eWeek Labs Walk-Through: AirDefense-Trapeze solution

From Trapezes RingMaster, we could convert a Mobility Point to an AirDefense sensor.

After converting the sensor into an AirDefense device, we needed to log into the sensor Web page to point it to the AirDefense server.

An overview of the current state of affairs.

AirDefense comes with default alarm levels for every known attack or performance metric, but we could change them as we saw fit. AirDefense officials say they will soon offer wizard-based options for different alarm levels.

Logical view of a suspicious device detected by three sensors.

An evil twin causes alarms, but doesnt raise too many suspicions.

Once the system alerted us that a trusted client had attached to the evil twin AP, we sicced the air termination gods on the client.

We placed the locations of our sensors and known APs on a JPG map to help with triangulation results.

Triangulation results were fairly accurate, with the red-marked rogue only about 10 feet from its true location.