This object specifies the classification applied to the rogue AP that matches this rule. friendly - known and acknowledged rogue AP malicious - unknown AP that matches user defined malicious rules unclassified - an unknown AP that did not match malicious or friendly rules. custom - user can configure rogue detection parameters.