Hi, I have ZD1000 & ZD1100. I want to disable and blocking the Rogue device like cellular modem device. I see the feature on ZD is only detecting the Rogue Devices and marking the Rogue devices as known if we assume that the Rogue device is innocuous.
Hence, I'd like to ask about how to manage the Rogue device not only mark as known but also blocking the rogue device from our area.
Does the ZD or Ruckus have a tool how to manage the Rouge Devices like blocking the Rogue Devices?
It blocks it if you click on the "mark as malicious" but you have to monitor the dashboard to pick up on these at the time. Once the rogue leaves you can no longer do that. But then the threat has gone as well so sort of solved itself! The extra line "mark as malicious" only appears during the threat lifetime. It's simple but not particularly user friendly.
If a device is detected as a possible rogue the line "mark as malicious" will (should) appear.
For instance if the device is a smartphone and it enters your site it will be seen as a possible rogue and the option should appear. If, 10 mins later, the phone leaves your site it will no longer appear in the rogue dialogue.
Only during that 10mins on site will you see the option to "mark as malicious".
You have to be monitoring the dashboard and catch rogues in the act (so to speak) to mark as malicious (if they are...which is rare).