Wireless Site Survey Orange County — Ekahau Predictive, Onsite, and Coastal-Validated

Timeline depends on scope. A single-floor commercial space in the Irvine Spectrum, South Coast Metro, or Newport Center Class A office corridor with complete as-built drawings can be predictively modeled and quoted within three business days of the scoping call. An AP-on-a-Stick field validation for that same floor takes one to two days on-site.

Multi-building campus engagements — UC Irvine-scale or CSUF-scale higher ed, OC academic-medical or Hoag-scale clinical campuses, Anaheim Convention Center event coverage, or district-wide K-12 rollouts across Capistrano or Irvine Unified — typically run two to four weeks from floor plan receipt to final deliverable.

Every engagement is scoped and quoted as a fixed-fee SOW before work begins.

Our 45–60 minute dispatch from Valencia to Anaheim and Irvine means mobilization is predictable, and the timeline, scope, and deliverables are defined in writing.

We do not bill hourly against an open-ended estimate.

A predictive survey uses Ekahau AI Pro to model RF propagation through a calibrated floor plan. No physical measurement occurs — the software simulates signal paths through assigned wall materials and produces coverage heatmaps and an AP placement plan. It is fast and accurate for standard construction materials.

An AP-on-a-Stick survey mounts a production-model AP on a telescopic pole at the intended deployment height, and the Ekahau Sidekick 2 captures real measurements — actual RSSI, SNR, and noise floor — as the surveyor walks the floor.

For OC buildings with atypical attenuation (low-E Class A glazing, stucco-over-wire-lath, concrete-plus-rebar shear walls, biotech cleanroom stainless partitions, lead-lined imaging suites, CMU block) or where as-built drawings are unreliable, the AP-on-a-Stick pass is required before procurement.

Most WFHS engagements include both: predictive for initial design and AP count, AP-on-a-Stick for validation before the BOM is finalized.

All 34 incorporated cities of Orange County plus the unincorporated communities. North OC: Anaheim, Fullerton, Buena Park, Placentia, Yorba Linda, Brea, La Habra. Central OC: Santa Ana, Orange, Tustin, Irvine, Costa Mesa. South OC: Mission Viejo, Lake Forest, Laguna Hills, Laguna Niguel, Laguna Woods, Aliso Viejo, Rancho Santa Margarita, San Clemente, San Juan Capistrano, Dana Point.

Coastal: Seal Beach, Huntington Beach, Newport Beach, Laguna Beach, Dana Point, San Clemente.

West OC: Cypress, Stanton, Westminster, Garden Grove, Fountain Valley, La Palma, Los Alamitos, Villa Park.

Unincorporated: Ladera Ranch, Midway City, Rossmoor, Coto de Caza, and others. Dispatch from Valencia is 45–60 minutes via I-5 / CA-91 / I-405.

We also dispatch into adjacent service areas — LA metro, SFV, Inland Empire, San Diego — under the same fixed-fee SOW structure.

SNA airport engagements are quoted with airport-access credentialing and Part 77 / ANCA coordination factored in.

Every engagement is priced as a fixed-fee SOW — we do not bill hourly. Scope variables that drive cost: building square footage, number of floors, number of buildings, construction type (standard drywall vs. CMU block vs. stucco-over-wire-lath vs. low-E Class A curtain wall vs. biotech cleanroom stainless vs. coastal-exposure outdoor), required survey type (predictive only, AP-on-a-Stick, or combined predictive-plus-validation), coastal-corrosion enclosure specification (NEMA 4X and 316 stainless for Newport / Laguna / Huntington / Dana Point / San Clemente / Seal Beach outdoor), and whether post-install validation and a formal validation report are in scope.

We return a written SOW quote within three business days of the scoping call of receiving floor plans and a scope description.

Send floor plans to sales@wifihotshots.com or call (844) 946-8746.

No engagement begins without the client signing off on the fixed-fee price first.

Every engagement produces: the Ekahau project file (.esx) for future re-use; annotated heatmap exports per frequency band (2.4, 5, 6 GHz) per floor showing RSSI, SNR, secondary coverage (802.11k), and co-channel interference;

a vendor-agnostic AP bill of materials with mount type (316 stainless for coastal), antenna, PoE class, enclosure rating (NEMA 4X / IP66 / IP67), and cabling callouts; an installation runbook for the contractor; and a post-install validation report with passive heatmap confirmation, iPerf3 throughput results, 802.11r handoff timing, and MOS trace data for voice-grade engagements.

