On the Global Settings tab, enable Wireless Protection.
Click the toggle switch.
The toggle switch turns amber and the Access Control area becomes editable.
When enabling Wireless Protection for the first time, the Initial Setup section appears. It shows the configuration which will be created: A separate wireless "Guest" network using WPA2 personal encryption with DHCP for wireless clients, which will be allowed to use DNS on Sophos UTM on AWS and the Web Surfing service. The pre-shared key is auto-generated and will only be shown in this section. This initial configuration is intended as a template. You can edit the settings at any time on the Wireless Protection > Wireless Networks page.
Click the Folder icon in the Allowed Interfaces section to select a configured interface where the access point is going to be plugged in. Make sure that a DHCP server is associated to this interface.
Note – Sophos UTM on AWS appliances marked with "w", for example SG 105-125w, do not need to have a network selected. Since these appliances have a Wifi card onboard they do not need a dedicated WiFi interface.
Your settings will be saved. The toggle switch turns green to indicate that Wireless Protection is active.
You can now continue by plugging the access point into the configured network interface. If you decided to skip the automatic configuration, proceed the configuration on the Wireless Networks page.
To cancel the configuration, click the amber colored toggle switch.
As soon as you plug in an access point it will automatically connect to the system. Newly connected, unconfigured access points are listed as Pending Access Points on the Access Points > Overview page.