In 802.11 wireless networking and the Juniper Mist ecosystem, Passive Scanning is one of the two primary methods a client station (STA) uses to discover available wireless networks.4 In this mode, the client radio does not transmit any data to find an Access Point. Instead, it "waits and listens" on each supported channel for a specific period of time to hear Beacon Frames.5 Beacons are management frames sent periodically by an AP (typically every 100ms) to announce the presence and capabilities of a Basic Service Set (BSS).6 These frames contain critical information such as the SSID (Network Name), supported data rates, security protocols (RSN), and PHY requirements.7 Because the client only needs to keep its receiver active and does not have to power up its transmitter to send probe requests, passive scanning is significantly more power-efficient than active scanning, making it ideal for battery- constrained IoT devices.
However, the trade-off for this power efficiency is time. Since a client must stay on each channel long enough to guarantee it hears a beacon (at least one full beacon interval), scanning the entire 2.4 GHz, 5 GHz, and 6 GHz spectrum can take several seconds. In contrast, Active Scanning (options B, C, and D) involves the client sending Probe Requests (either wildcard/null or directed to a specific SSID) and waiting for a much shorter period for a Probe Response.8 From a Mist AI perspective, the dedicated scanning radio in Mist APs (like the AP43/AP45) performs its own version of passive and active scanning to build a complete map of the RF environment. This data is used by Marvis to detect "Neighbor" and "Honeypot" APs. While most modern mobile clients prefer active scanning to speed up the discovery and roaming process, passive scanning remains a fundamental requirement- especially on DFS channels where regulatory rules prohibit a client from transmitting until it has first
"listened" to confirm no radar is present.