displayed, if For All BSSIDs is selected in the

MAC/Protocol field.

 Authentication: Specifies the procedure used by APs to verify the identity of a Client. MULTIPLE

is displayed, if For All BSSIDs is selected in the MAC/Protocol field.

 Pairwise Encryption: Specifies the encryption used for unicast communication between the AP and

a Client. MULTIPLE is displayed, if For All BSSIDs is selected in the MAC/Protocol field.

 Group Encryption: Specifies the encryption used for broadcast or multicast communication from

the AP. MULTIPLE is displayed, if For All BSSIDs is selected in the MAC/Protocol field.

 Cisco MFP/802.11w: Indicates if the AP implements pre-802.11w standard from Cisco or 802.11w

standard to mitigate against the DoS attacks against AP. MULTIPLE is displayed, if For All

BSSIDs is selected in the MAC/Protocol field.

 Turbo Capability: Indicates if an AP can transmit wireless signals at 108 Mbps.

 Super AG Capability: This field indicates that the AP supports Super AG capability. This

capability provides speed and throughput of more than double of standard wireless LAN (802.11)

technologies.

 802.11n Capability: This indicates 802.11n capability of the AP. The field provides information

about whether the AP is compliant with early or standard implementations of the 802.11n standard.

Note: You will see Turbo Capability, Super AG Capability and Pre-11n Capability only if the selected AP has these capabilities.

 Publicly Secure Packet Forwarding: Specifies if the AP relays packets among wireless Clients, that

is, specifies if Publicly Secure Packet Forwarding (PSPF) is disabled on the Client.

 Inter-Client Communication Last Detected: For WEP enabled APs, specifies the date and time

when communication between two wireless Clients was last seen.

Note: For Authorized but Mis-configured APs, any properties that violate the specified Authorized SSID template for that

location are shown in red. Read the tool tip on the Console for more information.

 Quarantine Status: Click to open the Quarantine Confirmation dialog and to quarantine the

selected AP if a Sensor is available. If a Sensor is not available, the Quarantine Status of the AP is

Quarantine Pending. Click <Yes> to quarantine the AP.

This automatically displays in the Quarantine Status field in the header of the AP Details dialog.

Devices Tab

SpectraGuard® Enterprise User Guide

Note: Quarantine Status, Defending Sensor, Port Block Status, and Port Block Details fields are not visible if WIDS

license is applied.

Note: If the selected AP is currently quarantined, a Remove from Quarantine button appears in the AP Properties dialog.

Click <Remove from Quarantine> to view an Information message and to enable wireless communication to the AP.

AP Quarantine Confirmation Dialog

Note: The system quarantines only those interfaces that are mis-configured (non-policy compliant). The system allows policy

compliant interfaces to operate unhindered.

 Defending Sensor: If an AP is quarantined, it specifies the name of the Sensor that is actively

preventing the AP from engaging in wireless communication.

 Port Block Status: Click to block the wired side Ethernet port to which the AP is connected.

WLSE integration is needed to block wired side Ethernet port of the AP.

AP Port Block Status Dialog

 Port Block Details: Specifies the IP address of the switch and the port to which the AP is connected.

 Beacon Interval (ms): Specifies in milliseconds the time interval between successive beacons of the AP.

 First Detected At: Specifies the date and time when the AP was first detected by the system.

 802.11n Properties: Appears when the AP is 802.11n capable.

 Channel Width: Specifies whether an AP is operating on 20 MHz or 40 MHz channel width. 802.11n allows

for the use of standard channel width of 20 MHz or double channel width of 40 MHz. 40 MHz channel

width is achieved by using two adjacent channels to send data simultaneously.

 Channel Offset: For AP operating on 40 MHz channel width, channel offset specifies whether the adjacent

channel used in 40 MHz operation is above or below the primary channel. This field can have following

values:

 Above 40 MHz: AP is currently operating on 40 MHz and adjacent channel lies above the primary

channel.

 Below 40 MHz: AP is currently operating on 40 MHz and adjacent channel lies below the primary

channel.

 802.11n Data Rate: Specifies the highest 11n rate of the AP with which it communicates with the Client.

 Short G1 for 20 MHz: Indicates if the AP is capable of using short guard interval for 20 MHz.

 Short G1 for 40 MHz: Indicates if the AP is capable of using short guard interval for 40 MHz.

 MCS Support: Specifies the various Modulation and Coding Schemes (MCS) supported for 802.11n. The

802.11n standard defines a total of 77 MCS. Each MCS is a combination of a certain modulation (for example,

Devices Tab

SpectraGuard® Enterprise User Guide

BPSK, QPSK, 64-QAM), coding rate (for example, 1/2, 3/4), guard interval (800 or 400 ns), and number of

spatial streams. Support for MCS 0-15 is mandatory for 802.11n APs and support for MCS 0-7 is mandatory

for 802.11n Clients.

 Greenfield Mode: Indicates if the AP is capable of working in the Greenfield mode. Greenfield mode is an

optional high-throughput mode in the 802.11n standard, which is not backward compatible with legacy

(802.11a/b/g) protocols and is expected to provide maximum performance benefits of 802.11n.

 Beam forming Capability: Indicates if the AP is capable of Beamforming. Beamforming is an RF

transmission method that helps in focusing the radiated RF energy directly at a receiving Client. This

improves signal reception at the Client and consequently the throughput.

 To add the selected AP to the Banned List, click .

 To delete data for the selected AP and re-initialize data gathering, click .

 To refresh the AP Details screen, manually click . The system does not auto refresh after a pre-defined

interval.

Devices Seeing AP Section

Under Device Seeing AP, you can view a list of devices (which could be either APs or Sensors) that can see the

selected AP. The details of these devices such as Device Active/Inactive icon, Name and RSSI of the AP seen by that

device are displayed in the rows. To view details of a specific Device seeing the current AP, click Name, and a new

AP Details or Sensor Details dialog appears.

Note: Total gives the total number of devices seeing the AP.

Recently Associated Clients Section

Under Recently Associated Clients, you can view a list of Clients that are recently associated to the selected AP. The

criteria for Recent Association is either 12 hours or 100 thousand Clients (this is the total number of associations in

the system and not per device). Client details such as Client Active/Inactive icon, Client Name, SSID, and Last

Detected At (which shows the date and time or Present, Present when the association is currently active.) are

displayed in the rows. To view details of a specific Client, click Client Name the Client Details screen opens.

Fields in the AP Events Tab

To open the AP Events tab, on the Devices screen right-click an AP row and select the Events menu item

Devices Tab

SpectraGuard® Enterprise User Guide

AP Events Tab

The AP Events tab enables you to view the events where the AP is participating device.

MAC/Protocol: Select the MAC/Protocol from the drop-down list and the relevant events of the selected BSSID is

displayed. MAC/Protocol field appears only for merged APs.

For the columns in the Events details screen, refer to the Events Tab chapter for more details.

Check the Click to select or deselect all Events checkbox to select all the Events displayed on that page.

Click Delete to delete the selected events.

Click Acknowledge to add comments for the selected events.

Fields in the AP Performance Tab

To open the AP Performance tab, on the Devices screen right-click an AP row and select the Performance menu item

Devices Tab

SpectraGuard® Enterprise User Guide

AP Performance Tab

Note: In the Performance tab, data is only available for Authorized devices.

The AP Performance tab enables you to view the data related to performance of an AP in chart form.

MAC/Protocol: Select the MAC/Protocol from the drop-down list and the relevant performance information of the

selected BSSID is displayed. MAC/Protocol field appears only for merged APs.

Line Charts are shown on the Performance Tab. Choose one of the Chart types available from the Select Chart drop-

down list:

 Associated Clients: Sensor samples the number of associations with the AP at the end of each time interval.

 Average Data Rate: Sensor keeps track of transmission rates of data frames in the AP’s BSS and reports

weighted average transmission rate over each time interval.

 Traffic: Sensor reports data traffic sent and received by the AP over each time interval. The channel-rotating

Sensor spends only a fraction of total time on any given channel; therefore this parameter typically

underestimates the actual traffic by a factor equal to the total number of channels scanned by the Sensor

radio. For example, if b/g radio on the Sensor scans 11 channels in all, the measured traffic could be about

1/11th of the actual traffic if the traffic is continuous. Similarly, if a radio on the Sensor scans 30 channels in

all, the measured traffic could be about 1/30th of the actual traffic. However, if the traffic comes in bursts,

straightforward scaling as above cannot be applied.

 Utilization: Sensor keeps track of cumulative time occupancy of frames in the AP’s BSS and reports the

cumulative time occupancy as percentage of total scan time on the channel in each time interval.

Click to view enlarged Chart on the left hand side. Click to view enlarged Chart on the right hand side.

Fields in the AP Troubleshoot Tab

Devices Tab

SpectraGuard® Enterprise User Guide

The system provides Knowledge–based Troubleshooting (KBT) which enables you to precisely identify the cause of

common problems in your wireless network. KBT uses a knowledge base of wireless problem symptoms and their

root causes. The knowledge base is derived from extensive experimentation with WLANs.

You can initiate knowledge-based troubleshooting in one of the following modes:

 Packet Level Mode: Enables you to remotely capture all packets seen by a selected Sensor that is in the

vicinity of a device. Selection of the Sensor can be manual or automatic.

 Event Level Mode: Triggers the generation of detailed monitoring events for a device in the

Troubleshooting event sub-category.

To open the AP Troubleshoot tab, on the Devices screen right-click an AP row and select the Start Troubleshooting

menu item.

