Configuring encryption on the FortiGate unit
You can use the CLI to configure data channel encryption.
Enabling encryption
In the CLI, the wireless wtp-profile command contains a new field, dtls-policy, with options clear-text and dtls-enabled. To enable encryption in profile1 for example, enter:
config wireless-controller wtp-profile
edit profile1
set dtls-policy dtls-enabled
end