The deliverable set is the same regardless of the AP vendor — Cisco, Meraki, HPE Aruba, Juniper Mist, RUCKUS, or Extreme.

Outdoor Wi-Fi 6E APs default to Cisco Catalyst CW9163E (MR86 is end-of-sale) for coastal and Santa Ana-wind exposure.

The documentation belongs to the client and is formatted for a 10-year shelf life.

Yes. Passive survey requires no network access and causes zero disruption to production traffic — the Ekahau Sidekick 2 listens passively and never associates to any SSID. Active throughput testing and roaming validation require a brief association to a production or test SSID, which does not affect other clients on the network.

Full iPerf3 load testing, which generates several hundred Mbps of synthetic traffic to stress the uplink, is scheduled during off-hours or in a maintenance window if the client requests it.

We have conducted passive surveys in live OC clinical patient floors, biotech cleanrooms with active process-control workflows, Anaheim Convention Center event setups, and Disneyland Resort guest-facing environments without interrupting production operations.

Hospital and cleanroom environments typically drive a pre-survey coordination call with clinical engineering or the validation team to identify access windows that do not conflict with active patient care or validated production runs.

The pre-survey coordination document we send before mobilization identifies which test phases, if any, require an off-hours window.

The survey instruments are the same; the design targets differ. UC Irvine-scale and Cal State Fullerton-scale higher education, Chapman private university, OC community colleges (Saddleback, Orange Coast, Cypress, Fullerton College, Santa Ana College, Irvine Valley, Coastline),

and OC K-12 districts (Capistrano, Irvine, Santa Ana, Orange, Saddleback Valley, Newport-Mesa, Tustin, Placentia-Yorba Linda, Anaheim UHSD, Garden Grove, Huntington Beach UHSD, Fountain Valley, Los Alamitos) are designed for 1:1 client device density per classroom or lecture hall seat targeting 30–35 concurrent associations per AP, not the lower density of a corporate open-plan floor.

That changes the AP placement interval, the channel width selection (20 MHz standard in high-density zones), and the roaming design.

K-12 engagements are typically scheduled during summer recess to allow room-by-room passive walkthroughs in CMU-block buildings where hallway-only AP plans fail under classroom load.

E-rate procurement requirements mean the deliverable set must include documentation compatible with the district’s Category 2 equipment and installation submission for the FY2026–2030 funding cycle. eduroam federation (UC Irvine, Cal State Fullerton, Chapman all in the same realm) is designed into the SSID strategy so cross-campus visitors auto-associate without IT intervention.

UC Irvine, Chapman, Cal State Fullerton, and the OC K-12 districts are referenced here as venue archetypes, not as claimed engagements.

The fixed-fee SOW covers the defined scope. If the survey uncovers something outside that scope — an ERRCS gap requiring a licensed BDA integrator at an OC academic medical, Hoag, CHOC, or Providence campus, a structured cabling deficiency that needs remediation before APs can be installed in a Newport Center or Irvine Spectrum tower, a DAS antenna placement conflict inside the Anaheim Convention Center or Honda Center, or a coastal-corrosion failure of existing outdoor APs that requires NEMA 4X replacement — we document the finding in the validation report with a clear description of the issue and its location.

We then issue a separate change-order estimate for any additional WFHS scope and, where the finding is outside wireless engineering (like ERRCS installation or classified-environment work at aerospace-adjacent campuses), we refer to the appropriate licensed contractor.

The client is never billed above the SOW total without a signed change order first.

That is the operational definition of a fixed-fee engagement.

Yes. Wi-Fi 7 introduces 320 MHz channel widths in 6 GHz (Standard Power mode limits the US to a single 320 MHz channel), Multi-Link Operation across 2.4, 5, and 6 GHz concurrently, and preamble puncturing that carves out only the interfered 20 MHz subchannel within an 80/160/320 MHz bonded channel. The IEEE 802.11be standard targets at least one mode at 30 Gbps-plus.

That reshapes the survey: every floor must be validated across all three bands in the same session, 4K-QAM proximity is modeled separately from edge coverage, and the predictive model must account for MLO band-steering behavior rather than treating 5 and 6 GHz as independent plans.

Yes, and they are one of the more aggressive attenuators in the OC tower stock. Low-E coatings were engineered to reflect infrared energy, which overlaps the 5 and 6 GHz Wi-Fi bands enough that signal will not reliably penetrate the envelope from an AP placed one floor above or below. The practical consequence: no coverage borrowing across curtain-wall floors and no shared APs between floors separated by low-E glass.

