Wi-Fi in WatchGuard Cloud Release Notes

Enhancements

• The default wireless mode for an access point 2.4 GHz radio is now 802.11ax for new device and access point site configurations. [WIFI-11562]
• A new Access Point column is added to the Top Clients report to indicate the access point the client is connected to. [WIFI-11569]
• The Access Point Firmware Upgrades notification type now correctly appears in the notification rules for Devices. [WIFI-11574]

Resolved Issues

• Minor updates and bug fixes. [WIFI-10938]

Resolved Issues

• A new SNMP MIB file has been added for access points on firmware versions v3.1 and higher. To get the new MIB file, go to SNMP MIB file for Wi-Fi in WatchGuard Cloud Access Points. For access points on firmware v2.7 or lower, continue to use the original MIB file. [AP-3309]
• On access points, channel 173 no longer incorrectly appears as a selectable 5 GHz channel when the country of operation is set to Australia. [WIFI-11320]
• Minor updates and bug fixes.

New Features

Access Point Automatic Firmware Upgrades

This feature enables you to schedule automatic access point firmware upgrades and configure maintenance windows and staggered device upgrades to minimize network disruption. For more information, go to Update Access Point Firmware.

Resolved Issues

• When the IP address of a malicious access point cannot be determined, the address shows as Unknown instead of 0.0.0.0 in Airspace Monitoring and ThreatSync incident reports and notifications. [WIFI-11464]
• Minor updates and bug fixes. [WIFI-11550]

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point Channel History Report

The Channel History report provides details about channel usage for WatchGuard access points and identifies the reasons an access point changed its operating channel. The Channel History report includes data only for access points with beta firmware version 3.2 or higher. For more information, go to Access Point Channel History Report.

Access Point Automatic Firmware Upgrades (Beta)

This feature enables you to schedule automatic access point firmware upgrades and configure maintenance windows and staggered device upgrades to minimize network disruption. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• WatchGuard Cloud now correctly updates new Airspace Monitoring data to access points to prevent the incorrect detection of the device's own SSIDs as Evil Twin threats. [WIFI-11508] [WIFI-11508]
• The “Exceeds client connection limits" client connection failure now correctly appears in the access point Connection Issues report. [WIFI-11536]
• Minor updates and bug fixes. [WIFI-11533]

New Features

Access Point Firmware Update v3.2.10-0.B738309

This firmware release is for all WatchGuard access points managed in WatchGuard Cloud, and contains stability and performance improvements, new features, enhancements, and resolved issues. This release enables new features for AP230W, AP332CR, AP430CR, and AP432 devices that were already available for AP130 and AP330 devices in firmware v3.1 and higher. For more information about this release, go to Access Point Firmware Releases.

Access Point Client Timeline

The Client Timeline provides a clear view of how a wireless client associates, authenticates, and roams across access points over time, with detailed connection event messages to simplify analysis and troubleshooting. This feature requires access point firmware v3.2 and higher. For more information, go to View Wireless Client Details.

Access Point Third-Party Captive Portal Vendor and ADIPSYS Support

This feature enables you to specify a vendor identifier when you configure a third-party captive portal to ensure reliable integration with supported vendors, including new ADIPSYS support for deployments that use custom-branded or region-specific splash URLs. This feature requires firmware v3.2 and higher. For more information, go to Configure a Captive Portal for an Access Point.

DCS Enhancements and Interference Mitigation (AP230W, AP332CR, AP430CR, and AP432)

The Dynamic Channel Selection (DCS) algorithm is updated to improve the evaluation and selection of channels and prevent co-channel and adjacent channel interference. You can also enable a new DCS Interference Mitigation feature that enables the 5 GHz radio to manage the current real-time channel congestion and interference by switching to a less congested channel if the current channel utilization is greater than the configured utilization threshold (default 60%). Interference Mitigation is not supported on the 2.4 GHz radio. This feature requires firmware v3.2 and higher. For more information, go to Configure Access Point Radio Settings.

Client Balancing (AP230W, AP332CR, AP430CR, and AP432)

You can now enable a new Client Balancing feature in the radio settings of an Access Point Site. Client Balancing utilizes the BSS transition management (BTM) feature of the 802.11v protocol and information about the current state of the network to steer wireless clients to the most optimal access point. This network optimization helps evenly distribute client connections across multiple access points in dense Wi-Fi deployments. You can only enable Client Balancing in the 2.4 GHz and 5 GHz radio settings of an Access Point Site configuration. This ensures that all access points are enabled with this feature to share data and optimize client balancing. This feature requires firmware v3.2 and higher. For more information, go to Configure Access Point Radio Settings.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point Channel History Report (Beta)

The Channel History report provides details about channel usage for WatchGuard access points and identifies the reasons an access point changed its operating channel. The Channel History report displays data only for access points running beta firmware version 3.2.7 or higher. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Enhancements

Updated Default Access Point Radio Settings

Default access point radio settings for new configurations are updated for both device-level and access point site configurations. [WIFI-8978]

• 2.4 GHz radio
  • DCS is now enabled by default with a 12-hour scan interval
• 5 GHz radio
  • Default channel width is now 40 MHz instead of 80 MHz to reduce neighbor access point interference
  • DFS channels are now enabled by default
  • Outdoor models exclude channels 36–64 by default
  • DCS is now enabled by default with a 12-hour scan interval
  • DCS Interference Mitigation is now enabled by default on devices with firmware v3.1 and higher

Resolved Issues

• HTML injection vulnerabilities in the access point management interface in WatchGuard Cloud are resolved. [WIFI-11484, WIFI-11485]
• Minor updates and bug fixes.

New Features

Access Point Client Timeline (Beta)

The Client Timeline provides a clear view of how a wireless client associates, authenticates, and roams across access points over time, with detailed connection event messages to simplify analysis and troubleshooting. This feature requires access point beta firmware v3.2.7. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point Firmware Update v3.2.7-0.B735201 (Beta)

This firmware release is for all WatchGuard access points managed in WatchGuard Cloud, and contains stability and performance improvements, new features, enhancements, and resolved issues. This release enables new features for AP230W, AP332CR, AP430CR, and AP432 devices that were already available for AP130 and AP330 devices in firmware v3.1 and higher. For more information about this release, go to Access Point Firmware Releases.

To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

DCS Enhancements and Interference Mitigation (Beta for AP230W, AP332CR, AP430CR, and AP432)

The Dynamic Channel Selection (DCS) algorithm is updated to improve the evaluation and selection of channels and prevent co-channel and adjacent channel interference. You can also enable a new DCS Interference Mitigation feature that enables the 5 GHz radio to manage the current real-time channel congestion and interference by switching to a less congested channel if the current channel utilization is greater than the configured utilization threshold (default 60%). Interference Mitigation is not supported on the 2.4 GHz radio.

This feature requires beta firmware v3.2.7. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Client Balancing (Beta for AP230W, AP332CR, AP430CR, and AP432)

You can now enable a new Client Balancing feature in the radio settings of an Access Point Site. Client Balancing utilizes the BSS transition management (BTM) feature of the 802.11v protocol and information about the current state of the network to steer wireless clients to the most optimal access point. This network optimization helps evenly distribute client connections across multiple access points in dense Wi-Fi deployments. You can only enable Client Balancing in the 2.4 GHz and 5 GHz radio settings of an Access Point Site configuration. This ensures that all access points are enabled with this feature to share data and optimize client balancing.

This feature requires beta firmware v3.2.7. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

• Minor updates and bug fixes.

New Features

Access Point Firmware Update v3.1.25-0.B734727 (AP130 and AP330 only)

This firmware release is for AP130 and AP330 devices only, and resolves several issues. For more information about this release, go to Access Point Firmware Releases.

Resolved Issues

• This release updates the regulatory Wi‑Fi database in WatchGuard Cloud to support greater channel widths for Costa Rica. [WIFI-11305]
• Minor updates and bug fixes. [WIFI-11350]

Resolved Issues

• Minor updates and bug fixes. [WIFI-11314]

Enhancements

• The Access Point Connection Events report now includes the MAC address of the wireless client and a more precise timestamp for wireless client connection events. [WIFI-8748]

Resolved Issues

• Minor updates and bug fixes.

Enhancements

• You can now refresh the deployment history on demand to view the latest configuration changes. [WIFI-9228]
• To help you schedule potentially disruptive changes, you are now notified when access point device or site configuration changes will disconnect currently connected Wi‑Fi clients. [WIFI-9468]
• In the access point Device Settings page, you can now customize and reorder columns at the folder level to show the information you require. [WIFI-9480]
• Access point site configuration pages now have navigation breadcrumbs to show the current site and configuration feature section when you edit site settings. [WIFI-10807]
• Radio channels are now grouped to simplify channel selection and planning. [WIFI-11093]
• The access point Client Details page now loads much faster than before. [WIFI-11135]
• The access point Device Settings page now indicates that the radio Transmit Power value does not include antenna gain. [WIFI-11159]

Resolved Issues

• Minor updates and bug fixes. [WIFI-8625]

Resolved Issues

• When you select Reboot Now to reboot a device, WatchGuard Cloud now shows a confirmation dialog before the device reboots. [WIFI-11129]
• Minor updates and bug fixes.

New Features

Access Point Firmware Update v3.1.24-0.B732612 (AP130 and AP330 only)

This firmware release is for AP130 and AP330 devices only, and contains important stability and performance improvements, new features, enhancements, and resolved issues. For more information about this release, go to Access Point Firmware Releases.

Access Point Firmware Update v2.7.21-0.B731327 (AP230W, AP332CR, AP430CR, and AP432 only)

This firmware release is for AP230W, AP332CR, AP430CR, and AP432 devices only, and contains new features, enhancements, and resolved issues. For more information about this release, go to Access Point Firmware Releases.

Access Point DCS Interference Mitigation and Client Balancing (AP130 and AP330 on firmware v3.1 only)

You can now enable DCS Interference Mitigation that enables the 5 GHz radio to manage the current real-time channel congestion and interference by switching to a less congested channel if the current channel utilization is greater than the configured utilization threshold. In an Access Point Site configuration, you can also enable Client Balancing in the 2.4 GHz and 5 GHz radio settings to help balance Wi-Fi client connections across multiple access points. For more information, go to Configure Access Point Radio Settings.

Access Point Schedule Reboots

You can now schedule a one-time or recurring access point reboot. Regular reboots help refresh access point resources and optimize channel selection. You can schedule a one-time reboot from the Device Settings or Device Summary page of an access point. Recurring reboots must be configured in the device configuration or an Access Point Site. In an Access Point Site configuration, you can also select the Stagger Reboots option so that access points subscribed to the site do not reboot at the same time and reboot in 5-minute intervals to prevent network disruption.

• Access points on firmware version 2.7.21 and higher support the ability to schedule both one-time reboots and recurring reboots.
• Access points on firmware version 2.7.17 and lower only support a scheduled one-time reboot.

For more information, go to Reboot an Access Point from WatchGuard Cloud and Schedule Recurring Reboots for Access Points.

Resolved Issues

• The access point Device Settings page now indicates that the radio Transmit Power value does not include antenna gain. [WIFI-11159]
• The access point Client Details page now loads much faster when you select a client. [WIFI-11135]
• Access point site deployments now show a notification when a site configuration includes features that are not supported on some subscribed device models. Unsupported feature settings are skipped for those devices, while the rest of the site configuration is still deployed. [WIFI-11146]
• Access points subscribed to a site are no longer automatically upgraded to newer firmware when the site configuration deploys features unsupported by that device model. [WIFI-11158]
• Minor updates and bug fixes.

Resolved Issues

• After you delete and recreate a scheduled deployment at the site or device level for an access point, the confirmation page now correctly shows the new configured deployment time. [WIFI-10054]
• Resolved an issue that prevented some drop-down lists from fully expanding in access point configuration pages. [WIFI-10314]
• The access point Device Settings page now correctly shows the actual scheduled reboot time for site-level devices configured with staggered recurring reboots. [WIFI-11041]
• In an access point site, the compare configuration versions report no longer shows that Advanced Settings were removed when only site‑level Device Settings were disabled. [WIFI-11140]
• The beta firmware upgrade notification link for an access point no longer overlaps with other text on the Device Settings page. [WIFI-11172]
• Column sorting now works correctly for Data Rate, Upload, Download, and Connection Time columns in the access point Live Status > Clients page. [WIFI-11184]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point Firmware Update v3.1.18-0.B730236 (Beta for AP130/AP330 only)

This beta firmware release is for AP130 and AP330 devices only, and contains important stability and performance improvements, new features, enhancements, and resolved issues. For more information about this release, go to Access Point Firmware Releases. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point DCS Interference Mitigation and Client Balancing (Beta for AP130/AP330 on firmware v3.1 only)

You can now enable DCS Interference Mitigation that enables the 5 GHz radio to manage the current real-time channel congestion and interference by switching to a less congested channel if the current channel utilization is greater than the configured utilization threshold. In an Access Point Site configuration, you can also enable Client Balancing in the 2.4 GHz and 5 GHz radio settings to help balance Wi-Fi client connections across multiple access points. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Schedule Reboots (Beta)

This feature enables you to schedule one-time and recurring access point reboots. AP130 and AP330 access points on beta firmware v3.1 support the ability to schedule both one-time and recurring reboots. All access point models on firmware v2.7 and lower support a scheduled one-time reboot only. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Enhancements

• You can now customize and reorder columns on the access point Device Settings page at the folder level. [WIFI-9480]

Resolved Issues

• This release resolves an issue where a rogue access point detection by Airspace Monitoring did not trigger a ThreatSync incident in some cases. [WIFI-11086].
• You now correctly receive an undeployed change notification after you enable and then disable access point site settings in a new configuration then save it. [WIFI-11102]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• The notification alert for an access point channel change due to DFS radar detection now shows correctly. [WIFI-10970, WIFI-11090]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• This release resolves an issue where some types of Aruba access points were not correctly detected as a rogue access point by Airspace Monitoring. [WIFI-10934]
• The Threat IP Address column in the access point Airspace Monitoring report can now be correctly sorted. [WIFI-10862]
• Minor updates and bug fixes. [WIFI-10164]

Resolved Issues

• The channel displayed on the access point device summary page now correctly updates after the channel changes because of radar detection by DFS. [WIFI-10873]
• The Guest Analytics report now includes data on guest users that click-through a captive portal if a web form is not configured. [WIFI-8042]
• Minor updates and bug fixes.

Resolved Issues

• The Monitor > Device Summary page for a device now shows a more detailed device uptime value, including days, hours, and minutes. [WIFI-10909]
• Minor updates and bug fixes.

Resolved Issues

• The Dashboard > Device Status or Device Firmware widget for a Service Provider now correctly opens the Device Settings page and lists all devices from the Service Provider, Subscriber, and delegated accounts. If there are no devices, a No Devices message shows. [WCD-30252]
• Minor updates and bug fixes.

Resolved Issues

• You can no longer use semicolon (;) or colon (:) characters in an access point SSID passphrase. These characters create issues with SSID QR code generation. [WIFI-9437]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Access point channels and transmit power settings for Malaysia are updated. [WIFI-9662]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• You can now correctly configure up to 256 MAC addresses for access point MAC address access control. [WIFI-10842]
• Minor updates and bug fixes.

New Features

Access Point Firmware Update v2.7.17-0.B723307

This firmware update is a maintenance release that includes enhancements and resolves several issues. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• An updated DCS Scan Interval value based on the new default settings now correctly shows an undeployed configuration message to save and deploy the updated settings to an access point. [WIFI-10827]
• Minor updates and bug fixes.

Resolved Issues

• In the access point radio settings, the DCS Scan Interval selection options are updated to 2, 3, 4, 6, 8, 12, and 24 hours. If you have set a different custom value, it will be changed to the nearest higher value, for example, 10 hours to 12 hours. You must deploy the updated configuration to the access points for the changed settings to take effect. [WIFI-10809]
• Minor updates and bug fixes.

