10-19-2016 12:47 AM - edited 07-05-2021 06:00 AM
Hi there,
is there any way to get a syslog message from a WLC 55XX when a rogue is detected?
I don't want to contain them but I want to use this information in a SIEM.
Thanks,
Markus
10-20-2016 12:34 AM
Hi,
I am not sure if it is what you want, but try following:
Login via GUI to WLC
Go to MANAGEMENT tab
SNMP
Trap Controls
Security tab
And in section Rogues check "Rogue AP".
I expect that you have properly configured syslog server.
10-20-2017 04:04 AM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: