Table Of ContentAirMagnet® Enterprise
User Guide
© 2003-2012 Fluke Corporation. All Rights Reserved.
AirMagnet® Enterprise User Guide.
This User Guide is furnished under license and may be used or copied only in accordance
with the terms specified in the license. The content of this document is for information
only and should not be construed as a commitment on the part of AirMagnet, Inc.
No part of this document may be reproduced, transmitted, stored in a retrievable system,
or translated into any language in any form or by any means without the prior written
consent of AirMagnet, Inc. Further, AirMagnet, Inc. reserves the right to modify the
content of this document without notice.
AIRMAGNET, INC. SHALL NOT BE HELD LIABLE FOR ERRORS OR OMISSIONS
CONTAINED HEREIN; NOR FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES
RESULTING FROM THE USE OF THIS CONTENT.
This product includes software developed by David Young. Copyright 2003, 2004. All
rights reserved.
This product includes software developed by Atsushi Onoe. Copyright 2001. All rights
reserved.
This product includes software developed by Sam Leffler, Errno Consulting. Copyright
2002-2005. All rights reserved.
This product includes software developed by Bill Paul <[email protected]>.
Copyright 1997, 1998, 1999. All rights reserved.
This product includes software developed by the University of California, Lawrence
Berkeley Laboratory and its contributors.
This product includes software derived from the RSA Data Security, Inc. MD4 Message-
Digest Algorithm. Copyright 1990-1992 RSA Data Security, Inc. All rights reserved.
Registered users may log into MyAirMagnet to download the available open source
software utilized in AirMagnet Enterprise.
AirMagnet® and AirWISE® are registered trademarks, and the AirMagnet logo is a
trademark, of AirMagnet, Inc. All the other product names mentioned herein may be
trademarks or registered trademarks of their respective owners.
U.S. Patent Numbers 7,009,957, 7,130,289, and 7,613,139
AirMagnet, Inc.
2575 Augustine Drive
Santa Clara, CA 95054
USA
Compiled in the United States of America
Part Number: AME-v10.1-USG-01-0512
Software License Agreement i
Software License Agreement
PLEASE READ THIS SOFTWARE LICENSE AGREEMENT (“LICENSE”) CAREFULLY. IF
YOU DO NOT AGREE TO THE TERMS OF THIS LICENSE, RETURN THE UNUSED
AIRMAGNET SOFTWARE WITHIN 30 DAYS TO THE PLACE WHERE YOU OBTAINED IT
FOR A REFUND.
1. GRANT OF LICENSE.
Fluke Networks, a division of Fluke Electronics Corporation grants you a non-exclusive right
to install and use the AirMagnet Software on a single computer at a time. The software,
documentation and any fonts accompanying this License whether on disk, in read only
memory, on any other media or in any other form (the “AirMagnet Software”) are licensed to
you by Fluke Networks.
2. TITLE, COPYRIGHT, AND TRADEMARK.
Software is owned by Fluke Electronics Corporation and is protected by United States
copyrights laws and international treaty provisions. Therefore you must treat the Software
like any other copyrighted material. You own the media on which the AirMagnet Software is
recorded but Fluke Networks and/or Fluke Networks’ licensor(s) retain title to the AirMagnet
Software. The AirMagnet Software in this package and any copies which this License
authorizes you to make are subject to this License.
3. PERMITTED USES AND RESTRICTIONS.
This License does not allow the AirMagnet Software to exist on more than one computer at a
time. You may make one copy of the AirMagnet Software in machine-readable form for
backup purposes only. The backup copy must include all copyright information contained on
the original. Except as expressly permitted in this License, you may not decompile, reverse
engineer, disassemble, modify, rent, lease, loan, sublicense, distribute or create derivative
works based upon the AirMagnet Software in whole or part or transmit the AirMagnet
Software over a network. You may not disclose any information relating to the performance
or operation of the AirMagnet Software (including any benchmarking or other testing results)
to any third party without Fluke Networks’ express prior written consent. You may, however,
transfer your rights under this License provided you transfer the related documentation, this
License and a copy of the AirMagnet Software to a party who agrees to accept the terms of this
License and destroy any other copies of the AirMagnet Software in your possession. You may
not use or otherwise export or re-export the AirMagnet Software except as authorized by
United States law and the laws of the jurisdiction in which the AirMagnet Software was
obtained. In particular, but without limitation, the AirMagnet Software may not be exported
or reexported (i) into (or to a national or resident of) any U.S. embargoed country or (ii) to
anyone on the U.S. Treasury Department's list of Specially Designated Nationals or the U.S.
