Product and Support News

Wi-Fi Cloud 9.0 Production Release


WatchGuard Wi-Fi Cloud will be upgraded to 9.0 starting on Friday, March 12, 2021.



  • EMEA region: Friday, March 12, 2021 (12:00AM – 6:00AM GMT)
  • AMER region: Friday, March 12, 2021 (12:00AM – 6:00AM PST)
  • APAC region: Saturday, March 13, 2021 (12:00AM – 6:00AM HKT)


  • All regions: Friday, March 12, 2021 (12:00AM – 6:00AM PST)

Maintenance Window

6 hours


4 hours

User Impact 

  • Wi-Fi Cloud management services will be inaccessible during the maintenance activity.
  • There is no impact to customer Wi-Fi service. Access points will still be functional and provide connectivity and security.
  • Captive portal splash pages will be functional for guest access.
  • After the Wi-Fi Cloud upgrade is complete, AP firmware will be updated based on your configured settings for scheduled automatic update or manual update. Each AP requires approximately 10 minutes to complete the firmware update depending on your Internet link and available bandwidth.


  • You can now configure a WatchGuard AP as a Remote Access Point that enables a remote worker or branch office to tunnel traffic from the AP over an IPSec VPN to a corporate enterprise network. Remote AP functionality is only supported on the AP225W, AP327X, and AP420.
  • You can now tunnel RADIUS messages to a RADIUS server that is located on a network behind a remote endpoint of a VPN tunnel.
  • You will now receive a warning notification message if an AP configuration change might impact end user connectivity such as when an SSID is reset or an AP reboots.
  • You can now individually disable or enable the 2.4 and 5 GHz radios on an AP.
  • The Spectrum Analysis troubleshooting tool is now available again in Discover.
  • From the Monitor pages in Discover, you can now view access point properties directly from the Access Point, Client, and Radio lists.
  • Root cause analysis now includes a list of contending clients or BSSIDs in the Recommendations panel if a client experiences high contention issues.
  • You can now download audit logs and set the audit log retention policy from the System > Logs page in Discover.
  • You can now download visibility and association analytics reports from the Reports page in Discover.
  • You can now download a full list of possible alert events in tab-separated value format from the Configure > Alerts page in Discover.
  • Alerts are now generated when an AP connected to Wi-Fi Cloud reboots.
  • You can now configure a communication key or passphrase used for authentication and encryption between Wi-Fi Cloud and managed APs from the System > Advanced Settings page in Discover.

Resolved Issues

  • The Allowed AP Vendor list now correctly appears in an Authorized WiFi Policy in Discover. [AP-737]
  • The correct VLAN is now applied to a scheduled SSID if the configuration is modified during the SSID downtime.
  • A wireless client now receives an IP address from the correct VLAN if multiple DHCP servers are responding from different VLANs.
  • A captive portal now works correctly for wired clients connected to a secondary LAN port on an AP.
  • The correct transmit power is now applied to the new AP operating channel after DFS radar detection.
  • AP features such as Application Visibility, the Application Firewall, and Captive Portals now work correctly when the AP transmit power is set higher than 30.
  • You can now edit a client connectivity test profile after the corresponding SSID profile is deleted. This enables you to edit the client connectivity test to run with a different SSID profile.

Note: After the upgrade to Wi-Fi Cloud v9.0, the earliest firmware version an AP can downgrade to is v8.8. AP firmware versions 8.9 and higher are only available for 802.11ac Wave 2 access points. Wave 1 access points (AP120, AP320, and AP322) will remain on 8.8.x firmware for maintenance releases only.       

Please contact WatchGuard Support if you have any additional questions.


Your WatchGuard Wi-Fi Team

Filed under: Wi-Fi