Enabling rogue AP suppression

The guide provides simple configuration instructions for suppressing rogue APs on FortiAP. The steps include creating a WIDS profile and suppressing rogue APs.

To enable rogue AP suppression on the FortiWiFi and FortiAP GUI:

1. Create a WIDS profile:
   1. In FortiWiFi and FortiAP, go to WiFi & Switch Controller > WIDS Profiles. Click Create New.
   2. For Sensor Mode, select Foreign and Home Channels.
   3. Enable Enable Rogue AP Detection.
   4. Complete the configuration, then click OK.
2. Select the WIDS profile for the managed FortiAP. The monitoring radio must be in Dedicated Monitor mode:
   1. Go to WiFi & Switch Controller > FortiAP Profiles.
   2. Select the FortiAP profile applied to the managed FortiAP, then click Edit.
   3. Select Dedicated Monitor on Radio 1 or Radio 2.
   4. Enable WIDS Profile. Select the profile created in step 1. Click OK.
3. Suppress FortiAP:
   1. Go to Monitor > Rogue AP Monitor.
   2. Right-click the desired SSID, then select Mark as Rogue.
   3. Right-click the SSID again, then select Suppress AP.

To enable rogue AP scan using the FortiWiFi and FortiAP CLI:

1. Create a WIDS profile:

   config wireless-controller wids-profile

   edit "example-wids-profile"

   set sensor-mode both

   set ap-scan enable

   next

   end

2. Select the WIDS profile for the managed FortiAP:

   config wireless-controller wtp-profile

   edit "example-FAP-profile"

   config platform

   set type <FAP-model-number>

   end

   config radio-1

   set mode monitor

   set wids-profile "example-wids-profile"

   end

   next

   end

3. Suppress FortiAP:

   config wireless-controller ap-status

   edit 1

   set bssid 90:6c:ac:da:a7:f1

   set ssid "example-SSID"

   set status suppressed

   next

   end