Contents

Manage SSID Profiles

An SSID profile (Wi-Fi Profile) is a set of wireless network properties that are configured on an AP.

To configure SSID Profiles, select Configuration > Device Configuration > SSID Profiles.

Wi-Fi Profile

You can configure these settings for a Wi-Fi profile.

  • Manage Security Settings — Security settings specify the type of security used by the AP to authenticate wireless clients. You can also configure Google Device Authorization or RADIUS MAC Authentication.
  • Network Settings — The VLAN and DHCP settings for the Wi-Fi profile are configured in the network settings.
  • Role Based Control — Enables you to restrict wireless network access to authorized users. Users are granted controlled access to wireless resources based on the roles assigned to them.
  • Enable a Captive Portal — To enable a captive portal on the Wi-Fi profile for guest access, you must configure the captive portal settings. These settings comprise splash page configuration, walled garden settings, and other external portal parameters.
  • Bonjour Gateway Settings — Clients can automatically detect and connect to Bonjour capable devices and the services running on such devices. Bonjour is the Apple implementation of zero-configuration networking (Zeroconf). It is used to discover devices and services advertised by Bonjour capable devices on a local network using multicast Domain Name System (mDNS).
  • HTTP Content Analytics — APs support the transfer of client HTTP content analytics or browsing data from clients over HTTP or HTTPS to an external server where this information can be stored. All HTTP requests from clients to a WatchGuard AP can be recorded and sent to an external server at regular intervals.
  • Firewall Settings — Firewall rules for the Wi-Fi profile are configured in the firewall settings. You can control incoming and outgoing traffic through a virtual AP with firewall rules. You can also configure an Application Firewall to allow or block applications on an SSID.
  • SSID Scheduling — If you want to limit the duration for which the SSID is active, you can define a schedule for the SSID. You can also specify whether an SSID should be permanently active or valid for only a limited time duration.
  • Traffic Management Settings and QoS Settings — For improved use of network bandwidth, you can define upload and download limits for the network, restrict the number of client associations, and use band steering and QoS.
  • Manage Radio Frequency Optimization — Configure RF Optimization parameters such as Smart Steering, Minimum Association RSSI, and Band Steering.
  • BYOD (Bring Your Own Device) Onboarding — BYOD settings determine if the wireless clients can connect to APs in a corporate network. For example, if employees bring their own smart devices to the office, you can configure the SSID profile to allow or disallow such devices from connecting to the corporate network.
  • Client MAC Address Whitelist and Blacklist — Create a whitelist or blacklist of MAC addresses to control client access to the SSID.
  • Troubleshooting — Enable auto-packet capture when troubleshooting APs with WatchGuard Technical Support.
  • Hotspot 2.0 Settings — If you want to deploy the AP in a Hotspot 2.0 operator's network so that the AP functions as a Hotspot 2.0 AP, you must configure the Hotspot 2.0 settings.

You cannot configure BYOD settings and captive portal settings on the same Wi-Fi profile. Each should be configured on independent Wi-Fi profiles.

To add a Wi-Fi profile:

  1. Select Configuration > Device Configuration > SSID Profiles.
  2. Select the location for where to create the Wi-Fi profile.
  3. Click Add New Wi-Fi Profile.
  4. You can configure these options:

Field

Description

Profile Name

Name of the Wi-Fi profile.

SSID

SSID or network name of the Wi-Fi profile. This is the SSID name of the network that the wireless user connects to.

Broadcast SSID

Enables or disables broadcast of SSID in the wireless packet. Select the check box to broadcast the SSID with the wireless packets. Clear the check box if you do not want to broadcast the SSID with the wireless packets.

Application Visibility

If you enable this option, a list of applications above layer 2 for a specific SSID is displayed in the Monitoring > Applications page. You can also use the Application Firewall to manage access for detected applications. For more information. see Application Firewall.

Application Visibility and the Application Firewall are only supported on 802.11ac Wave 2 APs. The feature is not supported on the AP120, AP320, and AP322.

Association Analytics

Select the check box to enable association analytics in reports. Clear the check box if you do not want association analytics data in reports. This enables you to collect information on each SSID and use Analyze to view charts, graphs, and reports on analytics data. For more information, see About Analytics.

