Hello there. I have been searching for nearly a year to figure out how to do this and no one seems to have solved it yet. We have a Cisco AP controller that is feeding NPM "Rogue APs" This is great except that a "Rogue AP" just means any SSID within earshot of our APs. You might argue that it's important to know that. With 350 retail locations, it's too much for us to worry about. What I DO WANT TO KNOW is whether any of these APs within ear shot have a MAC address that appears on our network. I have UDT, so I know all of the MAC addresses on my network. How do easily feed the Rogue AP MACs into UDT to get a report of those seen on our LAN? Right now, I am manually manipulating the database and getting fairly limited results. I export the 5000 rogue AP MACs seen every 90 days, remove duplicates using excel, format the table to match the UDT WATCHLIST database table and have our SQL DBA import it so I can run a watchlist report. Now, I have to do this about 1000 MAC addresses at a time, because UDT doesn't seem to be able to handle any more than that. It's terribly time consuming to get to the 1 or 2 ACTUAL Rogue APs on my network.
Any Ideas?