Resolved Issues

• The current minimum access point firmware version for WatchGuard Cloud is now v2.2.23. Access points that currently run a firmware version less than v2.2.23 will be automatically upgraded to the latest available firmware version when there is a new configuration deployment to the device. If you have the Device Firmware Beta Releases beta toggle enabled, the firmware version upgrades to the latest beta version, if available. [WIFI-10811]
• The access point device settings page now correctly shows the current ThreatSync status when ThreatSync is enabled. [XDR-3610]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• The access point radio Auto transmit power setting selection is renamed to Auto (Max) to indicate the radio uses the maximum transmit power allowed for the country of operation. [WIFI-10519]
• Minor updates and bug fixes. [WIFI-8823]

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• The ThreatSync Incident Details page for an access point incident now correctly refreshes the current status after you successfully perform an action. [WIFI-10738]
• The Access Point Guest Analytics report now correctly merges data records about the same client and the same web form. [WIFI-10691]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• The Connection Issues by Account widget now correctly shows as an available widget on the dashboard of a Service Provider account. [WIFI-10701]
• The wireless client name is now correctly displayed in the Client Details page. [WIFI-10704]
• Minor updates and bug fixes.

Resolved Issues

• The Connection Issues by Account widget now correctly shows as an available widget on the dashboard of a Service Provider account. [WIFI-10701]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes. [WIFI-10673]

Resolved Issues

• The access point Client Connection Events CSV report now correctly displays the supported wireless modes. [WIFI-10609]
• In the ThreatSync Incident Details page, the Entities of Interest section is improved to provide more detailed information about malicious access points. [WIFI-10578]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes. [WIFI-10486, WIFI-10596]

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Access point configuration deployments no longer fail with a "Failed to process event: TransactionError:" message. [WIFI-10538, WIFI-10546]
• An HTML-injection vulnerability in the PPSK configuration of an Access Point Site is resolved. [WIFI-10583]
• Minor updates and bug fixes. [WIFI-10583]

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• You can now select DFS channels in the AP230W radio configuration when the country of operation is Brazil. [WIFI-10347]
• Minor updates and bug fixes.

Resolved Issues

• The Access Point ThreatSync response action for Block Access Point is renamed to Block Connections to Access Point. [WIFI-10327]
• Minor updates and bug fixes.

New Features

Access Point ThreatSync Response Actions

You can now perform response actions on Wi-Fi threats detected by ThreatSync to block wireless client connections to malicious access points or trust known access points in your deployment. This feature requires access point firmware v2.7. For more information, go to About ThreatSync. [WIFI-7982]

Resolved Issues

• The Terms and Conditions and Privacy Policy text in a captive portal splash page configuration now correctly support line breaks. Long text now displays correctly with scroll bars. [WIFI-7986]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point and Wireless Client Visibility Enhancements

The access point and wireless client monitoring and details pages now include additional visibility data about devices, clients, and connection events. These features require access point firmware v2.7. For more information about these enhancements, go to the What's New in WatchGuard Cloud PowerPoint. [WIFI-9787]

Access Point Firmware Update v2.7.9-0.B714794

This firmware update supports response actions in ThreatSync to block client connections to malicious access points, and adds several access point and client visibility improvements, feature enhancements, and resolved issues. The access point reset procedure is also improved to more easily see when the device is correctly reset. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases. [AP-2070]

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point ThreatSync Response Actions (Beta)

This feature enables you to perform response actions on Wi-Fi threats detected by ThreatSync and block wireless client connections to malicious access points. This feature requires access point beta firmware v2.7. To learn more or to report an issue, go to the ThreatSync Beta test community.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point and Wireless Client Visibility Enhancements (Beta)

The access point and wireless client monitoring and details pages now include additional visibility data about devices, clients, and connection events. This feature requires access point beta firmware v2.7. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

• Additional information about wireless client 802.11 capabilities now appears in the client monitoring pages, including the current and supported wireless modes, stream capacity, and the channel width.
• The Client details page now includes a Client Basic Information section that provides details about the wireless mode, security protocol, SSID, and the current RSSI and data rate for the connection.
• The Client Connection Events now includes additional details about the reasons for an Access Point or Station disconnect, such as idle timeout, client dissociation, incorrect password, and MAC address access control list.
• The Device Details page for a folder of multiple access points now shows BSSID information for each SSID.
• The access point Device Summary page now includes these widgets:
• SSIDs — Shows the SSIDs broadcast by the device and includes the BSSID information
• Connected Clients — Shows total connected clients and number of clients on each radio
• Connection Status — Shows connection status to WatchGuard Cloud, and the status of the Access Point VPN and Airspace Monitoring features

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point Firmware Update v2.7.6-0.B713100 (Beta)

This beta firmware update supports the Access Point and Wireless Client Visibility Enhancements beta feature, and also contains several enhancements and resolved issues. The access point reset procedure is also improved to more easily see when the device is correctly reset. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Add Replacement (RMA) Access Points Enhancements

When you add replacement (RMA) access points, these devices are now identified by a Replacement label in the Add Device page. WatchGuard Cloud automatically applies the configuration used by the original access point except the device password that you configure when you add the replacement device. When you connect the replacement device and the access point comes online, the original access point becomes inactive in WatchGuard Cloud. You can then remove the original device from WatchGuard Cloud. You cannot add replacement devices at the same time as new devices.

Resolved Issues

• The Add Device Wizard configuration for multiple replacement (RMA) access points now correctly shows only the device password configuration. [WIFI-10300]
• An AP430CR now correctly updates its firmware after you apply a site configuration with LAN interface settings and the access point does not run the supported firmware version. [WIFI-10331]
• Minor updates and bug fixes.

New Features

Verify Feature Support on Access Point Configuration Deployment

When you deploy a configuration for an access point, WatchGuard Cloud now verifies that the firmware version of the access point supports the features enabled in the configuration deployment and enables you to upgrade the firmware version if required. This verification also occurs when you deploy an Access Point Site configuration.

Resolved Issues

• Minor updates and bug fixes.

New Features

Add Multiple Access Points to WatchGuard Cloud

You can now add multiple access points to WatchGuard Cloud at the same time with the Add Device Wizard. You can configure the access point name, description, time zone, device folder, network settings, site configuration, and device password for each access point you want to add. For Service Providers, this enables you to add multiple access points to a Subscriber account with a shared Access Point Site configuration for faster initial configuration and setup before device installation.

When you add replacement (RMA) access points, WatchGuard Cloud automatically applies the configuration used by the original access point except the device password that you configure when you add the replacement device. The original access point is automatically removed from WatchGuard Cloud after you successfully add the replacement device.

For more information, go to Add an Access Point to WatchGuard Cloud.

Resolved Issues

• Minor updates and bug fixes.

New Features

Verify Feature Support on Access Point Configuration Deployment (Beta)

When you deploy a configuration for an access point, WatchGuard Cloud now verifies that the firmware version of the access point supports the features enabled in the configuration deployment and enables you to upgrade the firmware version if required. This verification also occurs when you deploy an Access Point Site configuration.

To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes. [WIFI-9534, WIFI-10053]

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• You can now correctly filter USP and Standard Wi-Fi access point licenses on the Access Point details page. [WIFI-9496]
• Minor updates and bug fixes. [WIFI-10046]

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Captive portal splash page web form labels now have a limit of 25 characters to prevent display issues. [WIFI-9524]
• In certain cases, an error occurs when you attempt to add an RMA replacement access point to WatchGuard Cloud. [WIFI-9995]
• The access point packet capture diagnostic tool now runs correctly when you include "tcpdump" as a command argument. [WIFI-10019]
• Minor updates and bug fixes. [WIFI-9377, WIFI-9532]

Resolved Issues

• The RSSI icon now correctly correlates to the actual signal strength in the access point Live Status > Clients list. [WIFI-9986]
• Access points that you select as a subscribed device for an Access Point Site are now correctly displayed as selected after you save the settings. [WIFI-9987]
• Minor updates and bug fixes.

Resolved Issues

• Wireless clients now correctly appear in the access point Guest Analytics report if the captive portal is not configured with a web form. [WIFI-9897]
• Minor updates and bug fixes.

Resolved Issues

• The access point Guest Analytics report now shows no data for a field if the splash page web form field is not configured or if the guest user did not complete an optional field. [WIFI-9803]
• Minor updates and bug fixes. [WIFI-9542, WIFI-8252]

Resolved Issues

• The Low Data Rate and Low RSSI values in the access point Performance Issues report are now calculated correctly based on the client connection time. [WIFI-9846]
• The Connection Issues by Account dashboard widget for Service Providers now appears correctly. [WCD-23241]
• Minor updates and bug fixes.

Resolved Issues

• Disabled access point PPSKs no longer appear on the Print Vouchers page. [WIFI-9898]
• Pending deployment changes now appear when the access point country of operation is changed. [WIFI-9630]
• You can now correctly enter text for the access point splash page Terms of Use and Privacy Policy text fields after you drag and drop a logo image file. [WIFI-9783]
• Minor updates and bug fixes. [WIFI-9533, WIFI-9547]

New Features

Access Point PPSK Support

With this feature, you can enable and configure Private Pre-Shared Keys (PPSK) on an SSID that uses WPA2 Personal security. This feature requires access point firmware v2.6 or higher. For more information, go to Configure PPSK for an Access Point SSID.

Access Point Firmware Update v2.6.7-0.B706123

This firmware update supports the Private Pre-Shared Key (PPSK) feature. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• All access point reports are now correctly selected when you select the Access Points check box in Scheduled Reports. [WIFI-9766]
• The data on the access point Performance Issues widget is now rounded correctly. [WIFI-9867]
• Minor updates and bug fixes. [WIFI-9776, WIFI-9888]

Resolved Issues

• The date and time now appear in the graph details when you hover over specific points in the Performance Issues report. [WIFI-9847]
• The client details Overview tab report is now correctly downloaded instead of the Performance report when you click the PDF report icon on the client details Overview tab page. [WIFI-9874]
• Minor updates and bug fixes. [WIFI-9774]

Resolved Issues

• The Performance Issues widget on the access point monitor page now shows the top five clients most impacted by low RSSI or low data rate. [WIFI-9777]
• An access point VPN is correctly disabled after the corresponding Firebox is removed from WatchGuard Cloud. [WIFI-9853]
• Minor updates and bug fixes. [WIFI-9736, WIFI-9857]

Resolved Issues

• For access point CR device models that support indoor channels, you now see a message when you change the country of operation and the radio settings are not compatible. [WIFI-9505]
• When you add a ThreatSync notification rule, the UI now correctly displays Device Types and Incident Types related to Access Points. [WIFI-9544]
• This release resolves minor display issues with the Access Point Performance Issues Report. [WIFI-9807, WIFI-9832, WIFI-9826]
• Minor updates and bug fixes. [WIFI-9567, WIFI-9505, WIFI-9621, WIFI-9831]

New Features

Access Point Performance Issues Report Enhancements

The Performance Issues report is enhanced to help you identify wireless clients with performance issues such as low signal strength and low data rates. For more information, go to Access Point Performance Issues Report.

Access Point PPSK Support (Beta)

With this feature, you can enable and configure Private Pre-Shared Keys (PPSK) on an SSID that uses WPA2 Personal security. This feature requires access point beta firmware v2.6. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v2.6.6-0.B704205 (Beta)

This firmware update supports the Private Pre-Shared Key (PPSK) feature. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes. [WIFI-9500, WIFI-9539]

New Features

Access Point Performance Issues Report Enhancements (Beta)

The Performance Issues report is enhanced to help you identify wireless clients with performance issues such as low signal strength and low data rates. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point CR Device Model Indoor Channel Support

With this feature, you can enable indoor wireless channel support for outdoor/indoor rugged access point CR device models when they are deployed in indoor environments. This feature requires access point firmware v2.5.7 or higher. For more information, go to Configure Access Point Radio Settings.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point CR Device Model Indoor Channel Support (Beta)

With this feature, you can enable indoor wireless channel support for outdoor/indoor rugged access point CR device models when they are deployed in indoor environments. This feature requires access point firmware v2.5.7 or higher. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• The access point packet capture feature now correctly accepts arguments that do not begin with a “-“ character. [WIFI-9471]
• When an access point network interface is enabled but disconnected, the link speed now shows Unknown. [WIFI-9486]
• Minor updates and bug fixes. [WIFI-9344]

Resolved Issues

• The access point device settings page now correctly shows the current ThreatSync status when ThreatSync is enabled. [WIFI-9493]
• A configuration with access point VPN enabled is now correctly deployed after a device replacement. [WIFI-7692]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point Site Scheduled Deployment

You can now schedule a configuration deployment for an access point site. This enables you to deploy the site configuration changes to your subscribed access points outside of business hours to avoid potential disruption. For more information, go to Deploy an Access Point Site in Help Center.

Resolved Issues

• You can now correctly add an authentication domain to an access point site or access point device level configuration. [WIFI-9515]
• Minor updates and bug fixes. [WIFI-9483]

New Features

Access Point Packet Capture

This feature enables you to perform a packet capture on the wireless and wired interfaces of an access point to help you troubleshoot connectivity issues. To use packet capture, select Monitor > Devices, select an access point, then select Live Status > Diagnostic Tools. This feature requires access point firmware update v2.5. For more information, go to Access Point Diagnostic Tools in Help Center.

Access Point Firmware Update v2.5.7-0.B700851

New firmware is available for Wi-Fi in WatchGuard Cloud access points. This update supports the Packet Capture feature. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• Indoor channels correctly appear in the candidate channel list for new indoor access point models added to WatchGuard Cloud. [WIFI-9487]
• Minor updates and bug fixes.

Resolved Issues

• WatchGuard Cloud connection status notifications for access points now include the public IP address and serial number of the device. [WIFI-9252]
• Minor updates and bug fixes. [WIFI-9393, WIFI-9449]

New Features

Access Point Packet Capture (Beta)

This feature enables you to perform a packet capture on the wireless and wired interfaces of an access point to help you troubleshoot connectivity issues. To use packet capture, select Monitor > Devices, select an access point, then select Live Status > Diagnostic Tools. This feature requires access point beta firmware v2.5. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v2.5.5-0.B699741 (Beta)

New firmware is available for Wi-Fi in WatchGuard Cloud access points. This update supports the Packet Capture beta feature. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• Validation is improved to ignore processing of HTML commands you enter in text fields when you create a captive portal splash page. [WIFI-9448]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• When there is no data available, scheduled and downloaded access point reports now show explanation text. [WIFI-9077]
• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes. [WIFI-9329]

Resolved Issues

• The access point Live Status > Clients list now includes the total number of connected wireless clients. [WIFI-8699]
• Minor updates and bug fixes.

New Features

Access Point Network Interface Configuration

This feature enables you to configure network interfaces on access points with additional LAN ports. This feature requires access point firmware v2.4 or higher.

• To configure the network interfaces, select Device Configuration > Network Settings. You can also configure network interfaces in an Access Point Site.
• To monitor the status of network interfaces, select Monitor > Devices > Live Status > Interfaces.

For more information, go to Configure Access Point Network Interfaces.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• You can now update and save the Terms of Use and Privacy Policy text on a splash page after you restore the page to the default branding images and text. [WIFI-9246]
• The ThreatSync risk score for a Suspected Rogue AP is reduced from 5 to 3 for some detections.. [WIFI-9253]
• Minor updates and bug fixes.

Resolved Issues

• You can now enter hyphenated names in the Full Name text box for a splash page web form. [WIFI-9095]
• Minor updates and bug fixes.

Enhancements

• A new Connection Issues by Account widget is available in the Dashboard page and Monitor > Devices page for a Service Provider that shows the number of failed Wi-Fi connections in your accounts.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes. [WIFI-9143]

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point Third-Party Captive Portal Integration

You can now configure a captive portal for an SSID to integrate with a third-party captive portal service. Currently, this feature supports integration with Purple Wi-Fi and Skyfii. This feature requires access point beta firmware v2.4 or higher. For more information, go to Configure a Captive Portal. For detailed information on Purple Wi-Fi and Skyfii integration, go to Wi-Fi Integration Guides.

Show All Access Point Reports

You can now view all access point reports, such as Airspace Monitoring, Performance Issues, Connection Issues, Connection Events, Top Clients, Network Usage, and Guest Analytics, even if there is no data available for the report. To view all access point reports, select Monitor > Devices, then select a device or a folder that contains your devices. All reports appear in the Access Points section.

Access Point Firmware Update v2.4.7-0.B695967

New firmware is available for Wi-Fi in WatchGuard Cloud access points. This update supports the Third-Party Captive Portal Integration feature and increased maximum admin password length. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Enhancements

• To improve password security, the admin password for Web UI and CLI access to access points now supports a maximum length up to 32 characters. This enhancement requires access point firmware v2.4 or higher. For backwards compatibility with previous firmware versions, the Add Device wizard in WatchGuard Cloud still only supports a maximum of 12 characters when you first add the device. For more information on how to change the device password, go to Access Point Device Password.

Resolved Issues

• The access point device status now correctly shows an updated Uptime value after a device reboot or firmware upgrade. You might have to refresh the page to view the updated status. [WIFI-8305]
• Minor updates and bug fixes.

Resolved Issues

• You can now modify the captive portal reserved IP address range, even if the captive portal feature is disabled. This enables you to modify the reserved IP range for splash pages that appear for the Network Access Enforcement feature. [WIFI-9125]
• Minor updates and bug fixes.

Show All Access Point Reports (Beta)

With this feature, you can now view all access point reports, such as Airspace Monitoring, Performance Issues, Connection Issues, Connection Events, Top Clients, Network Usage, and Guest Analytics, even if there is no data available for the report. To view all access point reports, select Monitor > Devices, then select a device or a folder that contains your devices. All reports appear in the Access Points section. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• You can no longer enter emoji characters in an access point captive portal web form label or user input field. [WIFI-8742]
• Minor updates and bug fixes. [WIFI-8644]

Access Point Firmware Update v2.2.23-0.B695057

New firmware is available for Wi-Fi in WatchGuard Cloud access points. This update resolves an issue where in some cases, access points might reboot into failsafe mode if the firmware upgrade process is interrupted. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• Minor updates and bug fixes. [AP-1937]

New Features

Access Point Multiple Splash Page Support

With this feature, you can create and manage up to 30 captive portal splash pages and apply them to multiple SSIDs. Note that Splash Page management is now moved to the Configure > Shared Configurations > Splash Pages menu. You no longer configure Splash Pages within the Administration > Branding page. You can also add a new splash page or choose an existing splash page when you create or edit a captive portal in an Access Point Site. For more information, go to Add Splash Pages for a Captive Portal.

Access Point Third-Party Captive Portal Integration (Beta)

This feature enables you to configure a captive portal for an SSID to integrate with a third-party captive portal service. Currently, this feature supports integration with Purple Wi-Fi and Skyfii. This feature requires access point beta firmware v2.4. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v2.4.4-0.B694615 (Beta)

New beta firmware is available for Wi-Fi in WatchGuard Cloud access points. This update supports the Third-Party Captive Portal Integration beta feature. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• Minor updates and bug fixes.

New Features

Access Point Multiple Splash Page Support (Beta)

With this feature, you can create and manage up to 30 captive portal splash pages and apply them to multiple SSIDs. Note that Splash Page management is now moved to the Configure > Shared Configurations > Splash Pages menu. You no longer configure Splash Pages within the Administration > Branding page. You can also add a new splash page or choose an existing splash page when you create or edit a captive portal in an Access Point Site.

To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• Minor updates and bug fixes.

Resolved Issues

• A custom label description for a field in a captive portal web form is now limited to 48 characters. [WIFI-8644]

Resolved Issues

• Minor updates and bug fixes.

Enhancements

• The default WatchGuard company logo and background image used by captive portal splash pages, reports and emails, AuthPoint IdP portal, and other features are updated on the WatchGuard Cloud account branding page. [WCD-16737]

Resolved Issues

• Japanese characters are now correctly decoded by a splash page web form. You must restore the default branding settings and reconfigure the splash page web form for this change to take effect. [WIFI-8686]

New Features

Access Point ThreatSync Integration

You can now detect and report on wireless threats such as Rogue and Evil Twin access points in ThreatSync.

• Access points must have a USP Wi-Fi Management license.
• Access points must run firmware v2.0 or higher.
• Airspace Monitoring must be enabled to send threat information to ThreatSync.

ThreatSync does not currently remediate wireless threat incidents to prevent connections to a malicious access point or disconnect wireless clients that have already associated to a malicious access point.

For more information, go to About ThreatSync in Help Center.

Resolved Issues

• A "transduction" error no longer occurs when you deploy radio settings configured in an Access Point Site. [WIFI-8821]

New Features

Access Point Dynamic VLANs

When you enable WPA2 or WPA3 Enterprise authentication for a wireless network, you can now dynamically assign a VLAN to a wireless client based on the user information returned by the RADIUS server. This feature requires access point firmware version v2.2 or higher. For more information, go to Configure Access Point Dynamic VLANs in Help Center.

Access Point Captive Portal Enhancements

• Captive Portal Web Form — You can define up to three text fields that guest users must complete before they can access the wireless network through a captive portal, such as a name, email address, phone number, date, or a custom value. For more information, go to Configure a Captive Portal in Help Center.
• Guest Analytics Report — A new Guest Analytics report shows details about the users that connect to a guest Wi-Fi network, including any web form data. To view this report, you must have a USP Wi-Fi Management license. For more information, go to Access Point Guest Analytics Report in Help Center.
• Landing Page for Network Access Enforcement — You can now configure a landing page URL for wireless clients that successfully complete Network Access Enforcement validation. For more information, go to Access Point Network Access Enforcement in Help Center.

These features require access point firmware version v2.2 or higher.

Radio Settings in Access Point Sites

You can now configure access point radio settings in an Access Point Site and apply the configuration to multiple access points. For more information, go to Configure Access Point Radio Settings in Help Center.

Access Point Firmware Update v2.2.22-0.B691305

New firmware is available for Wi-Fi in WatchGuard Cloud access points. This update supports the Dynamic VLANs, Captive Portal Web Form, Guest Analytics report, and Network Access Enforcement landing page features. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

New Features

Access Point ThreatSync Integration (Beta)

This feature enables you to detect and report on wireless threats such as Rogue and Evil Twin access points in ThreatSync.

• Access points must have a USP Wi-Fi Management license.
• Access points must run firmware v2.0 or higher.
• Airspace Monitoring must be enabled to send threat information to ThreatSync.

ThreatSync does not currently remediate wireless threat incidents to prevent connections to the threat access point or disconnect wireless clients that have already associated to a threat access point.

To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• After you re-add an access point to WatchGuard Cloud, the access point device settings can now be correctly saved and deployed. [WIFI-8713]

New Features

Access Point Site Radio Settings (Beta)

With this feature you can configure access point radio settings in an Access Point Site and apply the configuration to multiple access points. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• An error no longer occurs when you attempt to re-add an access point to WatchGuard Cloud. [WIFI-8734]
• The wireless RSSI icon now correctly indicates signal strength levels. [WIFI-8695]

New Features

Access Point Dynamic VLANs (Beta)

When you enable WPA2 or WPA3 Enterprise authentication for a wireless network, you can now dynamically assign a VLAN to a wireless client based on the user information returned by the RADIUS server. This feature requires access point beta firmware version v2.2. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Captive Portal Enhancements (Beta)

• Captive Portal Web Form — You can define up to three text fields that guest users must complete before they can access the wireless network through the captive portal, such as a name, email address, phone number, date, or a custom value.
• Guest Analytics Report — A new Guest Analytics report shows details about the users that connect to a guest Wi-Fi network, including any web form data. To view this report, you must have a USP Wi-Fi Management license.
• Landing Page for Network Access Enforcement — Enables you to configure a landing page URL for wireless clients that successfully complete Network Access Enforcement validation.

