Wireless Site Survey San Diego — Ekahau Predictive, Onsite, and Validated

Timeline depends on scope. A single-floor commercial space in downtown Gaslamp Quarter, La Jolla UTC, or a Sorrento Valley biotech building with complete as-built drawings can be predictively modeled and quoted within three business days of the scoping call. An AP-on-a-Stick field validation for that same floor takes one to two days on-site.

Multi-building campus engagements — UCSD-scale higher ed, Scripps- or Sharp-scale multi-system hospital rollouts, Torrey Pines biotech cluster campuses — typically run two to four weeks from floor plan receipt to final deliverable.

Every engagement is scoped and quoted as a fixed-fee SOW before work begins.

Our 2 to 2.5 hour dispatch from Valencia to San Diego County is absorbed in the same SOW for pre-scoped multi-day engagements, so there is no separate mobilization surcharge. We do not bill hourly against an open-ended estimate.

A predictive survey uses Ekahau AI Pro in the Ekahau Connect platform to model RF propagation through a calibrated floor plan. No physical measurement occurs — the software simulates signal paths through assigned wall materials and produces coverage heatmaps and an AP placement plan. It is fast and accurate for standard construction materials.

An AP-on-a-Stick survey mounts a production-model AP on a telescopic pole at the intended deployment height, and the Ekahau Sidekick 2 captures real measurements — actual RSSI, SNR, and noise floor — as the surveyor walks the floor.

For San Diego buildings with atypical attenuation (cleanroom stainless-steel framing, ULT-freezer copper vapor barriers, lead-lined imaging suites, IEEE 299-2006 Faraday-shielded MRI enclosures, Gaslamp Quarter historic brick-and-timber masonry, coastal-exposure outdoor mounts) or where as-built drawings are unreliable, the AP-on-a-Stick pass is required before procurement.

Most WFHS engagements include both: predictive for initial design and AP count, AP-on-a-Stick for validation before the BOM is finalized.

All of San Diego County. Coverage runs the full footprint: downtown Gaslamp Quarter, Little Italy, Mission Valley, and Old Town; the La Jolla coastal arc; the Torrey Pines Mesa, Sorrento Valley, and UTC biotech corridor; Kearny Mesa, Mira Mesa, and Miramar; Coronado, Imperial Beach, Chula Vista, San Ysidro, and Otay Mesa in the South Bay;

Point Loma, Ocean Beach, Pacific Beach, and Mission Beach on the coast; North County including Poway, Escondido, Vista, Oceanside, Carlsbad, Encinitas, Rancho Santa Fe, and San Marcos; and East County through El Cajon, La Mesa, Santee, Lakeside, Alpine, and Ramona.

San Diego County coverage also includes National City, Lemon Grove, Solana Beach, and Del Mar.

We dispatch 2 to 2.5 hours from our Valencia HQ on a fixed-fee SOW structure that absorbs mobilization into the engagement price for pre-scoped multi-day work.

Cross-border coordination for engagements near San Ysidro or Otay Mesa factors FCC / IFT bilateral awareness into the design on any licensed link.

Every engagement is priced as a fixed-fee SOW — we do not bill hourly. Scope variables that drive cost: building square footage, number of floors, number of buildings, construction type (standard drywall vs. cleanroom stainless-steel framing vs. ULT-freezer Faraday cage vs. Gaslamp Quarter brick-and-timber vs. coastal-exposure outdoor), required survey type (predictive only, AP-on-a-Stick, or combined predictive-plus-validation), GxP documentation requirements for biotech environments, and whether post-install validation and a formal validation report are in scope.

We return a written SOW quote within three business days of the scoping call of receiving floor plans and a scope description.

Send floor plans to sales@wifihotshots.com or call (844) 946-8746.

No engagement begins without the client signing off on the fixed-fee price first.