Department of Commerce's Table of Denial Orders. By using the AirMagnet Software, you
represent and warrant that you are not located in, under control of, or a national or resident of
any such country or on any such list.
AirMagnet Enterprise User Guide
ii Software License Agreement
4. TERMINATION.
Your rights under this License will terminate automatically without notice from Fluke
Networks if you fail to comply with any term(s) of this License.
5. LIMITED WARRANTY.
Fluke Network warrants the media on which the AirMagnet Software is recorded to be free
from defects in materials and workmanship under normal use for a period of ninety (90) days
from the date of original retail purchase. Fluke Networks does not warrant any downloading
errors or that the Software will be error free or operate without interruption. Fluke Networks’
entire liability and your exclusive remedy shall be, at Fluke Networks’ option, a refund of the
purchase price of the product containing the AirMagnet Software or replacement of the
AirMagnet Software which is returned to Fluke Networks or an authorized representative
with a copy of the receipt. This limited warranty is void if failure of the products has resulted
from accident, abuse, or misapplication. Any replacement product will be warranted for the
remainder of the 90 day original warranty period or 30 days, whichever is longer.
6. DISCLAIMER OF WARRANTY ON AIRMAGNET SOFTWARE.
Other than as provided in the Limited Warranty above, The AirMagnet Software is provided
“AS IS” and without further warranty. FLUKE NETWORKS EXPRESSLY DISCLAIM ALL
WARRANTIES, EXPRESS OR IMPLIED, WITH RESPECT TO THE SOFTWARE
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES AND/OR
CONDITIONS OF MERCHANTABILITY OR SATISFACTORY QUALITY AND FITNESS
FOR A PARTICULAR PURPOSE. FLUKE NETWORKS DOES NOT WARRANT THAT THE
FUNCTIONS CONTAINED IN THE AIRMAGNET SOFTWARE WILL MEET YOUR
REQUIREMENTS, OR THAT THE OPERATION OF THE AIRMAGNET SOFTWARE WILL
BE UNINTERRUPTED OR ERROR-FREE, OR THAT DEFECTS IN THE AIRMAGNET
SOFTWARE WILL BE CORRECTED. FURTHERMORE, FLUKE NETWORKS DOES NOT
WARRANT OR MAKE ANY REPRESENTATIONS REGARDING THE USE OR THE
RESULTS OF THE USE OF THE AIRMAGNET SOFTWARE OR RELATED
DOCUMENTATION IN TERMS OF THEIR CORRECTNESS, ACCURACY, RELIABILITY,
OR OTHERWISE. NO ORAL OR WRITTEN INFORMATION OR ADVICE GIVEN BY
AIRMAGNET OR AN AIRMAGNET AUTHORIZED REPRESENTATIVE SHALL CREATE A
WARRANTY OR IN ANY WAY INCREASE THE SCOPE OF THIS WARRANTY. SOME
JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE
ABOVE EXCLUSION MAY NOT APPLY TO YOU.
7. LIMITATION OF LIABILITY.
UNDER NO CIRCUMSTANCES, INCLUDING NEGLIGENCE, SHALL FLUKE NETWORKS
BE LIABLE FOR ANY INCIDENTAL, SPECIAL, INDIRECT OR CONSEQUENTIAL
DAMAGES ARISING OUT OF OR RELATING TO THIS LICENSE. SOME JURISDICTIONS
DO NOT ALLOW THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES
SO THIS LIMITATION MAY NOT APPLY TO YOU. In no event shall Fluke Networks total
liability to you for all damages exceed the amounts paid by you hereunder.
