eWeek Labs Walk-Through: AirDefense-Trapeze solution - Evil twin

eWeek Labs Walk-Through: AirDefense-Trapeze solution

From Trapezes RingMaster, we could convert a Mobility Point to an AirDefense sensor.

eWeek Labs Walk-Through: AirDefense-Trapeze solution - Sensor Web page

After converting the sensor into an AirDefense device, we needed to log into the sensor Web page to point it to the AirDefense server.

eWeek Labs Walk-Through: AirDefense-Trapeze solution - Dashboard

An overview of the current state of affairs.

eWeek Labs Walk-Through: AirDefense-Trapeze solution - Alarm levels

AirDefense comes with default alarm levels for every known attack or performance metric, but we could change them as we saw fit. AirDefense officials say they will soon offer wizard-based options for different alarm levels.

eWeek Labs Walk-Through: AirDefense-Trapeze solution - Detection of suspicious devices

Logical view of a suspicious device detected by three sensors.

eWeek Labs Walk-Through: AirDefense-Trapeze solution - Evil twin

An evil twin causes alarms, but doesnt raise too many suspicions.

eWeek Labs Walk-Through: AirDefense-Trapeze solution - Air termination

Once the system alerted us that a trusted client had attached to the evil twin AP, we sicced the air termination gods on the client.

eWeek Labs Walk-Through: AirDefense-Trapeze solution - Tracking map

We placed the locations of our sensors and known APs on a JPG map to help with triangulation results.

eWeek Labs Walk-Through: AirDefense-Trapeze solution - Reasonably accurate triangulation

Triangulation results were fairly accurate, with the red-marked rogue only about 10 feet from its true location.