whats the new adaptive wireless IPS solution?

[west33637]

Hello all. Does anyone know what Cisco’s solution is for wireless IPS now? I have a customer looking to detect brute force attempts against their wireless network or other true IDS/IPS attempts?  They’re running 5520 wireless controllers with the 3800 series APs.

It used to be that they would purchase the Mobility Services Engine (MSE 3365) running 8.0 and get the adaptive wireless IPS service, but that’s going EoL and being replaced by the CMX 3375. The awIPS service is no longer available on the CMX release 10.x.

The wireless controllers have some limited signatures, but they do not protect against attacks such as brute force.

Has anyone heard of any direction on this?

Thanks and regards,

[patoberli]

Have a look at the "client MFP" and MFP features on the WLC. They have a few downsides, but would generally offer protection against some DoS attempts.
Can't answer your question regarding wIPS though, but I think that requires a DNA center now, with correct licenses and hardware.