Forti Wireless Controller

1. FortiWLC 8.4.0
By
Eng. Ahmed Hashem El Fiky
Network Security Engineer
Malware Analyst

2. Agenda
• FortiWLC Features
• FortiWLC Product Offering
• FortiWLC Specifications
• FortiWLC Configuration

3. FortiWLC Features
• Virtual Cell
• Virtual Cell minimizes the complex, time-consuming process of channel planning.
• All the APs in a Virtual Cell, whether 10 or 500, are able to operate on the same radio
channel, and they all share the same SSID (BSSID). This means that when a client scans for an
SSID, it is only presented with 1 or 2 BSSIDs to choose from (typically, this would include one
in the 5GHz range and one in the 2.4GHz range.)
• Guest Captive Portal
• Browser-based authentication for guest users is supported in FortiWLC via captive portal
• Automatic Radio Resource Provisioning
• this advanced feature continuously monitors the RF environment for interference, noise and
signals from neighboring APs, enabling the FortiWLC to determine the optimal RF power
levels for each AP on the network. When a new AP is provisioned, ARRP also ensures that it
chooses the optimal channel, without administrator intervention.

4. FortiWLC Features Cont..
• Spectrum Scanning
• acting as a software-based spectrum monitoring device, including graphical representations
of Channel Availability, Channel Utilization, Spectrogram, Equalizer, and Persistence data.
• Time-based ESS
• you can schedule the availability of that ESS based on pre-defined time intervals. By adding a
timer, you can control the availability of an ESS profile based on pre-defined times during a
day or across multiple days.
• Hitless Failover/Redundancy
• Fortinet’s FortiWLC provides for hitless failover with N+1 redundancy. The optional N+1
redundancy software feature, when implemented, allows a standby N+1 controller in the
same subnet to monitor and seamlessly failover more than one master controller, and
are considered to be an N+1 cluster.

5. FortiWLC Features Cont..
• Band Steering
• Band steering makes more efficient use of your available wireless network by
sending clients to the bands where they are most efficiently served
• Service Control
• Fortinet’s Service Control feature is designed to allow clients in the enterprise
network to access and communicate with devices that are advertising service via a
protocol such as Bonjour.
• Device Fingerprinting
• Device fingerprinting allows collection of various attributes about a device
connecting to the network managed by the FortiWLC. The collected attributes can
fully or partially identify individual devices, including the client’s OS, device type, and
browser being used.

6. FortiWLC Features Cont..
• Application Visibility
• The FortiWLC allows for application visibility with Deep Packet Inspection. Administrators can
set policies to monitor and/or block one or more types of application traffic.
• Highly Scalable
• No matter the size of your network, there’s a FortiWLC solution right for you, and should you
need more than one controller, Fortinet’s Wireless Manager platform (FortiWLM) allows you
to stack and manage multiple controllers with ease
• Rogue AP Detection
• Rogue access points pose a serious network security threat by creating a leakage point where
sensitive data such as credit card information can be siphoned off the network. The FortiWLC
continuously monitors for unknown APs and can suppress connections to any such APs found
to prevent information transfer.

7. FortiWLC Product Offering

8. FortiWLC Specifications
FortiWLC Specifications

9. FortiWLC Basic Configuration
1- you need a Fortinet Customer Support account.
And install The file name is,
forti-x.x-xbuild-0-x86_64.ova,
where x.x-x is the release version number.
2- Run FortiWLC VM.

10. FortiWLC Basic Configuration
Default Login:
admin/admin
And Enter “Setup”

11. FortiWLC Basic Configuration
1- Country setting

12. FortiWLC Basic Configuration
2- Hostname

13. FortiWLC Basic Configuration
3- Passwords for
admins
and guests

14. FortiWLC Basic Configuration
4- Dynamic IP address
or a static IP address
and netmask

15. FortiWLC Basic Configuration
5- DNS server names

16. FortiWLC Basic Configuration
6- Time zone
and Network Time
Protocol server
7- Reboot

17. FortiWLC Basic Configuration
8- Check Network
Connectivity

18. FortiWLC Web UI Configuration

19. FortiWLC Web UI Configuration Cont..

20. FortiWLC Web UI Configuration Cont..

21. FortiWLC Web UI Configuration Cont..

22. FortiWLC Web UI Configuration Cont..

23. FortiWLC Web UI Configuration Cont..

24. FortiWLC Web UI Configuration Cont..

25. FortiWLC Web UI Configuration Cont..

26. FortiWLC Web UI Configure Security profile

27. FortiWLC Configure Security profile Cont..

28. FortiWLC Web UI Configuration ESS Profile

29. FortiWLC Configuration ESS Profile Cont..

30. FortiWLC Configuration ESS Profile Cont..

31. FortiWLC Configuration Captive Portal

32. FortiWLC Configuration Captive Portal Cont..

33. FortiWLC Configuration Captive Portal Cont..

34. FortiWLC Configuration Captive Portal Cont..