Commit 49770001 authored by Dmitry Volodin's avatar Dmitry Volodin
Browse files

"Rogue AP Detected" and "Rogue AP Removed" event classes

parent 9eb25f9c
......@@ -91,3 +91,36 @@ class WDSAuthenticationTimeout(EventClass):
repeat_suppression=False
repeat_suppression_interval=0
trigger=None
##
## Rogue AP Detected
##
class RogueAPDetected(EventClass):
name = "Rogue AP Detected"
category = "SECURITY"
priority = "WARNING"
subject_template="Roque AP Detected by {{ap}}: {{mac}}"
body_template="""Access Point {{ap}} has detected roque AP with MAC address {{mac}} at channel {{channel}}.
Rogue AP SSID is: {{ssid}}"""
repeat_suppression=False
repeat_suppression_interval=3600
trigger=None
class Vars:
mac=Var(required=True,repeat=False)
ap=Var(required=False,repeat=False)
channel=Var(required=False,repeat=False)
ssid=Var(required=False,repeat=False)
##
## Rogue AP Removed
##
class RogueAPRemoved(EventClass):
name = "Rogue AP Removed"
category = "SECURITY"
priority = "NORMAL"
subject_template="Roque AP Removed: {{mac}}@{{ap}}"
body_template="""Roque AP {{mac}} has left {{ap}} area"""
repeat_suppression=False
repeat_suppression_interval=3600
trigger=None
class Vars:
ap=Var(required=True,repeat=False)
mac=Var(required=True,repeat=False)
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment