Guest Wireless - No Password Required

[SecurityPlus]

Business has a FortiGate running 6.0.10 and a few FortiAP's. Is it possible to set up a SSID for guest internet access only that does not require a password from the guest user? No LAN access is needed or wanted via the guest SSID. When creating a new SSID it looks from the GUI that a Pre-shared Key is required. Is there a way to set up an SSID without a required password?

[Toshi_Esumi · Accepted solution]

At System->Feature Visibilities, enable "Wireless Open Security". Then you can see "Open" as one of SSID's security mode options.

[SecurityPlus]

Thank you!

From a security standpoint, if the SSID is set with Administrative Access all Off, it is set to Block Intra-SSID Traffic, and if there is only an IPv4 policy allowing the Outgoing Interface to go to the WAN interface only, is this fairly safe for the sake of the other network users and the network itself?

[Toshi_Esumi]

If no password, nobody can know if the SSID is actually hosted by your AP. Somebody can easily get in the middle. So I would never use it as a wifi user if avoidable.

[SecurityPlus]

Understand. Thanks!

[ede_pfau]

Utterly discouraged to not use any password on a WiFi, if alone for liability etc. It's your WAN IP that will show up in downloads (or movie uploads, or whatever).