Comprehensive Intrusion Detection
AirDefense Enterprise Appliances provide the industry's most comprehensive detection of wireless intrusion attempts. By analyzing existing and day-zero threats in real time against historical data, they can accurately detect all wireless attacks and anomalous behavior. With context-aware detection, correlation, and multidimensional detection engines, they detect only meaningful security events and maintain the lowest rate of false-positive alarms. Moreover, this next-generation wireless protection platform offers the industry's most extensive event library, with more than 200 security and performance events.

AirDefense appliances can mitigate wireless threats via the air by disabling wireless connections between intruders and authorized devices—extreme precision ensures that only the offending device is prohibited from operating. In addition, the appliances can identify the wired switch port to which offending devices are connected, turning it off to prevent the rogue device from accessing the wired network.

Automated Protection
AirDefense Enterprise Appliances respond automatically to wireless threats by stopping the suspect device before it can damage the network. By responding on both wireless and wired networks, these appliances provide the industry's most secure wireless intrusion prevention solution. To help ensure that only the correct intruders and rogue devices are disconnected, the appliances perform highly targeted terminations. They also maintain a record of termination actions to enable a reliable audit trail. In addition, the appliances comply with FCC regulations and help eliminate the liability that could be associated with stopping a device in a wireless manner.

Eliminate Rogue Devices From Connecting To The Network
Rogue devices are a serious threat to enterprise security, and a single rogue access point can allow an attacker to gain full access to the internal network. To prevent this from happening, AirDefense Enterprise Appliances can identify any rogue devices and disable them automatically if they are connected to the internal network.

By analyzing wireless traffic, they can determine the level of threat that a potential rogue device poses to the organization. This approach enables organizations to ignore neighboring devices and focus only on the rogues that present a serious threat. This advanced level of accuracy is essential, because less-sophisticated wireless IPS systems can easily disable a neighboring access point by mistake—exposing organizations to unwanted liability.

Comply with Enterprise and Regulatory Policies
Using AirDefense Enterprise Appliances, organizations can define, monitor, and enforce WLAN policies in the areas of security, performance, usage, and vendor types. In addition, they can minimize vulnerability by ensuring that wireless devices are using the proper security protocols. When a device is found to be non-compliant, the system notifies administrators about the specific discrepancy.

This flexible platform includes a variety of regulatory compliance reports for retail establishments, healthcare organizations, financial service providers, and government agencies. There are specific compliance reports for the Payment Card Industry (PCI) standard, Sarbanes-Oxley (SOX), HIPAA, GLBA, and the Department of Defense 8100.2 Directive. Organizations can simply print the applicable reports to demonstrate the wireless network's compliance.

Investigate Incidents with Forensic Data
AirDefense Enterprise Appliances provide forensic data that helps organizations retrace any device's steps down to the minute. With forensic research, investigating an event takes minutes instead of potentially hours. Moreover, cases that normally would have required administrators to physically visit sites can now be investigated remotely.

Organizations can review minute-by-minute records of connectivity and communication with the network. By storing more than 325 data points per wireless device, per connection, per minute, AirDefense Enterprise Appliances enable organizations to view months of historical data on any wireless device that was discovered to be suspicious. The appliances store important information such as channel activity, signal characteristics, device activity, and traffic flow—and they can display time of attack/breach, entry point used, length of exposure, transfers of data, and systems compromised.

Troubleshoot Network Performance
With a real-time view of all WLAN traffic, AirDefense Enterprise Appliances enable organizations to remotely troubleshoot problems, identify and respond to network misconfiguration, and monitor network availability. The appliances analyze traffic flow to interpret WLAN performance and identify valuable information such as usage characteristics, interference from neighboring WLANs, channel overlap, and performance degradation.

In addition, the appliances can help measure network usage and performance by determining over-utilized access points and channels, pinpointing network congestion, and analyzing utilization and congestion trends. Organizations can drill down into a live streaming view of devices, BSSIDs, and channels to review items such as:

• Remote frame captures
• Authentication errors
• Access point configuration issues
• Network interference

Location Tracking
Powerful location tracking technology enables organizations to minimize the amount of time required to find specific devices. After importing images of a floor plan and specifying the characteristics of the building, organizations can consistently locate devices within four cubicles.

Optional Advanced Security Plug-ins
Multiple add-on modules are available for AirDefense Enterprise Appliances, providing capabilities for advanced troubleshooting, spectrum analysis, forensic analysis, dynamic RF assessment, centralized management console and WEP cloaking:

• Advanced Troubleshooting for faster resolution of wireless-related issues as well as proactive resolutions
• Spectrum Analysis to detect and classify common types of RF interference sources, including microwaves and Bluetooth
• Advanced Forensics for rewinding and reviewing detailed wireless activity records for forensic investigations and troubleshooting
• LiveRF for real-time assessment of wireless network performance, including centrally analyzing and troubleshooting connectivity issues
• Wireless Vulnerability Assessment for proactively assessing the security posture of wireless networks
• Centralized Management Console for enabling administrators to manage settings of multiple appliances controlling tens of thousand of sensors from one console
• WEP Cloaking for protection of wireless infrastructure secured by legacy encryption protocols