Packet Level Troubleshooting for an AP

1. Select the Troubleshooting Mode and set the corresponding Timeout interval. If you select Packet

Level Troubleshooting, ensure that the Sensor used for troubleshooting is reachable from the computer

used to launch the Console.

Note: A troubleshooting session automatically times out or terminates after the Timeout irrespective of the activity. You can

manually stop troubleshooting from the device context-sensitive menu by selecting Stop Troubleshooting or from the

Troubleshooting tab by clicking <Stop Troubleshooting>.

2. Under Sensor Selection, select the Sensor to use for troubleshooting. Sensor Status appears as Normal

Operation, Busy in Quarantine, or Busy in Troubleshooting. Within each category, Sensors are sorted based

on availability and signal strength.

Note: Do not select a Sensor that is Busy in Quarantine or Busy in Troubleshooting. If you select a Sensor that is Busy in

Quarantine, the troubleshooting operation fails.

Devices Tab

SpectraGuard® Enterprise User Guide

3. Under Protocol and Channel Selection:

 The Protocol and Channel on which the AP is operating automatically selects by default.

 For Merged APs in the MAC/Protocol field, For all BSSIDs automatically selects by default. A

message is displayed that “Please select BSSID to troubleshoot”. Select a BSSID from the

MAC/Protocol field’s drop-down list to initiate troubleshooting.

Note: A Configuration template is assigned to each Sensor. The Channels list contains only those channels enabled for scanning

in that Configuration template. If no channel in a Protocol is enabled, then the Protocol option is disabled. Thus, the Channels

list and the status of the Protocol checkboxes change with the Sensor selected.

4. Under Packet Selection, choose to view all the packets visible to the selected Sensor or only the packets

from the selected device visible to the Sensor.

5. Click Start Troubleshooting to begin the session. If the Sensor is assigned a Configuration template,

where no channels are selected for scanning, an error message displays.

Packet Level Troubleshooting Confirm Dialog

6. On the Confirm dialog, you may have two or three packet capture tool options, depending on the

licensing agreement with AirTight Inc. Select a packet capture tool.

If you have a product license that has OmniPeek support, you have three packet capture tool options –

Wireshark, OmniPeek, and ‘Other’. If you have a product license that does not have OmniPeek support, you

have two packet capture tool options – Wireshark and ‘Other’. Select the ‘Other’ option for other tools that you

can use to capture packets. Typical packet capture tools are Tcpdump, Ethereal, Wireshark, OmniPeek, and

others. You must use Tcpdump and Ethereal with Rpcap support. Tcpdump, Ethereal, and Wireshark are

available freely on the Internet.

7. If you click Wireshark, and the application is installed correctly, the system launches the application and

the packet capture session begins immediately. Alternatively, if you do not have Wireshark installed, an

Error dialog appears.

Devices Tab

SpectraGuard® Enterprise User Guide

System unable to Launch Wireshark Dialog

8. On the Error dialog, there are three possibilities:

 You can download and install Wireshark and optionally install WinPcap. Wireshark requires a

compatible version of WinPcap. If the installed version and expected version mismatch, you need

to install the suggested and expected version of WinPcap.

 If the system does not find Wireshark installed at the default location, ‘C:\Program

Files\Wireshark’, Wireshark will not launch automatically. To launch Wireshark manually, click

Browse to specify the appropriate location and click OK.

 To launch Wireshark manually from the command prompt, you need to copy and paste the link to

set up a direct connection with the Sensor and view live packets.

9. If you click OmniPeek, ensure that the application and the OmniPeek Airtight Adapter are correctly

installed. If you have these installed at some other location, click Browse to specify the appropriate

location. The installation location for OmniPeek could be other than the default location, ‘C:\Program

Files\WildPackets\OmniPeek\’.

10. Click OK. The system launches the application and the packet capture session begins immediately.

Alternatively, if you do not have the OmniPeek tool installed, you should install the same with

appropriate purchase from WildPackets Inc. Airtight does not provide installation of OmniPeek.

Devices Tab

SpectraGuard® Enterprise User Guide

Launching OmniPeek

Points to note during Troubleshooting

 When a troubleshooting session is in progress, a blinking icon appears on the navigation bar.

 Once the packet capture based troubleshooting session begins from the Console and the packet capture tool

is either interrupted or terminated (gracefully or abruptly), you have to first stop the ongoing

troubleshooting session from the Console either manually (if it is still going on) or ensure that the session

has indeed ended before you can start another packet capture session. You must then restart the fresh

troubleshooting session from the Console.

 If a troubleshooting session is in progress with a chosen tool (Wireshark, OmniPeek, or user specified tool),

another capture from the command prompt, using user specified capture parameters (viz. rpcap://sensor-

ip/iface ) will not succeed from the same or another computer.

Fields in the AP Locate Tab

To open the AP Locate, on the Devices screen, right-click an AP row and select the Locate menu item. The Floor Map

View of an AP displays the location of the Locating Device, which is the Sensor or Controller monitoring the AP.

Devices Tab

SpectraGuard® Enterprise User Guide

AP Locate Tab – Floor Map view

The AP Locate tab enables you to view the following details of an AP.

 Monitoring Device Filter:Click the Monitoring Device Filter icon and apply the appropriate filters.

 Image Opacity: Displays the percentage opacity of the image

 Location Name: Displays the name of the selected location.

 Total Area: Displays the total area of the selected location.

 Device Location Region: Displays the total area (blue shaded region) shown for the estimated location and

it decreases as the selected location probability criteria increases.

 Location Probability: Location Probability defines a lower bound on probability of finding the device in the

blue shaded region.

 Click Thermometer View to view the distance from the Locating Device in feet/meter from the

Sensor(s)/Controller to which the AP is visible. Refer to Locating an AP/Client placed on the Floor Map for

details.

Filtering in APs

To focus your attention to a subset of APs based on a filtering criteria (such as device type, or of network status, and

so on) system provides you with the capability to filter APs. Use the following steps to filter APs:

1. On the Devices screen, click the APs tab and click the Filter icon to open the Filter Devices - AP

dialog.

Devices Tab

SpectraGuard® Enterprise User Guide

Filter Devices – AP

2. Under Text Filter, select one or more of the following check boxes and enter the appropriate values

manually for searching data related to it:

 Name

 MAC

 SSID

 Network

 Vendor

3. Select the Device Type check box, select one or more of the following check boxes:

 Active

 Inactive

4. Select First Detected check box, click the icon to specify the first detected date and time of the AP

and then click <OK>. The search displays the APs, which were first detected by the system after the

date as specified above.

5. Select theProtocolcheck box, select one or more of the following check boxes:

 a

 b/g

 11n

6. Select the Quarantine check box, select one or more of the following check boxes:

 Active

 Pending

 Stopped

7. Select the Networked Status check box, select one or more of the following check boxes:

 Networked

 Not Networked

 Not Sure

8. Select the Security checkbox, select one or more of the following checkboxes:

 802.11i

Devices Tab

SpectraGuard® Enterprise User Guide

 WPA

 Cisco MFP

 WEP

 Open

 Unknown

9. To save and apply the AP filtering criteria, click OK. When the filter is applied it is denoted by Filter

On on the Console, if no filter is applied it is denoted by Filter Off on the Console.

Client Context-Sensitive Menu

A Client is a laptop, a handheld device, or any other system that uses the 802.11 wireless medium for communication.

The context-sensitive menu for Clients enables you to

 View client details

 Associated events

 Performance charts

 Edit a Client’s details

 Locate a Client

 Quarantine a Client

 Enable/disable Auto-quarantine on a Client

 Troubleshoot a Client

 Delete a Client

 Change a Client’s location, and category (Authorized, External Guest, Rogue)

 Tag/untag a device as a smart device, and/or change smart device type of client device

Method for Opening Client Context-Sensitive Menu

To open a Client context-sensitive menu, click the Devices tab and then right-click a Client row to open the context-

sensitive menu.

Devices Tab

SpectraGuard® Enterprise User Guide

Client Context-Sensitive Menu on Devices Screen

Items in the Client Context-Sensitive Menu

The Client context-sensitive menus include the following items.

 Details: Opens the Properties tab of the Client Device dialog, which allows you to:

 View/Edit the Client’s name

 View/Edit Client’s classification

 Assign a user-defined location tag so that you can easily locate the Client; the location of a

manually tagged Client is shown with an asterisk (*) under the Location column

 Enables you to view Primary details of the Client, Devices seeing Clients Recently

Associated APs/Ad hoc Networks Recently Probed SSIDs

 Performance: Opens the Performance tab of the Client Device dialog, which allows you to view

performance graphs for the Client.

 Events: Opens the Events tab of the Client Device dialog, which allows you to view events

associated with the Client, so that you can take the necessary actions.

 Locate: Opens the Locate tab of the Client Device dialog, which allows you view the Client

Location (see Fields in the Client Locate Tab).

 Move to Quarantine: Enables you to block any wireless communication to the Client, that is,

quarantine the Client.

 If a Sensor is available, the system automatically selects a defending Sensor for an Authorized

Client. The Quarantine status of the Client is then Quarantined.

 If a Sensor is not currently available, the Quarantine status of the Client is Quarantine

Pending. As soon as a Sensor is available, it starts defending the Client. The Client may appear

as Quarantine Pending if it is not currently an active threat (the Client is inactive). The system

keeps quarantining the Client until you manually remove it from quarantine.

Devices Tab

SpectraGuard® Enterprise User Guide

 Remove from Quarantine: Available only if the Client is manually Quarantined this option

enables you to stop quarantine on the Client, thereby enabling wireless communication.

