diff --git a/source/core/wifi_ctrl_queue_handlers.c b/source/core/wifi_ctrl_queue_handlers.c
index 7f8cf5d7e..e74985fed 100644
--- a/source/core/wifi_ctrl_queue_handlers.c
+++ b/source/core/wifi_ctrl_queue_handlers.c
@@ -4139,7 +4139,7 @@ void process_rsn_override_rfc(bool type)
             }
             vapInfo->u.bss_info.security.mode = wifi_security_mode_wpa3_compatibility;
             vapInfo->u.bss_info.security.u.key.type = wifi_security_key_type_psk_sae;
-            vapInfo->u.bss_info.security.mfp = wifi_mfp_cfg_disabled;
+            vapInfo->u.bss_info.security.mfp = wifi_mfp_cfg_optional;
 
 #if defined(CONFIG_IEEE80211BE)
             if (radio_params->band == WIFI_FREQUENCY_6_BAND) {
diff --git a/source/core/wifi_multidoc_webconfig.c b/source/core/wifi_multidoc_webconfig.c
index 498a7f127..411f9994e 100644
--- a/source/core/wifi_multidoc_webconfig.c
+++ b/source/core/wifi_multidoc_webconfig.c
@@ -433,7 +433,7 @@ static int decode_security_blob(wifi_vap_info_t *vap_info, cJSON *security, pErr
     } else if (!strcmp(value, "WPA3-Personal-Compatibility")) {
         vap_info->u.bss_info.security.mode = wifi_security_mode_wpa3_compatibility;
         vap_info->u.bss_info.security.u.key.type = wifi_security_key_type_psk_sae;
-        vap_info->u.bss_info.security.mfp = wifi_mfp_cfg_disabled;
+        vap_info->u.bss_info.security.mfp = wifi_mfp_cfg_optional;
 #if defined(CONFIG_IEEE80211BE)
             if( strstr(vap_info->vap_name, "6g") ) {
                 vap_info->u.bss_info.security.u.key.type = wifi_security_key_type_sae;
diff --git a/source/webconfig/wifi_decoder.c b/source/webconfig/wifi_decoder.c
index 83e43defe..9ab1e2dc2 100644
--- a/source/webconfig/wifi_decoder.c
+++ b/source/webconfig/wifi_decoder.c
@@ -1493,9 +1493,9 @@ webconfig_error_t decode_security_object(const cJSON *security, wifi_vap_securit
             ((band == WIFI_FREQUENCY_6_BAND &&
             security_info->mfp != wifi_mfp_cfg_required) ||
             (band != WIFI_FREQUENCY_6_BAND &&
-            security_info->mfp != wifi_mfp_cfg_disabled))) {
+            security_info->mfp != wifi_mfp_cfg_optional))) {
 #else
-            security_info->mfp != wifi_mfp_cfg_disabled) {
+            security_info->mfp != wifi_mfp_cfg_optional) {
 #endif /* CONFIG_IEEE80211BE */
             wifi_util_error_print(WIFI_WEBCONFIG, "%s:%d Invalid MFP Config %d for %d mode \n",
             __func__, __LINE__, security_info->mfp, security_info->mode);
diff --git a/source/webconfig/wifi_encoder.c b/source/webconfig/wifi_encoder.c
index 587e1a3eb..e08ef1641 100644
--- a/source/webconfig/wifi_encoder.c
+++ b/source/webconfig/wifi_encoder.c
@@ -1227,9 +1227,9 @@ webconfig_error_t encode_security_object(const wifi_vap_security_t *security_inf
         ((is_6g == true &&
         security_info->mfp != wifi_mfp_cfg_required) ||
         (is_6g == false &&
-        security_info->mfp != wifi_mfp_cfg_disabled))) {
+        security_info->mfp != wifi_mfp_cfg_optional))) {
 #else
-        security_info->mfp != wifi_mfp_cfg_disabled) {
+        security_info->mfp != wifi_mfp_cfg_optional) {
 #endif /* CONFIG_IEEE80211BE */
         wifi_util_error_print(WIFI_WEBCONFIG, "%s:%d Invalid MFP Config %d for %d mode \n",
             __func__, __LINE__, security_info->mfp, security_info->mode);
diff --git a/source/webconfig/wifi_ovsdb_translator.c b/source/webconfig/wifi_ovsdb_translator.c
index b2cda674d..f21266f8e 100644
--- a/source/webconfig/wifi_ovsdb_translator.c
+++ b/source/webconfig/wifi_ovsdb_translator.c
@@ -616,6 +616,8 @@ void get_translator_config_wpa_mfp(
     } else if (vap->u.bss_info.security.mode == wifi_security_mode_wpa3_transition ||
         vap->u.bss_info.security.mode == wifi_security_mode_wpa2_personal) {
         vap->u.bss_info.security.mfp = wifi_mfp_cfg_optional;
+    } else if (vap->u.bss_info.security.mode == wifi_security_mode_wpa3_compatibility) {
+        vap->u.bss_info.security.mfp = wifi_mfp_cfg_optional;
     } else {
         vap->u.bss_info.security.mfp = wifi_mfp_cfg_disabled;
     }