11-20-2019 11:32 AM
11-20-2019 04:20 PM
They will have access to your internal network unless you block them. We have a default firewall object that you can use called Guest-Internet-Access-Only (you can find this by opening the Network Policy> Opening the SSID> Opening the User Profile>Enabling IP Firewalls> Adding an existing object) that would block all internal resources and only allow guests access to the internet.
11-20-2019 04:17 PM
11-20-2019 03:50 PM
Your guests will connect to the SSID the AP is broadcasting, once connected they will be assigned a user profile, which will assign a VLAN ID to the guest traffic, and as long as the VLAN is supported throughout the backend network, the traffic will be passed to the switch or router behind the AP and move through your network from there. All traffic is allowed by default, but you can limit that within the user profile of the SSID if you'd like.
11-20-2019 03:35 PM