There are two options.   If all the APs are in a single network you can tag the APs, and then assign a VLAN based on tag.  You can see it in the SSID settings.   The other option is to put each building into a separate network so you have separate SSID settings.  If the buildings do not share a common layer 2 infrastructure (so they are all separate routed domains) then this makes this option a stronger choice. ... View more

in this case, we are connecting to a mitel cloud server.  SIP-TLS is in use on the device.  Is there any other way of ensuring the outgoing WAN choice is adhered to or do we have to break it out on a non-LB WAN IP? ... View more

Definetly the easiest way to do is vlans Each building with its own vlan or even floor / department and then set rules for each vlan. First time doing this is a bit more to do, but it is worth it. ... View more

Going a step further, this particular solution requires port status changes on certain ports when a burglar alarm is armed.  Is anyone using a 3rd party, simple control system to integrate and automate such a process? ... View more

@Justfixit just remember that by default Apple has location services turned off.   Being able to turn this on remotely is something the business ad education sector having been asking for for years given most of the time they own said devices so they should have a right to know where they are.    As mentioned SM can do what you are wanting.   ... View more