Association Analytics comprises the data related to client-AP communication:

  • Client MAC address
  • Protocol
  • SSID of the network to which the client connects
  • Location of the client
  • Start time of client association with the AP (GMT)
  • End time of client association with the AP (GMT)
  • Start time of client association with the AP according to local time of the user
  • End time of client association with the AP according to local time at the user
  • Session duration
  • Data transfer from client device in bytes
  • Data transfer to client device in bytes
  • Data rate in Kbps
  • Smart device type
  • Local Time Zone

Content Analytics

Enables or disables content analytics in reports. This check box is visible only if you have selected the Association Analytics check box. Content analytics contain information about Internet domains or IP addresses accessed by clients associated with the APs. Select the check box to collect internet domain access information as a part of association analytics. This information is present in the CSV file you can download from the Reports > Analytics page. Clear the check box if you do not want content analytics data in reports.

For each internet domain, you can collect this content analytics information:

  • Domain name
  • Data transferred to the domain (in bytes)
  • Data received from the domain (in bytes)
  1. Configure any other options as required.
  2. Click Save.

Configure a Wi-Fi Profile to Allow Online Sign Up (OSU)

A mobile client that is compatible with Hotspot 2.0 Release 2 can subscribe to online services from various service providers through an AP that is compliant with Hotspot 2.0 Release 2. The AP facilitates the advertising of online services from various available service providers. The mobile client can choose an online service from the list of available online services and sign-up for the online service through the AP. This is called Online Sign-Up (OSU).

To configure a Wi-Fi profile to allow OSU:

  1. The security type for communication between the AP and the service providers can be open or Hotspot 2.0 OSEN. You must specify the details of the RADIUS server when you configure the Wi-Fi profile if the OSEN type is selected.
  2. Proxy ARP must be enabled and DGAF must be disabled when Hotspot 2.0 OSEN authentication is used for the OSU SSID.
  3. You must select the Wi-Fi profile as the OSU SSID while configuring the Hotspot 2.0 (release 2) SSID that is made available for mobile clients looking for OSU services.

Copy Wi-Fi Profile

To make a copy of an existing Wi-Fi profile:

  1. Select Configuration > Device Configuration > SSID Profiles.
  2. Select the location.
  3. Open the Wi-Fi profile to copy.
  4. Type a new name for the Wi-Fi profile.
  5. Make the required changes to the profile.
  6. Click Save As to save the new profile.

Edit Wi-Fi Profile

The Wi-Fi profile can be edited only at the location where it has been created.

To edit a Wi-Fi profile:

  1. Select Configuration > Device Configuration > SSID Profiles.
  2. Select the location where the Wi-Fi profile was created.
  3. Click the Wi-Fi profile name.
  4. Make the required changes.
  5. Click Save.

Copy Wi-Fi Profile to Another Location

To make a copy of an existing Wi-Fi profile to another location:

  1. Select Configuration > Device Configuration > SSID Profiles.
  2. Select the location where the Wi-Fi profile was created.
  3. On the SSID Profile page, select the check box for the SSID profile to copy to another location.
  4. Click the Copy profile to another location icon icon.
  5. Select the location where to copy the Wi-Fi profile.

Delete Wi-Fi Profile

You cannot delete a Wi-Fi profile if it is used in a device template. You can delete a Wi-Fi profile at a selected location only if you have created the Wi-Fi profile at that location.

To delete a Wi-Fi profile:

  1. Select Configuration > Device Configuration > SSID Profiles.
  2. Select the location where the Wi-Fi profile was created.
  3. Click the Delete icon for the Wi-Fi profile. .
  4. Click Yes to confirm.

Print List of Wi-Fi Profiles for Location

To print a list of Wi-Fi profiles at a location:

  1. Select Configuration > Device Configuration > SSID Profiles.
  2. Click the Wi-Fi Profiles tab.
  3. Select the columns that you want in the printed list.
  4. Click the Print icon.
    A print preview of the list appears.
  5. Click Print.

Give Us Feedback  ●   Get Support  ●   All Product Documentation  ●   Technical Search