Every engagement produces: the Ekahau project file (.esx) for future re-use; annotated heatmap exports per frequency band (2.4, 5, 6 GHz) per floor showing RSSI, SNR, secondary coverage (802.11k), and co-channel interference; a vendor-agnostic AP bill of materials with mount type, antenna, PoE class (UPOE/802.3bt Class 6 for Wi-Fi 7 dual-6-GHz operation), and cabling callouts;

an installation runbook for the contractor; and a post-install validation report with passive heatmap confirmation, iPerf3 throughput results, 802.11r handoff timing, and MOS trace data for voice-grade engagements.

Biotech and life-sciences engagements receive an additional CAPA-documentation-ready change log per ISPE GAMP 5 and 21 CFR Part 11 suitable for the client’s validation-environment audit trail.

The deliverable set is the same regardless of the AP vendor — Cisco Catalyst 9800, Cisco Meraki MR and CW, HPE Aruba Central, Juniper Mist, RUCKUS, or Extreme.

The documentation belongs to the client and is formatted for a 10-year shelf life.

Yes. Passive survey requires no network access and causes zero disruption to production traffic — the Ekahau Sidekick 2 listens passively and never associates to any SSID. Active throughput testing and roaming validation require a brief association to a production or test SSID, which does not affect other clients on the network.

Full iPerf3 load testing, which generates several hundred Mbps of synthetic traffic to stress the uplink, is scheduled during off-hours or in a maintenance window if the client requests it.

We have conducted passive surveys in live clinical patient floors, GxP-validated biotech wet labs, and operating cleanroom environments without interrupting production operations.

Biotech validation-environment surveys include a pre-survey coordination call with the Quality organization to identify access windows that do not conflict with active GxP production batches; the pre-survey coordination document we send before mobilization identifies which test phases, if any, require an off-hours window.

For MRI-suite adjacent work at Scripps Green, Sharp Memorial, UCSD Jacobs, or Rady, we coordinate with the imaging manager to schedule AP validation around clinical imaging hours.

IP67 alone is not enough on the San Diego coast. IEC 60529 (the IP rating standard) tests dust and water ingress only — it does not test corrosion. IEC 60068-2-11 Test Ka (Edition 4.0, 2021) is the salt-mist corrosion test, using a 5% NaCl atomized atmosphere at +35°C. NEMA 4X is the US equivalent combining ingress and corrosion resistance.

For oceanfront AP deployments across Coronado, Point Loma, La Jolla Shores, Mission Beach, and Silver Strand, we specify NEMA 4X or IP67 plus IEC 60068-2-11 qualification, marine-grade 316L stainless steel mounts, UV-stabilized radomes, and drip loops at cable entries.

Pole-mount lightning protection follows NFPA 780 single-point-attachment guidance.

Bare IP67 APs on coastal mounts corrode within 18–24 months; the specification gap is a common cause of post-installation failure that survey work identifies before procurement, not after.

WiFi Hotshots does not claim, and does not provide, classified / SCIF / SAP / cleared-facility work. Unclassified scope only. We work with commercial-contractor and research-partner offices in the San Diego market under an unclassified commercial posture — for example the type of commercial office space operated by Qualcomm in Sorrento Valley, SAIC, Northrop Grumman commercial offices, or General Atomics unclassified facilities.

Typical design inputs include EAP-TLS or WPA3-Enterprise 192-bit (CNSA suite) authentication where CMMC Level 2+ alignment is in scope, NIST SP 800-171 Rev 3 control 03.01.16 wireless access posture on CUI-handling systems, and DISA STIG-aligned platform selection (or current DoDIN APL coverage through the FY2026 sunset per the DISA July 2025 memo).

FIPS 140-3 mode on Cisco Catalyst 9800 is available for federal-adjacent fabric.

Classified-fabric wireless (SCIF-internal, TEMPEST-hardened) is out of scope for any commercial VAR including WFHS, and we refer such work accordingly.

Qualcomm, SAIC, Northrop Grumman, and General Atomics are referenced as commercial-market archetypes, not as claimed engagements. See our NGFW and NAC design for full scope methodology and validation criteria.

