Wondering if anyone could help out with a scenario we are running into. In the past we have been using a Guest network with a PSK and then registering Guests and manually setting expiration times. This worked fine until now as there are only a couple of us managing a much larger scale solution now and the other group that was helping us no longer wants to play. we have the blessing from our Information Security team to use a SSID with a PSK and a Click through splash page with some legal jargon. Beyond that, they want us to lock down the SSID as much as possible to the point that only ports 80 and 433 would be open as our guests shouldn't need to be doing much beyond that on this SSID. If other uses cases do come up then we can alter it, but for the time being this is what we are running with. I imagined that the rules would have looked something like this, but its not working as intended. Support said probably because the Deny Any/Any rule isn't allowing DNS. Anyone have any recommnedations? # Policy Protocol Destination Port Comment 1 Allow TCP Any 80 2 Allow TCP Any 443 3 Deny Any Any Any 4 Any Local LAN Any Any Wireless clients accessing LAN 5 Allow Any Any Any Default rule
... View more
