Next Generation firewalls that having WLCcontroller management options

[khubaib muhammad]

Dear All,

           Hope everyone fine and enjoy your work. I have query that related to NGFWs. We are currently using Sophos firewall that EOL is June 2024. We are currently using WLC 9800 VM for our AP 9105AX series management. Is Cisco have any firewalls that support WLC functions same like WLC 9800. We came to know that Sophos has this option but only for Sophos AP. 

Please let me know about  NGFW working as WLC if have and also about Pro and Cons of using Firewall as controller.

Khubaib

Network Engineer

Islamabad

@WLC9800, @Firewalls, @9105AXSeriesAP

[marce1000]

       >..... Is Cisco have any firewalls that support WLC functions same like WLC 9800.
         - No , that's not available on Cisco products for the time being  . 

 M.

[khubaib muhammad]

A little More Help Require.   

Right now I am using WLC 9800 Controller as VM on  Window 10 Pro (original) platform. and VM controller is changing its SN (serial number) after every reboot. Should I use Hardware controller 9800 WLC for AP?

or Any solution that stop SN change on WLC after reboot?

[marce1000]

      >...Right now I am using WLC 9800 Controller as VM on  Window 10 Pro (original) platform. 
  - I don't think that is supported ; ref : https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-cl-wireless-controller-cloud/nb-06-cat9800-cl-cloud-wirel-data-sheet-ctp-en.html
    >...Key highlights
                       ●     VMware ESXi, KVM, Hyper-V, and Cisco NFVIS (on ENCS) supported

 M.

[khubaib muhammad]

also WLC 9800 Controller VM is not register itself with cisco due to SN change issue.

[Rich R]

What version of 9800 software are you using? (hint: refer to TAC recommended link below)

As Marce says make sure you are running it on a supported hypervisor.  If you run it on anything else then results can be unpredictable and Cisco will not support you for any issues you encounter.  The release notes for each version list the supported platforms: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/release-notes/rn-17-9-9800.html#Cisco_Concept.dita_c9f5f62c-3813-4ab2-9365-71d583c3a462

Make sure you follow the installation guide for the relevant platform carefully:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/9800-cloud/installation/b-c9800-cl-install-guide.html

[Haydn Andrews]

Reference the firewall with controller capabilities.

In the Cisco on prem products the answer is no

Cisco Meraki does have their MX appliances that have WIFI in them. Generally for a small branch office (all in one product) https://meraki.cisco.com/en-au/products/security-sd-wan/models/ 

The other thing with Meraki is being cloud, you then don’t need a WLC on prem. 
But if your talking larger then the answer no

[sweetkhubaib]

So thanks for your help. All platforms of hypervisor is as per cisco recommendations. Solved my problems by choosing  XGS2100 Sophos Firewalls as per our requirement.