FortiAP

Why do you need FortiAP?

82% of wireless network attacks are not detected by standard APs. Traditional access points focus on connectivity, ignoring security. Rogue AP, evil twin attacks and wireless intrusion remain invisible.

FortiAP are Wi-Fi 6/6E/7 access points with native Security Fabric integration. Dedicated security radio provides continuous WIPS scanning without performance impact. Zero-Touch Provisioning enables deployment in minutes.

How does it work?

Security-First Wireless

Security built into AP:

• Dedicated security radio for WIPS
• Rogue AP detection and mitigation
• Evil twin attack prevention
• Wireless IDS/IPS
• Automatic containment

FortiGate Integration

Firewall as wireless controller:

• FortiGate as controller
• Unified security policies
• Application control on Wi-Fi
• User identity awareness
• Direct traffic inspection

Zero-Touch Provisioning

Simplified deployment:

• Automatic registration with FortiGate
• Configuration push
• Firmware updates
• Deployment in minutes
• FortiCloud management optionally

Key Features

Wi-Fi 6/6E/7

• OFDMA for dense environments
• MU-MIMO (8x8 in top models)
• 6 GHz band (Wi-Fi 6E/7)
• BSS Coloring
• Target Wake Time for IoT

Wireless Security

• WPA3 Enterprise
• Enhanced Open (OWE)
• WIPS with dedicated radio
• MAC-based RADIUS
• Captive portal

Management Options

• FortiGate controlled
• FortiCloud managed
• Standalone mode
• FortiManager for enterprise
• REST API automation

Analytics

• Client health monitoring
• Application visibility
• Location analytics
• Heatmaps
• Capacity planning

FortiAP Portfolio

Indoor Wi-Fi 6E/7:

• FAP-441K, FAP-443K - Enterprise premium
• FAP-231G, FAP-233G - Enterprise standard
• FAP-231F, FAP-233F - Mid-range

Indoor Wi-Fi 6:

• FAP-221E, FAP-223E - SMB
• FAP-23JF - Wall plate
• FAP-221F - Entry-level

Outdoor:

• FAP-432G, FAP-234G - Wi-Fi 6E outdoor
• FAP-432F, FAP-234F - Wi-Fi 6 outdoor
• IP67 rating, extreme temperatures

Rugged:

• FortiAP for OT/ICS
• Industrial environments
• Hazardous locations

Who is it for?

• Organizations requiring secure Wi-Fi with firewall integration
• Enterprise with dense wireless environments (Wi-Fi 6E/7)
• Industrial and outdoor environments (rugged AP)
• Companies seeking Zero-Touch Provisioning for distributed locations

Benefits

For IT: Zero-Touch Provisioning, FortiGate management, simple deployment

For security: Dedicated WIPS, rogue detection, Security Fabric integration

For business: Wi-Fi 6/6E/7 performance, TCO reduction, unified management

Specification

Standards	Wi-Fi 6, 6E, 7
Security	WPA3, WIPS, rogue detection
Management	FortiGate, FortiCloud, standalone
Form factors	Indoor, outdoor, wall plate, rugged

FAQ

Does FortiAP require a separate controller? No. FortiGate acts as controller without additional license. FortiCloud also optionally.

Which models support Wi-Fi 7? Models from 400K series. Wi-Fi 6E in 400G and 200G series.

How does dedicated security radio work? Third radio scans 24/7 without affecting client connectivity. Detects rogue AP, evil twin, wireless attacks.

What is Zero-Touch Provisioning? AP after connection automatically finds FortiGate, downloads configuration and is ready to work.

Can I manage FortiAP from the cloud? Yes. FortiCloud provides cloud management without on-premise controller.

Which models for outdoor? FAP-432G, FAP-234G (Wi-Fi 6E), FAP-432F, FAP-234F (Wi-Fi 6). IP67, -40°C to +65°C.

Does FortiAP support WPA3? Yes. WPA3-Personal, WPA3-Enterprise, Enhanced Open (OWE) in all Wi-Fi 6+ models.

How does FortiGate integration work? FortiGate sees all Wi-Fi traffic, applies firewall policies, application control, IPS. Unified management.

How many APs can one FortiGate handle? Depending on FortiGate model - from dozens to thousands of APs.

What does support look like? Fortinet 24/7 TAC. nFlo as partner offers wireless site survey and deployment.