Ekahau AI Pro predictive modeling uses per-wall attenuation values, but library defaults under-represent modern coated glass — we field-measure each pane with Sidekick 2 during calibration walk and feed the measured dB into the model before producing the Orange County site survey deliverable.

Yes. Two separate issues stack near John Wayne (SNA). First, 14 CFR Part 77 requires FAA Form 7460-1 notification at least 45 days prior to any construction or alteration exceeding 200 ft AGL within specified distances of the airport — and construction equipment (cranes, lifts) is not exempt. If rooftop or mast work enters scope, we flag the OE/AAA filing timeline in the survey SOW.

Second, DFS channels in UNII-2A/C are exposed to more frequent radar detection events near coastal and airport radar.

The survey deliverable includes a Sidekick spectrum-scan log over representative hours so your controller’s DFS channel plan is based on measured empirical reliability, not vendor defaults.

Sometimes — and CBRS does not interfere with Wi-Fi because it operates in 3.5 GHz, not the Wi-Fi bands. CBRS uses the three-tier Spectrum Access System: Incumbent Access, Priority Access License (PAL — 10 MHz channels licensed county-by-county within 3550–3650 MHz), and General Authorized Access (GAA — zero-cost, must accept interference from PAL and Incumbent).

A SAS coordinates the tiers using approved Environmental Sensing Capability sensors.

In practice, CBRS fits outdoor-to-indoor yard coverage, SIM-authenticated IoT, and areas where Wi-Fi roaming across large outdoor zones is not viable. Wi-Fi remains the primary indoor fabric. We scope CBRS as a parallel deliverable when the use case justifies it, not a replacement.

Only with Standard Power (SP) APs coordinated by AFC. Low-Power Indoor (LPI) 6 GHz APs are restricted by FCC rule to indoor operation — not permitted outdoors, in vehicles, or on battery-powered outdoor devices. Standard Power APs are authorized in UNII-5 (5.925–6.425 GHz) and UNII-7 (6.525–6.875 GHz) at up to 36 dBm EIRP (23 dBm/MHz PSD); client devices are capped at 30 dBm EIRP.

SP devices must query an Automated Frequency Coordination system before using channels, so incumbent fixed-service microwave links stay protected.

If your rollout assumes outdoor 6 GHz on rooftops or courtyards, we confirm the AP hardware is SP-certified and the deployment is registered with an approved AFC provider.

Pull two Category 6A runs to every AP location and budget 802.3bt Class 6 (60 W) PoE++ on the switch port. ANSI/TIA-568.1-E requires minimum two Cat 6A runs to each wireless AP, and Wi-Fi 7 APs need dual 10GBASE-T connections to deliver full aggregate data rates. The Arista C-460 Wi-Fi 7 AP, for example, requires 802.3bt Class 6 PoE++ with dual 10GbE PHY uplinks.

Cat 6 only supports 10GBASE-T to about 55 m, which is under-spec for a standard 100 m channel — pulling Cat 6 now means re-pulling when the AP refresh lands.

Dual Cat 6A also gives you LAG, redundancy, and full 100 m support in one pass.

ERRCS is a separate scope from Wi-Fi, but the two share cable pathways and building penetrations, so we raise it at survey kickoff. NFPA 1225 (2022) Chapter 18 requires 95% floor-area radio coverage in general building areas and 99% in critical areas — command centers, fire pump rooms, exit stairs, passageways, elevator lobbies, and sprinkler section valves.

NFPA 72 sets the minimum inbound and outbound signal strength at -95 dBm with DAQ 3.0 audio quality.

If your OC new-construction permit requires ERRCS, the riser and cable-tray schedule has to accommodate the donor antenna, BDA, and coax run alongside the Wi-Fi structured cabling. Coordinating both trades early prevents demolition later.

HIPAA 45 CFR § 164.312(e)(1) requires covered entities to implement technical security measures to guard against unauthorized access to e-PHI transmitted over electronic networks. Encryption itself is an “addressable” specification under 45 CFR § 164.312(a)(2)(iv) and (e)(2)(ii), meaning it must be implemented if your risk assessment determines it is reasonable and appropriate — which, for modern Wi-Fi, it effectively always is.

