What does the “Countermeasure” in the ESS profile do?
KB Article Type: Configuration
Related Products: Controller
Related Software Versions: Any
Keywords: Countermeasure
Countermeasures are helpful if an AP encounters two consecutive MIC errors from the same client within a 60 second period. The AP will disassociate all clients from the ESSID where the errors originated and not allow any clients to connect for 60 seconds. This prevents an MIC attack.
By default, this setting is on in the ESS profile. Countermeasures should only be turned off temporarily while a network administrator identifies and then resolves the source of a MIC error.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.