AirMagnet Enterprise User Guide
Software License Agreement iii
8. GOVERNMENT END USERS.
If the AirMagnet Software is supplied to the United States Government, the AirMagnet
Software is classified as “restricted computer software” as defined in clause 52.227-19 of the
FAR. The United States Government's rights to the AirMagnet Software are as provided in
clause 52.227-19 of the FAR.
9. CONTROLLING LAW AND SEVERABILITY.
This License shall be governed by the laws of the United States and the State of Washington,
U.S.A. If for any reason a court of competent jurisdiction finds any provision, or portion
thereof, to be unenforceable, the remainder of this License shall continue in full force and
effect.
10. COMPLETE AGREEMENT.
This License constitutes the entire agreement between the parties with respect to the use of the
AirMagnet Software and supersedes all prior or contemporaneous understandings regarding
such subject matter. No amendment to or modification of this License will be binding unless
in writing and signed by Fluke Networks.
AirMagnet Enterprise User Guide
iv Software License Agreement
AirMagnet Enterprise User Guide
Disclaimer v
Disclaimer
AirMagnet DoD (Department of Defense), GLBA (Gramm, Leach, Bliley Act), HIPAA (Health
Information Portability and Accountability Act), and SOX (Sarbanes Oxley Act 2002) Policy
Compliance Reports provide a security framework intended to assist you in complying with
various regulations in the financial services, health, public accounting, and government
sectors. The Policy Compliance Reports focus on wireless network security and aim to guide
network administrators in documenting their security policies and responding to security
threats and incidents.
AirMagnet’s customers are responsible for ensuring their own compliance with applicable
laws and regulations. While the AirMagnet Policy Compliance Reports provide information
about the law and are designed to help users satisfy government regulations, such
information is not legal advice, and it is the customer’s sole responsibility to obtain advice of
competent legal counsel as to the identification and interpretation of any relevant law or
regulation. AirMagnet does not represent or warrant that its services, products or any other
information it provides to a customer will ensure that the customer is in compliance with any
law or regulation.
The information contained in the Policy Compliance Reports is furnished under and subject to
the terms of the Software License Agreement (“License”). The Policy Compliance Reports do
not create a binding business, legal, or professional services relationship between you and
AirMagnet, Inc.
Because business practice, technology, and governing laws and regulations vary by industry
and location, full compliance with regulations will depend on an organization's particular
circumstances. AirMagnet Policy Compliance Reports document an organization's wireless
network security framework for authentication, access control, and encryption. The Reports
are intended to provide useful information to determine whether wireless network security
policies are implemented correctly and provide an integral framework to guide network
administrators to respond to security threats and incidents in a consistent, compliant, and
approved manner.
AirMagnet System Level and Device Level Compliance Reports provide information to assist
its customers in determining whether they are in compliance with various standards, laws
and regulations applicable to wireless networks and devices operating in the unregulated
radio frequencies (2.4 – 5 GHz). It is intended to assist customers in identifying wireless
networks and devices not in compliance with security frameworks such as FISMA (Federal
Information Security Management Act) and US federal regulations implementing laws such
as GLBA, HIPAA, SOX, and more.
AirMagnet is not responsible for an organization's compliance with industry standards or
legal regulations. AirMagnet should be used by organizations as an aid in satisfying the
organization's compliance requirements for standards, laws, and regulations.
AirMagnet operation is limited to wireless networks and devices operating in the unregulated
radio frequencies (2.4 – 5 GHz). It operates and reports on networks and devices that use
wireless technologies. It does not apply to wire-line networks and devices not operating in the
wireless spectrum.
AirMagnet, Inc.
AirMagnet Enterprise User Guide
vi Disclaimer
AirMagnet Enterprise User Guide
Table of Contents vii
Table of Contents
Software License Agreement.....................................................................................................i
Disclaimer....................................................................................................................................v
Part I: AirMagnet Enterprise System................................................................................. xxv
Chapter 1: AirMagnet Enterprise Overview...........................................................................1
Enterprise-hardened Wireless Intrusion Prevention...................................................................................................1
Automated Intrusion Prevention...................................................................................................................................1
Superior Detection............................................................................................................................................1
Automated, Active Defenses...........................................................................................................................1
3D Rogue Control.............................................................................................................................................2
Detect..................................................................................................................................................2
Disable................................................................................................................................................2
Document...........................................................................................................................................2
Full Disclosure Policy View.............................................................................................................................................3
Tailored Policy Creation..................................................................................................................................3
Security- or Performance-Only User Role.....................................................................................................3
Streamlined Analysis and Investigation........................................................................................................3
Notification and Escalation.............................................................................................................................3
Integrated Reporting........................................................................................................................................3
Compliance Reporting.....................................................................................................................................4
SmartEdge Architecture...................................................................................................................................................4
Local Analysis...................................................................................................................................................4
Fast, Secure Deployments................................................................................................................................4
Protect Your Bandwidth..................................................................................................................................4
Enterprise Scalability and Fail-over...............................................................................................................4
Device-Specific Alarm List..............................................................................................................................5
Embedded AirMagnet Spectrum Analyzer Sensor.....................................................................................5
SSH Support on Sensors..................................................................................................................................5
Database Backup/Restore/Reset...................................................................................................................5
Device Locator...................................................................................................................................................5
“Rogue AP Detected Inside” Alarm...............................................................................................................6
Server to Console Data Compression............................................................................................................6
Managing Network ACL Groups...................................................................................................................6
Showing Rogue-Detecting Sensors................................................................................................................6
Oracle Database Support.................................................................................................................................6
PostgreSQL Database Support........................................................................................................................6
AirMagnet Enterprise User Guide
viii Table of Contents
Software Update from Enterprise Console...................................................................................................7
Adding Comments to GPS Log Files.............................................................................................................7
Addition of Two New Policy Profiles............................................................................................................7
AirMagnet Enterprise System Components.................................................................................................................8
AirMagnet Enterprise Server..........................................................................................................................8
AirMagnet Enterprise Console.......................................................................................................................9
AirMagnet SmartEdge Sensor.........................................................................................................................9
Product Documentation.................................................................................................................................................10
Online Help......................................................................................................................................................10
AirMagnet WLAN Policy Reference Guide................................................................................................10
Release Notes...................................................................................................................................................10
AirMagnet SmartEdge Sensors.....................................................................................................................10
Frequently Asked Questions (FAQs)...........................................................................................................11
Chapter 2: Installing AirMagnet Enterprise.........................................................................13
Product Package Contents.............................................................................................................................................13
Product Registration.......................................................................................................................................................13
Technical Support...........................................................................................................................................................14
Contact Customer Support............................................................................................................................14
AirWISE Community.....................................................................................................................................15
AirMagnet Enterprise Installation Overview.............................................................................................................15
Disabling “Phone Home” Settings...............................................................................................................16
Database Server Prerequisite.........................................................................................................................................16
Performing Product Upgrades or Downgrades.........................................................................................................16
Downgrade Procedure...................................................................................................................................17
AirMagnet Enterprise Server Installation...................................................................................................................18
Notes on AirMagnet Enterprise Server Installation..................................................................................18
Special Notes on Backup Server Installation..............................................................................................19
AirMagnet Enterprise System Requirements.............................................................................................19
Server operating systems*.............................................................................................................19
Supported databases......................................................................................................................20
Console operating systems*..........................................................................................................20
Installing AirMagnet Enterprise Server.......................................................................................................23
Using a Backup AirMagnet Enterprise Server............................................................................................30
Registering Your AirMagnet Enterprise......................................................................................................................30
AirMagnet License Utility.............................................................................................................................................31
AirMagnet Enterprise Server Web Page......................................................................................................................31
AirMagnet Enterprise Console System Requirements..............................................................................32
Downloading AirMagnet Enterprise Console............................................................................................32
Installing AirMagnet Enterprise Console....................................................................................................34
Verifying AirMagnet Enterprise Console Installation...............................................................................35
AirMagnet SmartEdge Sensor Configuration.............................................................................................................37
Configuring SmartEdge Sensor via Web Browser.....................................................................................37
AirMagnet Enterprise User Guide
