Fortinet FortiAP 231K
FortiGate, FortiEdge Cloud, or SASE-managed — 2x2 Indoor Tri-radio 11be 6Ghz Capable APs
Overview:
FortiAP™ access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiEdge Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for campus and branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a Single-pane-of-glass management console and protects your network from the latest security threats.
FortiAP 231K are enterprise class Wi-Fi 7 indoor APs provide three radios and two spatial streams. These access points support the 6 GHz band and have one 5 Gigabit Ethernet port. The APs can provide 24/7 background scanning across all bands while still providing access on 2.4 GHz, 5 GHz, and 6 GHz bands. The integrated BLE/ ZigBee radio can be used for beacons and location applications.
Note: For FAP-231K, use of the 6GHz band is subject to regional regulatory authority approval.
- Three-Radio 2.4GHz + 5GHz + 6GHz | 4 Wi-Fi Antennas + 1 BLE/Zigbee antenna + 1 GPS antenna
- 2×2 MU-MIMO | Up to 688 Mbps + 2.88 Gbps + 5.76 Gbps data rate
| HARDWARE OFFERINGS | ANTENNA TYPE | INDOOR USE | BLE SUPPORT |
|---|---|---|---|
| 2x2 Indoor Tri-radio 11be 6Ghz Capable Desktop APs | Internal | 5.2 |
Highlights
- Unified management console simplifies operations, ensuring consistency in effective policy enforcement and compliance
- Built-in foundation for zerotrust network access (ZTNA) and secure access service edge (SASE), allowing you the flexibility to easily deploy microbranches with the security you need at the edge of your network
- Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filter protect the wireless LAN from the latest security threats
- Protects the network from advanced wireless threats and satisfies industry compliance such as PCI DSS
Campus
A single building with multiple floors, or a corporate or education campus with a group of large buildings.
- High-capacity designs including Dual 5GHz and tri-band with Wi-Fi 6E allow a maximal number of client devices to attach to the network at the same time without over-air congestion
- Complete NOC functionality with network visibility and AIOps simplify a complex network deployment into a solution manageable by IT teams of any size
Branch Office / SD-Branch
A highly distributed number of small sites, often with no on-site IT.
- Built in NAC functions* allow secure onboarding of devices at remote locations where IT doesn’t have reliable visibility
- Management orchestration with zero-touch deployment allows for quick and easy rollouts without the need for skilled installers at each site
Micro Branch
Ultra small sites that still fall under IT’s responsibility
- Can act as a SASE endpoint as a foundation for zero-trust network access (ZTNA)
- Simple management and provisioning through FortiSASE interface
Remote Workers
A remote AP installed at a worker’s home or at micro-branch office space.
- Split tunneling allows local traffic to remain local while sending other traffic to the data center for inspection when needed
- Desktop mounting options for wall-plate models allow the use of Ethernet as well as Wi-Fi connectivity while leveraging the same secure tunnel
SMB
Single site or small collection of sites with limited IT resources.
- Built-in NAC functions* bring security to the wireless network with no need to install and manage additional products
- Network and security convergence decreases management overhead while keeping the network secure
*FortiGate-managed installations only.
Specifications:
| FortiAP 231K | |
|---|---|
| Hardware | |
| Type | Indoor AP |
| Number of Radios | 3 Wi-Fi + 1 BLE |
| Number of Antennas | 6. x2 Dual band Wi-Fi + x2 6GHz band Wi-Fi + x1 BLE/ZigBee antenna + x1 GPS antenna |
| Antenna Type Support | N/A |
| Antenna Type and Peak Gain | PIFA 2.4/5GHz dual band antenna: 4.2 dBi for 2.4GHz, 5.0 dBi for 5 GHz PIFA 6GHz antenna: 5.1 dBi for 6GHz band PFA BLE antenna: 3.4 dBi for 2.4GHz |
| Frequency Bands (GHz) | 2.4GHz Band: ISM 2.4-2.484GHz 5.0GHz Band: UNII-1 5.15-5.25GHz, UNII-2A 5.25-5.35GHz, UNII-2C 5.47-5.73GHz, UNII-3 5.725-5.85GHz, UNII-4 5.85-5.895GHz 6GHz Band: UNII-5 5.925-6.425GHz, UNII-6-6.425-6.525GHz, UNII-7 6.525-6.875, UNII-8 6.875-7.125GHz |
| Radio 1 Capabilities | Frequency band: 2.4GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024 QAM MIMO Chains: 2x2 Service |
| Radio 2 Capabilities | Frequency band: : 5.0GHz UNII-1 to UNII-4 Channel width: 20/40/80/160MHz Modulation: BPSK, QPSK, 16/64/256/1024/4096 QAM MIMO Chains: 2x2 Service |
