EnGenius, back in late 2021 announced a new series of Wi-Fi 6 Access points mainly focus upon "security". The new S series was born. As remote network access and a growing number of Bluetooth/IoT devices create more attack surfaces than ever before, enterprise networks are increasingly vulnerable to data breaches and cyber-attacks. In response, EnGenius has expanded its security features to include new Wi-Fi 6 cloud-managed security access points ideal for information-sensitive financial, medical, and distributed enterprise networks.

The new S series (ECW220S/230S), the EnGenius Cloud security APs come equipped with EnGenius AirGuard, an intelligent wireless security system that identifies and neutralizes threats 24/7. Using dedicated scanning radios, AirGuard security APs scan the environment non-stop for attacks—evil twins, rogue APs, flood detection, man-in-the-middle attacks, and radio frequency jammers—without degrading network performance at all.  

The new security APs also feature professional-grade RF spectrum analysis that visualizes radio frequencies at a glance to ensure all SSIDs are authorized, and the most efficient channels are utilized. Its zero-wait DFS avoids disruption from radar detection and provides an uninterrupted change of channels when needed. In addition to identifying unauthorized devices, the security APs also detect all Bluetooth devices nearby.

Rogue devices are often the gateway to attacks and the S series offers end users a seamless all-in-one cloud-managed security solution without the need to purchase multiple off-the-shelf solutions to handle costly cyberattacks.

Key Features:

• Wireless intrusion detection system (WIDS) - for threat detection
• Wireless intrusion protection system (WIPS) - for attack remediation
• Dedicated scanning radios - for 24/7 wireless security monitoring
• RF spectrum analysis - for identifying clean channels and ensuring all SSIDs are legitimate
• Wi-Fi 6 technology - for high-performance Wi-Fi in high-density, multi-device environments
• Zero-wait DFS – to avoid client disruption when radar is detected on DFS channels
• Bluetooth 5 low energy – for BLE device detection and location-based extended advertising.

The main idea behind ECW230S and ECW220S model was to be able to identify and prevent Wi-Fi security threats in real time without any performance degradation.

The EnGenius ECW230S is part of the EnGenius Cloud Access Points. We have already covered what this feature is all about at our ECW230 review but we will post as well several important information.

EnGenius Cloud Managed Access Points provide flexible, scalable, and reliable wireless connectivity for a broad range of applications. Whether you are looking to connect a large office or provide ultra-fast Wi-Fi access to a large resort or campus, cloud-managed access points meet the high density and bandwidth requirements of today’s BYOD users. Big or small, you can deploy and manage an unlimited number of APs on an unlimited number of networks distributed across numerous locations of varying size and infrastructure.

Simple — With easy-to-deploy design and pre-configuration ability, EnGenius access points are operational within minutes. Organizations with limited IT support and budgets can quickly create a reliable, efficiently managed network.

Smart — EnGenius Cloud uses predictive artificial intelligence and access point data collection to help administrators improve network performance and prevent potential issues.

Reliable — EnGenius uses its decades of manufacturing and software development experience, long-lasting chipset vendor relationships, and tight manufacturing processes to provide reliable hardware. EnGenius now offers a 2-year factory warranty for all cloud products.

Secure — Keep your network safe with two-factor authentication and data encryption on every cloud device. Minimize potential issues by setting up event-based alerts and receive push notifications through the EnGenius Cloud app. Monitor your network 24/7 for rogue devices and other security threats.

Next-Generation Wi-Fi in the Cloud
The EnGenius Cloud access points take advantage of the latest wireless Wi-Fi 6/6E technology, which enables more efficient channel use and reduces latency between AP and client devices. EnGenius AP’s use ground-breaking features such as uplink and downlink of OFDMA, target wake time, uplink and downlink of MUMIMO, BSS coloring, spatial reuse, and preamble updates.

Flexibility in Deployment
EnGenius Cloud’s versatile line of high-performance, managed, ceiling- and wall-mount access points consist of tri-band and dual-band high capacity 4x4, and 2x2 Wi-Fi 6 versions. Wall plate models serve as all-in-one communication “hubs” for in-room wireless connectivity. Configure access points with a scan of the QR code using the EnGenius Cloud app and manage, monitor, and troubleshoot an unlimited number of devices from a single visually rich interface.

Smartcasting and Wired SSID Configuration
EnGenius SmartCast SSID allows hotel guests, for example, to stream their media subscriptions to the TV without compromising guest privacy. All personal devices are hidden from other guests in the guest network interface. Businesses can now extend captive portal, splash pages and protection to the extra LAN ports on the wall-mount access points to create a unified, secure onboarding experience for users on both the wireless and wired network.

Optimize Connectivity with Wireless Mesh
Use smart mesh mode with a click of a button for retrofit or new install applications where wire runs are not possible. Mesh’s smart sensing technology finds nearby access points and auto connects, optimizes routes between APs, and automatically self-heals the network if the AP loses connection.

