We have a WLC4400 and 12 Access points connected to it. I have the environment setup using WPA2 and EAP-TLS which all working. I am trying to make sure the wireless is locked however from outside AP's and clients. I can see a list of Rogue AP and client. When I go into one of them for more details. I know that these are external from the network and I dont want to trust them. I can pick from the list to contain rogue, alert unknown, known internal or unknown external. Is it as simple as acknowledging external ?