Technical Tip: How to Enhance security using FortiAPs

[magarwal]

Description	This article describes how to enable security profiles on supported FortiAP models using FortiGate as the wireless controller.
Scope	The security profiles setting is only applied to FortiAP UTM models. FortiAP UTM models include but are not limited to the FortiAP-S and FortiAP-U series. See FortiAP datasheet to confirm whether your FortiAP applies for this configuration to work or not.
Solution	Security profiles on FortiAP allow to protection the wireless network by applying advanced security policies and helps ensure that wireless traffic is scanned and secured in the same way as wired traffic, enhancing overall network security. This feature is available only in bridge mode SSID. The following security profiles can be applied AntiVirus Web filter Application control. Intrusion Prevention. Requires a separate FortiGuard subscription per Access point. Supported FortiAPs get updates from FortiGuard through a Fortiguard subscription. Create a security profile by going under Security Profile -> Webfilter -> Create New. Apply the security profile on the SSID: Save the changes. For the CLI, refer to page 209 of the FortiAP configuration guide.