For biotech and life-sciences engagements across Torrey Pines Mesa, Sorrento Valley, and the UTC corridor, the survey deliverable is formatted to serve as part of the client’s CAPA documentation trail. Under 21 CFR Part 11 and ISPE GAMP 5, every wireless change in a GxP-validated environment must be auditable. We produce a before/after heatmap comparison showing the original design intent, the validated post-install state, and any remediation applied to close the gap.

The Ekahau project file (.esx) is part of the handoff so the Quality organization can reopen and re-validate the survey on a later audit without starting from scratch.

AAMI TIR18 guidance on electromagnetic compatibility of medical devices applies to any wireless segment carrying medical-device traffic — we identify co-existence boundaries with wireless-connected medical devices during survey and document any spectrum-coordination findings.

The CAPA-ready change log is part of the standard biotech deliverable, not a change order.

The fixed-fee SOW covers the defined scope. If the survey uncovers something outside that scope — an ERRCS gap requiring a licensed BDA integrator at a Scripps, Sharp, or UCSD Health hospital campus; a structured cabling deficiency that needs remediation before APs can be installed in a Sorrento Valley biotech building;

a DAS antenna placement conflict in a Gaslamp Quarter hotel; or a Cal Fire FHSZ outdoor-enclosure requirement identified in Ramona, Jamul, or East County — we document the finding in the validation report with a clear description of the issue and its location.

We then issue a separate change-order estimate for any additional WFHS scope and, where the finding is outside wireless engineering (like ERRCS installation), we refer to the appropriate licensed contractor.

The client is never billed above the SOW total without a signed change order first.

That is the operational definition of a fixed-fee engagement.

Standard-power (SP) 6 GHz APs must register with an FCC-approved Automated Frequency Coordination (AFC) system before they can transmit on UNII-5 or UNII-7. The AFC service enforces dynamic exclusion zones around incumbent fixed microwave links — and downtown San Diego, Mission Valley, and the Sorrento Valley tech corridor all carry registered microwave paths that constrain outdoor SP channel selection.

Low Power Indoor (LPI) radios do not require AFC but are prohibited from outdoor mounting or weather-rated enclosures, which rules them out for rooftop, parking-structure, or courtyard coverage. Our San Diego wireless site survey models the incumbent exclusion footprint before we mount anything outdoors.

LPI APs operate across UNII-5 / 6 / 7 / 8 at a Power Spectral Density ceiling of 5 dBm/MHz — 18 dBm EIRP on 20 MHz, 21 dBm on 40 MHz, 24 dBm on 80 MHz, 27 dBm on 160 MHz.

Standard Power APs may transmit up to 36 dBm EIRP (PSD 23 dBm/MHz) but require active AFC coordination on UNII-5 and UNII-7 only. LPI client devices must transmit at least 6 dB below their serving AP, which shrinks the usable uplink cell.

For most Sorrento Valley office, lab, and cleanroom buildouts, LPI is the correct power class — we size AP density during the wireless design phase so the reduced EIRP still delivers −67 dBm at the cell edge.

The FCC opened 1,200 MHz of contiguous spectrum from 5.925 GHz to 7.125 GHz, yielding 59 × 20 MHz channels, 29 × 40 MHz, 14 × 80 MHz, and 7 × 160 MHz channels.

A US-country-coded LPI AP can use all 59 channels without AFC, which is the reuse plan for nearly every Sorrento Valley and UTC office and lab we design.

Standard Power restricts operation to UNII-5 and UNII-7 but raises EIRP to 36 dBm — typically reserved for large indoor atria or outdoor venues where AFC registration is justified. Channel width selection is driven by density, not headline PHY rate; dense lab floors often stay at 80 MHz to keep a 14-channel reuse pool clean.

Voice-grade healthcare coverage requires at minimum −67 dBm RSSI with a 25 dB SNR across the designed coverage footprint. For Wi-Fi location services — asset tags, patient-workflow dashboards, nurse-call correlation — the same −67 dBm / 25 dB threshold must be seen by at least three APs at every measurement point, so the worst-covered bathroom, stairwell, and supply closet still has triangulation geometry.