The Latest in Wi-Fi Security
With EnGenius APs, WPA3 protects your network, delivering next generation wireless security by making connecting client and IoT devices easier and more secure. EnGenius APs provide enterprise level security for SMBs with wireless encryption standards such as Wi-Fi protected access encryption. EnGenius security APs come equipped with AirGuard™, an intelligent wireless security system that identifies threats 24/7 using wireless intrusion detection and protection systems. With real-time wireless invasion monitoring, IT administrators receive email alerts and can immediately divert and potentially avoid network hacks and other security threats

Every Cloud Device is Secure and Protected by Advanced Authentication
With EnGenius Cloud, every cloud device is protected with twofactor authentication, non-sequential serial numbers, and MAC address verification to ensure only authorized cloud devices are on the network. Once devices are authenticated, the access point establishes a secure tunnel between the device and the Cloud with a unique certificate provided by the EnGenius Cloud to encrypt transmissions.

Secure Guest Networks
With EnGenius guest network capabilities and FrontDesk Manager voucher service, organizations offering internet access to patrons or visitors—notably hotels, retail shops and restaurants—can create a secure guest network that blocks access to main corporate computers. By creating separate virtual LANs, organizations increase security, improve network reliability, and conserve bandwidth.

Simplified Deployment & Provisioning
With EnGenius Cloud’s plug-and-play installation, administrators can deploy EnGenius Cloud APs quickly — no lengthy setup or complex integration required. The EnGenius Cloud automatically checks & updates firmware, downloads configurations, and joins the assigned organization and network when an EnGenius Cloud access point is plugged in. By using the EnGenius Cloud app, businesses can easily create a network and configure access points from any location.

Manage Your Workload with EnGenius Cloud
EnGenius Cloud’s dashboard provides administrators a visual overview of their network health status. Administrators can easily see access point health status and quickly click into access point list to review radio configurations, IP addressing and system information. The cloud dashboard also highlights the most used access points, SSIDs, clients and applications. Administrators can quickly view a snapshot of their overall network’s performance and identify potential issues.

Initial Setup, Maintenance & Troubleshooting with EnGenius Cloud
EnGenius Cloud offers simple, convenient methods to tune, monitor, and troubleshoot all access points for a specific site or network. The AP list gives admins the ability to review all access points in one window to compare resources, radio configurations, and IP settings. In addition to configuration changes, the list view allows administrators to drill down into details of specific access points to check overall configurations, real-time system meters, radio configuration and IP settings for initial setup, monitoring, and troubleshooting.Admins can set maintenance schedules across times zones to improve uptime, allow remote system log to track system modifications or configuration changes, establish event-based email alerts, and receive push notifications via the EnGenius Cloud app.

Simplifies Design and Implementation
Implementing Wi-Fi can be complicated and takes a skilled hand to do it correctly. The floor plan view provides administrators a tool for designing, implementing, monitoring, and troubleshooting Wi-Fi networks, all in real-time. The floor plan view is an included cloud Wi-Fi site survey tool, designed in-house by EnGenius, which accepts an upload of your floor plan and simulates Wi-Fi coverage with a heat map of your desired Tx power, RSSI value and channel, factoring in physical obstacles and other impediments to your coverage.

Faster Deployments with Pre-Configured Access Points
Improve customer deployment and onboarding time for network administrators with predefined access point configurations EnGenius Cloud automatically identifies your location and implements your country’s regulatory domains to keep access point deployments in compliance. EnGenius Cloud’s easy-to-use configuration menu allows administrators to add and define SSIDs with wireless configurations, security type and Wi-Fi accessibility into any network. Network administrators can then scan access points, power them up, and automatically configure for simplified deployments at customer sites. Advanced features such as L2 isolation, band steering traffic shaping, radius users and captive portal can then be programmed to fine tune access point configurations.

- ECW230S

ECW230S Wi-Fi 6 (802.11ax) 4x4 Cloud Managed Indoor Wireless Access Point which is engineered with WIPS radio and Zero DFS radio detection interfaces for listening spectrum and channel utilization by the WIPS radio and detect DFS signal via Zero DFS radio.

• Dual concurrent 802.11ax Wi-Fi 6 architecture & backward-compatible
• Supercharged speeds up to 2,400 Mbps (5 GHz) & up to1,200 Mbps (2.4 GHz)
• 2.5 GbE realizes greater throughput and supports 802.3at & 48V PoE input for flexible installation over 100 meters (328 feet)
• Wireless security detection and protection by WIDS/WIPS radio.
• BLE client list by beacon scan
• WPA3 & WPA2-AES authentication support
• Cloud Managed with AP & Mesh mode
• Quick-scan device register & configuration and remote monitoring & troubleshooting
• Cloud manage an unlimited number of APs from anywhere with the EnGenius Cloud App
• Mesh Wireless Support simplifies setup, optimizes signals & self-heals

- Full Specifications

Standards

IEEE 802.11ax on 2.4 GHz
IEEE 802.11ax on 5 GHz
Backward compatible with 802.11a/b/g/n/ac

Antenna

4 x 2.4 GHz: 5 dBi
4 x 5 GHz: 6 dBi
Integrated Omni-Directional Antenna

Physical Interface

1 x 10/100/1000/2500 Ethernet Port (PoE+)
1 x DC Jack
1 x Reset Button

LED Indicators

1 x Power
1 x LAN
1 x 2.4 GHz
1 x 5 GHz
1 x Scanning
1 x BLE

Power Source 

Power-over-Ethernet: 802.3at Input
IEEE 802.11e Compliant Source
12VDC /2A Power Adapter (optional)

Maximum Power Consumption

19.5W

Wireless & Radio Specifications

Operating Frequency

Dual-Radio Concurrent 2.4 GHz & 5 GHz

Operation Modes

AP, AP Mesh, Mesh

Frequency Radio

2.4 GHz: 2400 MHz~2482 MHz
5 GHz: 5150 MHz ~ 5250 MHz, 5250 MHz ~ 5350 MHz, 5470 MHz ~ 5725 MHz, 5725 MHz ~ 5850 MHz

Transmit Power Up to 20 dBm on 2.4 GHz

Up to 23 dBm on 2.4 GHz
Up to 23 dBm on 5 GHz
(Maximum power is limited by regulatory domain)

Tx Beamforming (TxBF)

Radio Chains/Spatial Stream 

4 × 4:4

SU-MIMO

Four (4) spatial stream Single User (SU) MIMO for up to 1,148 Mbps wireless data rate with HE40 bandwidth to a 4×4 wireless client device under the 2.4 GHz radio. Four (4) spatial stream Single User (SU) MIMO for up to 2,400 Mbps wireless data rate with HE80 to a 4×4 wireless device under the 5 GHz radio.

MU-MIMO

(4) spatial streams Multiple (MU)-MIMO up to 2,400 Mbps wireless data rate for transmitting to four (4) streams MU-MIMO 11ax capable wireless client devices under 5 GHz simultaneously.

Four (4) spatial streams Multiple (MU)-MIMO up to 1,148 Mbps wireless data rate for transmitting to four (4) streams MU-MIMO 11ax capable wireless client devices under 2.4 GHz simultaneously

Supported Data Rates (Mbps):

802.11ax:
2.4 GHz: 9 to 1,148 (MCS0 to MCS11, NSS = 1 to 4)
5 GHz: 18 to 2,400 (MCS0 to MSC11, NSS = 1 to 4)
802.11b: 1, 2, 5.5, 11
802.11a/g: 6, 9, 12, 18, 36, 48, 54
802.11n: 6.5 to 600 (MCS0 to MCS31)
802.11ac: 6.5 to 1,733 (MCS0 to MCS9, NSS = 1 to 4)

Supported Radio Technologies

802.11ax: Orthogonal Frequency Division Multiple Access(OFDMA)
802.11ac/a/g/n: Orthogonal Frequency Division Multiple (OFDM)
802.11b: Direct-sequence spread-spectrum (DSSS)

Channelization

802.11ax supports high efficiency throughput (HE) —HE 20/40/80 MHz
802.11ac supports very high throughput (VHT) —VHT 20/40/80 MHz
802.11n supports high throughput (HT) —HT 20/40 MHz
802.11n supports very high throughput under the 2.4GHz radio –VHT40 MHz (256-QAM)
802.11n/ac/ax packet aggregation: A-MPDU, A-SPDU

Supported Modulation

802.11ax: BPSK, QPSK, 16-QAM, 64-QAM, 256-QAM, 1024-QAM
802.11ac: BPSK, QPSK, 16-QAM, 64-QAM, 256-QAM
802.11a/g/n: BPSK, QPSK, 16-QAM, 64-QAM
802.11b: BPSK, QPSK, CCK

Management Features

Multiple BSSID

support 8 SSIDs on both 2.4 GHz and 5 GHz

VLAN Tagging

Supports 802.1q SSID-to-VLAN Tagging
Cross-Band VLAN Pass-Through
Management VLAN

Spanning Tree

Supports 802.1d Spanning Tree Protocol

QoS (Quality of Service)

Complaint With IEEE 802.11e Standard
WMM

Fast Roaming

802.11r/k

Wireless Security

WPA2-PSK
WPA2-Enterprise
WPA3-PSK
WPA3-Enterprise
Hide SSID in Beacons
MAC Address Filtering, Up to 32 MACs per SSID
Wireless STA (Client) Connected List
Https
SSH Tunnel
Client Isolation

Environmental & Physical

Temperature Range

Operating: 32ºF~104ºF (0 ºC~40 ºC)
Storage: -40 ºF~176 ºF (-40 ºC~80 ºC)

Humidity (non-condensing)

Operating: 90% or less
Storage: 90% or less

Dimensions & Weight

ECW230S Device

Weight: 597 g
Width: 205 mm
Length: 205 mm
Height: 33.2 mm

Package Contents

1 – ECW230S Cloud Managed Indoor Access Point
1 – Ceiling Mount Base (9/16” Trail)
1 – Ceiling Mount Base (15/16” Trail)
1 – Ceiling and Wall Mount Screw Kit
1 – Quick Installation Guide

Compliance Regulatory

FCC
CE

Warranty

2 Years