Setup Wireless Separate Zone when AP`s behind routing switch

Question

Hey together, 
 can someone help me regarding the proper setup of the wireless protection. 
 Here`s our network: 
 AP`s [192.168.22.XXX (DHCP)]------------------ [192.168.22.1]Core Routing Switch[192.168.33.1] ---------------[192.168.33.33]Sophos UTM 
 
 The access points are connected to the POE CoreSwitch. They receive a DHCP address in the 192.168.22.0 network. Option 234 was set to point to 192.168.33.33, the interface of the Sophos UTM. 
 On the UTM I configured the following: 
 192.168.33.33 is entered under Access Control -> Allowed Interfaces 
 The wireless networks are set to "separate zone"as we want different networks for every single WLAN. 
 Is this the proper configuration for our constellation? Does this separate zone configuration work when APs are behind the routing switch? 
 We have several problems. Access points are becoming inactive over and over again. The data stream to our other internal networks (behind the rounting switch) collapses after a shot time. After that the AP`s become inactive and later active again. 
 Maybe you have some suggestions for me. :) 
 
 Thanks and best Regards, 
 Chris

C_hris · Accepted Answer

Hi guys, 
 just wanted to let you know what the problem was. 
 The access points, powered over ethernet (POE) had been wrongly classified by the POE switch. Due to that, too much power was delivered when lots of data was transferred, which led to a restart of the access points. 
 The AP`s were classified correctly on the POE switch now, so that the power fits the needs of the AP&acute;s. Since that, no more restarts occured. 
 Best Regards, Chris