Next step when a Rogue AP has been detected (Ruckus R650)

[hits2024]

We got this alert from our Ruckus Unleashed email notification.

Subject: [Ruckus-Unleashed@192.168.xxx.xxx] Alarm 'SSID-spoofing AP Detected' generated
"An alarm 'SSID-spoofing AP Detected' was triggered."

What would be the best practice for checking what triggered this alert? Can you recommend what things we need to look at? Thank you!

[Chandini]

Hi Hits2024

Thank you for reaching us

It’s important to verify whether the detected Access Point (AP) is part of your authorized network. If this AP does not belong to your network, you can manage or contain it by following the steps outlined in the link below:

• https://docs.commscope.com/bundle/unleashed-200.14-onlinehelp/page/GUID-6D1A12C4-2CEC-47F5-89F4-CAB9...

Thank you