 Enable Auto-quarantine: Enabled by default, this option ensures that the system automatically

quarantines a Client, thereby honoring the specified Intrusion Prevention policy.

 Disable Auto-quarantine: This option ensures that the system does not automatically quarantine

a Client (regardless of the policies).

 Reset RF Fingerprint: Resets the data transmitted by the Client.

 Add to Banned List: Enables you to add the selected Client to the Banned List to prevent the

Client from engaging in wireless communication.

 Remove from Banned List: Available only if the Client is already in the Banned List, this option

enables you to remove the selected Client from the Banned List.

 Start Troubleshooting: Opens the Troubleshoot tab of the Client Device dialog, which allows

you to start a troubleshooting session in either Packet Level Mode or Event Level Mode. Click

<Start Troubleshooting> to start troubleshooting.

 Stop Troubleshooting: Available only if a troubleshooting session is in progress, this option

enables you manually terminate the session.

 Delete: Enables you to delete a selected Client.

 Change Location: Opens the Location Tag dialog that enables you to view the complete list of

locations, and change the location of the selected Client (see Manual Location Tagging).

 Smart Device: Allows you to change the device type or untag the smart device to a regular device.

 Move to…: Enables you to categorize a Client in your network by moving it to the Authorized,

External, Guest, or Rogue folder. If you move a Client manually, the system never re-classifies that

Client automatically based on the Client classification policy. To enable automatic re-classification, you

must delete that Client and let the system re-discover it.

 Fetch SAFE Report: Available only if a SAFE Client is Active, this option displays a progress bar and

then fetches a fresh report from the SAFE Client.

 Change SAFE Group: Enables you to change the SAFE Client group for the selected SAFE Client.

Note: The menu items Fetch SAFE Report and Change SAFE Group are visible only if a SAFE Client connects to the system

at least once. However, if the SAFE Client goes down, Fetch SAFE Report is disabled and Change SAFE Group is enabled. The

Client’s group changes when it next connects to the system.

Client Details Dialog

You can open the Client Details dialog in the following manner:

On the Devices screen, right-click a Client row and select the Details menu item. The Client Details dialog has the

following tabs: Properties, Events, Performance, Troubleshoot, and Locate. By default the Properties tab displays and

is treated as the current tab.

Devices Tab

SpectraGuard® Enterprise User Guide

Client Properties Tab

Fields in the Client Properties Tab

The Client Properties tab enables you to view and edit the properties of a Client.

Under Client Properties, you can modify the following:

 Client Name: Client name field displays the name of the client, derived from the MAC address, by default.

Host name of the client is displayed, if it is available to the system. Click and specify the name used to

identify the Client in the Client Name dialog. Click <Save>. The new Client name automatically displays in

the Device Name field in the header of Client Details dialog.

Client Name Dialog

Note: While upgrading to SGE 6.6or above, from an older version, the manually assigned client names, if any, are retained.

 User Name: User name field displays the login name of the user who has logged in to the client

machine. This is a non-editable field.

 Classification: Specifies the classification of the Client – Authorized, Rogue, Guest, or External.

Devices Tab

SpectraGuard® Enterprise User Guide

Click to open the Client Classification dialog. Here, you can change the Client classification to

Authorized, Rogue, Guest, or External. Click <OK> to move the Client to the selected folder. The

changed Client classification automatically displays in the Classification field in the header of Client

Details dialog.

Client Classification Dialog

 Device Tag: Click to open the Device Tag dialog. Specify text that provides additional

information about the Client.

Client Device Tag Dialog

 MAC Address: Specifies the unique 48-bit IEEE format address of the Client assigned to the network

adapter by the manufacturer.

 Banned Status: Indicates if the Client is in the Banned Client List.

 Location: Enables you to view the name of the Client’s usual location.

Click to open the Location Tag dialog. Here, you can view the complete list of locations and choose a

location for the Client. To view the list of locations, you must first set up your list of locations on the

Locations screen as explained in the section, Working with Location Folders and Location Nodes. The

changed location automatically displays in the Location field in the header of Client Details dialog.

Client Location Dialog

Devices Tab

SpectraGuard® Enterprise User Guide

 Placed on Floormap?: Indicates if the Client is placed on the floor map.

 Currently Active?: Indicates if the Client is currently active.

 Up/Down Since: Specifies the time since the Client is up/down.

 Mode of Operation: Specifies whether the Client is connected to an AP (Infrastructure mode) or to

a peer-to-peer network (Ad hoc mode).

 Ad hoc Cell ID: Specifies the unique ID of the ad hoc network connection of which the selected

Client is a member.

 IP Address: Specifies the IP address for an Authorized or Indeterminate Client.

 Vendor: Specifies the name of the Client manufacturer. The vendor name is inferred from the first

three bytes of the MAC address.

 Protocol: 802.11 protocol in which the Client is operating currently.

 Channel: Specifies the channel number on which the Client operates.

 Security: Shows the security settings for the Client that is Open, WEP, WPA, and so on.

 Quarantine Status: Specifies whether the Client is quarantined. Click to quarantine the

selected Client if a Sensor is available. If a Sensor is not available, the Quarantine Status of the

Client is Quarantine Pending. The changed quarantine status automatically displays in the

Quarantine Status field in the header of Client Details dialog.

Note: If the Client is quarantined a <Remove from Quarantine> button appears in the Client Properties tab. Click <Remove

from Quarantine> to view an Information message and to enable wireless communication to the Client.

 Defending Sensor: If a Client is quarantined, it specifies the name of the Sensor that is actively

preventing the Client from engaging in wireless communication.

 Network: Shows additional information about the IP Address and subnet that identifies the

network on which the Client is located.

 Associated to AP: Specifies the AP’s BSSID to which the Client is associated to. This field appears

only for the Merged APs.

 Bridging/ICS mode: Indicates if the Client is in Bridging/ICS mode.

 First Detected At: Specifies the date and time when the Client was first detected by the system.

 SpectraGuard SAFE Properties: Displays the properties for the selected SpectraGuard SAFE Client

 First Name

 Last Name

 Hostname

 Email

 SAFE Version

 SAFE Build

 Activation Date

 Wireless Risk Level

 SpectraGuard SAFE status

Note: SAFE Details are visible for only those Clients that have SAFE installed.

To add the selected Client to the Banned List, click . This is available only for non-authorized Clients.

To delete data for the selected Client and re-initialize data gathering, click .

To refresh the Client Details screen, manually click . The system does not auto refresh Client Details dialog.

Devices Seeing Client Section

Under Device Seeing Client, you can view a list of devices (which could be either Clients or Sensors) that can see the

selected Client. The details of these devices such as Device Active/Inactive icon, Name and RSSI of the Client seen by

Devices Tab

SpectraGuard® Enterprise User Guide

that device are displayed in the rows. To view details of a specific Device seeing the current Client, click Name, and a

new Client Details or Sensor Details dialog appears.

Note: Total gives the total number of devices seeing the Client.

Recently Associated APs/Ad hoc Networks Section

Under Recently Associated APs/Ad hoc Networks, you can view a list of APs/Ad hoc networks to which the Client

was associated to. APs/Ad hoc Network details such as AP/Ad hoc Network Active/Inactive icon, AP Name/Ad hoc

ID, SSID, Last Detected At (which shows the date and time or Present, Present when the association is currently

active.) are displayed in the rows. The criteria for Recent Association is either 12 hours or 100 thousand APs/Ad hoc

Networks (this is the total number of associations in the system and not per device). To view details of a specific

AP/Ad hoc Network or the AP, click AP Name/Ad hoc ID, and the AP Details screen/Ad hoc Networks screen

opens.

The following table lists the Recently Associated APs/Ad hoc Networks rows, their conditions, and color code.

Mode, Condition, and Color code of Recently Associated APs/Ad hoc Networks

Mode

Condition

Color

Infrastructure

AP is Authorized Non Guest and Client Authorized

GREEN

AP is External and Client is Unauthorized

BLUE

AP is Authorized Guest and Client is Non-

authorized/Uncategorized

BLUE

AP is Deleted or Client is Deleted

WHITE

AP is Uncategorized and Client is Non-authorized/Uncategorized

WHITE

AP is External and Client is Uncategorized

WHITE

AP is Mis-configured

RED

AP is Banned or Client is Banned

RED

Client is Authorized and AP is Authorized

GREEN

Client is Authorized and AP is Potentially Authorized

GREEN

Client is Authorized and AP is Misconfigured Authorized

RED

Client is Authorized and AP is Guest

RED

Client is Authorized and AP is External

RED

Client is Authorized and AP is Potentially External

RED

Client is Authorized and AP is Rogue

RED

Client is Authorized and AP is Potentially Rogue

RED

Client is Authorized and AP is Indeterminate

RED

Client is Guest and AP is Authorized

RED

Client is Guest and AP is Potentially Authorized

RED

Client is Guest and AP is Guest

GREEN

Client is Guest and AP is External

WHITE

Client is Guest and AP is Potentially External

WHITE

Client is Guest and AP is Rogue

RED

Client is Guest and AP is Potentially Rogue

RED

Client is Guest and AP is Indeterminate

RED

Client is Rogue and AP is Authorized

RED

Client is Rogue and AP is Potentially Authorized

RED

Client is Rogue and AP is Guest

RED

Client is Rogue and AP is External

RED

Client is Rogue and AP is Potentially External

RED

Client is Rogue and AP is Rogue

RED

Client is Rogue and AP is Potentially Rogue

RED

Client is Rogue and AP is Indeterminate

RED

Devices Tab

SpectraGuard® Enterprise User Guide

Client is External and AP is Authorized

RED

Client is External and AP is Potentially Authorized

RED

Client is External and AP is Guest

RED

Client is External and AP is External

WHITE

Client is External and AP is Potentially External

WHITE

Client is External and AP is Rogue

RED

Client is External and AP is Potentially Rogue

RED

Client is External and AP is Indeterminate

WHITE

Client is Uncategorized and AP is Authorized

RED

Client is Uncategorized and AP is Potentially Authorized

RED

Client is Uncategorized and AP is Guest

WHITE

Client is Uncategorized and AP is External

WHITE

Client is Uncategorized and AP is Potentially External

WHITE

Client is Uncategorized and AP is Rogue

RED

Client is Uncategorized and AP is Potentially Rogue

RED

Client is Uncategorized and AP is Indeterminate

WHITE

Ad hoc

Client is Non-authorized/Uncategorized

BLUE

Client is Banned

RED

Note: Default row color is RED for both Infrastructure and Ad hoc mode.

Recently Probed SSIDs

Under Recently Probed SSIDs, you can view list of SSIDs which the Client has probed. Probed SSID details are

presented in rows containing the columns: SSID column which shows the SSID and Detail column which provides

additional details about the SSID in terms of being in the Vulnerable/HotSpot SSID list or not.

If SSID is present in HOTSPOT or Vulnerable list of SSIDs then it is marked in Red, otherwise it is marked in white.

Fields in the Client Events Tab

To open the Client Events tab on the Devices screen right-click a Client row and select the Events menu item

Devices Tab

SpectraGuard® Enterprise User Guide

Client Events Tab

The Client Events tab enables you to view the events details of a Client

 For the columns in the Events details screen, refer to the Events Tab chapter for more details.

 Check the Click to select or deselect all Events checkbox to select all the Events displayed on that page.

 Click Delete to delete the selected events.

 Click Acknowledge to add comments for the selected events.

Fields in the Client Performance Tab

To open the Client Performance tab on the Devices screen right-click a Client row and select the Performance menu

item

Devices Tab

SpectraGuard® Enterprise User Guide

Client Performance Tab

The Client Performance tab enables you to view the data related to Client performance in chart form.

Line Charts are shown on the Performance Tab. Choose one of the Chart types available from the Select Chart drop-

down list:

 Average Data Rate: Sensor keeps track of transmission rates of data frames in Client’s associations (across

multiple associations if that is the case) and reports weighted average transmission rate over each time

interval.

 Traffic: Sensor reports data traffic sent and received by Client (across multiple associations if that is the case)

over each time interval. The channel-rotating Sensor spends only a percentage of total time on any given

channel; therefore this parameter typically underestimates the actual traffic by a factor equal to the total

number of channels scanned by the Sensor radio. For example, if b/g radio on the Sensor scans 11 channels

in all, the measured traffic will be about 1/11th of the actual traffic if the traffic is continuous. Similarly, if a

radio on the Sensor scans 30 channels in all, the measured traffic will be about 1/30th of the actual traffic.

However, if the traffic comes in bursts, straightforward scaling as above cannot be applied.

Click to view enlarged Chart on the left hand side. Click to view enlarged Chart on the right hand side.

Fields in the Client Troubleshoot Tab

To open the Client Troubleshoot tab on the Devices screen right-click a Client row and select the Start

Troubleshooting menu item.

Devices Tab

SpectraGuard® Enterprise User Guide

Packet Level Troubleshooting for an Client

1. Select the Troubleshooting Mode and set the corresponding Timeout interval. If you select Packet

Level Troubleshooting, ensure that the Sensor used for troubleshooting is reachable from the computer

used to launch the Console.

Note: A troubleshooting session automatically times out or terminates after the Timeout irrespective of the activity. You can

manually stop troubleshooting from the device context-sensitive menu by selecting Stop Troubleshooting or from the

Troubleshooting tab by clicking <Stop Troubleshooting>.

2. Under Sensor Selection, select the Sensor to use for troubleshooting. Sensor Status appears as Normal

Operation, Busy in Quarantine, or Busy in Troubleshooting. Within each category, Sensors are sorted based

on availability and signal strength.

Note: Do not select a Sensor that is Busy in Quarantine or Busy in Troubleshooting. If you select a Sensor that is Busy in

Quarantine, the troubleshooting operation fails.

3. Under Protocol and Channel Selection:

 If the Client is associated to an AP, by default the Client troubleshoots on the Protocol (802.11an or

802.11b/gn) and Channel of the AP on which the Client is associated.

 If the Client is not associated to any AP, then by default both the protocols 802.11an and

802.11b/gn are selected and Rotate on all channels is selected. The user can also select the 802.11n

protocol, the corresponding channel(s) and width on which the chosen Sensor should initiate

troubleshooting.

Note: A Configuration template is assigned to each Sensor. The Channels list contains only those channels enabled for scanning

in that Configuration template. If no channel in a Protocol is enabled, then the Protocol option is disabled. Thus, the Channels

list and the status of the Protocol checkboxes change with the Sensor selected.

4. Under Packet Selection, choose to view all the packets visible to the selected Sensor or only the packets

from the selected device visible to the Sensor.

Devices Tab

SpectraGuard® Enterprise User Guide

5. Click <Start Troubleshooting> to begin the session. If the Sensor is assigned a Configuration template,

where no channels are selected for scanning, an error message displays.

Packet Level Troubleshooting Confirm Dialog

6. On the Confirm dialog, you may have two or three packet capture tool options, depending on the

licensing agreement with AirTight Inc. Select a packet capture tool. If you have a product license that

has OmniPeek support, you have three packet capture tool options – Wireshark, OmniPeek, and ‘Other’.

If you have a product license that does not have OmniPeek support, you have two packet capture tool

options – Wireshark and ‘Other’. Select the ‘Other’ option for other tools that you can use to capture

packets. Typical packet capture tools are Tcpdump, Ethereal, Wireshark, OmniPeek, and others. You

must use Tcpdump and Ethereal with Rpcap support. Tcpdump, Ethereal, and Wireshark are available

freely on the Internet.

7. If you click <Wireshark>, and the application is installed correctly, the system launches the application

and the packet capture session begins immediately. Alternatively, if you do not have Wireshark

installed, an Error dialog appears.

Devices Tab

SpectraGuard® Enterprise User Guide

System unable to Launch Wireshark Dialog

8. On the Error dialog, there are three possibilities:

 You can download and install Wireshark and optionally install WinPcap. Wireshark requires a

compatible version of WinPcap. If the installed version and expected version mismatch, you need

to install the suggested and expected version of WinPcap.

 If the system does not find Wireshark installed at the default location, ‘C:\Program

Files\Wireshark’, Wireshark is not launched automatically. To launch Wireshark manually, click

Browse to specify the appropriate location and click OK.

 To launch Wireshark manually from the command prompt, you need to copy and paste the link to

set up a direct connection with the Sensor and view live packets.

9. If you click OmniPeek, ensure that the application and the OmniPeek Airtight Adapter are correctly

installed. If you have these installed at some other location, click Browse to specify the appropriate

location. The installation location for OmniPeek could be other than the default location, ‘C:\Program

Files\WildPackets\OmniPeek\’.

10. Click OK. The system launches the application and the packet capture session begins immediately.

Alternatively, if you do not have the OmniPeek tool installed, you should install the same with

appropriate purchase from WildPackets Inc. Airtight does not provide installation of OmniPeek.

Devices Tab

SpectraGuard® Enterprise User Guide

Launching OmniPeek

Fields in the Client Locate Tab

To open the Client Locate tab, on the Devices screen, right-click a Client row and select the Locate menu item. The

Floor Map View of a Client displays the location of the Locating Device which shows the probable location of the

Client on the floor map, if the Sensor monitoring the Client is on the floor map.

Client Locate Tab – Floor Map View

The Client Locate tab enables you to view the following details of a Client.

 Monitoring Device Filter

 Image Opacity

 Location Name

 Total Area

Devices Tab

SpectraGuard® Enterprise User Guide

 Device Location Region

 Location Probability

Click Thermometer View to view the distance from Locating Device in feet/meter from the Sensor(s) to which the

Client is visible. Refer to Locating an AP/Client placed on the Floor Map for details.

Filtering in Clients

To focus your attention to a subset of Clients based on a filtering criteria (such as device type, or protocol, and so on)

system provides you with the capability to filter Clients. Use the following steps to filter Clients:

1. On the Devices screen, click the Clients tab and click the Filter icon to open the Filter Devices -

Client dialog.

Filter Devices - Client

2. Under Text Filter, select one or more of the following checkboxes and enter the appropriate values

manually for searching data related to it:

 Name

 MAC

 SSID

 Tag

 Vendor

 Associated AP

3. Select the Device Type check box, select one or more of the following check boxes:

 Active

 Inactive

4. Select First Detected check box, click the icon to specify the first detected date and time of the Client

and then click <OK>. The search displays the Clients, which were first detected by the system after the date

as specified above.

5. Select the Protocol check box, select one or more of the following check boxes:

Devices Tab

SpectraGuard® Enterprise User Guide

 a

 b/g

 11n

6. Select the Quarantine check box, select one or more of the following check boxes:

 Active

 Pending

 Stopped

7. Select the SAFE Status check box, select one or more of the following check boxes:

 Active

 Not Installed

 Inactive

8. Select the SAFE Risk Status check box, select one or more of the following check boxes:

 High

 Medium

 Low

9. Select the Operating Mode check box, select one or more of the following check boxes:

 Infrastructure

 Ad hoc

10. Select the Smart Device Type check box, select the smart device type from the list, and select one of

Approved, Unapproved or both Approved as well as Unapproved.

11. To save and apply the Client filtering criteria, click OK. When the filter is applied it is denoted by Filter

On on the Console, if no filter is applied it is denoted by Filter Off on the Console.

Smart Device Detection

A smart device is a wi-fi and internet enabled, high-end, handheld digital device. Some smart devices can be used in

place of a laptop or a personal computer. The system can detect smart devices automatically. The smart device

detection feature is useful when it comes to defining the intrusion prevention policy. It also helps to know how

many smart devices are in the network.

The system automatically detects iPhone, i PodTouch, iPad, Blackberry, Android, Nokia, Motorola, Samsung, and

HTC smart devices. The system detects smart devices that are authorized or guest clients only. You can also

manually tag an authorized client or a guest client as a smart device. Authorized clients can be further classified as

approved or unapproved smart devices. There is no such distinction in case of guest clients.

When an authorized smart device is detected automatically for the first time, it is shown on the UI as an unapproved

smart device, by default. You can manually tag an authorized smart device as an approved smart device. When a

guest smart device is detected automatically for the first time, it is shown on the UI as a smart device.

The smart device for some of the device types can also get detected based on the Organizational Unique Identifier

(OUI) of the MAC address of the individual devices. You can set, modify,or delete the OUIs through the server

command line interface, using the set smart device oui command. For details on the command, refer to the 'Server

Config Shell Commands' section in the 'Config Shell Commands' chapter in the Installation Guide.

The following sections describe how to manually tag/untag smart devices.

Manually tagging authorized clients as smart devices

You can manually tag one or more authorized clients as smart devices, if they have not already been detected as

smart devices automatically.

Tagging an authorized client as an approved smart device

Under Devices->Clients->Categorized->Authorized tab, click to select the client row to be tagged as an approved

smart device. Right-click this row to view the menu. Click Smart Device->Approved option to tag the client as an

approved smart device. Follow the same procedure to tag an unapproved smart device as an approved smart device.

The following figure shows the right-click menu options.

Devices Tab

SpectraGuard® Enterprise User Guide

Tagging an Authorized Client as a Smart Device

The following figure shows the approved smart device. An approved smart device is indicated by the icon.

Devices Tab

SpectraGuard® Enterprise User Guide

Approved smart device

Tagging an authorized client as an unapproved smart device

Under Devices->Clients-> Categorized->Authorized tab, click the client row to be tagged as an unapproved smart

device. Right-click this row and click the Smart Device->Unapproved option to tag the client as an unapproved smart

device. To tag multiple clients at the same time, hold down the <Ctrl> key and click the desired rows one by one.

Follow the same procedure to tag an approved smart device as an unapproved smart device.

The following figure shows the menu option for unapproved smart device.

Devices Tab

SpectraGuard® Enterprise User Guide

Tagging a Client as Unapproved Smart Device

The following figure shows the unapproved smart device.

Devices Tab

SpectraGuard® Enterprise User Guide

Unapproved smart device

An unapproved smart device is indicated by the icon.

Removing the smart device tag for authorized clients

Under Devices->Clients-> Categorized->Authorized tab, click the smart device (client) row to be untagged. Right-

click this row and click the Smart Device->Not a Smart Device option to remove the smart device tag from the client

device. To tag multiple clients at the same time, hold down the <Ctrl> key and click the desired rows one by one.

The following figure shows the menu option to be selected to remove the smart device tag for authorized clients.

Devices Tab

SpectraGuard® Enterprise User Guide

Remove the smart device tag

Manually Tagging Guest clients as Smart Devices

You can manually tag one or more guest clients as smart devices, if they have not already been detected as smart

devices automatically. Under Devices ->Clients-> Categorized->Guest tab, click the client row to be selected. Right-

click this row and click the Is a Smart Device option to tag the client as a smart device.

Devices Tab

SpectraGuard® Enterprise User Guide

Tagging a Guest Client as a smart device

Removing the smart device tag from guest clients

You can manually remove the smart device tag from a guest client. Follow the steps given below.

1. Under Devices->Clients->Categorized->Guest, click to select the client row.

2. Right-click this row and select Smart Device->Not a Smart Device to remove the smart device tag.

Devices Tab

SpectraGuard® Enterprise User Guide

Untagging a smart device

Changing the smart device type

You can change the smart device type of authorized and guest clients. To change the smart device type, select the

authorized client or the guest client row, right-click and select Smart Device->Change Device Type. Here, you can

select from the list of available smart devices or directly type in a new smart device type as shown in the figures

below, and click OK.

Change smart device type - Select from the existing list

Devices Tab

SpectraGuard® Enterprise User Guide

Change smart device type - Add a new device type

Note: To delete a smart device type added from Select Type of Smart Device dialog, go to Administration->Global-Device

Settings->Smart Device Type.

Sensor Context-Sensitive Menu

Sensors proactively scan the network and generate events. Sensors communicate event information to the system.

Sensors monitor various channels in which the 802.11 devices operate. The context-sensitive menu for Sensors

enables you to:

 View a Sensor’s details

 Events associated with the Sensor

 Performance Charts of the Sensor

 Edit a Sensor’s properties

 Troubleshoot a Sensor

 Reboot a Sensor

 Delete a Sensor

 Change device template

 Change sensor location

 Upgrade/Repair a Sensor

Method for Opening Sensor Menu

To open a Sensor context-sensitive menu, click the Devices tab and then right-click a Sensor row to open the context-

sensitive menu.

Devices Tab

SpectraGuard® Enterprise User Guide

Sensor Context-Sensitive Menu

Items in the Sensor Context-Sensitive Menu

The Sensor context-sensitive menu includes the following items.

 Details: Opens the Properties tab of the Sensor Device dialog, which allows you to:

 View/Edit the Sensor’s name

 Change the Configuration Template assigned to the Sensor

 Assign a user-defined location tag so that you can easily locate the Sensor; the location of a

manually tagged Sensor is shown with an asterisk (*) under the Location column

 Enables you to view Primary details of the Sensor Visible Clients Visible APs Visible VLANs

 Performance: Opens the Performance tab of the Sensor Device dialog, which allows you to view

performance graphs for the Sensor.

 Events: Opens the Events tab of the Sensor Device dialog, which allows you to view events associated

with the Sensor, so that you can take whatever actions are necessary.

 Reboot: Enables you to restart the Sensor.

 Delete: Enables you to delete a selected Sensor; you are prompted to confirm this action.

 Start Troubleshooting: Opens the Troubleshoot tab of the Sensor Device dialog, which allows you to

start a troubleshooting session in Packet Level Mode. This option is not available in case of Sensor/AP

Combo.

 Stop Troubleshooting: Available only if a troubleshooting session is in progress, this option enables

you to manually terminate the session. This option is not available in case of Sensor/AP Combo.

 Change Device Template: Opens the Select Sensor Template dialog. Refer to the section Device

Template for more details. The Select Sensor Template dialog enables you to:

 View the list of configured Sensor templates

 Change the Sensor template of the selected Sensor(s)

 Change Location: Opens the Location Tag dialog that enables you to:

Devices Tab

SpectraGuard® Enterprise User Guide

 View a complete list of locations

 Change the location of the selected Sensor (see Manual Location Tagging)

 Upgrade/Repair: Opens the Confirm Upgrade/Repair of Sensor(s) to Build X dialog that enables

you to upgrade the Sensor version or repair a Sensor.

 Cancel Upgrade/Repair: Enables you to cancel the repair/upgrade process for a Sensor in

Upgrade/Repair Pending state.

Sensor Details Dialog

You can open the Sensor Details dialog in the following manner:

 On the Devices screen, right-click a Sensor row and then select the Details menu item. The Sensor Details

dialog has the following tabs: Properties, Events, Performance,Spectrum and Troubleshoot. The Properties

tab appears by default and is treated as the current tab.

Sensor Properties Tab

Fields in the Sensor Properties Tab

The Sensor Properties tab enables you to view/edit the properties of a Sensor and consists the following.

 Sensor Name: Click and specify the name used to identify the Sensor in the Sensor Name dialog. Click

Save. The new Sensor name automatically displays in the Device Name field in the header of the Sensor

Details dialog.

Devices Tab

SpectraGuard® Enterprise User Guide

Sensor Name Dialog

 MAC Address: Specifies the unique 48-bit IEEE format address of the Sensor assigned to the network

adapter by the manufacturer.

 Device Tag: Click to specify text that provides additional information about the Sensor in the Device

Tag dialog. Click Save to save the device tag.

Sensor Device Tag Dialog

 Country of Operation: Specifies the country in which the Sensor operates.

 Sensor Model: Specifies the model number of the Sensor.

 Sensor IP Address: Specifies the Sensor’s IP address, that is, the IP Layer or Layer 3 address. Click the

hyperlink to open the SSH Access to Sensor dialog. This dialog displays the IP Address and Login Name of

the Sensor you can log in to. You can access the Sensor using an SSH Client, which you can freely download

from the Internet. The Sensor IP address also displays in the IP Address field in the header of the Sensor

Details dialog on all tabs.

Note: Multiple Sensor IP Addresses are displayed if IPv6 is enabled on the server CLI.

SSH Access to Sensor Dialog

On connecting to the Sensor using the IP Address and Login Name, the SSH Secure Shell window appears. This is

the Sensor Config shell.

Devices Tab

SpectraGuard® Enterprise User Guide

Sensor Config Shell

 Configuration Template: Shows the current configuration template assigned to the Sensor. Refer to the

Device Template section for more details. In order to change the Sensor Configuration Template, Click

to open the Select Sensor Template dialog. Select the appropriate Sensor template and click <OK> to

assign that Sensor template to the Sensor.

Select Sensor Template Dialog

 Location: Shows you the name of the Sensor’s location. The Sensor Location name always displays in the

Location field in the header of the Sensor Properties Tab dialog.

Click to open the Location Tag dialog. Here, you can view the complete list of locations and choose a

location for the Sensor. To view the list of locations, you must first set up your list of locations on the

Locations screen as explained in the section, Working with Location Folders and Location Nodes.

Devices Tab

SpectraGuard® Enterprise User Guide

Sensor Location Tag Dialog

You cannot change the location of a Sensor placed on a floor map. If you attempt to do so, an error message appears.

A Sensor placed on a floor map is automatically assigned the location tag of that location. To change the location tag,

you must first delete the Sensor from the floor map.

 Placed on Floormap?: Indicates if the Sensor is placed on the floor map.

 Currently Active?: Indicates if the Sensor is currently active.

 Up/Down Since: Indicates the time since the Sensor is up/down.

 Channels Scanned (a): Specifies the 802.11a channels on which Sensor is configured to scan.

 Channels Defended (a): Specifies the 802.11a channels on which the Sensor is configured to defend.

 Channels Scanned (b/g): Specifies the 802.11 b/g channels on which Sensor is configured to scan.

 Channels Defended (b/g): Specifies the 802.1b/g channels on Sensor is configured to defend.

 Channels Scanned (Turbo a): For turbo APs, specifies the 802.11a channels on which the Sensor is

configured to scan.

 Channels Scanned (Turbo b/g): For Turbo APs, specifies the 802.11 b/g channels on which the Sensor is

configured to scan.

 Busy in Quarantine? Indicates if the Sensor is currently busy quarantining a device. The quarantine status is

always displayed in the Quarantine Status field in the header of the Sensor Details dialog for every tab.

 Sensor Software Build: Shows you the build number of software loaded in the Sensor.

 First Detected At: Specifies the date and time when the system first detected the Sensor.

 Busy in Troubleshooting?: Indicates whether the Sensor is currently busy capturing packets for

troubleshooting.

 Sensor Mode: Specifies the mode of Sensor: Sensor, ND, or Sensor/AP Combo.

 AP Mode: Indicates whether AP mode is enabled or disabled, that is whether the device is in AP mode or

not.

 SSIDs configured: Specifies the SSIDs configured for the device in case AP mode is enabled. One or more

SSIDs will be seen here, depending on the number of SSIDs configured in the device template for this device.

To delete data for the selected Sensor and re-initialize data gathering, click .

Devices Tab

SpectraGuard® Enterprise User Guide

To refresh the Sensor Details screen manually click . The system does not auto refresh after a pre-defined interval.

Visible Clients Section

Under the Visible Clients Section, you can view a list of Clients that the selected Sensor can see. Client details such

as Name and RSSI received by the Sensor are displayed in the rows. To view details of a specific Client, click Name

the Client Details screen opens.

Note: Total gives the total number of visible Clients that the selected Sensor can see.

Visible APs Section

Under the Visible APs Section, you can view a list of APs that the selected Sensor can see. AP details such as Name

and RSSI received by the Sensor are displayed in the rows. To view details of a specific AP, click Name the AP

Details screen opens.

Note: Total gives the total number of visible APs that the selected Sensor can see.

Visible VLANs Section

Under the Visible VLANs Section, you can view a list of VLANs that the selected Sensor can see. VLAN details such

as VLAN ID, IP Address, Net Mask, and Status are displayed in the rows. VLAN over which the Sensor is

communicating with the server is marked with an asterix(*).

Note: Total gives the total number of visible VLANs that the selected Sensor can see.

Sensor Events Tab

To open the Sensor Events tab on the Devices screen right-click a Sensor row and select the Events menu item

Devices Tab

SpectraGuard® Enterprise User Guide

Sensor Events Tab

The Sensor Events tab enables you to view the event details involving the selected Sensor.

For the columns in the Events details screen, refer to the Events Tab chapter for more details.

Check the Click to select or deselect all Events checkbox to select all the Events displayed on that page.

Click Delete to delete the selected events.

Click Acknowledge to add comments for the selected events.

Sensor Performance Tab

To open the Sensor Performance tab on the Devices screen right-click a Sensor row and select the Performance

menu item

Devices Tab

SpectraGuard® Enterprise User Guide

Sensor Performance Tab

The Sensor Performance tab enables you to view the data related to performance of a Sensor in chart form.

Line Charts are shown on the Performance Tab. Choose one of the Chart types available from the Select Chart drop-

down list:

 Active APs: Sensor samples the number of active APs on each channel at the end of each time interval.

 Active Clients:Sensor samples the number of associated Clients on each channel at the end of each time

interval.

 Interference:Sensor reports average interference on each channel over each time interval.

A button such as next to the chart type selection shows you the current channel and channel width

used in the chart display. Clicking on allows you to select a new channel and width. Specify the

Channel Number and Width from the respective drop-downs in the Sensor Performance Tab – Select Channel

dialog.

Note: Width is enabled only for 11n Sensors.

Sensor Performance Tab – Select Channel

Click to view enlarged Chart on the left hand side. Click to view enlarged Chart on the right hand side

Devices Tab

SpectraGuard® Enterprise User Guide

Sensor Spectrum Tab

On the Devices screen, right-click a Sensor row and then select the Details menu item. Select the Spectrum tab to

view the Spectrogram, or Channel Crowding details. Spectrogram is a graphical representation of the interference for

the selected radio and time frame. At a given point in time, either the Spectrogram or the Channel Crowding is seen

in this tab. By default you will see the Channel Crowding in this tab.

Spectrogram

To see the Spectrogram, click Show Spectrogram.

Sensor Details- Spectrogram

Select the radio band and the time interval for which the impedance is to be viewed. The legend for the power ratio is

given at the bottom for reference.

Channel Crowding

Click Channel Crowding to view the graphical representation of the APs and clients detected on various channels by

the sensor, for the selected radio and time frame.

Devices Tab

SpectraGuard® Enterprise User Guide

Sensor Troubleshoot Tab

To open the Sensor Troubleshoot tab on the Devices screen right-click a Sensor row and select the Start

Troubleshooting menu item.

Devices Tab

SpectraGuard® Enterprise User Guide

100

Sensor Troubleshoot tab

1. Select the Troubleshooting Mode and set the corresponding Timeout interval. If you select Packet

Level Troubleshooting, ensure that the Sensor used for troubleshooting is reachable from the computer

used to launch the Console.

Note: A troubleshooting session automatically times out or terminates after the Timeout irrespective of the activity. You can

manually stop troubleshooting from the device context-sensitive menu by selecting Stop Troubleshooting or from the

Troubleshooting tab by clicking <Stop Troubleshooting>.

2. Under Protocol and Channel Selection, by default both 802.11an and 802.11b/gn protocol are selected

and Rotate on all channels is selected. The user can also select the 802.11n protocol, the corresponding

channel(s) and width on which the chosen Sensor should initiate troubleshooting.

Note: A Configuration template is assigned to each Sensor. The Channels list contains only those channels enabled for scanning

in that Configuration template. If no channel in a Protocol is enabled, then Troubleshooting in that protocol is not possible.

Thus, the Channels list and the status of the Protocol checkboxes change with the Sensor selected.

3. Click Start Troubleshooting to begin the session. If the Sensor is assigned a Configuration template,

where no channels are selected for scanning, an error message displays.

Devices Tab

SpectraGuard® Enterprise User Guide

101

Packet Level Troubleshooting Confirm Dialog

4. On the Confirm dialog, you may have two or three packet capture tool options, depending on the

licensing agreement with AirTight Inc. Select a packet capture tool.

If you have a product license that has OmniPeek support, you have three packet capture tool options –

Wireshark, OmniPeek, and ‘Other’. If you have a product license that does not have OmniPeek support, you

have two packet capture tool options – Wireshark and ‘Other’. Select the ‘Other’ option for other tools that you

can use to capture packets. Typical packet capture tools are Tcpdump, Ethereal, Wireshark, OmniPeek, and

others. You must use Tcpdump and Ethereal with Rpcap support. Tcpdump, Ethereal, and Wireshark are

available freely on the Internet.

5. If you click Wireshark, and the application is installed correctly, the system launches the application

and the packet capture session begins immediately. Alternatively, if you do not have Wireshark

installed, an Error dialog appears.

Devices Tab

SpectraGuard® Enterprise User Guide

102

System unable to Launch Wireshark Dialog

6. On the Error dialog, there are three possibilities:

 You can download and install Wireshark and optionally install WinPcap. Wireshark requires a

compatible version of WinPcap. If the installed version and expected version mismatch, you need

to install the suggested and expected version of WinPcap.

 If the system does not find Wireshark installed at the default location, ‘C:\Program

Files\Wireshark’, Wireshark is not launched automatically. To launch Wireshark manually, click

Browse to specify the appropriate location and click OK.

 To launch Wireshark manually from the command prompt, you need to copy and paste the link to

set up a direct connection with the Sensor and view live packets.

7. If you click OmniPeek, ensure that the application and the OmniPeek Airtight Adapter are correctly

installed. If you have these installed at some other location, click Browse to specify the appropriate

location. The installation location for OmniPeek could be other than the default location, ‘C:\Program

Files\WildPackets\OmniPeek\’.

8. Click OK. The system launches the application and the packet capture session begins immediately.

Alternatively, if you do not have the OmniPeek tool installed, you should install the same with

appropriate purchase from WildPackets Inc. Airtight does not provide installation of OmniPeek.

Devices Tab

SpectraGuard® Enterprise User Guide

103

Launching OmniPeek

Filtering in Sensors

To focus your attention to a subset of Sensors based on a filtering criteria (such as device type, up/down since, and so

on) system provides you with the capability to filter Sensors. Use the following steps to filter Sensors:

1. On the Devices screen, click the Sensor tab and click the Filter icon to open the Filter Devices -

Sensors dialog.

Filter Devices – Sensors

2. Under Text Filter, select one or more of the following check boxes and enter the appropriate values

manually for searching data related to it:

 Name

 MAC

 IP Address

 Build No

 Model Name

3. Select the Device Type check box, select one or more of the following check boxes:

 Active

Devices Tab

SpectraGuard® Enterprise User Guide

104

 Inactive

4. Select the Up/Down Since check box, click the icon to specify the up/down since date and time of

the Sensor and then click OK. The search displays the Sensors, which were first detected by the system

after the date as specified above.

5. Select the Operating Mode check box, select one or more of the following check boxes:

 Sensor

 ND

 Sensor/AP Combo

6. Under Sensor Template, select the template name from the drop down box for searching data related to

it.

7. To save and apply the Sensor filtering criteria, clickOK. When the filter is applied it is denoted by Filter

On on the Console, if no filter is applied it is denoted by Filter Offon the Console.

Network Details Dialog

You can open the Network Details dialog in the following manner:

On the Devices tab, click the Networks tab. Right-click a network row and then select the Details menu item.

Navigating to Network Details dialog

The Network Details dialog has the following tabs: APs and, Sensors.

APs tab

The APs tab appears by default. The following screen displays the Network Details dialog.

Devices Tab

SpectraGuard® Enterprise User Guide

105

Network Details – APs

All APs associated with the network, and with the location including the sub locations under that location, are seen

in APs tab under Network Details.

Fields in Network Details are as follows:

Network Name: specifies the network name

Allowed SSIDs: : This is the list of SSIDs allowed (from SSID templates) on this network at or below the location of

this network.

Gateway MAC: specifies the gateway MAC address.

Network: specifies the IP address of the network.

Location: specifies the network location.

Monitoring sensor: specifies the sensor monitoring the network.

The fields in the APs tab are the same as seen in Devices->AP tab.

You can select the fields that you want to view by clicking the icon.

You can view the AP details dialog by double clicking any AP row.

Note: Uncategorized APs are seen as rows with white background.

The Sensors tab appears on the Network Details dialog. The following screen displays the Sensors tab.

Devices Tab

SpectraGuard® Enterprise User Guide

106

Network Details – Sensors

The fields in the Sensors tab are the same as seen in Devices->Sensors tab.

You can select the fields that you want to view by clicking the icon.

You can view the Sensor details dialog by double clicking any sensor row.

Note: Only currently active sensors in the network are seen in the Sensors tab under Network Details.

Changing the location of a network

Location of a network is same as location of the Sensor that reported the network first. If there are multiple sensors

connected to a network, location of such network is the nearest common location of all reporting sensors. To change

the location of the network, right click the network row whose location you want to change. Following figure

displays the method to change location.

Devices Tab

SpectraGuard® Enterprise User Guide

107

Changing the network location

Click the Change location menu item.

The following screen appears on clicking Change Location.

Select the new location

Select the new location and click OK to move the network to the new location. To cancel the operation, click Cancel.

On selecting a new location, the network is seen under the new location.

Deleting a network from Networks Tab

Devices Tab

SpectraGuard® Enterprise User Guide

108

To delete a network from the Networks tab, right click the network row you want to delete. Following figure

displays the method to delete network from networks tab.

Delete a network

Click the Delete option. The following message box is displayed.

Confirm network deletion

To delete the selected network, click Yes. To cancel the network deletion, click No.

The network will not be deleted if it is being monitored by a sensor.

Locating an AP/Client placed on the Floor Map

The system enables you to find the distance of a device from various Sensors to which it is visible and determine the

possibility that the tracked device is present at a certain location on the floor map. Location tracking in a dynamic

wireless environment works on probabilities. Use the following steps to locate a device:

1. Open an AP/Client list using the steps explained in the Viewing APs/Clients List section.

2. Right-click an AP/Client row.

Devices Tab

SpectraGuard® Enterprise User Guide

109

3. From the context-sensitive menu, select Locate. A Tracking Location progress bar followed by a Locate

tab appears. The Locate tab displays the distance in feet and meter of the selected device from the

locating device, which appears in the Thermometer View. Alternatively, if the device for which you are

searching is not visible to any Sensor, a message appears.

AP Locate Tab – Thermometer View

Distance from Locating Device displays the approximate distance of the device (AP/Client) being located

from the Locating Device which does RSSI measurement. RSSI measurement can be taken by the Sensor or

the AP, if RSSI integration is enabled with the AP.

4. Click Floor Map View to view the current location of the AP/Client on the Floor Map.

Devices Tab

SpectraGuard® Enterprise User Guide

110

AP Locate Tab – Floor Map View

Note: The Floor Map View appears only if you have placed Authorized APs and Sensors on the Floor Map.

The Floor Map View dialog displays color shaded regions around Sensors and APs with colors indicating the

probability of the location of the device. It displays Location Probability slider which shows the color coding from

low to high probability. Based on the slider position, the system color codes only those locations on the map where

the probability of locating the device is higher than the value set in this slider bar. You can move the Location

Probability slider to High to select regions where the probability of locating the device is higher.

Note: If you move the slider to Low, you see locations with both low and high probabilities. The number and placement of

Sensors helps determine the accuracy of location tracking. Increasing the number of Sensors enhances the location tracking

accuracy.

5. Click the icon to open the Monitoring Device Filter dialog. In this dialog, you can specify which

APs/Sensors at the current location or other locations used to locate the current device location on the

floor map. You can specify the following:

 To use APs and/or Sensors from the current floor only, select Use signal data from devices at this

location only. This option computes the best possible position for the selected device on the

current floor.

 To use APs and/or Sensors from the other floors also, select Use signal data from devices at other

locations also. This option computes the best possible position for the selected device using

monitoring devices from other floors too. This may result in the selected device being tracked on

some other floor.

You can also specify whether the location tracking should use data from Sensors only, APs only or both.

Devices Tab

SpectraGuard® Enterprise User Guide

111

Monitoring Device Filter Dialog

Removing a Device from Quarantine

The system enables you to remove a device from quarantine so that wireless communication can start on that device.

You can remove a device from quarantine in several ways.

 If the device is automatically quarantined, you can do one of the following:

 Right-click the device row and select Disable Auto-quarantine.

 Change the Intrusion Prevention policy that quarantines the device.

 Deselect the checkbox Activate Intrusion Prevention for location ‘<selected location>’ on the

AdministrationLocal tabLocation PropertiesIntrusion Prevention Activation screen

 Change the classification of a device manually. For example, manually move an AP from the Rogue

folder to the External folder by right-clicking the Rogue AP row and selecting Move to… and then

External. The External AP will move out of quarantine.

 Change the security settings on the SSID template so that the AP no longer violates the specified

security settings. For example, consider an AP that has become misconfigured by virtue of following

the Security Settings, for example WEP at location ‘Floor 1’. This AP violates the Security Settings, for

example WPA in its SSID template. You can now edit the SSID template in such a way that it matches

the configuration of the existing Misconfigured AP. This Misconfigured AP will now become become

policy compliant and thus Authorized. As a result, this AP will move out of quarantine.

 Delete the AP and let the system re-discover it. For example, consider an AP that has become a Rogue

by virtue of following the Security Settings, for example WEP at location ‘Floor 1’. This AP violates the

Security Settings, for example WPA in its SSID template. You can now edit the SSID template in such a

way that the Rogue AP now becomes policy compliant. As the system does not automatically remove

Rogue APs out of quarantine, delete this Rogue AP. The system will re-discover this AP. The AP may

appear in some other device folder and may be moved out of quarantine.

 If the device is manually quarantined, right-click the device row and select Remove from Quarantine.

Moving an AP/Client to a Different Folder

The system enables you to re-classify a device, that is, move a device to a different folder based on fresh information.

You cannot however move Categorized APs/Clients to the Uncategorized folder. Use the following steps to move a

device to a specific folder:

1. Open an AP/Client list using the steps explained in the Viewing APs/Clients List section.

2. Right-click an AP/Client row.

3. From the resulting context sensitive menu, select Move to….

4. Select the category to which you want to move the AP/Client.

Note: If you move an AP placed on a floor map, an Error dialog appears.

Merging APs

Devices Tab

SpectraGuard® Enterprise User Guide

112

Many modern APs have multiple network interfaces and SSIDs on a single device to support 802.11a and 802.11b/g

simultaneously. Each interface has a different MAC address, which causes the system to identify them as different

APs. The system displays such APs in separate rows on the Console. This may lead to confusion.

Merge can be of two types:

1. Automatic: The system performs automatic merge of certain APs based on their MAC addresses or other

available information.

2. Manual: The system allows you to manually merge APs based on their IP addresses or if the system does

not automatically merge them based on the available information.

On selecting two or more AP rows under the Authorized tab, the AP context-sensitive menu shows the Merge option.

