I hope future release can address the following shortcomings:
1. Better Correlation Analysis for detecting rogue or unknown AP. Currently it triggers alarm for all range of RF signal strength. So an AP well outside the office will trigger a false positive. I want a configurable threshold that would alert above a given signal strength.
2. Able to trace the switch port where the rogue AP is connected. The current feature does not work. Cisco in fact is planning to take it out.
Please see my writing in: http://www.wlanresearch.com/DetectingRogueAP.htm
Audie