These features require access point beta firmware version v2.2. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v2.2.16-0.B689538 (Beta)

New firmware is available for Wi-Fi in WatchGuard Cloud access points. This update supports the Dynamic VLANs and Captive Portal Enhancements beta features. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Enhancements

• The icons in WatchGuard Cloud have been updated to provide a cleaner user experience.

Resolved Issues

• The Live Status > Clients monitoring page for access points in WatchGuard Cloud now loads client data much faster with access point firmware v2.2. [WIFI-8250]

Resolved Issues

• The access point Connection Events report no longer displays duplicate events for the Network Access Enforcement status of a wireless client. [WIFI-8300]
• An access point can now be successfully re-added to WatchGuard Cloud when the access point was previously configured with an access point VPN with a Firebox. [WIFI-8587]
• An access point VPN user is now correctly removed from a Firebox when you disable or remove an access point VPN. [WIFI-8659]

Resolved Issues

• When you disable or remove an Access Point VPN configuration, the corresponding Firebox users and groups are now correctly deleted. [WIFI-8229]

Resolved Issues

• When a Service Provider allocates Fireboxes or access points to a delegated tier-1 Subscriber account, the Service Provider can view the allocation. [WCD-15789 ]
• New default NAS ID settings in an access point site are no longer applied to subscribed devices that run firmware v2.0 or lower. [WIFI-8429]

Resolved Issues

• Report details now correctly appear in the access point Airspace Monitoring report when you filter the report for a specific device. [WIFI-8475]

Enhancements

• Audit logs generated by access point actions that contain account IDs now also contain the account name.

Resolved Issues

• The compare version details for the SSID QR Code in the access point deployment history now shows the correct data when you change from an Enterprise security mode to a non-Enterprise security mode. [WIFI-8288]
• The deployment history for an access point no longer shows Called Station ID and NAS ID settings applied by an access point site for devices that do not have the supported firmware version. [WIFI-8430]
• An error no longer occurs when you add an access point device model to WatchGuard Cloud and a device with the same name as the model name already exists. [WIFI-8432]

New Features

Network Access Enforcement for Access Points

You can now enable Network Access Enforcement on an access point SSID. Network Access Enforcement provides an extra layer of security when a wireless client connects to the corporate wireless network.

• When you enable Network Access Enforcement for an access point wireless network, a wireless client must have a WatchGuard Endpoint Security product installed before the device can connect to the wireless network.
• This enables you to keep unmanaged devices off your secure Wi-Fi networks. Your corporate networks are more secure because only endpoints unlikely to be compromised by malware can connect.
• A new Connection Events report is available that enables you to view successful and failed connections for Network Access Enforcement and other wireless connection events.
• This feature requires access point firmware v2.1.12 or higher.

For more information, go to Access Point Network Access Enforcement.

Access Point Enterprise Authentication Enhancements

You can now enable WPA3 Enterprise 192-bit mode (Suite B) to increase encryption security in sensitive enterprise environments. You can also customize the Called Station ID and NAS ID attributes for RADIUS authentication in the SSID advanced settings. This feature requires access point firmware v2.1.12 or higher.

To apply the latest default settings for the Called Station ID and NAS ID attributes for Enterprise RADIUS authentication, you must update your SSID settings and deploy the changes to your access points.

For more information, go to Configure RADIUS Authentication for Access Points.

Access Point Firmware Update v2.1.12-0.B687336

New firmware v2.1.12-0.B687336 is available for Wi-Fi in WatchGuard Cloud access points.

• With this firmware update, the access point now uses a cryptographic signature to verify the integrity of the device each time the access point boots. Integrity checks make sure that system files are valid and have not been corrupted. For more information, go to Access Point System Integrity Checks.
• This firmware update also supports the Network Access Enforcement and Enterprise Authentication Enhancements features.
• For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

You must currently run firmware version v2.0.28 or higher to upgrade to v2.1.12. If your access point runs a firmware version lower than v2.0.28 and you upgrade directly to v2.1.12, the device will upgrade twice, first to v2.0.28 and then to v2.1.12 automatically. It might take additional time for the firmware upgrade to complete.

Enhancements

• Deployments in the Deployment History page can now have a status of Staged. When a configuration update is Staged, WatchGuard Cloud holds the configuration update until deployment. This status shows for devices that you change from locally-managed to cloud-managed until you deploy the configuration. For more information, go to Manage Device Configuration Deployment.

Resolved Issues

• The Airspace Monitoring CSV report file download is now consistent with the Airspace Monitoring report in WatchGuard Cloud. [WIFI-8279]
• The configuration report for an access point deployment now correctly shows the QR code voucher settings. [WIFI-8411]

Resolved Issues

• The access point license expiration date now correctly appears on the Dashboard and Monitor pages for an account. [WIFI-8393]

New Features

Network Access Enforcement for Access Points (Beta)

With this beta feature, you can enable Network Access Enforcement on an access point SSID. Network Access Enforcement provides an extra layer of security when a wireless client connects to the corporate wireless network.

• When you enable Network Access Enforcement for an access point wireless network, a wireless client must have a WatchGuard Endpoint Security product installed before the device can connect to the wireless network.
• This enables you to keep unmanaged devices off your secure Wi-Fi networks. Your corporate networks are more secure because only endpoints unlikely to be compromised by malware can connect.
• This feature requires access point beta firmware v2.1.11.

To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Enterprise Authentication Enhancements (Beta)

With this beta feature, you can enable WPA3 Enterprise 192-bit mode (Suite B) to increase encryption security. You can also customize the Called Station ID and NAS ID attributes for RADIUS authentication in the SSID advanced settings. This feature requires access point beta firmware v2.1.11. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v2.1.11-0.B686343 (Beta)

New beta firmware v2.1.11-0.B686343 is available for Wi-Fi in WatchGuard Cloud access points.

• With this firmware update, the access point now uses a cryptographic signature to verify the integrity of the device each time the access point boots. Integrity checks make sure that system files are valid and have not been corrupted.

• This firmware update also supports the Network Access Enforcement and Enterprise Authentication Enhancements beta features.

You must currently run firmware version v2.0.28 to upgrade to v2.1.11. If your access point runs a firmware version lower than v2.0.28 and you upgrade directly to v2.1.11, the device will upgrade twice, first to v2.0.28 and then to v2.1.11 automatically. It might take additional time for the firmware upgrade to complete.

For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• Device settings now correctly load and the error "Could not load device info data” no longer appears for some access points. [WIFI-8332]

Resolved Issues

• You can no longer change an SSID from NAT to Bridged mode if the SSID is in use by an Access Point VPN. [WIFI-8220]

New Features

Access Point Multiple NTP Server Support

You can now configure up to three NTP servers in an access point device configuration or access point site. The new default NTP servers are 0.pool.ntp.org, 1.pool.ntp.org, and 2.pool.ntp.org. Note that existing local device configurations or access point site configurations for NTP servers are not replaced with the three new default NTP servers. Access point sites that use the default NTP server are updated to the three new default NTP servers, and must be saved and deployed to push the configuration to subscribed access points. This feature requires access point firmware 2.0.28 or higher.

For more information, go to Configure Access Point Device Settings.

Access Point Firmware Update v2.0.28-0.B682808

New firmware is available for Wi-Fi in WatchGuard Cloud access points. This is an important security update that enables a cryptographic signature to verify the integrity of future signed firmware files before each software upgrade. Integrity checks make sure that system files are valid and have not been corrupted.

After you upgrade to an access point firmware version that includes integrity checks, you cannot downgrade to a version that is not signed by WatchGuard. This access point firmware version 2.0.28 becomes the minimum version required before you can install any future firmware upgrades.

This update also includes support to configure multiple NTP servers, and the ability to configure the Device LEDs option in access point sites.

For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• The Revert to this version button no longer appears for the latest deployed version in the Deployment History page. [WIFI-8061]
• All access point advanced device settings now correctly appear in the configuration version report in the Deployment History page. [WIFI-8233]

Resolved Issues

• Fast Roaming for wireless clients now works correctly with WPA2 Enterprise security on access points managed in WatchGuard Cloud. The default NAS-ID attribute is now the name of the SSID. You must deploy a configuration to the access point to update the default NAS-ID on the device. [WIFI-8251]
• Minor updates and bug fixes. [WIFI-7779, WIFI-8232]

Resolved Issues

• An Airspace Monitoring alert for Rogue or Suspected Rogue access points now shows the wired MAC address of the device instead of the BSSID address. [WIFI-7967]
• An access point VPN configuration can now be correctly saved after you deploy an access point site with multiple NTP servers configured. [WIFI-8200]
• The access point firmware upgrades overview page now correctly shows any additional text hidden by a column when you hover over the text. [WIFI-8217]

New Features

Access Point Multiple NTP Server Support (Beta)

This feature enables you to configure up to three NTP servers in an access point device configuration or access point site. This feature requires access point firmware 2.0.28 or higher. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update 2.0.28 (Beta)

New beta firmware is available for Wi-Fi in WatchGuard Cloud access points. This is an important security update that enables a cryptographic signature to verify the integrity of future signed firmware files before each software upgrade. Integrity checks make sure that system files are valid and have not been corrupted.

After you upgrade to an access point firmware version that includes integrity checks, you cannot downgrade to a version that is not signed by WatchGuard. This access point firmware version 2.0.28 becomes the minimum version required before you can install any future firmware upgrades.

This update also includes support to configure multiple NTP servers, and the ability to configure the Device LEDs option in access point sites.

For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• The Add Device Wizard now correctly shows all access points available to add to WatchGuard Cloud. [WIFI-8143]
• Missing or invalid value errors no longer occur when you enable advanced device settings (Airspace Monitoring, SNMP, Syslog) in an access point device configuration. [WIFI-8198]
• Minor updates and bug fixes. [WIFI-8070]

Enhancements

• Dynamic Channel Selection (DCS) is now enabled by default on access point radios with a scan interval of 12 hours. [WIFI-7050]

Resolved Issues

• The access point configuration now correctly sets the default available channels when the device has not yet connected to WatchGuard Cloud and the country of operation is still unknown. [WIFI-8130]

Enhancements

• The access point Network Usage report now includes the Total Traffic Volume (upload and download) of wireless clients. [WIFI-7684]

Enhancements

• The NAS ID, NAS IP Address, and NAS Port attributes are now included in the request packet sent from an access point to a RADIUS server for Enterprise authentication. [WIFI-7451].

Resolved Issues

• Dynamic Channel Selection is now correctly disabled on an access point radio after it is disabled in the WatchGuard Cloud configuration. [WIFI-8032], [WIFI-8036]
• Access point transmit power settings are now correctly applied. [WIFI-7961]

Resolved Issues

• The access point user-defined device name is now correctly validated to prevent duplicate names. [WIFI-7987]

Resolved Issues

• You can now correctly save an access point SSID configuration with WPA3 or OWE security. [WIFI-8007]
• The default Fast Handover minimum RSSI threshold is now set to -90 dBm instead of -70 dBm in the access point advanced radio settings. [WIFI-8029]

New Features

Access Point Airspace Monitoring

• You can now enable Airspace Monitoring on your access points to detect Evil Twin and Rogue access points in your wireless environment. This feature requires access point firmware v2.0.22 or higher and a WatchGuard USP Wi-Fi management license. To learn more, go to Airspace Monitoring.

Access Point Local Web UI

• With access point firmware v2.0.22 or higher, you can now connect directly to the Web UI of an individual access point to view the device status, update firmware, perform diagnostics, and troubleshoot access point connectivity issues. To learn more, go to Access Point Web UI.

Access Point Firmware Update v2.0.22-0.B678701

• New access point firmware is available for Wi-Fi in WatchGuard Cloud access points. This update is required for the Airspace Monitoring and local Web UI features. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• The company logo for the access point SSID QR code voucher is now correctly assigned in tiered accounts. [WIFI-7813]

Resolved Issues

• The access point Top Clients widget no longer shows "No Top Clients" when clients are listed. [WIFI-7977]

Enhancements

• The Copy SSID QR Code link in the Add SSID page is now replaced with a Download SSID QR Code link. [WIFI-7962]

New Features

Access Point Airspace Monitoring (Beta)

This feature enables access points to detect Evil Twin and Rogue access points in your wireless environment. This feature requires access point beta firmware 2.0.21 and a WatchGuard USP Wi-Fi management license. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Local Web UI (Beta)

With access point firmware 2.0.21 or higher, you can now connect directly to the Web UI of an individual access point to view the device status, update firmware, perform diagnostics, and troubleshoot access point connectivity issues. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v2.0.21-0.B676176 (Beta)

New beta firmware is available for Wi-Fi in WatchGuard Cloud access points. This update is required for the Airspace Monitoring and local Web UI beta features. For a full list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• Wi-Fi widgets no longer result in monitoring page loading delays. [WIFI-7900]

Resolved Issues

• The Landing Page URL in the Captive Portal Splash Page settings now accepts a hyphen character. [WIFI-6972]

Resolved Issues

• The loading time for an access point captive portal splash page is improved. [WIFI-7822]

New Features

Access Point SSID QR Code

You can now generate and print a QR code for users to connect to an access point SSID. For more information, go to Configure Access Point SSID Settings.

New Features

Access Point RADIUS Accounting Server

You can now configure a RADIUS accounting server for use with Authentication Domains and Enterprise authentication on your access point. For more information, go to Access Point Authentication Domains.

Access Point Firmware Update v1.1.26-0.B672550

New firmware is available for Wi-Fi in WatchGuard Cloud access points. For a list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

New Features

Access Point SSID QR Code (Beta)

This feature enables you to generate and print a QR code for users to connect to an access point SSID. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update 1.1.23-0.B669258 (Beta)

New firmware is available for Wi-Fi in WatchGuard Cloud access points. For a list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

New Features

Access Point RADIUS Accounting Server (Beta)

This feature enables you to configure a RADIUS accounting server for use with Authentication Domains and Enterprise authentication on your access point. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• Minor updates and bug fixes. [WIFI-7736]

New Features

Access Control MAC Address Import

You can now import a list of addresses for MAC address access control on an SSID. To support a maximum of 256 MAC addresses, you must upgrade to access point firmware 1.1.24 or higher. Lower firmware versions only allow a maximum of 32 MAC addresses. For more information, go to Configure Access Point SSID Settings in Help Center.

New Features

Access Control MAC Address Import (Beta)

This feature enables you to import a list of MAC addresses for access control features. To support a maximum of 256 MAC addresses, you must upgrade to access point firmware 1.1.24 or higher. Lower firmware versions only allow a maximum of 32 MAC addresses. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

New Features

Access Point SNMP Monitoring

You can now monitor your access point status with SNMP (Simple Network Management Protocol). SNMP monitoring requires a WatchGuard USP Wi-Fi management license, and an upgrade to access point firmware 1.1.24-0 or higher. For more information, go to Configure SNMP for Access Points in Help Center.

