View Wireless Deployment Maps
In Fireware Web UI, you can use the Maps tab on the Dashboard > Gateway Wireless Controller page to help you visualize your wireless network, determine where to place your WatchGuard AP devices, check for wireless conflicts so that you can optimize your wireless environment, and check for rogue access points.
For detailed information on how to use the wireless maps feature, see Use Gateway Wireless Controller Maps.
Wireless Deployment Maps Overview
From the Maps page , you can:
- View a 2D map of your wireless network.
- See the radio frequency, channel, transmit power, and SSID used by each radio.
- Check for wireless channel conflicts.
- View foreign BSSIDs (Broadcast SSID)
- Find rogue access points.
You can select two views:
- Wireless Coverage Map — Shows the location of your AP devices in relation to one another, and shows the connection quality and any channel conflicts between your AP devices.
- Channel Conflict Map — Shows the location of your AP devices and any other wireless devices in the vicinity, shows the channel and bandwidth details for each device, and shows any wireless channel conflicts between devices.
Use Maps for AP Device Placement
You can use the Wireless Coverage Map to provide a simulated physical view of your wireless network to help you place the AP devices in optimal locations for maximum coverage. After the initial scan, the maps display the relative location of each WatchGuard AP device. Because the Wireless Coverage Map is a two-dimensional representation of your environment, AP devices on different floors in your environment might appear to be positioned closely on the map even though they are physically distant. What is most important is the strength of the connections and links between the AP devices.
In an ideal deployment, your AP devices should be deployed at a relatively uniform distance to each other, with solid or dashed green lines between the devices on the maps. The network should resemble a mesh pattern where there are as many redundant links as possible between AP devices for uninterrupted roaming for wireless clients.
For example, in this simple wireless network:
- There are three WatchGuard AP devices managed by this Gateway Wireless Controller.
- The AP devices are well positioned for maximum coverage.
- Wireless users have no interruptions when they roam from one AP device to another.
- The solid green lines indicate a strong wireless connection with no channel conflicts between these AP devices.
No conflicts with other wireless devices in your environment are displayed in the Wireless Coverage Map. This information is displayed in the Channel Conflict Map.
In the next example, the network is larger with more AP devices in the wireless network. There are some channel conflicts between AP devices and connection links between some AP devices are weak.
- There are seven WatchGuard AP devices managed by this Gateway Wireless Controller.
- AP100 and AP200 are physically close together, but have a significant level of channel conflict.
- Remote 102 is connected with a weak signal, with no connection to the other AP devices. A wireless user could lose connectivity if they roamed from Remote 102 to Remote 100.
See Wireless Channel Conflicts
Use the Channel Conflict Map to see all wireless devices in the vicinity, and show any channel conflict between devices. This map includes all wireless devices, even those not managed by your Gateway Wireless Controller.
The color of the AP device indicates the severity of the channel conflict. In this example, the two AP100 devices have moderate channel conflict, and the AP200 device has significant channel conflict. Other non-managed devices are shown in grey. The links between the AP devices are green that indicates any wireless conflicts are with foreign devices, not with other WatchGuard AP devices in your network.
To see more detailed information on connections to other wireless devices, including foreign devices that are not other WatchGuard AP devices in your network, hover your mouse pointer over the AP200 device. The color and line detail indicate the severity of the conflict and signal loss.
To see more detailed information about the AP device and any channel conflicts, right-click an AP device and select View Details. The details includes a map and graph with channel conflict information on nearby devices.
To see only the devices that have channel conflicts with your AP device, select the Show only conflicting devices check box.
In the table, the Conflict column shows which devices have a channel conflict with the selected AP device. You can use this information to adjust your wireless radio configuration to find an appropriate wireless channel with the least interference.
To update the configuration of the selected AP device, click Configure this Access Point.
For information about how to change your wireless radio configuration, see Configure AP Device Radio Settings.
If your Preferred Channel selection is set to Auto, you can use the Restart Wireless option to restart the wireless interfaces and allow the device to select an appropriate channel. When you restart the wireless interfaces, the AP device does not reboot.
For more information on how to restart wireless interfaces, see Monitor AP Device Status.
Find Rogue Access Points
You can use the Wireless Deployment Maps to scan your network for all foreign wireless access points that operate within range of your managed AP devices. Some of these foreign access points could be rogue access points.
A rogue access point is any wireless access point within range of your network that is not recognized as a paired access point or configured exception in your wireless deployment.
An unauthorized access point can be installed by a malicious user, but it could also be a device installed by someone inside your organization without consent. These access points are security risks to your wireless and wired networks if they do not have proper security features enabled.
The Gateway Wireless Controller scans the wireless network on all wireless modes and channels within range for other wireless devices.
In the Wireless Deployment Maps, you can see all wireless devices and access points. This includes the AP devices managed by your Gateway Wireless Controller in the Wireless Coverage Map, and all foreign SSIDs and BSSIDs (Broadcast SSID — the MAC address is displayed if SSID broadcast is disabled) in the Channel Conflict Map.
This map can help you find the relative location of any foreign device in relation to your other devices on the network. You can also click any foreign device in the map and examine wireless details for that device.
Select the Foreign BSSIDs tab to see all SSIDs broadcast by unknown AP devices (the MAC address is displayed if SSID broadcast is disabled). Rogue access points (identified with a red dot) are those devices that are not paired with your Gateway Wireless Controller, or do not appear in your rogue access point exception list.
To enable rogue access point detection and add access points to your exception list, see Enable Rogue Access Point Detection.
The Rogue Access Point Detection feature for the Gateway Wireless Controller and managed WatchGuard AP devices is different than the Rogue Access Point Detection feature designed for Firebox and XTM wireless devices with built-in wireless capabilities.
For information on the differences between Firebox and XTM wireless devices and WatchGuard AP devices, see Wireless Access Point Types. For information on Rogue Access Point Detection for Firebox or XTM wireless devices, see Rogue Access Point Detection.