Wireless Intrusion Prevention Systems (WIPS) can proactively respond to detected threats using various techniques. One such preventative measure is integration with the wired infrastructure to mitigate rogue APs by disabling the switch port they are connected to. This is typically done through SNMP or other switch management interfaces.
This form of wired-side containment is more secure and compliant than wireless-side attacks (e.g., deauthentication), which can violate regulations in some jurisdictions.
[References:, , CWSP-208 Study Guide, Chapter 7 – WIPS Architecture and Countermeasures, , CWNP CWSP-208 Exam Objectives: “WIPS Prevention and Containment Techniques”]
Submit