cancel
Showing results for 
Search instead for 
Did you mean: 

How to manage Rogue Devices

alvinp
New Contributor III
Hi,
I have ZD1000 & ZD1100. I want to disable and blocking the Rogue device like cellular modem device. I see the feature on ZD is only detecting the Rogue Devices and marking the Rogue devices as known if we assume that the Rogue device is innocuous. 

Hence, I'd like to ask about how to manage the Rogue device not only mark as known but also blocking the rogue device from our area.


Does the ZD or Ruckus have a tool how to manage the Rouge Devices like blocking the Rogue Devices? 


Thank you.
6 REPLIES 6

max_o_driscoll
Valued Contributor
It blocks it if you click on the  "mark  as malicious" but you have to monitor the dashboard to pick up on these at the time. Once the rogue leaves you can no longer do that.  But then the threat has gone as well so sort of solved itself!
The extra line "mark as malicious" only appears during the threat lifetime.
It's simple but not particularly user friendly.

Image_ images_messages_5f91c423135b77e247981558_2de2999e59128ad085f2f4762d748044_RackMultipart20150930223501f2b-85a125c8-0974-4d8f-8732-b4b858367f59-1266964532.jpg1443605719

alvinp
New Contributor III
Thanz Max for your response.

So if no threat liftime there is no The extra line "mark as malicious"?
Or that feature only in another ZD version? Because in my ZD there is no The extra line "mark as malicious"

ps:
ZD1000 ver 9.3
ZD1100 ver 9.6

max_o_driscoll
Valued Contributor
If a device is detected as a possible rogue the line "mark as malicious" will (should) appear.

For instance if the device is a smartphone and  it enters your site it will be seen as a possible rogue and the option should appear. If, 10 mins later, the phone leaves your site it will no longer appear in the rogue dialogue.

Only during that 10mins on site will you see the option to "mark as malicious".

You have to be monitoring the dashboard and catch rogues in the act (so to speak) to mark as malicious (if they are...which is rare).

alvinp
New Contributor III
So, If a device is not detected as a possible rogue the line "mark as malicious",  then the Sign will not (should) appear,

If that so, then i couldnt block the rogue device which has different channel with my existing WLAN?  I am correct?


Thank you,