Chapter 5 Compliance : Configuring FortiGate units for PCI DSS compliance : Wireless network security : Securing a CDE network WAP
  
Securing a CDE network WAP
If your wireless network is within PCI DSS scope, it must meet the following requirements:
Default settings such as SSID and passphrases must be changed.
Use WPA security, not WEP.
Log wireless activity.