About WatchGuard AP License Subscriptions

You must activate your AP with a valid AP license subscription to enable your hardware replacement warranty, receive technical support, and get access to the latest software updates for your AP. You cannot manage or monitor the AP with the Gateway Wireless Controller until the AP is activated and an AP feature key is imported to your Firebox.

WatchGuard offers these types of wireless security subscriptions for WatchGuard APs:

Basic Wi-Fi

Use the Gateway Wireless Controller on your Firebox to configure, manage, and monitor WatchGuard APs directly from the Firebox.

Secure Wi-Fi and Total Wi-Fi

Use WatchGuard Wi-Fi Cloud for WatchGuard AP management, security, and monitoring. A Total Wi-Fi subscription provides additional tools for guest user engagement, analytics, social media integration, captive portals, and splash page design. For more information, see About WatchGuard Wi-Fi Cloud.

AP License Enforcement on the Gateway Wireless Controller

Beginning with the Fireware v12.5.1 release, WatchGuard enforces licensing requirements for Basic Wi-Fi APs. Each WatchGuard AP managed by a Gateway Wireless Controller on a Firebox must be activated with a Basic Wi-Fi subscription.

  • WatchGuard APs with Basic Wi-Fi subscriptions purchased and activated on or after September 1, 2018 are subject to license enforcement, and the Gateway Wireless Controller will monitor the AP license status and expiry date.
  • WatchGuard APs with Basic Wi-Fi subscriptions purchased and activated before September 1, 2018 are exempt from license enforcement unless they were renewed after this date. A future date is displayed for the AP expiry to indicate a perpetual management license until the end-of-life of the AP. Note that you must have a current valid Basic Wi-Fi subscription if you require support for the AP.

If the AP was originally activated before September 1, 2018 with a Secure Wi-Fi, Total Wi-Fi, or Wi-Fi Cloud trial license, and is now managed as a Basic Wi-Fi AP by the Gateway Wireless Controller, the AP is still subject to license enforcement.

AP Subscription Expiry

When a Basic Wi-Fi AP subscription expires:

  • The expired AP will continue to broadcast SSIDs and allow wireless access to the network based on the most recent configuration applied to the AP.
  • The Gateway Wireless Controller will not perform further configuration updates or software updates to an expired AP.
  • The Gateway Wireless Controller will not monitor or collect data for an expired AP except for basic traffic information.
  • You cannot perform any actions on APs that do not have an active Basic Wi-Fi subscription, except for licensing functions and resetting the AP to factory default settings.
  • There is no technical support provided for an expired AP.

If the Firebox has an active support subscription, you can receive support for issues specific to the Gateway Wireless Controller. Support issues specific to APs managed by the Gateway Wireless Controller require a valid AP subscription.

AP Activation

You can activate your new APs at

Log in to your WatchGuard account, then add the serial number of your AP to your account. Make sure the AP you want to activate has a Basic Wi-Fi subscription. (Total and Secure Wi-Fi subscriptions are for cloud-managed APs.) For more information, see About AP Activation.

AP Activation Status and AP Feature Key Management

After you successfully activate an AP, the Gateway Wireless Controller continuously monitors the status of your AP subscription and expiry date. You can view the current license status of your APs in the Gateway Wireless Controller, and you will receive notifications in the user interface when an AP has less than 90 days remaining until expiry. When you activate or renew a WatchGuard AP subscription with a Basic Wi-Fi subscription in your WatchGuard account, you can update the AP license status and AP feature key in the Gateway Wireless Controller.

Automatic AP feature key synchronization enables the Gateway Wireless Controller to retrieve the license status and AP feature keys for your APs from WatchGuard servers. This synchronization occurs on a periodic basis to make sure the Gateway Wireless Controller has the latest activation status and AP feature key for your AP. This option is enabled by default. For more information, see Configure Gateway Wireless Controller Settings.

You can also manually update the AP license status and AP feature key for an AP.

For more information on how to monitor and manage your AP license status and AP feature keys with the Gateway Wireless Controller, see Monitor AP Status.

See Also

About AP Activation

Monitor AP Status

About WatchGuard Wi-Fi Cloud

Give Us Feedback  ●   Get Support  ●   All Product Documentation  ●   Technical Search