Thanks a lot Monnat Systems - great help!! Just a side note: All communication between Ruckus Cloud and the APs is initiated from the AP. If the firewall is allowing SSH, HTTPS etc ports from IN to OUT direction, then there is no need to add any fire...
