WiFi - Firebox Managed — WatchGuard Community

preowned AP325 usable?

bford — Wed, 26 Nov 2025 17:33:27 +0000

Since my AP120's aren't working well with FW12.11.4 (stuck on discovered) and I'm not convinced jumping to the WiFi Cloud with the newer line of AP's is right for us,yet.

If I find a used AP325 would I be able to make it work ok on our current FB?

We currently have several AP325's running through our GWC but will a used one be able to work.

M370 WSM-2025.1.2, FWos-12.10.4 (trying to get to 12.11.4)

AP120 and Fireware 12.11.4

bford — Sun, 09 Nov 2025 21:46:28 +0000

I just upgraded to FW 12.11.4 and my AP120 (x3) are stuck at "Discovered". I understand they aren't supported any more but does that mean they won't connect and aren't usable?
How can I get them to at least connect?

Will I have to downgrade until I replace my AP120's?

WSM 2025 1.2
FW 12.11.4 (from 12.8.2)

AP 125 Unreachable out of nowhere

KimNeumann — Fri, 28 Mar 2025 15:54:56 +0000

we are using AP 125 for our wifi and for some time our APs are unreachable. they got the 11.0.0.36-4 firmware around november last year and after that we changed our M440 for a M590. for a few months everything was fine, but out of nowhere all of them are unreachable. there was no new firmware for the APs and no new firmware for the M590. if i reset one AP it can connect to the M590 just fine and will be Not Trusted. after marking it as trusted, it starts authentication and then its online for a few seconds, until it starts to Update Configuration. after that its unreachable again.
any1 got an idea what could cause this? i tried to disable Auto-Deploy so there is no configuration to update, but that step still happens and the AP goes back to unreachable

the APs themselve work fine, they are still broadcasting all SSIDs they should and everyone can work just fine. but we need to add new devices to the MAC Filter List which wont get pushed to the APs, as they are unreachable for the firebox

AP200 unable to get feature key after a factory reset

CraigS — Wed, 29 Nov 2023 20:01:52 +0000

We are still running some AP200's and after running into some issues, we decided to perform a factory reset on one. I know the device is EOL, but WatchGuard had previously had a "never" expiration for Basic Wi-Fi AP's so I didn't expect to lose it's license.

I just discovered that the "Manage Products" on the Support Center no longer shows any of the AP200's we have (nor any previously registered but out of support devices that used to be listed ), so I'm unable to retrieve it from there.

How/where can I retrieve the licenses for our AP200's?

Is the AP432 manageble by a FB Gateway Wireless Controller?

CraigS — Wed, 06 Apr 2022 19:36:49 +0000

Or is this cloud only?

ap120 and firware 12.11

Steve_E — Wed, 27 Nov 2024 16:33:58 +0000

I'm guessing this means my firebox managed ap120 is going to stop working unless I let it be cloud managed before upgrading my m270 to fireware to 12.11 ?

--> As of Fireware v12.11, only AP125, AP225W, AP325, AP327X, AP420 devices that run the latest v11.0.0-36-4 firmware are supported by the Gateway Wireless Controller on a Firebox. [FBX-27755]

https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_11/index.html#Fireware/en-US/resolved_issues.html?TocPath=_____4

Or will the ap120 be completely unuseable?

Old WiFi Firmware

tolcheen — Tue, 31 Mar 2020 21:45:40 +0000

Where did the option go to download the AP100, AP102, AP200 and AP300 firmwares in the WatchGuard System Manager and on the Web GUI under gateway wireless controller? I got a unit running 12.4.1 and 12.5.2 and the option to get the firmware for these access points are no longer present. I don't know how to upgrade the firmware of these devices without doing this.

Wireless geo_src location is wrong

usifirebox — Fri, 12 Apr 2024 11:57:22 +0000

I just setup a new T45-W-POE and when setting up the wireless it chooses United States correctly in the setting but any data packets all state they are coming from Brazil. Geolocation subscription was blocking Brazil, so I know it legitimately thinks its Brazil. I have setup several of these and never encountered it. This only happens in the built-in wireless and not the Lan. Here is a sample log entry: 2024-04-12 07:46:11 Allow 200.200.200.2 52.113.194.132 https/tcp 61263 443 USI-FW External HTTPS Request (HTTPS-proxy-00) proc_id="https-proxy" rc="548" msg_id="2CFF-0000" app_id="0" app_cat_id="0" proxy_act="Default-HTTPS-Client" action="allow" geo_src="BRA" geo_dst="USA" sent_bytes="1339" rcvd_bytes="6969" tls_version="TLS_V12" tls_profile="TLS-Client-HTTPS.Standard". And this is in Indiana.

country of operation unknown or US, AP125 on T80

Lengen1971 — Tue, 19 Mar 2024 12:23:11 +0000

Hi, I need help to get my two AP125 find the correct country. DNS is configured, system runs for weeks now.
I tried Web UI and WSM. The 2,4 ghz says 'United States' and 5 ghz says 'unknown'. Wolud be nice to have Germany shown here.
Thanks for help.

AP130 and Firebox T40

cloud — Tue, 06 Feb 2024 08:21:43 +0000

Is it possible to, configure AP130 with the Gateway Wireless Controller under Firebox T40?

GWC managed AP225W LAN-ports

Woodenshoe — Tue, 09 Jan 2024 09:50:15 +0000

When I used the AP225W in the cloud, I used the LAN-ports on the AP for connecting a device once or twice. Because the feature key of the AP's are expired, I changed management from cloud to GWC, but won't get an IP-address on the LAN-ports. The AP's are working fine, but the additional LAN ports gave link, but no IP-adres. DHCP-server is active in all VLAN's. Am I doing something wrong or are the ports with GWC not operational?

Hotspot page Brand Image

Kamikaze — Mon, 18 Jul 2022 21:16:07 +0000

I need to enable the hotspot page but i noticed that the Brand Image of the watchguard logos shows on the preview. How can i remove those logos?

AP100 TX Power max 15dbm ?

Norman — Fri, 17 Nov 2023 11:32:18 +0000

Hello,
( I know ap100 is eol , but i use it from time to time for a special purpose.)

any value setting until 15dbm works
but settings over 15dbm will result in 15dbm TX power.

country ist set to germany, so max tx power should be 23dbm (on 2,4ghz)

AP uses POE

Users connecting to hotspot

Mike_M — Wed, 01 Nov 2023 02:51:29 +0000

We have a number of guest users running off the wireless gateway hotspot (with users codes) which are having issues connecting. They get an IP address handed out but the web page doesn't pop up where they can accept our user conditions and put in their user code.

A PC users (Windows 10) gets "bad gateway" and a number of apple iphone and laptop users cannot connect due to untrusted certificates or warnings about connecting.

Have logged a call with support but thought I'd check if anyone else has had the issue. (running 12.10 fireware OS)

Cant Update Feature Key

TestingTester — Mon, 27 Jun 2022 15:56:23 +0000

One of our facilities we swapped out a T35 for a T40...those of us who know WG know that you can just scoot the config over with System Manager...change the device, update the feature key and you are identical to where you were minutes ago.....well, not anymore.

The AP's license did not move. Makes no sense that they do not update their feature keys (AP320's that are grandfathered). Support says talk to Customer Care who says talk to support. I am going to default one of the APs to see if that resolves the issue...but, if it does not, we will replace with Meraki (including the edge)...

Any other of y'all run into this AP mess with edge-managed AP's? They want so hard to cloud manage everything and add to our yearly budgets to get fewer features....fun times.

How to bypass Hotspot terms of service checkbox?

pkokkinis — Wed, 04 Jan 2023 15:34:56 +0000

Owner placed a tv as a posterboard in the lobby...only wifi there is currently the Guest Wifi which has the hotspot requirements to check the Terms of Service box. I plan on running an ethernet cable to the tv when I get there later next week, but is there an exception I can add to allow this tv's mac/ip to access the external internet while on the Guest Wifi?

HTTP Proxy Settings on mobile devices connecting via Wi-Fi

DavidBrookes — Sat, 19 Nov 2022 13:49:45 +0000

Do I need to configure the HTTP Proxy settings on my mobile devices when they are connecting to the AP200 access point connected to my Firebox T20? The reason I am asking is that sometimes I have Wi-Fi connection issues such as the connection dropping in and out and I know my iOS devices mention that the connection is blocking encrypted DNS traffic.

Purchased new firebox and migrated config - what AP Feature license do I need

Justin_tech — Fri, 02 Sep 2022 22:12:00 +0000

I am replacing a firebox M200 with a Firebox M290. I purchased a new year UTM licence for the M290. When I migrated the config from the M200 i was successful with that but when I modify the config it says I need a Wireless Feature Code. Do I need to purchase something new for the M290 or can I transfer a feature from the outgoing M200?

Access denied using web shell

WCS — Sat, 13 Aug 2022 12:30:43 +0000

after reset the AP 420 to factory-default settings.and try to connect using web shell I get access denied.

Configure WPA2 Enterprise with NPS

kcarpenter — Thu, 28 Apr 2022 15:44:48 +0000

I am trying to setup our Firebox controlled AP's to authenticate to a Microsoft NPS. I am having a problem trying to find a step by step. I have read all the articles that reference Radius and Wireless but it seems to leave a few things out, example would be Filter ID. Anyone know of a step by step? Not wanting to use Certs either.

Upgrading both the firebox and access points

justanotheruser — Sat, 26 Feb 2022 15:56:43 +0000

I'm planning to upgrade both a firebox cluster and several access points managed by the GWC. Should I upgrade the cluster first or the APs or does it not matter? Also, if I choose to only upgrade the cluster firmware but not the APs, will the APs get rebooted when the cluster reboots?

Wi-Fi users get low bandwidth

damsicles — Tue, 08 Feb 2022 21:52:37 +0000

I have a Watchguard T40 firewall and wifi users cannot get more than 2-3 mbps of bandwidth, typically they get under 1mbps. It affects all wireless users, however wired users will get 100+mbps down every time. We have replaced the firewall and ISP modem to no avail. The ISP link is 200mbps.

I have tested this myself, standing directly next to the firewall and cannot get more then 2-3 mbps at best....and it is typically under 1mbps making the connection unusable.

We are using the embedded wireless controller and I have tried creating a new ssid, new network, dedicated policy, dedicated traffic shaper and the same issue persists no matter what I do. Support has been baffled as well and closed the ticket blaming "environmental issues". Any ideas?

Firebox Compatibility with Unifi Access Points

justanotheruser — Tue, 18 Jan 2022 23:15:46 +0000

Can Unifi APs be managed by the gateway wireless controller on the firebox? All the docs I've seen seem to suggest only WatchGuard APs can be paired with the firebox, is that correct?

AP225w unrecheable

Jorge — Mon, 27 Dec 2021 17:14:56 +0000

Hi:

in my network I have 5 ap200 running and I bought 5 ap225w and I cannot configure them with my M300, it says: "unreachable". They are ALREADY activated on watchguard.com

The new AP225w I have them with DHCP from the Windows server and they take the IP correctly, I ping the IP of the AP225w and find it .

I tried resetting to default. Tried blocking not connecting to controller by CLOUD.

Please your help to configure.

Thank you.

