the wireless controller will control the containment using AP's detecting the wireless-only rogue AP,
So you need to go to the wireless section, not the network devices/switch related templates!
Templates / … / Controller / Security / Wireless Protection Policies
Be aware there may be legal issues when enforcing wireless containment.