detection host on LAN

Marc_Potter
Comes here often

detection host on LAN

How can I detect that a suspicious  host has been detached to a LAN network ? 

3 REPLIES 3
BrechtSchamp
Kind of a big deal

I'm not sure what kind of "suspicious" you mean. But here's a few points:

  • IDS/IPS and AMP events would be found in the Security & SD-WAN > Security Center
  • Rogue DHCP servers would be found in the Network-Wide > Event Log
  • Sticky MAC breaches would also be listed in the Network-Wide > Event Log
  • You can also set alerts to warn you if specific MAC-addresses connect to the network. You can do that in the Network-Wide > Alerts page.

Does any of these answer your question?

How to detect that a foreign host has been connected to my network, and how to prevent him from gaining access?

Preferred way to do this would be to implement 802.1X access control:

https://documentation.meraki.com/MS/Access_Control/MS_Switch_Access_Policies_(802.1X)

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels