A profile can have its own firewall policy, wireless client role policy, WEP shared key authentication, NAT policy and VPN policy (controller only) applied. If an existing firewall, client role or NAT policy is unavailable, an administrator can create the required security policy configuration. Once created, separate policies can be applied to the profile to best support the data protection and security requirements of the controller, service platform or access point model supported by the profile.
For more information, refer to the following: