Rogue AP scan frequency & connectivity

Question

What are the best practices for Rogue AP scans? For reference I'm using the XGS 126w series. 
 If I set the rogue ap scan schedule to 24/7, what's the time-span between scans? 
 If I initiate a manual scan, existing connections will be interrupted for 3-5 mins as per the warning. Is it the same interruption for scheduled scans? Would then it be best to run rogue ap scans after-hours, as to not effect connected users?

Vivek Jagad · Answer

Hello mkli_celera , Thank you for reaching out to the community, Rogue AP scan is available only on Sophos Firewall devices with integrated Wi-Fi. You can mitigate these threats by scanning nearby access points and marking unauthorized access points as rogue access points. So whenever you perform a manual scan client devices are disconnected for a short time during the scan. All detected access points appear under Unrecognized access points . 
 
 To authorize an access point, click Mark as "authorized access point" . 
 To mark an access point as a rogue access point, click Mark as "rogue access point" . *Note - You can also Schedule rogue access point scan as a best practice - 
 To schedule scanning for rogue access points, do as follows: 
 
 Go to Wireless > Rogue AP scan . 
 Under General settings , click Schedule system-triggered scan at . 
 Select a schedule from the drop-down menu or create a new schedule. 
 Click Apply .

Rogue AP scan frequency & connectivity

Top Replies