Watchguard AP330 Hardware Manual

Information in this guide is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard Technologies, Inc. Guide revised: 3/7/2021 Copyright, Trademark, and Patent Information Copyright © 1998 – 2021 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade names mentioned herein, if any, are the property of their respective owners. Complete copyright, trademark, patent, and licensing information can be found in the Copyright and Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview. About WatchGuard WatchGuard® Technologies, Inc. is a global leader in network security, providing best-in-class Unified Threat Management, Next Generation Firewall, secure Wi-Fi, and network intelligence products and services to more than 75,000 customers worldwide. The company’s mission is to make enterprise-grade security accessible to companies of all types and sizes through simplicity, making WatchGuard an ideal solution for Distributed Enterprises and SMBs. WatchGuard is headquartered in Seattle, Washington, with offices throughout North America, Europe, Asia Pacific, and Latin America. To learn more, visit WatchGuard.com. For additional information, promotions and updates, follow WatchGuard on Twitter, @WatchGuard on Facebook, or on the LinkedIn Company page. Also, visit our InfoSec blog, Secplicity, for real-time information about the latest threats and how to cope with them at www.secplicity.org. Address 505 Fifth Avenue South Suite 500 Seattle, WA 98104 Support www.watchguard.com/support U.S. and Canada +877.232.3531 All Other Countries +1.206.521.3575 Sales U.S. and Canada +1.800.734.9905 All Other Countries +1.206.613.0895 WatchGuard Technologies, Inc. i

1 AP Management 1 About Your Hardware 2 Hardware Specifications 2 Environmental Requirements 3 Hardware Description 4 Bottom Panel Connections 4 Side Panel Connections 6 Device Indicator 6 Mount and Connect the AP 7 Ceiling Mount 8 Wall Mount 9 Wall Mount with T-Rail Mount and Spacers 10 Connect the AP 11 Power Adapter (Optional) 12 Ethernet Power Injector (Optional) 13 Notices 15 Safety Warning 15 Power Adapter Requirements 15 FCC Certification 15 CE Notice 16 Industry Canada Certification 16 EU Declaration of Conformity 18 Brazil ANATEL 20 Mexico NOM 20 Japan Statement 20 ii WatchGuard Technologies, Inc.

20 Taiwan NCC Statement 20 RoHS Statement 20 WEEE Statement 21 REACH Certificate of Compliance 21 WatchGuard Technologies, Inc. iii

WatchGuard AP330 Hardware Guide The WatchGuard AP330 is a 2x2 802.11ax dual radio access point that supports 802.11ax/ac/a/b/g/n wireless standards with up to 574 Mbps data rate on the 2.4GHz band and 1200 Mbps on the 5GHz band. The AP330 also has a third radio dedicated to security scanning. AP Management You can manage your AP330 with WatchGuard Cloud, a powerful cloud-based enterprise wireless management solution for AP configuration, security, and monitoring. For more information on how to set up your AP with WatchGuard Cloud, see watchguard.com/start. WatchGuard Technologies, Inc. 1

Hardware Specifications Hardware Description Chipset Qualcomm QCA8081 2.5 Gbps Processor and RAM n Qualcomm Cypress IPQ6010-0 Cypress Quad-core A53 at 1.6GHz n DDR3L 512MB x 2 (Max speed 1866 Mbps) Radio Model n Radio 1: 2.4GHz Qualcomm Colbalt QCN5021 2x2 with internal PA n Radio 2: 5GHz Qualcomm Colbalt QCN5052 2x2 n Scan radio: QCA9882 2x2 n Bluetooth: CC2652R1(BLE 5.0+Zigbee 3.0) Radio Type and Frequency Band n Radio 1: 2.4 GHz 2x2 11b/g/n/ax n Radio 2: 5 GHz 2x2 11a/n/ac/ax n Radio 3 (Scan): Dual Band 802.11ac Wave 1 2x2 radio Antennas n Wi-Fi: 2 x Min. 2dBi 2.4GHz + 2 x Min. 2dBi 5GHz internal antennas n Scan Radio: 2 x Min. 2dBi 2.4/5GHz dual band internal antenna n BLE: 1 x Min. 2dBi 2.4GHz internal antenna Ethernet Interfaces n 2.5GbE Ethernet port Power Interface n PoE 48-57V DC 802.3at n 12V / 2A DC in Power Consumption Maximum: 19W MTBF (Mean Time Between Failures) 400,000 hours at 25˚C / 77˚F Dimensions 205 mm X 205 mm X 33.2 mm (8.1” x 8.1” x 1.3”) Weight TBD WatchGuard AP330 Hardware Guide 2 WatchGuard Technologies, Inc.

Environmental Requirements To safely install your WatchGuard AP, we recommend that you: n Install the device indoors n Make sure the device has adequate clearance for air flow and cooling Other environmental requirements: Operating Temperature 0°C to 40°C (32°F to 104°F) Operating Humidity 5% to 95% non-condensing Non-operating Temperature -20°C to 65°C (-4°F to 149°F) Non-operating Humidity 5% to 95%, non-condensing WatchGuard Technologies, Inc. 3

Bottom Panel Connections Reset Button Resets the AP to factory-default settings. n Use a paper clip or other small object to press the reset button through the hole. n Press and hold the reset button for up to 10 seconds. When you release the reset button, all LEDs will go off to indicate that the AP has rebooted. USB Port This port is currently not in use. Serial Console RJ-45 port is for serial console connections to the access point. LAN (POE+) This is an LAN port that connects the AP to a wired LAN connection through a switch or hub. This port also provides PoE+ (802.3at) power for the AP. WatchGuard AP330 Hardware Guide 4 WatchGuard Technologies, Inc.

DC 12V If PoE power is unavailable, you can power the device with the optional 12V DC power adapter (WG9009). WatchGuard Technologies, Inc. 5

Kensington Lock Slot Kensington security lock slot for use with a security cable to secure your device. Device Indicator The AP330 has a single LED indicator that can show these conditions: LED Color Status Solid Orange AP is booting (Permanent orange indicates a hardware issue) Flashing Orange AP cannot connect to WatchGuard Cloud Solid blue AP is online Flashing blue Flash LED action from WatchGuard Cloud WatchGuard AP330 Hardware Guide 6 WatchGuard Technologies, Inc.

Mount and Connect the AP Your package includes the AP330, ceiling mount t-rail brackets, and wall mount screws and spacers. The MAC address and serial number of your AP are printed on a label on the back of the device. Make sure you record this information before you mount the AP. WatchGuard Technologies, Inc. 7

2. Hold the access point with one hand to reach the other hand over the t-rail sides of the bracket. 3. Attach the stationary end of the ceiling mount bracket on to the t-rail. WatchGuard AP330 Hardware Guide 8 WatchGuard Technologies, Inc.

Wall Mount 1. Determine where the access point will be placed and mark the location for the two mounting holes (110mm apart). 2. Drill the two mounting holes (8.1mm diameter and 26mm depth) and hammer the anchors into the holes. 3. Screw the anchors into the holes until they are flush with the wall, then screw the included screws into the anchors. 4. Attach the access point to the wall with the mounting screws. WatchGuard Technologies, Inc. 9

For ease of use, you can also affix the access point to a wall with the T-rail 15/16" mount attached. Use the included spacers to place between the mounting screws and the anchors. WatchGuard AP330 Hardware Guide 10 WatchGuard Technologies, Inc.

Connect the AP Plug one end of the Ethernet cable from your network into the LAN (PoE+) port on the bottom panel of the AP. Make sure the other end of the Ethernet cable is connected to your network through a hub, switch, or injector with PoE+ (802.3at) power enabled. WatchGuard Technologies, Inc. 11

An optional AC power adapter supplies 12V DC power to the AP. AC Power Adapter Specs WatchGuard Part Number WG9009 AC Input Voltage Rating 100-240V, 50-60Hz Output Voltage DC 12V, 2.5A Region Specific Adapter Plugs US, UK, AU/NZ, EMEA (all included) Temperature Operating: 0 - 40°C (32 – 104°F) Storage: -20 - 85°C (-4 – 185°F) Humidity Operating: 5% – 95% Storage: 0% – 95% Dimensions 69 mm x 32.6 mm x 49.5 mm (2.7" x 1.28" x 1.5") WatchGuard AP330 Hardware Guide 12 WatchGuard Technologies, Inc.

Ethernet Power Injector (Optional) You can power the AP with an optional Ethernet Power Injector. The PoE+ power injector enables you to power the AP through an existing Ethernet connection. With this device, you do not have to position your AP near a power outlet. This device complies with IEEE 802.3at/af PoE specifications. Do not use any PoE adapters that are not IEEE 802.3at/af compliant as they may damage your device. To connect an Ethernet Power Injector to the WatchGuard AP: 1. Plug the Ethernet Power Injector into an AC power source. 2. Connect an Ethernet cable from your network backbone (for example, a PoE-capable router, switch, or hub) to the LAN connector on the Ethernet Power Injector. 3. Connect an Ethernet cable from the LAN1 PoE Ethernet interface on the AP to the PoE connector on the Ethernet Power Injector. The table provides the specifications for the power adapter. Ethernet Power Injector Specs WatchGuard Part Number 802.3at PoE+ Injector with AC cord (US/FCC) (WG8599) 802.3at PoE+ Injector with AC cord (CE) (WG8600) 802.3at PoE+ Injector with AC cord (UK) (WG8601) 802.3at PoE+ Injector with AC cord (AUS) (WG8602) Specification IEEE 802.3at/af AC Input Voltage Rating 100-240VAC Input Current 0.8A max for 100VAC WatchGuard Technologies, Inc. 13

Output Power 30W maximum Ethernet Interfaces LAN: RJ-45 for 10/100/1000 Mbps data POE: RJ-45 for 10/100/1000 Mbps data and power Voltage: Pin4, 5:54V, Pin7, 8:Return Indicator Power: Green Temperature Operating: 0 - 40°C (32 - 104°F) Storage: -30 - 80°C (-22 - 176°F) Humidity 5% - 90% (Operating and storage) Dimensions L = 99 mm (3.9") W = 68.5 mm (2.27") H = 33 mm (1.3") Weight 149.6 g (0.33 lbs) WatchGuard AP330 Hardware Guide 14 WatchGuard Technologies, Inc.

Notices All WatchGuard products are designed and tested to meet strict safety requirements. These requirements include product safety approvals and other global compliance standards. Please read these instructions carefully before operating the product, and refer to them as needed to ensure the continued safe operation of your product. For patent information, please visit http://www.watchguard.com/patents Safety Warning If protective earthing is used as a safeguard, the instructions shall require connection of the equipment protective earthing conductor to the installation protective earthing conductor (for example, by means of a power cord connected to a socket-outlet with earthing connection). To meet safety and electromagnetic interference (EMI) requirements, you must make sure the power source is connected to earth ground before you connect power to the AP. Power Adapter Requirements This product is intended to be supplied by a Listed Power Adapter or DC power source marked “L.P.S.” (or Limited Power Source or PS2) rated 12V DC, 2A minimum, maximum ambient temperature (Tma)=40°C, or supplied by a Listed PoE Adapter marked “L.P.S.” (or Limited Power Source or PS2) rated 54V DC, 0.6A minimum, maximum ambient temperature (Tma)=40°C. For more information regarding approved power sources, please contact WatchGuard Technologies. FCC Certification This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: n Reorient or relocate the receiving antenna. n Increase the separation between the equipment and receiver. n Connect the equipment into an outlet on a circuit different from that to which the receiver is n connected. n Consult the dealer or an experienced radio/TV technician for help. WatchGuard Technologies, Inc. 15

