i have an issue, i have list of rogues that are in "unclassified rogue". when i classify any of them to "malicious" and "state: alert". it will go to "malicious rogues". but after sometime again it goes back to "unclassified rogues". can anyone explain or help me figure out this issue.
That shouldn’t happen unless the entries disappeared. I typically only use rules that duplicate own SSID also known rogue as no alerting.