We validate both thresholds against Ekahau field captures, not predictive simulations, which is the distinction between a design and a verified deployment. Our San Diego healthcare site survey ships the post-install Ekahau heatmap plus a pass/fail grid of every measurement point against these two numbers.

For Wi-Fi and BLE asset-location to work inside a hospital, the vendor-validated target is approximately one AP per 1,000 sq ft across the interior, with APs placed along the perimeter so every floor point has line-of-sight to at least four APs simultaneously.

A typical ward floor of 100 ft × 230 ft (23,000 sq ft) therefore requires more than 4× the AP count of a basic data-grade deployment — which is why hospitals that were designed for coverage alone cannot retrofit asset-tracking without an RF redesign. We model the four-AP visibility grid during predictive design and then verify it on-site with Ekahau Sidekick 2 during our San Diego hospital survey.

With properly deployed Wi-Fi 6/6E APs and Cisco Spaces BLE, 50% of location samples fall within 2.2 m of actual position and 90% within 4.1 m — accuracy improves as more APs hear each tag. A standard RSSI-only Wi-Fi deployment targets roughly 10 m accuracy, which is adequate for zone-presence but not for room-level workflow.

Cisco Hyperlocation using Angle of Arrival with a 32-element antenna array delivers 1 m accuracy at the 50th percentile and 1-3 m on average. BLE tags must be heard by three or more APs to compute a position — which is why we enforce the three-AP visibility rule during the predictive design and validate it with the Sidekick 2 on-site.

Channel widths are constrained to 20 MHz (VHT20) to preserve the largest pool of non-overlapping channels for a tight reuse plan across a stadium bowl. Per-radio client load is designed around 25 associations on the 5 GHz radio (50 per dual-radio AP), so AP count is the larger of aggregate-throughput-divided-by-per-device-throughput or concurrent-clients-divided-by-25.

Minimum SNR across the seating bowl must remain 25 dB or better, and per-client rate-limits typically start at 5 Mbps with Speed Burst enabled so the first packet burst doesn’t throttle. High-density San Diego stadium wireless design is survey-driven; we measure bowl-edge SNR and co-channel overlap before committing AP placement.

Salt-laden marine air corrodes unprotected electronics and connector threads within months, not years. Vendor outdoor APs — Cisco Meraki CW9164I / CW9166D1 (current outdoor Wi-Fi 6E) and Cisco Catalyst IW9167E (industrial outdoor); legacy Meraki MR74/MR76/MR78/MR84/MR86 are end-of-sale — carry IP67 ratings and are vendor-tested for salt spray, vibration, shock, and dust.

The Cisco IW9167EH hazardous-location variant operates −50 °C to +75 °C; the base IW9167E Heavy Duty operates −40 °C to +70 °C. The authoritative salt-mist test standard is IEC 60068-2-11 (Test Ka), a continuous 5% NaCl fog at +35 °C with spray fall-out of 1.0–2.0 mL/80 cm²/hour for durations up to 1,000 hours.

For Port of San Diego, Coronado, or Shelter Island deployments, we specify IP67 enclosures plus corrosion-resistant mounting hardware on every San Diego outdoor wireless install.

Yes. NEC Article 810 (Radio and Television Equipment) requires that every outdoor antenna lead-in have a listed antenna discharge unit (lightning arrestor) installed as close as practical to the point of building entry.

Bonding and earthing conductors must be copper, aluminum, copper-clad steel, or bronze — minimum #10 AWG copper or #8 AWG aluminum per §810.21. If the structure has an Intersystem Bonding Termination, the arrestor bond must terminate there.

We are RF engineers, not electrical contractors — the final grounding install is coordinated with the operator’s approved electrical contractor — but our wireless design deliverable specifies the NEC-compliant arrestor, entry location, and bond path so the electrician is working from a drawing.