Access Point Firmware Update v1.1.24-0.B670120

New firmware is available for Wi-Fi in WatchGuard Cloud access points. This update is required for the SNMP Monitoring feature. For a list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

New Features

Access Point Firmware Update v1.1.23-0.B669258 (Beta)

New beta firmware is available for Wi-Fi in WatchGuard Cloud access points. This update replaces the current 1.1.22 beta firmware, and resolves an issue where SSIDs failed to broadcast after the installation of firmware version 1.1.22 on the AP130. For a list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

New Features

Access Point SNMP Monitoring (Beta)

This feature enables you to monitor your access point status with SNMP (Simple Network Management Protocol). SNMP monitoring requires a WatchGuard USP Wi-Fi management license, and an upgrade to access point beta firmware 1.1.22-0. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v1.1.22-0.B667558 (Beta)

New beta firmware is available for Wi-Fi in WatchGuard Cloud access points. This update is required for the SNMP Monitoring beta feature. For a list of new features, enhancements, and resolved issues in firmware releases, go to Access Point Firmware Releases.

Resolved Issues

• The access point configuration report shows the correct access point site name after you change the name of the site. [WIFI-7272]
• You can now enter space characters in the device name when you add an access point to WatchGuard Cloud. [WIFI-7578]

Enhancements

• When you add a device to WatchGuard Cloud, you can now select a device folder where you want to add the Firebox or access point. [WIFI-6569]
• WPA2 Enterprise and WPA3 Enterprise wireless security options now appear for an SSID even if you do not have a RADIUS server configured. To be able to select a RADIUS server for Enterprise authentication, you must add a RADIUS server in Shared Configurations > Authentication Domains. [WIFI-7219]

New Features

Access Point Description

You can now add a description for an access point to help you identify the device in WatchGuard Cloud. You can add a description for existing access points in the Device Settings configuration. You can also add the description when you add a new device to WatchGuard Cloud. This feature requires an upgrade to access point firmware 1.1.18-0.

Access Point Radio Details

Additional radio details are available for an access point on the Device Settings and Device Summary pages that show the current channel and transmit power for each radio. This feature requires an upgrade to access point firmware 1.1.18-0. Radio details do not appear for access points with lower firmware versions, or if an SSID is not configured on the radio.

New Features

Access Point Firmware Update v1.1.18-0.B665427

New access point firmware is available for Wi-Fi in WatchGuard Cloud access points. For a list of resolved issues, go to Access Point Firmware Releases.

Enhancements

• An alert is generated when an access point cannot communicate with the configured NTP server. [WIFI-7505]

Resolved Issues

• You can now correctly schedule an access point report if the account only contains access point devices. [WIFI-7478]
• Access Point Sites no longer display errors when you apply site settings or view a list of sites. [WIFI-7472, WIFI-7474, WIFI-7477]

Resolved Issues

• You can now correctly deploy an access point configuration with syslog settings. [WIFI-7389]
• The radio settings page now correctly displays the name of the 2.4 and 5 GHz radios. [WIFI-7384]
• Minor bug fixes and enhancements.

Enhancements

• Access point device settings are now separated into general device settings and advanced settings. You can now configure the advanced device settings (Syslog Server) in Access Point Sites.

New Features

Access Point Diagnostic Tools and Support Snapshot

You can now run diagnostic tools (Ping, Traceroute, and DNS Lookup) from an access point to troubleshoot network connectivity. You can also download a support snapshot diagnostic file from the access point. This feature requires an upgrade to access point firmware 1.1.7-0. For more information, go to Access Point Diagnostic Tools.

Access Point Firmware Update v1.1.7-0.B655161

New access point firmware is available for Wi-Fi in WatchGuard Cloud access points. The access point LED indicator status is enhanced to provide more granular status for the device connection to WatchGuard Cloud. This update is also required to use the Diagnostic Tools and Support Snapshot features.

For more information and resolved issues, go to Access Point Firmware Releases.

Resolved Issues

• Undeployed device configuration changes to network interfaces no longer appear when there has been no change to the configuration. [FCCM-4307, WIFI-7161]

Resolved Issues

• The Access Point VPN configuration no longer allows you to select an SSID that has a VLAN enabled. [WIFI-7022]
• Minor bug fixes and enhancements.

New Features

Access Point Compare Configuration Versions

You can now compare two consecutive access point configuration deployments in the deployment history to see what changed between versions. For more information, go to Compare Configuration Versions.

Enhancements

Access Point Firmware Update v1.1.6-0.B652914 (Beta)

New beta firmware is available for Wi-Fi in WatchGuard Cloud access points that replaces the current 1.1.4 beta firmware. This update contains resolved issues and is required to use the Diagnostic Tools and Support Snapshot beta features. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• Minor bug fixes and enhancements. [WIFI-6765]

New Features

Access Point Diagnostic Tools and Support Snapshot (Beta)

You can now run diagnostic tools (Ping, Traceroute, and DNS Lookup) from an access point to troubleshoot network connectivity. You can also download a support snapshot diagnostic file from the access point. This feature requires an upgrade to access point beta firmware 1.1.4-0. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Compare Configuration Versions (Beta)

You can now compare two consecutive access point configuration deployments in the deployment history to see what has changed between versions. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v1.1.4-0.B652086 (Beta)

New beta firmware is available for Wi-Fi in WatchGuard Cloud access points. This update is required to use the Diagnostic Tools and Support Snapshot beta features. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• Minor bug fixes and enhancements. [WIFI-7062]

New Features

Access Points: Use VPN Tunnel for RADIUS Authentication

The Use VPN Tunnel for RADIUS Authentication feature is now publicly available. This feature adds the ability to use the Access Point VPN tunnel for RADIUS authentication traffic to a RADIUS server located behind the Firebox tunnel endpoint. For more information, go to Configure an Access Point VPN.

Access Point Firmware Update v1.0.4-0.B650418

New firmware is available for Wi-Fi in WatchGuard Cloud access points that resolves these issues:

• Access Point VPN now correctly connects when the Firebox VPN settings use a domain name of 16 characters or greater. [AP-1105]
• Minor bug fixes and enhancements. [AP-1077, AP-1085, AP-1086]

Resolved Issues

• An Access Point VPN now successfully connects when Firebox-DB is not the default authentication server in the Firebox Mobile VPN configuration. [WIFI-7033]
• Minor bug fixes and enhancements. [WIFI-7030]

New Features

Access Points: Use VPN Tunnel for RADIUS Authentication (Beta)

This feature adds the ability to use the Access Point VPN tunnel for RADIUS authentication traffic to a RADIUS server located behind the Firebox tunnel endpoint. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Firmware Update v1.0.4-0.B650418 (Beta)

New beta firmware is available for Wi-Fi in WatchGuard Cloud access points. To learn more or to report an issue, go to the Wi-Fi in the Wi-Fi in WatchGuard Cloud Beta test community.

Access Point Scheduled Reports

The ability to generate access point reports in the existing scheduled reports feature in WatchGuard Cloud is now publicly available. You can schedule the Connection Issues, Network Usage, Performance Issues, and Top Clients reports for access points. For more information, go to Schedule WatchGuard Cloud Reports in Help Center.

Resolved Issues

• Access Point VPN now correctly connects when the Firebox VPN settings use a domain name of 16 characters or greater. [AP-1044]
• Access Point scheduled report details now display "Access Points" instead of "Fireboxes". [WIFI-6999, WIFI-7006]
• Minor bug fixes and enhancements. [AP-1077, AP-1085, AP-1086, WIFI-6995]

New Features

Access Point Scheduled Reports (Beta)

You can now generate access point reports in the existing scheduled reports feature in WatchGuard Cloud. You can schedule the Connection Issues, Network Usage, Performance Issues, and Top Clients reports for access points. To learn more or to report an issue, go to the Wi-Fi in WatchGuard Cloud Beta test community.

Resolved Issues

• To support access point feature key updates, *.watchguard.io is added to the Blocked Site Exceptions and HTTPS Decryption Exceptions lists. [WIFI-6726]
• In the Administration > Branding page, splash page Landing Page URLs can now include hyphen (-) characters. [WIFI-6972]

New Features

Wi-Fi in WatchGuard Cloud

Wi-Fi in WatchGuard Cloud is now publicly available. You can now manage new WatchGuard Wi-Fi 6 access points in WatchGuard Cloud to monitor and configure your devices. For more information, go to About Wi-Fi in WatchGuard Cloud.