Configure the firewall to enable clients that are behind the firewall to forward traffic to port 80 destination on the insecure side of the firewall. Most sites configure this behavior by default. A firewall friendly ECP can require the firewall to allow ExtremeCloud IQ Controller to forward RADIUS requests (UDP) to an external server (typically at port 1812).