Skip to content
Looking for the Security Operations help?

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/fusion/customer/help/en-us/index.html?contextId=wireless

Wireless

Configure and manage access points, wireless networks, and connected devices.

Go to My Products > Wireless to configure and manage Sophos Wireless.

Warning

Don't disconnect your access point from the power outlet when the lights blink rapidly. This means that a firmware update is in progress.

This video explains how to plan and set up your wireless network.

Domain requirements

You must allow traffic to specific domains so that access points can communicate with Sophos Fusion, update the time, and log wireless events. The domains you need to allow depend on whether your firewall or proxy supports wildcards.

Click the appropriate tab for details.

If your firewall or proxy supports wildcards, allow the following domains:

fusion.sophos.com
*.sophos.pool.ntp.org
sophos.jfrog.io
jfrog-prod-use1-shared-virginia-main.s3.amazonaws.com
wifix-\*.cloudstation.\*.sophos.com

If you can't use wildcards, you must determine the geographic location of your Sophos Fusion account and allow the specific domains for that location. Do as follows:

  1. Sign in to Sophos Fusion.
  2. Click your account name, and then click Support settings.

  3. Look for the line that starts with "This account is located in" to see which geographical region your Sophos Fusion account is in.

    Support settings page showing the geographic region of the Sophos Fusion account.

  4. Use the following table to find the MCS URL of your Sophos Fusion account.

    Region MCS URL
    United States (Oregon) us-west-2.prod.hydra.sophos.com
    United States (Ohio) us-east-2.prod.hydra.sophos.com
    Ireland eu-west-1.prod.hydra.sophos.com
    Germany eu-central-1.prod.hydra.sophos.com
    Canada stn100yul.ctr.sophos.com
    Australia stn100syd.ctr.sophos.com
    Asia Pacific (Tokyo) stn100hnd.ctr.sophos.com
    South America (Sao Paulo) stn100gru.ctr.sophos.com
    India stn100bom.ctr.sophos.com

  5. Allow the following domains, replacing <MCS_URL> with your Sophos Fusion account's MCS URL from the previous step:

    fusion.sophos.com
0.sophos.pool.ntp.org
jfrog-prod-use1-shared-virginia-main.s3.amazonaws.com
sophos.jfrog.io
wifix-proxy.cloudstation.<MCS_URL>
wifix-push-ws.cloudstation.<MCS_URL>

Network requirements

Access points must be able to communicate with Sophos Fusion. You must ensure your network meets the following requirements:

  • You must have DHCP and DNS servers to provide an IP address to the access point and answer its DNS requests (IPv4 only).
  • Access points can reach Sophos Fusion without requiring a VLAN to be configured on the access point for this connection.
  • There's no HTTPS proxy on the communication path.

Note

For remote support, allow outbound SSH connections on port 22.

VLAN requirements

You must add the proper VLANs in the trunk port of the wired switch. The access point always communicates over untagged VLAN. Make sure the native or management VLAN is untagged in the wired switch.