Practically, OC health systems deploy WPA3-Enterprise 192-bit, which activates Protected Management Frames by default (MFPR bit set to 1 in RSN Capabilities) and provides 192-bit cryptographic strength.

That is the Wi-Fi Alliance’s recommended posture for healthcare, finance, and government networks carrying sensitive data.

PCI DSS requires quarterly wireless scans of all Cardholder Data Environments — every 90 days, maximum interval between scans — with rogue wireless devices detected and eliminated. “Quarterly” is defined in PCI DSS v4.0 as at least once every three months. Acceptable methods include wireless analyzer sweeps, physical inspection, or wireless IDS, and most multi-site OC retailers (South Coast Plaza tenants, Irvine Spectrum, The District) combine them.

For that reason, we scope retail wireless scanning as a recurring subscription engagement, not a one-time deliverable.

The initial wireless site survey establishes baseline rogue posture and AP inventory; the quarterly scan service maintains the PCI attestation between assessments.

Yes. 23 NYCRR Part 500 applies to Covered Entities regulated by NY DFS regardless of where the equipment sits physically — an Irvine or Newport Beach office handling NY-regulated workloads is in scope.

Section 500.12 mandates MFA for any individual accessing a Covered Entity’s Information Systems, defined as verification of at least two factors from knowledge, possession, or inherence (full MFA implementation deadline was November 1, 2025 under the Second Amendment).

Section 500.13(a) requires a documented asset inventory program, and wireless APs are in-scope assets.

The clean architecture that satisfies both: WPA3-Enterprise 802.1X with MFA, a certificate-authenticated device inventory, and a signed AP asset list refreshed on every controller change.

CMMC 2.0 Level 2 is built on NIST SP 800-171 and specifically requires two wireless controls: AC.L2-3.1.16 “Authorize wireless access prior to allowing such connections” and AC.L2-3.1.17 “Protect wireless access using authentication and encryption.” The DoD CIO CMMC Assessment Guide Level 2 v2.13 (September 2024) is the authoritative reference.

For OC aerospace and defense contractors handling CUI, the practical implementation is WPA3-Enterprise or WPA2-Enterprise with FIPS-validated crypto, an explicit authorization workflow for any new wireless endpoint, and SSID-level segregation so the survey deliverable documents which SSIDs carry CUI traffic versus contractor-general or guest.

We build that SSID/VLAN map into the design before AP placement is finalized.

Active validation, not passive heatmapping. Vocera specifies a minimum -65 dBm RSSI with a minimum SNR of +25 dB based on a -90 dBm noise floor across all badge models (B3000n, V5000 Smartbadge, C1000 Minibadge), and single-band operation — avoid inter-band roaming deployments.

Spectralink Versity 95 and 96 support 802.11r adaptive fast-transition as of firmware R2.1.1; the Versity 92 supports FT but not adaptive, which changes roam behavior when adaptive is enabled on the controller.

Our survey measures packet loss, jitter, and MOS during an active call walk, not just RSSI.

We also model AP capacity: a flooded AP (concurrent call count exceeding capacity) will degrade every active call on that radio regardless of signal.

AP-on-a-Stick field validation with a tri-band Ekahau Sidekick 2, run through the actual aisles. Warehouse rack attenuation varies by 10 dB or more depending on whether racking is empty or stocked, the inventory material (metal stock attenuates very differently from cardboard), and aisle orientation relative to the AP — predictive-only surveys miss those swings.

Common OC distribution-center handhelds (Zebra TC53/TC58 on Qualcomm 6490) support Wi-Fi 6E, so the survey validates both 5 GHz-only and 6 GHz-capable fleet segments.

For high-bay ceilings, the Cisco Catalyst 9166D1 directional-antenna Wi-Fi 6E AP focuses RF downward into the aisle across all three bands rather than spraying into the joists above.

We are vendor-agnostic and size the AP to the environment, not the logo. Cisco Catalyst 9166 runs three 4×4 radios across 2.4/5/6 GHz with environmental sensors; the 9136 adds a hexa-radio architecture (two 4×4 plus an 8×8) for the densest floors. Meraki MR57 is tri-radio 4×4:4 with a 7.78 Gbps aggregate frame rate, a dedicated fourth radio for WIDS/WIPS, and dual 5 Gbps mGig uplinks.

Juniper Mist AP45 delivers 4800 Mbps on 6 GHz and 2400 Mbps on 5 GHz with four 4×4 radios and a scanning radio.

