Air Marshall Rogue list red dot - uncontained

[gcarmich]

What does the red dot - "uncontained" indicate on an SSID identified on the Air Marshall Rogue list?

[Brash]

It's an SSID that has been picked up by your WAP, but it's not being contained (essentially being allowed to operate as normal)

https://documentation.meraki.com/MR/Monitoring_and_Reporting/Air_Marshal#Uncontained

[gcarmich]

I lost connectivity to a remote client connected on this SSID earlier today after a week of consistent connectivity.  Trying to determine cause without site visit.  Air Marshalling is in constant effect and I thought this could have caused disconnect.

[alemabrahao]

I believe this is unlikely to have been the cause.

What have you discovered so far?

[gcarmich]

only that the SSID that the client is attached to has a red dot next to it on the rogue list.  The client went offline at 1pm EST today.  I doubt it was unplugged so either the device failed, or the wireless connection went down.  The client is set to reestablish connectivity automatically.