Ensure that "Auto Containment only for Monitor Mode APs" is not checked (unless there are APs in monitor mode)."show wireless wps rogue ap detail" contains the containment level or why it failed.
Rogue BSSID : ...Last heard Rogue SSID : ...802.11w PM...
Please note that this trace means that the particular rogue client is ignored by the controller rogue module - it will not be stored by the controller as a rogue client. It does not impact and is not related at all to the wireless client connectivity...
if a Rogue AP / rogue client RSSI changes less than the configured threshold since the last telemetry update, then the change is stored by the wireless controller, but no immediate update is sent via the yang/netconf telemetry (used by Cisco Catalyst...