Disclaimer: This information is posted as-is and the content should be referenced at your own risk
Special thanks to KingChris, Heland, and emmosophos
When deploying a new wireless network or making changes to an existing network, there’s a lot of factors to consider. You need to consider interference, channel selection, speeds, and many other complicated pieces to the puzzle. This can be a complicated process, so we’ve put together some info to get you started on the right foot to try to avoid problems like slow or inconsistent connections.
We’ll be going over the following:
This article is accompanied by our video: Sophos Wireless: Wi-Fi Fundamentals
This Community guide will cover all of the same topics, for those who prefer reading.
Wireless Frequency Fundamentals
Number of Simultaneous clients
Types of clients
20 MHz Channel Width
40 MHz Channel Width
80 MHz Channel Width
1300 Mbps pSo no matter how fast your Access point is, your network is really only as fast as the clients that use it.
Areas to be covered
Site Surveys and Heatmaps
Note: Sophos has a wireless pre-sales desk that can help conduct site surveys. Please contact your sales person or sales engineer for more information.
Passive Site surveys
Active Site Surveys
Predictive Site Surveys
Additional Considerations AP Hopping
Layer 3 Switches
Web Filtering/HTTPs inspection
More information - Naked Security: 8 Tips to Tighten Your Work-From-Home Network
Paul Ducklin’s recent article on 8 tips to tighten your work-from-home network included some great advice for securing IoT devices such as webcams and smart speakers. His key points are:
Read the full article for more information.
Regarding the requirement for no HTTPs inspection or web filtering for the AP, we have a client that utilises Sophos Central wireless with a ridge to LAN and Guest - NAT configuration. We want to filter their guest web access, but this breaks the AP registration among other things.
Is there a list of URLS we can add as web exceptions do that Central wireless works?
I have a Sophos AP30 as well as a Ubiquiti. I keep the AP30 running as a backup to my Ubiquiti and as a guest access AP because it was dirt cheap on eBay and the news insides. It works perfectly, and I haven't had to make any changes to it since I set it up about 10 months ago.