Cisco Wireless Lan Controller
Version : Cisco Wireless Controller 5500 Series, IOS version 8.0.140 and later.
Cisco has come up with the concept of the Cisco Unified Wireless Network (CUWN) solution, which helps make it easier to manage such large scale deployments. WLC is a device that assumes a central role in the CUWN. Access points, called Lightweight Access Points (LAPs) in the unified environment, register themselves with a WLC and tunnel all the management and data packets to the WLCs, which then switch the packets between wireless clients and the wired portion of the network. All the configurations are done on the WLC.
Netsurion Open XDR monitors user logon behaviour, access point configuration changes, WLAN group management and service status and generates flex reports, flex dashboards and alerts for rogue access point detected and system state changed.
Netsurion Data Source Integrations for Cisco Wireless Lan Controller allows you to monitor the following components:-
- Security – Rogue AP and attack detections.
- Compliance – Access Point login/registration failures and success.
- Operation – User account management, ACL configuration and DHCP activities.
Once Cisco Wireless Lan Controller is configured to deliver events to Netsurion Open XDR Manager; alerts, dashboards and reports can be configured into Netsurion Open XDR.
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
Type | Name | Description |
---|---|---|
Security | Cisco Wlc – Attack detection | This alert is generated when any Attack is detected in the Wireless Controller. |
Security | Cisco Wlc – Port status changed | This alert is generated when any Port status is changed. |
Operations | Cisco Wlc – ACL configuration failed | This alert is generated when any Access list configuration fails. |
Operations | Cisco Wlc – System failures | This alert is generated when any System failure occurs. |
Compliance | Cisco Wlc – AP login success | This alert is generated when any Access Point successfully logs in. |
Compliance | Cisco Wlc – AP login failure | This alert is generated when any Access Point login fails. |
Compliance | Cisco Wlc – AP registration failures | This alert is generated when any Access Point registration fails. |
Reports
Type | Name | Description |
---|---|---|
Security | Cisco Wlc – Attack detection | This report provides details about any Attack that is attempted to compromise the Wlc. |
Security | Cisco Wlc – Port status changed | This report provides details on the Port status associated with the Wlc. |
Security | Cisco Wlc – Rogue AP activities | This report provides details about all the Rogue Access Point that is detected in the network. |
Operations | Cisco Wlc – ACL configuration failed | This report provides details about any Access List configuration failures that occurs in Cisco Wlc. |
Operations | Cisco Wlc – System failures | This report provides details about all the System failures, hardware failures and memory allocation failures in the Wlc. |
Operations | Cisco Wlc – User account management | This report provides details about all the User account management that is done in Wlc. |
Operations | Cisco Wlc – DHCP activities | This report provides details on all the DHCP activities that is done on the Wlc. |
Compliance | Cisco Wlc – AP login success | This report provides details on all successful Access Point logon that is done. |
Compliance | Cisco Wlc – AP login failure | This report provides details on Access Point logon failure attempts. |
Compliance | Cisco Wlc – AP registration failures | This report provides details about all the Access Point registration failures that is done. |
Compliance | Cisco Wlc – Successful AP registrations | This report provides details about all the successful Access Point registration or association with Wlc. |
Documentation:
The configuration details are consistent with Netsurion Open XDR 8.x and later, and Cisco Wireless Controller.
Download Integration Guide for configuration instructions and more information.