The Wi-Fi Alliance Voice-Enterprise certification program layers selected capabilities from IEEE 802.11k (neighbor reports), 802.11r (Fast BSS Transition), and 802.11v (BSS Transition Management) on top of WMM and WPA2-Enterprise. 802.11r enables a client to complete re-association to a new AP target in under 50 ms, which keeps a voice codec from dropping packets mid-handoff.

Voice-Enterprise adds admission control that limits over-subscription on a given BSS — so a nurse call or physician consult does not get crowded out by bulk data on the same radio.

We validate that the WLAN, controller, and handset fleet all advertise and honor these amendments in the beacon and probe exchange during our San Diego hospital validation.

The FCC protects Terminal Doppler Weather Radar in the 5600-5650 MHz band, overlapping Wi-Fi channels 120, 124, and 128. APs operating in those channels implement Dynamic Frequency Selection and must cease transmission for at least 30 minutes when a radar burst is detected.

Current FCC DFS rules require radar-sensing across 100% of emission bandwidth (raised from the earlier 80%). Consumer and IoT clients still routinely refuse DFS channels, so the usable channel pool in Kearny Mesa, Mission Valley,

and anywhere near SAN or MCAS Miramar is narrower than the spec sheet suggests. During our San Diego wireless design, we inventory the client fleet and validate DFS support per model before committing a channel plan.

Possibly — it depends on the mount height and proximity to the runway. Under 14 CFR Part 77, a proponent must file Form 7460-1 (Notice of Proposed Construction or Alteration) with the FAA at least 45 days before construction for any structure exceeding 200 ft AGL, or which exceeds a lower imaginary-surface threshold based on proximity to a public-use or military airport.

Sites within 20,000 ft of a runway trigger additional criteria. Most rooftop and pole-mounted APs fall below the thresholds, but a tall rooftop stand or mast near Lindbergh Field, North Island, or Miramar may require filing. Our wireless design deliverable evaluates every exterior mount against §77.9 notice criteria and flags those requiring FAA filing.

CMMC Level 2 incorporates all 110 controls of NIST SP 800-171. Two directly govern wireless: AC.L2-3.1.16 (authorize wireless access before allowing connections, establish usage restrictions and configuration requirements) and AC.L2-3.1.17 (protect wireless with authentication and encryption). SC.L2-3.13.11 additionally requires FIPS-validated cryptography when Controlled Unclassified Information traverses wireless or any link leaving the protected boundary.

For suppliers serving Naval Base San Diego, Naval Base Coronado, or NAS North Island, this translates to WPA3-Enterprise with FIPS-mode radios, documented wireless-use policy, and audit evidence keyed to the assessment control numbers. Our network security architecture deliverable maps each wireless control to a line item in the site survey evidence package.

The HIPAA Security Rule at 45 CFR 164.312(e)(1) requires technical safeguards against unauthorized access to ePHI in transit over an electronic network. Encryption is an addressable implementation specification — organizations must implement it when deemed appropriate after a risk analysis, and for ePHI on a shared WLAN the analysis almost always lands on yes.

At minimum this means WPA2-Enterprise (and preferably WPA3-Enterprise) with 802.1X/EAP; open or WEP SSIDs are non-compliant for ePHI. WPA3-Enterprise 192-bit mode uses AES-256-GCMP with HMAC-SHA-384 for key derivation and ECDH/ECDSA on 384-bit curves — a Wi-Fi Alliance-certified equivalent to NSA’s CNSA suite. We validate the in-use cipher and EAP method during our San Diego hospital wireless validation.

21 CFR Part 11 sets the criteria under which FDA treats electronic records and electronic signatures as trustworthy and equivalent to paper. It applies to records created, modified, maintained, archived, retrieved, or transmitted under 21 CFR Part 210/211 (cGMP), Part 820 (QSR), or Part 58 (GLP).

Wireless transport of batch-record, environmental-monitoring, or LIMS data must preserve attributability (unique logins), audit trails, record integrity, and secure transmission. Our GxP deliverable for a Sorrento Valley cleanroom includes the signed Installation Qualification and Operational Qualification evidence — coverage screenshots, test-client captures, validation protocol tickets — that the quality function expects. Our San Diego biotech wireless survey ships this as a bound validation package.

