Rogue AP warning

BlakeRichardson
Kind of a big deal
Kind of a big deal

Rogue AP warning

HI All

 

I am getting the below rogue AP alert, the devices are Windows laptops, internet sharing is disabled so it's not that. This alert happens at least once a day and I have run out of ideas to resolve it. 

 

1 rogue AP on the LAN network in the xxxxx organization has been detected.
SSID Rogue because Last seen at # of APs detecting # of APs containing
DIRECT-QHBLAKE-PCLAPTOP-RSBDSeen on LANThu Aug 31 10:40:44 NZST 202333

 

3 Replies 3
alemabrahao
Kind of a big deal
Kind of a big deal

Someone is probably routing the connection. Not much to do. But you know that a rogue AP is not necessarily malicious, correct?

In this regard, Cisco WLC is more efficient than Maraki.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

@alemabrahao  Yes I know that it they are not always malicious. My issue is the false positives and being alerted when someone powers their laptop on. Something must be triggering it.

 

We only have this issue with a small percentage on Windows laptops, Apple laptops and the majority on Windows laptops are fine. 

ww
Kind of a big deal
Kind of a big deal
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels