WatchGuard AP327X
IP67 Outdoor, 4 N-Type Connectors, Dual Radio, 2x2 MU-MIMO, Cloud Ready

Features & Benefits:

• Four N-Type external connectors offer a variety of external antenna choices for flexible pattern coverage capabilities (Antennas sold separately)
• The IP67 sealed enclosure provides protection in harsh weather conditions and can be mounted with direct exposure to the elements - no overhang or shelter required
• AP327X takes less than two minutes to activate and configure after connecting to the Wi-Fi Cloud
• Support for up to eight individual SSIDs per radio allows for maximum flexibility in network design
• Smart steering automatically pushes clients with low speeds to a closer access point*
• Application firewall for over 1,900 applications*, network connection, and performance anomaly detection
• AP327X continues to scan for wireless threats and enforces security policy even if the connection with the Wi-Fi Cloud is interrupted*

Uniquely Effective Approach To Security

The AP327X supports the only Wireless Intrusion Prevention System (WIPS) in the industry with high accuracy in classifying access points and client devices, properly enabling automatic prevention of Wi-Fi threats and keeping a network protected from wireless man-in-the middle attacks, evil twins, honeypots, and more.

Flexible Management Options

You can manage the AP327X with either a Firebox®, via the Gateway Wireless Controller and receive a lightweight feature set, or with WatchGuard's Wi-Fi Cloud.

With the Wi-Fi Cloud you get an expanded set of features including patented security, marketing tools, network visibility and troubleshooting, location-based analytics for optimal business insights. IT pros can also enjoy an entirely controller-less Wi-Fi management experience including set up, configuration, monitoring, troubleshooting, and improved corporate and guest Wi-Fi access, without worrying about the limitations of legacy controller infrastructure. Wi-Fi Cloud environments easily scale from one to an unlimited number of access points across multiple locations. Access points can be grouped in many ways including location, building, floor, and customer to maintain consistent policies.

Intelligent Network Visibility And Troubleshooting

Wi-Fi Cloud helps IT professionals confidently provide answers to the most challenging Wi-Fi network questions, bringing the most complete set of Wi-Fi visibility, troubleshooting, and network health features ever introduced to the market. Pinpoint meaningful network problems and application issues by seeing when an anomaly occurs above baseline thresholds and remotely troubleshoot.*

*Must have Wi-Fi Cloud enabled with Secure Wi-Fi or Total Wi-Fi license.

Trusted Wireless Environment:

What is a Trusted Wireless Environment?

In a world with growing open Wi-Fi networks, Wi-Fi hackers are able to not only steal personal information but also spread malware to computers on the network, costing your businesses millions. Simply put, the Wi-Fi system that you installed seven years ago is no longer adequate. As you face the responsibility of evolving your Wi-Fi networks, you're finding that many vendors do not enable you with the right products. WatchGuard is the only company that offers a framework for building a complete Wi-Fi network that is fast, easy to manage, and most importantly, secure. Companies that offer a Trusted Wireless Environment deliver on these three core pillars:

1. Market-Leading Performance: You should never be forced to compromise security to achieve the necessary performance to support your environment with the speed, connections and client density that it needs.
2. Scalable Management: With easy set-up and management, you should be able to control your entire wireless network from a single interface and execute key processes to safeguard the environment and its users.
3. Verified Comprehensive Security: You need proof that the security solution that defends your business against Wi-Fi attacks can deliver on the following benefits:
• Provide automatic protection from the six known Wi-Fi threat categories
• Allow legitimate external access points to operate in the same airspace
• Restrict users from connecting to unsanctioned Wi-Fi access points

---

The Six Known Wi-Fi Threat Categories That Leave Your Business Vulnerable

Rogue Access Point

Allows attackers to bypass perimeter security.

Rogue Client

Delivers malware payloads to the network after connecting to malicious APs.

Neighbor Access Point or Client Misassociation

Risks infection from connecting to other SSIDs while in range of the authorised AP.

Ad-Hoc Network

Uses peer-to-peer connections to evade security controls and risk exposure to malware.

"Evil Twin" Access Point

Lures users to connect to it so as to spy on traffic, steal data and infect systems.

Misconfigured Access Point

Opens networks to attack as a result of configuration errors.

---

Additional Resources

Solution Brief - Trusted Wireless Environment

Don't let Wi-Fi be your biggest security gap. Hackers prefer to go after the weak link in the security chain and it doesn't take much to hack into the Wi-Fi network using easily accessible tools and a plethora of online how-to videos. What's worse - your business networks become compro-mised due to malware implanted and credentials stolen over Wi-Fi, and it can cost millions in fines and breach remediation expenses to fix.

Download

 

MARKET-LEADING PERFORMANCE

SCALABLE MANAGEMENT

COMPREHENSIVE SECURITY

---

Don't Let Wi-Fi Be Your Biggest Security Gap

In 2017, there were 8.4 billion connected devices and the volume is expected to hit 20.4 billion by 2020, according to analyst firm Gartner. Hackers prefer to go after the weak link in the security chain and it doesn't take much to hack into the Wi-Fi network using easily accessible tools and a plethora of online how-to videos. Even the most rookie hacker can intercept traffic flowing over Wi-Fi and steal valuable data from your smartphone, tablet, smartwatch, or laptop. What's worse - your business networks become compromised due to malware implanted and credentials stolen over Wi-Fi, and it can cost millions in fines and breach remediation expenses to fix.

 

---

Create a Trusted Wireless Environment with WatchGuard

With WatchGuard Wi-Fi Cloud and WIPS (Wireless Intrusion Prevention System), it is easy to quickly create a Trusted Wireless Environment with WIPS and automatically protect your Wi-Fi network against the six known Wi-Fi threat categories.

WIPS is a collection of features that run on WatchGuard APs and Wi-Fi Cloud. You can use WatchGuard APs for both Wi-Fi access and WIPS security protection, or you can use APs as dedicated WIPS security sensors that you can deploy together with other WatchGuard APs or third-party APs and Wi-Fi controllers.

To create a Trusted Wireless Environment, WatchGuard APs must have either a Total Wi-Fi or Secure Wi-Fi AP management subscription.

Specifications:

Access Point Mode:

• WPA/WPA2 (802.11i) with TKIP or AES-CCMP encryption and PSK or 802.1x authentication
• Integrated WIPS background wireless scanning and Rogue AP prevention

WIPS Sensor Mode:

• Dedicated dual-band WIPS scanning for complete 24/7 protection from wireless threats

Flexible Deployment Options:

WatchGuard offers three deployment scenarios to meet the needs of SMBs and distributed enterprises. Add an AP120 or AP320 to an existing Firebox UTM-protected network to extend that protection to the WLAN, while managing the device with the Firebox's built-in gateway wireless controller. For full Engage and Analyze features, WIPS protection, scalable management and so much more in a stand-alone deployment, choose our Wi-Fi Cloud option. And for ultimate peace of mind, rely on a Firebox UTM-protected network with WatchGuard Wi-Fi Cloudmanaged APs to realize the full marketing and security potential of a cloud-managed access point solution.

Wi-fi Solution:

WatchGuard has you covered, indoors and out

No matter what your wireless battleground is - remote offices, guest Wi-Fi, corporate access, public hotspots, outdoor environments - WatchGuard has a range of access points to fit your business needs. WatchGuard’s Wi-Fi packages allow you to quickly and easily find the right set of features your business needs today…and tomorrow.

*Requires Firebox with active support contract.
**20 access points recommended for each Firebox model. For the T-15 Firebox model 4 access points are recommended.

No need to rip and replace, just add WIPS

Each WatchGuard access point has the flexibility to operate as both an access point and a dedicated WIPS security sensor. This means that when deployed as dedicated WIPS sensors, the devices work with your existing access points (Cisco, Aruba, Ruckus, Ubiquiti, etc) and add enterprise-grade wireless security protection to your network. In this case, instead of delivering secure Wi-Fi traffic to users, we deliver unprecedented WIPS security protection that is 100% dedicated to scanning the air and protecting your business from wireless threats.

Comparision Guide:

WatchGuard Access Point Models

Recommended Use Case	AP125 Lower-density high performance ideal for small schools, distributed remote offices, and small meeting rooms	AP225W Medium-density high performance ideal for multi-dwelling units (MDU) structures such as dorm rooms, hotels, assisted living, and military housing units.	AP325 Medlum-density high performance including K-12 schools, SMBs, restaurants	AP327X Medium-density high performance IP-67 rated rugged outdoor including school campuses, RV parks, manufacturing yards, warehouses	AP420 High-density, high performance including large schools, meeting rooms, shopping malls
Radios & Streams	2x2:2 MU-MIMO Wave 2	2x2:2 MU-MIMO Wave 2 3rd WIPS Radio	2x2:2 MU-MIMO Wave 2 3rd WIPS Radio	2x2:2 MU-MIMO Wave 2	4x4:4 MU-MIMO Wave 2 3rd WIPS radio
Deployment	Indoor	Indoor	Indoor	Outdoor	Indoor
Number of Antennas	4 internal	4 internal	6 internal	4 N-Type External Connectors	10 internal
Maximum Data Rate	867 Mbps/300 Mbps	867 Mbps / 400 Mbps	867 Mbps/300 Mbps	867 Mbps/400 Mbps	1.7 Gbps/800 Mbps
Ports	2x Gbe	3x Gbe	2x Gbe	2x Gbe	2x Gbe
Power over Ethernet (PoE)	802.3af (PoE)	802.3at (POE+)	802.3at (PoE+)	802.3at (PoE+)	802.3at (PoE+)
Product Dimensions	5.83"x 5.83"x 1.29" (148 x 148 x 33 mm)	7.3"x 4.9" x 1" (186.4) 123.9x 25.5mm)	7.72"x 7.72"x 1.69" (196x 196 x 43 mm)	8.42"x 8.42"x 2.66" (213.9 x 213.9 X 67.5 mm)	8.66"x 8.66"x 2.24" (220 x 220 x 57 mm)

Product Views:

Antennas

Back

Bottom

Front

Front Antennas

LAN side

Side Angled

Top

Documentation:

Download the WatchGuard AP327X Outdoor Access Point Datasheet (PDF).