Firewall Options

You can use profile-based configuration for the Firewall Options of the WLAN. Alternatively, you can build a dynamic profile specific for this WLAN. Select a Firewall Profile from the drop-down list to choose an existing profile, click Add to create a new profile, or toggle the Enable WLAN specific to ON for to tailor a specific profile for this WLAN.

Firewall Profiles

A firewall profile is a set of policies that manage the flow of network traffic to and from wireless clients. It defines which types of traffic or clients are allowed or blocked based on criteria define by the following policies:

  • Rate Limiting: Controls the amount of data that can be sent or received over the network within a specified period. You can apply rate limiting to uplink and downlink traffic separately. Enable the toggle for each of them and enter the data rate in Mbps.
  • L3 Access Control Policy: Applies allow or block rules to L3 traffic based on IP addresses and protocol ports.
  • L2 Access Control Policy: Applies allow or block rules to L2 traffic based on MAC addresses and Ethernet types.
  • Application Policy: Defines rules for QoS, rate limiting or Denial, for specific applications or types of applications on the network. This policy can prioritize critical applications, limit bandwidth for non-essential applications, and block unwanted applications to optimize network performance and security.
  • URL Filtering: A security feature that blocks or allows access to specific websites or categories of websites based on predefined rules. Enable the toggle for URL Filtering Policy if you want to apply the policy to this WLAN.
    Note: The SmartZone controller requires a license for this feature to operate. Refer to the RUCKUS SmartZone Licensing Guide for more information.
  • Device Policy: Specifies allow, deny, and rate limiting rules for different types of devices connecting to the network. This policy can control access based on device type, enforce security settings, and apply VLAN access configuration to ensure secure and efficient network operation.
    Note: Each of the listed policies represents a set of rules configured independently. You can configure various policies and dynamically choose which policies will or will not belong to the Firewall Profile. For complete details regarding the definitions and configuration options for each of the available policies, refer to Traffic Management.

Application Recognition & Control

Enable Application Recognition & Control to collect detailed data on client device characteristics, which is essential for enforcing application policies. Ensure that the latest Application Signature Package is installed on the controller to maximize the effectiveness of this feature. For detailed instructions on installing and managing the application signature package, refer to the RUCKUS SmartZone Controller Administration Guide. Once enabled, this feature allows you to identify and control applications in use, enhancing network performance and security.

Parent topic: Configuring WLAN