A method for monitoring a selected region of an airspace associated with local area networks of computing devices, the method comprising: providing one or more segments of a legacy local area network to be protected in a selected geographic region, the legacy local area network being characterized by an unsecured airspace in a vicinity of a portion of the selected geographic region; using a wireless security policy associated with the one or more segments of the legacy local area network, the wireless security policy at least characterizing a first type of wireless activity in the unsecured airspace to be permitted, a second type of wireless activity in the unsecured airspace to be denied, and a third type of wireless activity in the unsecured airspace to be ignored connecting one or more sniffer devices into the legacy local area network, the one or more sniffer devices being spatially disposed within the selected geographic region to cause the unsecured airspace to be secured according to the wireless security policy; monitoring wireless activity in the unsecured airspace using the one or more sniffer devices to detect active wireless access points, AP, (113A, 113B, 116, 119, 121), the active wireless APs including at least one wireless access point, AP, (119, 121) that is not authorized for the network to be protected; performing connectivity test to determine connectivity status of the at least one wireless AP to the network to be protected; classifying the active wireless APs for enforcing the wireless security policy, the classifying including use of information about the connectivity status of the at least one wireless AP; classifying wireless activities detected by the one or more sniffer devices into permitted, denied and ignored according to the wireless security policy, based at least upon the classifying of the active wireless APs; and automatically processing an action responsive to a to be denied wireless activity detected by the one or more sniffer devices. providing one or more segments of a legacy local area network to be protected in a selected geographic region, the legacy local area network being characterized by an unsecured airspace in a vicinity of a portion of the selected geographic region; using a wireless security policy associated with the one or more segments of the legacy local area network, the wireless security policy at least characterizing a first type of wireless activity in the unsecured airspace to be permitted, a second type of wireless activity in the unsecured airspace to be denied, and a third type of wireless activity in the unsecured airspace to be ignored connecting one or more sniffer devices into the legacy local area network, the one or more sniffer devices being spatially disposed within the selected geographic region to cause the unsecured airspace to be secured according to the wireless security policy; monitoring wireless activity in the unsecured airspace using the one or more sniffer devices to detect active wireless access points, AP, (113A, 113B, 116, 119, 121), the active wireless APs including at least one wireless access point, AP, (119, 121) that is not authorized for the network to be protected; performing connectivity test to determine connectivity status of the at least one wireless AP to the network to be protected; classifying the active wireless APs for enforcing the wireless security policy, the classifying including use of information about the connectivity status of the at least one wireless AP; classifying wireless activities detected by the one or more sniffer devices into permitted, denied and ignored according to the wireless security policy, based at least upon the classifying of the active wireless APs; and automatically processing an action responsive to a to be denied wireless activity detected by the one or more sniffer devices.