HPE Aruba 650 Series hits 7.8 Gbps aggregate with dual 5 Gbps ports. The survey decides which fits your density and ceiling height.

Two families are shipping and shovel-ready. The Arista C-460 runs three 4×4 Wi-Fi 7 access radios on 2.4/5/6 GHz with a dedicated tri-band 2×2 multifunction scan radio, integrated L1+L5 GNSS, and a HADM-enabled BLE IoT radio on the Qualcomm Networking Pro 1220 platform. Uplinks are dual 10GbE PHYs with dual 802.3bt Class 6 PoE++ inputs.

The dedicated scan radio provides continuous WIPS across all three bands.

The Arista C-460E is the enterprise-grade form-factor variant with the same radio architecture. On the Cisco Meraki side, the CW9172I / CW9176I / CW9178I indoor family delivers MLO, 320 MHz 6 GHz, and preamble puncturing with cloud-managed provisioning.

Yes. The Cisco Catalyst 9800-CL (Cloud) “Large” scale template supports up to 6000 access points and 64,000 clients per instance, which covers nearly any OC enterprise portfolio on a single controller. Deployable on private hypervisors (VMware, KVM) or public cloud (AWS, Google Cloud, Azure), it runs IOS XE with full feature parity to the physical 9800 appliances and supports Cisco and Catalyst Wi-Fi 6, 6E, and 7 APs.

Smaller templates exist for focused deployments: Medium at 1000 APs / 10,000 clients and Small at 200 APs / 3000 clients.

We size the template during the design phase so the HA pair, AP licensing, and client scale match your actual site count, not a marketing ceiling.

In an optimal deployment, Cisco Spaces locates associated wireless clients to about one meter accuracy with 50% error distance. That level requires Hyperlocation, which combines RSSI with Angle of Arrival (AoA) from specialized hardware modules for precise triangulation. Cisco’s Location Accuracy Test tool validates measured versus calculated device location at a three-second display refresh so AP placement can be tuned before go-live.

Without AoA Hyperlocation modules, accuracy degrades to RSSI trilateration at zone-level presence — useful for room-scale, not for IV-pump-scale asset tracking.

For OC health systems expecting meter-level location, we scope Hyperlocation infrastructure (modules, AP placement density, cabling) as a separate line item from signal coverage.

Tight channel plans, narrow channel widths, and directional antennas. Cisco’s High Client Density Design Guide is explicit: 20 MHz channel width is highly recommended for all high-density deployments — it is better to place more APs on 20 MHz channels than to run 40 MHz secondary channels that carry data frames much less efficiently than two independent 20 MHz cells.

Use every available channel in the regulatory domain, including DFS (and TDWR where permitted), after validating radar impact.

For stadium-class venues, Cisco’s Connected Stadium Wi-Fi Solution is the reference architecture, and the Catalyst 9104 specialized narrow-beam stadium antenna focuses RF into defined seating sectors rather than broadcasting omnidirectionally. Survey scope includes sector modeling, not just coverage contours.

For Huntington Beach, Newport Beach, Dana Point, and similar shoreline sites, specify outdoor-rated APs with factory corrosion-resistant enclosures and stainless-steel mounting hardware. The HPE Aruba 670 Series Outdoor Access Points are purpose-designed for environmentally challenging locations including high-humidity and salt-air exposure.

Outdoor 6 GHz coverage has a hard constraint: FCC rules prohibit Low-Power Indoor (LPI) 6 GHz devices outdoors, so any outdoor 6 GHz AP must be Standard Power (AFC-coordinated) certified.

Coastal installations near shoreline are also subject to coastal-development and visual-impact rules, so we coordinate siting with property management and any AHJ holding jurisdiction over the coastal zone before locking placement in the design.

OSHA 29 CFR § 1910.28 requires fall protection for any employee on a walking-working surface with an unprotected side or edge four feet or more above a lower level — that includes stairway landings, holes (including skylights), dockboards, and rope-descent systems. AP-on-a-Stick surveys above 8–10 feet require ladder or lift scope with qualified operators; we build rental cost and operator certification into the SOW, not as a change order.

For OC hospital work under HCAI permits, the Seismic Certification Preapproval (OSP) program covers non-structural component anchorage per CBC 1705.14.3 / 1705A.14.3 and ASCE 7 Section 13.2.2.

AP mounting for Non-Structural Performance Category components must satisfy the NPC spec — we coordinate with the OSHPD-approved anchorage contractor on the install.