FortiAP devices are thin wireless access points (AP) supporting the latest Wi-Fi technologies (multi-user MIMO 802.11ac Wave 1 and Wave 2, 4x4), as well as 802.11n, 802.11AX , and the demand for plug and play deployment.
This article describes the basic requirements and best practices before implementing BLE scan on FortiAP.
Scope
FortiAP, FortiGate-FortiWifi.
Solution
FortiGate's Wireless Controller feature along with FortiAPs (Access Points) that support BLE scanning capabilities are typically used to set up a Bluetooth Low Energy (BLE) scan on a Fortinet FortiGate firewall. Below are the general steps to configure BLE scanning on FortiGate:
Hardware and Software Requirements:
Ensure that FortiAPs that support BLE scanning are in place.
Create a Wireless Profile:
Navigate to the 'WiFi & Switch Controller' section in the FortiGate web interface.
Create a new wireless profile or edit an existing one to enable BLE scanning. It may be necessary to specify the BLE scanning options such as scanning interval and duration.
Apply the Wireless Profile:
Assign the created wireless profile to the appropriate SSID (Wi-Fi network) or VLAN.
Configure BLE Scanning on FortiAPs:
Access the FortiAP web interface or use FortiGate to configure the FortiAPs to enable BLE scanning. BLE scanning options can usually be found in the FortiAP settings.
Security and Policies:
Ensure that there are appropriate security policies in place for BLE scanning, including any firewall rules needed to allow BLE traffic.
Monitoring and Logging:
Set up monitoring and logging to capture BLE scan results and any security events related to BLE devices.
Testing:
Test the BLE scanning functionality to ensure that it is working as expected. Use BLE devices like beacons or smartphones with BLE advertising enabled to check if the FortiAPs are detecting and reporting BLE devices in the vicinity.
Note that specific steps and options may vary depending on the FortiGate model and firmware version in use.
Additionally, ensure that the environment is compliant with relevant privacy and security regulations when using BLE scanning, as it may involve collecting information from nearby Bluetooth devices, potentially including personal data.
Note:
FortiGate does not need a wireless controller feature license, is already included. Just need to enable menus over GUI if not visible
