When a FortiAP broadcasts the SSID in both Bridge Mode and Tunnel Mode, WiFi Reports only display user data for clients connected through Tunnel Mode.
This behavior is expected.
In bridge mode, the wireless client traffic is locally bridged on the FortiAP itself rather than tunneled to the FortiGate via CAPWAP. This means the AP acts like a local switch for that SSID, and the traffic flows directly between the wireless client and the wired network segment assigned to that SSID’s VLAN.
When a FortiGate Cloud WiFi Report is generated, the traffic logs are evaluated for the srcssid field.
Traffic logs generated by clients connected to a Bridge Mode SSID do not contain this field because the traffic is locally bridged on the FortiAP rather than tunneled through the FortiGate.
When generating WiFi Reports, FortiGate Cloud relies on the srcssid field to associate traffic with a specific SSID. Because Bridge Mode traffic logs lack this field, the related client data cannot be included in WiFi Report charts.
Tunnel mode traffic log:
date=2026-07-08 time=09:54:45 eventtime=1783518884684294571 tz="-0400" logid="0000000013" type="traffic" subtype="forward" level="notice" vd="root" srcip=192.168.15.2 srcname="s-S25" srcport=49096 srcintf="TunnelSSID" srcintfrole="lan" srcssid="TunnelSSID" apsn="FP231Fxxx037222" ap="FP231Fxxx037222" channel=100 radioband="802.11ax (5G)" signal=-52 snr=43 dstip=142.250.x.x dstport=443 dstintf="wan1" dstintfrole="wan" srccountry="Reserved" dstcountry="United States" sessionid=227064 proto=6 action="client-rst" policyid=22 policytype="policy" poluuid="d3f56c94-7ad1-51f1-44c3-503425cf144e" policyname="TunnelSSID" service="HTTPS" trandisp="snat" transip=10.0.0.46 transport=49096 appcat="unscanned" duration=11 sentbyte=18865 rcvdbyte=267176 sentpkt=193 rcvdpkt=206 osname="Android" srcswversion="16" mastersrcmac="5a:47:7d:22:d0:98" srcmac="5a:47:7d:22:d0:98" srcserver=0
Bridge mode traffic log:
date=2026-07-08 time=10:04:50 eventtime=1783519490440292994 tz="-0400" logid="0000000013" type="traffic" subtype="forward" level="notice" vd="root" srcip=192.168.11.112 srcname="Narinder-s-S25" srcport=42184 srcintf="VM" srcintfrole="lan" dstip=10.2.0.2 dstport=853 dstintf="wan1" dstintfrole="wan" srccountry="Reserved" dstcountry="Reserved" sessionid=228029 proto=6 action="timeout" policyid=1 policytype="policy" poluuid="a1845ef8-c7e1-51f0-5163-a44746b2f7e4" policyname="Internet" service="tcp/853" trandisp="snat" transip=10.0.0.46 transport=42184 appcat="unscanned" duration=10 sentbyte=64 rcvdbyte=0 sentpkt=1 rcvdpkt=0 srchwvendor="Samsung" devtype="Phone" srcfamily="Galaxy" osname="Android" srcswversion="16" mastersrcmac="82:89:c5:38:dc:f7" srcmac="82:89:c5:38:dc:f7" srcserver=0
| 
