Cisco DNAC Rogue Detection Setup

I have a Cisco Catalyst Center (DNA Center) deployment running and I want to turn on—and fine-tune—“rogue-on-wire” detection only. The hardware is already online; what I’m missing is the exact configuration inside DNAC that will reliably flag any unauthorized device that plugs into my wired infrastructure and then surface those events in the dashboard and in e-mail alerts.

Here’s what I need from you:

• A live or recorded walkthrough inside Catalyst Center showing the menus, policy settings, and thresholds you adjust to enable rogue-on-wire detection.
• Written step-by-step instructions so I can reproduce the setup in other sites.
• Verification guidance—how to generate test events and confirm that DNAC is catching them (CLI commands, packet captures, or the built-in Assurance tools).
• A brief explanation of the logs and reports I should monitor once detection is active.

Only detection is in scope; mitigation actions such as automatic port shutdown are not required at this stage. If you’ve done this before and can point to previous DNAC or Cisco Prime deployments, even better. Remote access can be arranged through Webex or a similar secure session as soon as we agree on timing.