You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?

Anti-spyware software targets malicious software on endpoints and does not scan or identify unauthorized wireless hardware connected to the network.

Anti-virus software detects and removes malware from hosts and cannot discover unauthorized network devices such as rogue access points.

A wireless site survey involves using scanning tools to inventory all access points broadcasting in or near the facility, allowing administrators to compare discovered APs against the authorized list. Any unrecognized AP can be flagged as rogue and its physical location can be triangulated for removal. This is both a detection and a prevention mechanism because regularly scheduled surveys can catch rogue APs before they are exploited.

Protocol analyzers capture and decode network traffic on existing connections but do not actively scan for or enumerate unauthorized wireless access points.