Merge allows you to merge two or more MAC addresses (network interfaces) of one or more APs into a single AP.

Select a primary AP to complete the merge operation.

AP Context-Sensitive Menu for Multiple AP Selection

A merged AP has the following characteristics:

 Inherits common properties such as location, AP name, and IP address from the primary AP

 Identified by the icon on the Console

 Can merge with more APs

 Can be separated into its individual interfaces using the Split option

Use the following steps to merge APs into a single AP:

1. Open an Authorized AP list using the steps explained in the Viewing APs/Clients List section.

2. Select the APs that you want to merge and right-click one of the selected AP rows.

3. From the resulting context-sensitive menu, select Merge. A Merge APs dialog appears.

Merging an AP Dialog

4. Select the Primary AP.

5. Click OK to merge the selected APs.

Splitting APs

You need to split APs if they were merged incorrectly either manually or automatically based on the information

available with the system. Use the following steps to split merged APs into individual APs:

1. Open an Authorized AP list using the steps explained in the Viewing APs/Clients List section.

2. Select the merged APs that you want to split and right-click the corresponding AP row.

3. From the resulting context-sensitive menu, select Split. A Confirm dialog appears.

4. Click Yes to split the selected APs.

Devices Tab – User Saved Settings

Devices Tab

SpectraGuard® Enterprise User Guide

113

The following User choices made during browsing of Devices Tab are saved by the system:

 Filtering Devices – APs, Clients, and Sensors.

 Display Columns.

 Column Width and Column order

These settings are saved on log out as well as movement to other tabs on the Console.

Locations Tab

SpectraGuard® Enterprise User Guide

114

Locations Tab

Locations: Panel for Creating Locations

The Locations screen enables you to organize your network into a list of locations and view live 802.11 RF coverage

maps for each location node. On the Locations tab, you can add, delete, and move a location folder or node, import a

floor map on a location node, attach or detach an image from a location, place available locations on an attached

image, and place devices on the floor map. You can also view live RF maps.

Locations Screen

You can open the Locations screen by selecting the Locations tab on the navigation bar.

Locations Screen

The Locations screen includes two panes:

On the left, the Locations tree and a list of available locations and devices.

On the right, the image attached to the selected location, locations placed on a location folder and devices placed on

a location node.

The following table lists the names and description of each component.

Name and description of components on the Locations screen

Sr. No.

Name

Enables you to…

Available Devices

View APs and Sensors available for that node.

Available APs

View a list of Authorized APs not tagged or placed on any

location node.

Available Sensors

View a list of available Sensors not tagged or placed on any

location node.

Locations Tab

SpectraGuard® Enterprise User Guide

115

Look for a device or location in the table.

Sort

Sort devices or locations in ascending/descending order.

Location Details

View the list of locations of a specific location node.

Ruler

View the dimensions of the floor map: in feet.

Resolution

Change the resolution to Low, Medium, or High.

Image Opacity

Control the Opacity of the image: Decrease the value to better

comprehend RF coverage or increase the value to pinpoint exact

device information on the floor map.

Attach Image on floor

Attach an image of a floor map to a location node.

Detach Image from

floor

Detach an attached image.

Save

Save the properties of a location node.

Best Fit

Fit the layout image to the window/page. This is the default

mode in which the layout image appears on the right pane.

Zoom Out

Zoom out of a layout image.

Choose/Enter Value to

Zoom In/Zoom Out

Enter or choose a value from the drop-down combo box, to view

the layout image in terms of an exact zoom percentage.

(Minimum: 1%; Maximum: 1000%)

Zoom In

Zoom into a layout image for an enlarged view.

Refresh

Refreshes the Locations screen.

Printable View

Saves the printable view of the Location as jpg, png, or HTML

format.

Done

Indicates whether the RF View computation on a location is

completed.

Filter

Changes RF Views based on the operating band or particular

radio selected.

Views

Displays the Detection and Prevention range of a Sensor on the

selected location.

Working with Location Folders and Location Nodes

A list of locations comprises location folders and location nodes.

Location folders represent organizational components such as buildings, cities, or countries.

 Root Location: This is the root location. The factory default name for this location is Locations.

You can rename this location. However, you cannot delete or move this location.

 Unknown: This is the default location folder of the root location. You cannot create, delete,

rename, move, or add a location to the Unknown folder. When the system detects a new

untagged Sensor, it tags this Sensor to the Unknown location folder. In other words, when the

location tag of a location-aware entity is not known or cannot be determined, it is tagged to the

Unknown folder. By default, the Unknown folder inherits all the policies except the Operating

Policies from the root location. You can customize these policies (see Local Policies).

Location nodes represent component details such as a floor in a building. For example, Hawaii Conference Room,

Bldg 15–Cubicle G2, or Executive Area.

Adding a New Location

Use the following steps to add a location:

1. In the Location tree, select the location under which you wish to add a new location.

2. Right-click and from the resulting context-sensitive menu, select Add New Location.

Locations Tab

SpectraGuard® Enterprise User Guide

116

Adding a New Location

Specifying Location Properties

3. In the Add New Location dialog, select the type of location, that is, Location Folder or Location Node.

4. Enter a name for the new location and optionally enter the following details.

 Select Image File: Click Browse to navigate to the path of the image that you wish to attach to the

location folder or node. You can attach the image later as explained in the Attaching an Image

section.

 Unit: Specify the unit of measurement (feet or meters) for the location node.

 Length: Specify the length of the location node.

 Width: Specify the width of the location node.

 Select SPM: Click Browse to navigate to the path of the .SPM file that you wish to import from

Planner into the new location node.

Note: Unit, Length, Width, and Select SPM options are available only for a location node. They are grayed out for a location

folder.

5. Click Save to create a new location.

Locations Tab

SpectraGuard® Enterprise User Guide

117

Moving a Location

The system enables you to move a location to a different location folder. Use the following steps to move a location to

a specific folder:

1. In the Location tree, select the location that you wish to move.

2. Right-click and from the resulting context-sensitive menu, select Move.

Moving a Location

Selecting a Destination Location

3. In the Location Move dialog, select the destination location folder to which you want to move the

selected location. Refer to the section Location Move for more details.

Note: You cannot move the Unknown location or any location into this location.

4. Click OK to move the location.

Renaming a Location

Use the following steps to rename a location.

1. In the Location tree, select the location that you wish to rename.

2. Right-click and from the resulting context-sensitive menu, select Rename.

Locations Tab

SpectraGuard® Enterprise User Guide

118

Renaming a Location

Specifying a New Name for a Location

3. In the Rename Location dialog, enter the new name for the location.

4. Click OK to rename the location.

Note: You cannot rename the location folder Unknown.

Deleting a Location

When you delete a location folder, the system deletes all subfolders and location nodes below that folder. If there are

any devices tagged to the location being deleted, these devices would either be auto tagged (according to the tagging

logic) or they will be tagged to the Unknown location folder. Use the following steps to remove a location folder

and/or a location node.

Note: You cannot delete the Root Location and Unknown location folders.

1. In the Location tree, select the location that you wish to delete.

2. Right-click and from the resulting context-sensitive menu, select Delete.

Locations Tab

SpectraGuard® Enterprise User Guide

119

Deleting a location

3. Click Yes in the Confirm dialog to remove the selected location.

Working with Images

This section shows you how to add an image to a location, delete an image from the location, and import a Planner

file into a location node. It also shows you how to use the zoom feature while viewing a layout image.

Attaching an Image

Use the following steps to attach an image:

1. In the Location tree, select the location to which you wish to attach an image.

2. Do one of the following:

 Right-click and from the resulting context-sensitive menu, select Attach Image.

 Click the Attach Image on floor icon ( ) in the right corner.

Attaching an Image to a Location

Locations Tab

SpectraGuard® Enterprise User Guide

120

Specifying a Path to attach an Image

3. On the Select image file to attach to attach to this location dialog, browse to the appropriate image and

then click <Open>.

Zooming In/Zooming Out, Opacity Control, Resolution of an Image

Considerable screen area is required to display a large sized layout (for example, 3000 x 2000 sq. ft.) defined or

imported in the system. The zooming in/zooming out feature makes it easier to comprehend the RF coverage and

device placement information. It also avoids excessive scrolling.

Use the following steps to zoom in/zoom out of an image and control its opacity.

1. In the Location tree, select the location node that has a .SPM file imported or attached image and

devices placed on it.

2. Do one of the following for zooming out or zooming in:

 Select a zoom percentage (%) from the drop-down list and then click the Zoom out icon or

Zoom in icon .

 Enter a zoom % between 1% to 1000% in the editable drop-down box and then click the Zoom out

icon or Zoom in icon .

3. To change the opacity of the image, select an Image Opacity value. Decrease this value to better

comprehend RF coverage or increase this value to pinpoint exact device placement information.

4. Select an appropriate Resolution for rendering of the heat maps. A lower resolution would mean much

faster rendering although with a higher pixelization effect (coarser look). High resolution would mean

much slower rendering due to the large number of pixel cells for which values need to be calculated.

Note: The system proportionately resizes the RF layout display area depending on the zoom % specified by the user. Additionally,

attached image, if any, and scale markings change accordingly. The system also readjusts scrollbars to keep the displayed objects

center point invariant.

Arista Networks SS300ATC60 SpectraGuard Access Point / Sensor User Manual 2

AirTight Networks, Inc. SpectraGuard Access Point / Sensor Users Manual 2

Contents

Users Manual-2

Navigation menu

Namespaces

Views

Navigation