compliance could void the user’s authority to operate this equipment. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. Operations in the 5.15-5.25GHz band are restricted to indoor usage only. This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. Radiation Exposure Statement: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 24cm between the radiator & your body CE Notice The CE symbol on your WatchGuard Technologies equipment indicates that it is in compliance with the Electromagnetic Compatibility (EMC) directive and the Low Voltage Directive (LVD) of the European Union (EU). Industry Canada Certification This device complies with ISED’s licence-exempt RSSs. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Le présent appareil est conforme aux CNR d’ ISED applicables aux appareils radio exempts de licence. L’exploitation est autorisée aux deux conditions suivantes: (1) le dispositif ne doit pas produire de brouillage préjudiciable, et (2) ce dispositif doit accepter tout brouillage reçu, y compris un brouillage susceptible de provoquer un fonctionnement indésirable. Caution (i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems; (ii) where applicable, antenna type(s), antenna models(s), and worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask requirement set forth in section 6.2.2.3 shall be clearly indicated. Avertissement Le guide d’utilisation des dispositifs pour réseaux locaux doit inclure des instructions précises sur les restrictions susmentionnées, notamment : (i) les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une utilisation à l’intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux; WatchGuard AP330 Hardware Guide 16 WatchGuard Technologies, Inc.

(ii) lorsqu’il y a lieu, les types d’antennes (s’il y en a plusieurs), les numéros de modèle de l’antenne et les pires angles d’inclinaison nécessaires pour rester conforme à l’exigence de la p.i.r.e. applicable au masque d’élévation, énoncée à la section 6.2.2.3, doivent être clairement indiqués Radiation Exposure Statement This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 24cm between the radiator & your body. Déclaration d'exposition aux radiations Cet équipement est conforme aux limites d'exposition aux rayonnements ISED établies pour un environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 24cm de distance entre la source de rayonnement et votre corps. Dynamic Frequency Selection (DFS) for devices operating in the bands 5250- 5350 MHz, 5470-5600 MHz and 5650-5725 MHz. Sélection dynamique de fréquences (DFS) pour les dispositifs fonctionnant dans les bandes 5250-5350 MHz, 5470-5600 MHz et 5650-5725 MHz. For indoor use only. Pour une utilisation en intérieur uniquement. WatchGuard Technologies, Inc. 17

This device complies with the essential requirements of the RED Directive 2014/53/EU. The following test methods have been applied in order to prove presumption of conformity with the essential requirements of the RED Directive 2014/53/EU: EN 60950-1:2014+A11:2017 Safety of Information Technology Equipment (ITE) EN 55024:2010+A1:2015 Immunity for Information Technology Equipment (ITE) EN 55032:2015+A11:2020 Electromagnetic compatibility of multimedia equipment - Emission requirements. EN 62311:2008 Assessment of electronic and electrical equipment related to human exposure restrictions for electromagnetic fields (0 Hz - 300 GHz). EN 61000-3-2:2014 Limits for harmonic current emissions. EN 61000-3-3:2013 Limitation of voltage changes, voltage fluctuations and flicker in public low-voltage supply systems, for equipment with rated current ≤16 A per phase and not subject to conditional connection. EN 300 328 V2.2.2 Electromagnetic compatibility and Radio spectrum Matters (ERM); Wideband transmission systems; Data transmission equipment operating in the 2.4GHz ISM band and using wide band modulation techniques; Harmonized EN covering the essential requirements of article 3.2 of the RED Directive EN 301 893 V2.1.1 Broadband Radio Access Networks (BRAN); 5GHz high performance RLAN; Harmonized EN covering the essential requirements of article 3.2 of the RED Directive EN 301 489-1 V2.2.3 Electromagnetic compatibility and Radio spectrum Matters (ERM); Electro Magnetic Compatibility (EMC) standard for radio equipment and services; Part 1: Common technical requirements EN 301 489-17 V3.1.1 Electromagnetic compatibility and Radio spectrum Matters (ERM); ElectroMagnetic Compatibility (EMC) standard for radio equipment; Part 17: Specific conditions for Broadband Data Transmission Systems This device is a 5GHz wideband transmission system (transceiver), intended for use in all EU member states and EFTA countries, except in France and Italy where restrictive use applies. In Italy the end-user should apply for a license at the national spectrum authorities in order to obtain authorization to use the device for setting up outdoor radio links and/or for supplying public access to telecommunications and/or network services. WatchGuard AP330 Hardware Guide 18 WatchGuard Technologies, Inc.

This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to 10 mW EIRP in the frequency range of 2454 - 2483.5 MHz. For detailed information the end-user should contact the national spectrum authority in France. WatchGuard Technologies, Inc. 19

em sistemas devidamente autorizados. Mexico NOM La operación de este equipo está sujeta a las siguientes dos condiciones: (1) es posible que este equipo o dispositivo no cause interferencia perjudicial y (2) este equipo o dispositivo debe aceptar cualquier interferencia, incluyendo la que pueda causar su operación no deseada. Japan Statement この装置には、電波法に基づく技術規則適合証明書の認定を受けた特定の無線装置が含まれていま す。 This equipment contains specified radio equipment that has been certified to the Technical Regulation Conformity Certification under Radio Law. Japan VCCI Class B Statement この装置は、クラスB 情報技術装置です。この装置は、住宅環境で使用することを目的とし ていますが、この装置がラジオやテレビジョン受信機に近接して使用されると、受信障害を 引き起こすことがあります。取扱説明書に従って正しい取り扱いをして下さい。VCCI-B Taiwan NCC Statement 取得審驗證明之低功率射頻器材，非經核准，公司、商號或使用者均不得擅自變更頻率、加大功 率或變更原設計之特性及功能。 低功率射頻器材之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用， 並改善至無干擾時方得繼續使用。前述合法通信，指依電信管理法規定作業之無線電通信。低 功率射頻器材須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 1. 使用此產品時應避免影響附近雷達系統之操作。 「本產品電磁波曝露量(MPE)標準值1mW/cm2，送測產品實測值為0.347 mW/cm2，建議使用時至少 距離人體24cm」 RoHS Statement The member states of the European Union approved directive 2002/95/EC, Restrictions of Hazardous Substances (“RoHS directive”‘) that became valid on July 1, 2006. It states that all new electrical and electronic equipment put on the market within the member states must not contain certain hazardous materials. This device complies with the European Union’s R0HS directive 2002/95/EC and similar regulations that may be adopted by other countries for European Sales. WatchGuard AP330 Hardware Guide 20 WatchGuard Technologies, Inc.

WEEE Statement WEEE is a general set of requirements dictated in the EU Directive 2002/96/EC. This Directive mandated that member EU countries enact regulations governing the Waste of Electrical and Electronic Equipment (WEEE). The Directive, and its individual transpositions into specific country laws and legislation, is aimed at the reduction of WEEE through reuse, recovery, and recycling of WEEE. WatchGuard is working in partnership with our European Union (EU) distribution partners to ensure that our products are in compliance with the WEEE statutes, and that the recovery of our product per the specific EU country legislative requirements is seamless for our product’s end users. If you have a WatchGuard product that is at its end of life and needs to be disposed of, please contact WatchGuard Customer Care Department at: U.S. Customers: 877.232.3531 International Customers: +1.206.613.0456 WatchGuard is reasonably confident that our products do not contain any substances or hazardous materials presently banned by any legislation, and do not present a risk due to hazardous materials. WEEE recovery professionals should also note that these products do not have any materials that are of particular high value in their individual form. REACH Certificate of Compliance The new EU chemicals policy REACH (Registration, Evaluation, Authorization and restriction of Chemicals) came into effect on June 1, 2007. REACH is Europe's new chemicals legislation, which is applicable in all 27 EU Member States as well as the EFTA European Economic Area (EEA). REACH creates a new system for gathering information, assessing risks to human health and the environment, and authorizing or restricting the marketing and use of chemicals produced or supplied in the EEA. REACH has an impact on EEA producers and importers of finished products and users of chemicals in the course of industrial or professional activities. WatchGuard supports the overall REACH objective of improving the protection of human health and the environment and will meet all applicable REACH requirements. WatchGuard is strongly committed to working with our customers and supply chain to define and implement the REACH requirements and ensure a smooth transition to compliance. One of the REACH requirements is that manufacturers and importers have the duty to register substances they are producing or importing. In accordance with the regulations, the products of WatchGuard do not need to be registered for the following reasons: n WatchGuard does not import more than 1 metric ton per year of a substance as defined by REACH. n WatchGuard products are non-chemical products that are not designed to release any substance under normal and reasonably predictable application. n Our products do not contain the listed substances at more than 0.1% by weight of the whole product/part. WatchGuard Technologies, Inc. 21