Hi, This is very simple, if your SSID use "Layer 3 roaming with a concentrator" You need to create new rule in your MX to allow TCP traffic on WLAN ip's to Dst port 80,443,465,587,993. Best regards ... View more