| Radio 3 Capabilities | Frequency band: 6.0GHz UNII-5 to UNII-8 Channel width: 20/40/80/160/320MHz Modulation: BPSK, QPSK, 16/64/256/1024/4096 QAM MIMO Chains: 2x2 Service |
| Maximum Data Rate | 2.4GHz band: up to 688 Mbps 5.0GHz band: up to 2.882 Gbps 6.0GHz band: up to 5.765 Gbps |
| Bluetooth Low Energy (BT/BLE) Radio | Bluetooth scanning and iBeacon advertizement @10 dBm max TX power |
| GNSS | GPS L1 C/A: 1575.42 MHz, GLONASS L1: 1598.0625–1605.375 MHz BeiDou : 1561.098 MHz, Galileo E1: 1575.42 MHz |
| Interfaces | x1 100M/1000M/2.5G/5.0G Multigigabit Ethernet (RJ45) x1 RS-232 RJ45 Serial Port |
| Power over Ethernet (PoE) | x1 802.3at PoE default |
| Simultaneous SSIDs | Up to 24 |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/Device Authentication | WPA™, WPA2™, and WPA3™ with 802.1x or Preshared key, WEP, Web Captive Portal, MAC blacklist and whitelist |
| Maximum Tx Power (Conducted) | 2.4GHz band: 26 dBm/400 mW (2 chains combined* 5.0GHz band: 23 dBm/200 mW (2 chains combined)* 6.0GHz band: 22 dBm/158 mW (2 chains combined@320MHz BW)* |
| Kensington Lock | Yes |
| IEEE Standards | 802.11a, 802.11b, 802.11be, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.11ax, 802.1X, 802.3af, 802.3at, 802.3bt, 802.3az, 802.1Q, 802.11u, 802.11w, 802.11bz |
| SSIDs Supported | Local-Bridge, Mesh, and Tunnel |
| Per Radio Client Capacity | Up to 512 clients per radio (Radio1, Radio2, and Radio3) |
| Cellular Co-existence | Yes |
| LED Off Mode | Yes |
| Advanced 802.11 Features | |
| OFDMA | Yes |
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS | No |
| Onboard Security Functions | |
| UTP Capable | In Progress |
| UTP Features | To be confirmed |
| Wireless Monitoring Capabilities | |
| Rogue Scan radio modes | Background, Dedicated |
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
| Dimensions | |
| Length x Width x Height | 6.88 x 6.88 x 2.2 inches (175 x 175 x 56 mm) |
| Weight | 2.22 lbs (1.01 kg) |
| Package (shipping) Weight | 2.85 lbs (1.29 kg) |
| Mounting Options | Ceiling, T-Rail, and Wall |
| Included Accessories | Standard Mounting Kit for Ceiling, T-Rail, and Wall |
| Environment | |
| Power Supply | 802.3bt PoE: GPI-145 or 802.3at PoE: GPI-130 or 12V, 2.5A, 30 Watt DC power supply SP-FAP200-PA-XX |
| Power Consumption (Maximum) | 15.2 W - PoE input 14.3 W - 12V DC power supply |
| PoE Mode | 1. 802.3at: Tx Power - Full, 2x2 MIMO 2. 802.3af : Tx Power- Full, 1x1 MIMO |
| Humidity | 5% - 90% non condensing |
| Operating / Storage Temperature | 32°F to 122°F (0°C to 50°C) / -22°F to 158°F (-30°C to 70°C) |
| Directives | Low Voltage Directive* RoHS |
| UL2043 Plenum Material | Yes |
| Mean Time Between Failures | > 10 Years |
| IP Rating | N/A |
| Surge Protection Built In | N/A |
| Hit-less PoE Failover | N/A |
| Certifications | |
| WiFi Alliance Certified | Certified (Wi-Fi7 in progress) |
| DFS | In Progress |
| Warranty | |
| Limited Lifetime Warranty | Yes |
Note: * Frequency selection, power, and some communication features may be restricted to abide by regional regulatory compliance laws.
Antenna Radiation Patterns
Documentation:
Download the
Fortinet FortiAP Series Datasheet
(PDF).
Pricing Notes:
- FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades - FortiCare Elite Support
FortiCare Premium Support with FortiCare Elite Ticket Handling. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.
Fortinet Products
FortiAP-231K Indoor Wireless AP - (Wi-Fi-7 IEEE Tri-band 2.4/5/6GHz 2+2+2 2 streams 3 radios), internal antennas, 100/1000/2500/5000 Base-T RJ45, BT/BLE, 1x RS-232 RJ45 Serial Port. Ceiling/wall mount kit included. For power order: 802.3at PoE injector GPI-130(1Gbps)/GPI-145(10Gbps) or AC adapter SP-FAP200-PA. Region Code A
#FAP-231K-A
FortiAP-231K FortiCare Elite Support
FortiAP-231K Forticare Essential Support for FortiAP.
Available only for renewal and not with initial Hardware purchase
FortiAP-231K 1 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-P231K-314-02-12
FortiAP-231K 3 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-P231K-314-02-36
FortiAP-231K 5 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-P231K-314-02-60
FortiAP-231K Upgrade FortiCare Premium to Elite
(Require FortiCare Premium)
FortiAP-231K 1 Year Upgrade FortiCare Premium to Elite (Require FortiCare Premium)
#FC-10-P231K-204-02-12
FortiAP-231K 3 Year Upgrade FortiCare Premium to Elite (Require FortiCare Premium)
#FC-10-P231K-204-02-36
FortiAP-231K 5 Year Upgrade FortiCare Premium to Elite (Require FortiCare Premium)
#FC-10-P231K-204-02-60