AP's randomly every 5-15 days go not trusted

bford — Tue, 07 Sep 2021 22:16:16 +0000

WG_M370
WSM 12.6.2
FSM 12.5.4

3 - AP200 fw 1.2.9.16
3 - AP120 fw 8.8.3-12
1 - AP125 fw 10.0.0-124.1
5 - AP325 fw 8.5.0-658
1 - AP325 fw 10.0.0-124.1

Last year we replaced 2 XTM 515's for 1 M370 while adding 6 more AP's to our network.
Originally after the upgrade I was having problems seeing connected clients and the SSIDs in the GWC.

https://community.watchguard.com/watchguard-community/discussion/1364/clients-not-showing-in-my-gateway-wireless-controller#latest

I down graded some of the AP firmware to the point I was able to see the SSIDs and the connected clients.
After awhile I noticed the AP's were randomly going "not trusted". All I had to do was mark them trusted again and everything was fine but it keeps happening approximately every 5-15 days.

It's not always the same AP or AP model that goes ' not trusted', it's entirely random from time to time.
Since keeping track (Jan.2021) I have noticed the AP120's have not acted up and neither has one of the AP325's which seems odd.

At the end of July I upgraded the M370 to FSW 12.5.4 and I also upgraded two of the AP's; the AP125 and 1 - AP325 to the latest fw 10.0.0-124.1 as a test to see if that would solve the problem. Neither has fixed / solved the problem.
Most times it's the AP200's that go ' not trusted' but the AP325's do it quite often also.
The 3 - AP120's and 1 - AP325 still work flawlessly without going 'not trusted'.

Has anyone come up with a reason or fix for this?

In another 4 months after another major remodel we'll be adding several more AP's so I'm wondering if this will be fixed.

WiFi authentication troubleshooting

Abertay — Mon, 06 Sep 2021 14:02:42 +0000

Hi,

Does anyone know where the best place to find failed WiFi authentications? I assume it will be logged somewhere on WGCloud/Dimension if you know the right search term.

thanks

AP lose approval

benoit_vannier — Tue, 03 Dec 2019 09:12:21 +0000

Greetings,

We manage a bunch of Watchuard firewall for our customers.
We often see on this managed Watchguard that AP (From AP100 to AP420) lose Approval from Firewalls.

This AP have a dedicated VLAN Management, and VLANs for SSID . Network communication is correct, we just have to use the tool "Marks as approved", and everyting is right .

Anyone has the same problem or have an idea of the source of problem ?

Thanks !

Watchguard AP won't go past Authenticating status

NetworkWise — Tue, 14 Apr 2020 03:45:11 +0000

I'm trying to add a ap320 running 8.8.1-101 to my network which will be managed via the local firebox which is running 12.1.3.B608021. This watchguard AP won't go past Authenticating status, i've tried to reset via these instructions https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/wireless/ap_reset_c.html but i still can't get it to go past Authenticating status. What else can i do?

Still use an expired Cloud controlled AP?

kcarpenter — Thu, 12 Aug 2021 14:00:39 +0000

I have 2 AP's that have an expired Cloud subscription. Is there a way to move it to a Firebox controller? Or do I need to buy a basic license for it?

T40-W + two WG APs, advice requested

GregB — Wed, 05 May 2021 14:43:16 +0000

Most of my customers are small enough to use just one Wireless WG Firewall. I'm upgrading one from XTM25W plus two separate Proxim APs in other buildings. The XTM25W did internal and guest wireless. The old Proxims did only internal. Now we want to go to internal and guest in all three buildings. Small offices separated by 30-50' with tubes under the parking lot connecting a switch in each building. I assumed I would use a wireless WG unit so upgraded to T40-W and bought two AP125 with basic wireless.
Thinking I would have one Trusted SSID and one Guest SSID. Internal and guest units move between the buildings. I didn't see any need for Cloud managed Wi-Fi as the internal devices are stable and set allowed MACs for internal network. If I want one SSID for internal and guest, can I still use the radio in the T40-W or should I have bought a T40 and 3 AP125s? I don't want a client to connect their laptop in an office and then move to a conference room in another building and have to connect to a different SSID.
Just looking for advice from someone that has been here.