Every engagement ships an Ekahau project file (.esx) — a ZIP container of JSON structures holding floor-plan imagery, AP inventory, survey paths, and heatmaps. Ekahau AI Pro supports passive, active, throughput, spectrum, and GPS-assisted outdoor collection in one walk, so the .esx is a single source-of-truth for every RF measurement on the property.

Customers also receive the PDF report (client-readable), CSV survey-point exports, AP placement drawings in AutoCAD or PDF, and any vendor-specific imports (Cisco Catalyst Center, Meraki Dashboard) requested. For GxP-regulated deployments, the deliverable additionally includes IQ/OQ validation protocols. Every San Diego engagement is a fixed-fee SOW, not hourly — the deliverable list is locked before the first walk.

Wider channels reduce the number of non-overlapping channels available for spatial reuse. In a seating bowl, arena, convention hall, or ballroom, the binding constraint is airtime contention — not per-client headline rate.

Meraki’s high-density design guidance states the recommendation directly: configure 20 MHz (VHT20) widths, size the deployment around roughly 25 clients per 5 GHz radio, and enforce cell-edge RX-SOP thresholds (5 GHz: −76 dBm High / −78 Medium / −80 Low) to prevent sticky-client contention with a distant AP.

A Petco Park bowl or Snapdragon Stadium concourse running 80 MHz in dense seating cannot reuse channels without severe co-channel interference — 20 MHz is the only channel width that delivers a clean reuse pattern at scale during our San Diego high-density wireless design.

For most Sorrento Valley office, lab, and biotech buildouts, current Wi-Fi 6E LPI hardware is sufficient today. Meraki MR57, CW9162, CW9164, CW9166I, and CW9166D1 deliver full tri-radio 2.4 / 5 / 6 GHz at 4×4 MIMO / 4 spatial streams — maximum PHY rates of 4,804 Mbps on 6 GHz, 2,402 Mbps on 5 GHz, 574 Mbps on 2.4 GHz, aggregate 7.78 Gbps on the MR57.

Wi-Fi 7 hardware (CW9172I/H, CW9176I/D1, CW9178I indoor; CW9179F outdoor; CW9163E outdoor 6E) adds 320 MHz channels on 6 GHz, 4K-QAM, and Multi-Link Operation. Wi-Fi 7 becomes the correct choice when MLO or 320 MHz is a design driver — otherwise LPI 6E at 80 MHz delivers the capacity. Our wireless design phase sizes both paths against the measured client fleet.

Outdoor antenna selection balances gain, pattern, polarity, and adjacent-channel exposure. Cisco Catalyst 9130E supports antennas up to 6 dBi via RP-TNC or up to 13 dBi via N-type connectors (the AP auto-sets maximum gain to 13 dBi when an N-adapter is detected).

Cisco’s deployment documentation requires a lightning arrestor and proper grounding on every outdoor installation — we specify an NEC §810.20(C)/§810.21-listed discharge unit at building entry plus a bonding path to the Intersystem Bonding Termination where present.

Salt-laden marine air shortens uncoated connector life, so we specify NEMA 4X or IP67 enclosures and corrosion-resistant hardware on every San Diego coastal outdoor wireless design.

For Class I Division 2, ATEX Zone 2/22, and IECEx-rated environments — including fuel handling and certain industrial processes adjacent to Port operations — we specify the Cisco Catalyst IW9167E Heavy Duty AP for Hazardous Location.

That radio carries Class I Div 2, ATEX Zone 2/22, and IECEx certifications in an IP67 enclosure tolerating −50 °C to +75 °C. It runs on Cisco Catalyst 9800 controllers, supports Wi-Fi 6 / WGB / URWB backhaul modes, and uses external antennas.

We are RF engineers, not hazloc electricians — the physical conduit, seal-off, and bonding install is coordinated with the operator’s approved contractor — but our San Diego industrial wireless survey specifies the certified hardware, mount location, and antenna selection.