Skip to main content
Version: 1.1.x

UNEXPECTED_BSSID

Summary#

A station (access point) with an unexpected BSSID (hardware address) is advertising one of our SSIDs (network name). This could be a rogue access point trying to lure users to connect to it by making it look like a legitimate access point of a wireless network that users trust. Note that sophisticated attackers will likely not cause this kind of alert because they would act like a legitimate access point by sending frames with a spoofed BSSID.

Possible False Positives#

  • A new access point was installed and the nzyme configuration has not been updated yet.

Notes#

  • None

See Also#