Wireless Product Matrix

June 2019

Integrated - FortiGate-Managed
Security
Our Integrated offering leverages the wireless controller
built into our FortiOS operating system. It features a fam-
ily of controller-managed access points which function
FortiGate
in cooperation with a FortiGate, our industry leading NGFW/UTM

enterprise firewall. In addition to consolidating all the

functions of a network firewall, IPS, anti-malware, VPN,
Wired + Wireless LAN
WAN optimization, Web filtering, and application control Controller

FortiSwitch
in a single platform, FortiGate also has an integrated Access POE
Points Access Data
Wi-Fi controller. Wi-Fi is either integrated directly into the Points
Control

FortiGate (FortiWiFi) or connected as an access point Management

(FortiAP) directly to a FortiGate to provide comprehensive

wireless coverage.

Cloud-Managed
Our cloud managed WLAN option contains capabili-
ties unlike any other cloud Wi-Fi offering in the industry.
This includes the FortiAP-S series which combines the
elements of UTM protection at the network edge with
the simplicity and convenience of cloud management Security
Security
FortiSwitch

through our FortiCloud service. FortiCloud management Access

Points
POE
Access
Points
capabilities also extend beyond the management of Wi- Data

Fi, to FortiGate and more. Control

Management

Controller-Managed
Our Infrastructure wireless offering, formerly Meru Wireless LAN
Manager
Security
Networks, combines on-premises controller-based
management, open application appliances, and a range Wireless

of high-performance indoor and outdoor access points. Wireless LAN

Controller
FortiGate
NGFW/UTM
This is the ideal solution for large scale complex RF SC/MC ATC/ATF

environment, or when an organization needs to separate

the access infrastructure from the underlying network’s
security infrastructure. With network controlled roaming, FortiSwitch
Access POE
users benefit from the best possible mobility experi- Points Access
Points
Data

Control
ence. The Infrastructure solution offers multiple channel
Management
configuration options and layering to simplify deployment
while increasing performance, traffic segmentation, and
capacity. This solution scales for implementation in small,
medium, and large enterprises of all types.
FortiAP™ Integrated Indoor or Cloud Managed Indoor (802.11ac Wave 2) Access Points
FAP-221E FAP-223E FAP-421E FAP-423E

Medium density 802.11ac Medium density 802.11ac High density, high perfor- High density, high perfor-
Suggested Use Case
indoor indoor mance 802.11ac indoor mance 802.11ac indoor
Hardware
Number of Radios 2 2 2 2

Number of Antennas 4 Internal 4 External (RP-SMA) 8 Internal 8 External (RP-SMA)

Patch: 4 dBi for 2.4 GHz, Dipole: 4 dBi for 2.4 GHz, PIFA: 4 dBi for 2.4 GHz, Dipole: 3 dBi for 2.4 GHz,
Antenna Type and Peak Gain
5 dBi for 5 GHz 5 dBi for 5 GHz 5 dBi for 5 GHz 3 dBi for 5 GHz
2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (4x4:4) 2.4 GHz b/g/n (4x4:4)
Radio 1 Capabilities
20/40 MHz (256 QAM) 20/40 MHz (256 QAM) 20/40 MHz (256 QAM) 20/40 MHz (256 QAM)

5 GHz a/n/ac (2x2:2) 5 GHz a/n/ac (2x2:2) 5 GHz a/n/ac (4x4:4) 5 GHz a/n/ac (4x4:4)
Radio 2 Capabilities
20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM)

Radio 1: up to 400 Mbps Radio 1: up to 400 Mbps Radio 1: up to 800 Mbps Radio 1: up to 800 Mbps
Maximum Data Rate
Radio 2: up to 867 Mbps Radio 2: up to 867 Mbps Radio 2: up to 1,733 Mbps Radio 2: up to 1,733 Mbps
Bluetooth (BT/BLE)

2x GE RJ45, 2x GE RJ45,
Interfaces 1x GE RJ45 1x GE RJ45 1x Type A USB, 1x Type A USB,
1x RS-232 RJ45 Serial Port 1x RS-232 RJ45 Serial Port

Dual redundant PoE power Dual redundant PoE power

Power over Ethernet (PoE) IEEE 802.3af IEEE 802.3af ports, IEEE 802.3at or 2x2 ports, IEEE 802.3at or 2x2
operation with 802.3af) operation with 802.3af)
23 W max power draw in 23 W max power draw in
802.3at mode, 12.95 W 802.3at mode, 12.95 W
Power Consumption (Max.) 12.36 W 12.36 W
max power draw when in max power draw when in
802.3af power mode 802.3af power mode
Simultaneous SSIDs 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor)
2.4 GHz: 23 dBm / 200 mW 2.4 GHz: 23 dBm / 200 mW 2.4 GHz: 24 dBm / 251 mW 2.4 GHz: 24 dBm / 251 mW
(2 chains combined)** (2 chains combined)** (4 chains combined)* (4 chains combined)*
Maximum Tx Power
5 GHz: 24 dBm / 251 mW 5 GHz: 24 dBm / 251 mW 5 GHz: 25 dBm / 316 mW 5 GHz: 25 dBm / 316 mW
(2 chains combined)** (2 chains combined)** (4 chains combined)* (4 chains combined)*
Kensington Lock • • • •

SSID Types Supported Local-Bridge, Tunnel, Mesh Local-Bridge, Tunnel, Mesh Local-Bridge, Tunnel, Mesh Local-Bridge, Tunnel, Mesh

Per Radio Client Capacity Up to 512 Up to 512 Up to 512 Up to 512

UL2043 Plenum Material • • • •
Mounting Options Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall
Cellular Coexistence** • •
LED Off Mode • • • •
Advanced 802.11 Features
802.11ac Wave 2 MU-MIMO • • • •
Transmit Beam Forming (TxBF) • • • •
Low-Density Parity Check
• • • •
(LDPC) Encoding
Max Likelihood Demodulation
• • • •
(MLD)
Max Ratio Combining (MRC) • • • •
802.11ac 20/40/80 MHz
• • • •
Channel
A-MPDU and A-MSDU Packet
• • • •
Aggregation
MIMO Power Save • • • •
Short Guard Interval • • • •
Wireless Monitoring Capabilities
Rogue Scan Radio Modes Background, Full-time Background, Full-time Background, Full-time Background, Full-time
WIPS / WIDS Radio Modes Background, Full-time Background, Full-time Background, Full-time Background, Full-time
Packet Sniffer Mode • • • •
Spectrum Analyzer • • • •
Certifications
Wi-Fi Alliance Certified • • • •
FCC, IC, CE, Japan, Taiwan, FCC, IC, CE, Japan, Taiwan,
DFS Certified FCC, IC, CE, Japan, Taiwan FCC, IC, CE, Japan, Taiwan
Korea Korea
FortiAP™ Integrated or Cloud Managed Indoor, Outdoor and Wall Plate Access Points
FAP-320C FAP-321C FAP-222C FAP-222E FAP-224E FAP-C24JE

High density, high perfor- Medium density 802.11ac IP67 High density 802.11ac IP67 High density 802.11ac IP67 High density 802.11ac Indoor Wall Plate AP for hotel
Suggested Use Case
mance 802.11ac indoor indoor outdoor (wave2) outdoor (wave2) outdoor and dorm rooms
Hardware
Number of Radios 2 2 2 2 + 1 BT/BLE 2 + 1 BT/BLE 2
4 External (Type N) + 4 Internal +
Number of Antennas 6 Internal 6 Internal 4 External (Type N) 4 Internal
1 BT/BLE External (RP-SMA) 1 BT/BLE Internal
PIFA: 5 dBi for 2.4 GHz, PIFA: 4 dBi for 2.4 GHz, Dipole: 3.5 dBi for 2.4 GHz, Dipole: 5 dBi for 2.4 GHz, 7 Dipole: 6 dBi for 2.4 GHz, Chip: 1.5 dBi for 2.4 GHz, 2
Antenna Type and Peak Gain
6 dBi for 5 GHz 5 dBi for 5 GHz 6 dBi for 5 GHz dBi for 5 GHz 8 dBi for 5 GHz dBi for 5 GHz
2.4 GHz b/g/n (3x3:3) 2.4 GHz b/g/n (3x3:3) 2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (2x2:2)
Radio 1 Capabilities
20/40 MHz (64 QAM) 20/40 MHz (64 QAM) 20/40 MHz (64 QAM) 20/40 MHz (256 QAM) 20/40 MHz (256 QAM) 20/40 MHz (64 QAM)

5 GHz a/n/ac (3x3:3) 5 GHz a/n/ac (3x3:3) 5 GHz a/n/ac (2x2:2) 5 GHz a/n/ac (2x2:2) 5 GHz a/n/ac (2x2:2) 5 GHz a/n/ac (2x2:2)
Radio 2 Capabilities
20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM)

Radio 1: Up to 450 Mbps, Radio 1: up to 450 Mbps Radio 1: Up to 300 Mbps, Radio 1: up to 400 Mbps, Radio 1: up to 400 Mbps Radio 1: up to 300 Mbps,
Maximum Data Rate
Radio 2: Up to 1300 Mbps Radio 2: up to 1,300 Mbps Radio 2: Up to 867 Mbps Radio 2: up to 867 Mbps Radio 2: up to 867 Mbps Radio 2: up to 867 Mbps
Bluetooth (BT/BLE) • •
2 + 6x GE RJ45 Ports
2x GE RJ45, 1x GE RJ45, (1x 802.3at PoE (PD), 1x
Interfaces 1x Type A USB, 1x GE RJ45 1x GE RJ45 1x GE RJ45 1x GE RJ45 (PoE), 802.3af PoE (PSE), 1x pass-
1x RJ45 Serial Port 1x SFP slot thru in, 1x pass-thru out), 1x
RS-232 RJ45 Serial Port
802.3af (max PSE output of
Dual redundant PoE power IEEE 802.3at or proprietary
Power over Ethernet (PoE) IEEE 802.3af IEEE 802.3af/at IEEE 802.3af/at 4W) or 802.3at (full 802.3af
ports, EEE 802.3af PoE injector
PSE output)

Power Consumption (Max.) 12.08 W 12.6 W 18.4 W 12.95 W 12.95 W Depends on PoE connected

Simultaneous SSIDs 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor) 4
2.4 GHz: 23.7 dBm / 234 2.4 GHz: 24 dBm / 251 mW 2.4 GHz: 30 dBm / 1 W (2 2.4 GHz: 27.2 dBm / 525 2.4 GHz: 24 dBm / 251 mW
mW (3 chains combined)* (3 chains combined)* chains combined)* mW (2 chains combined)* (2 chains combined)* 23 dBm / 100mW
Maximum Tx Power
5 GHz: 24.7 dBm / 295 mW 5 GHz: 25 dBm / 316 mW 5 GHz: 27 dBm / 501 mW 5 GHz: 29.5 dBm / 891 mW 5 GHz: 24 dBm / 251 mW (2 chains combined)*
(3 chains combined)* (3 chains combined)* (2 chains combined)* (2 chains combined)* (2 chains combined)*
Kensington Lock • •
Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh
SSID Types Supported Local-Bridge, Tunnel, Mesh Local-Bridge, Tunnel, Mesh Local-Bridge, Tunnel, Mesh Local-Bridge, Tunnel
(when managed by controller) (when managed by controller)
Per Radio Client Capacity Up to 128 Up to 128 Up to 128 Up to 512 Up to 512 Up to 64
UL2043 Plenum Material •
Mounting Options Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall Wall Mount or Pole Mount Wall Mount or Pole Mount Wall Mount or Pole Mount Wall Plate
Cellular Coexistence** •
LED Off Mode • • • • • •
Advanced 802.11 Features
802.11ac Wave 2 MU-MIMO • • •
Transmit Beam Forming (TxBF) • • •
Low-Density Parity Check
• • • • • •
(LDPC) Encoding
Maxi Likelihood Demodulation
• • • • • •
(MLD)
Maxi Ratio Combining (MRC) • • • • • •
802.11ac 20/40/80 MHz
• • • • • •
Channel
A-MPDU and A-MSDU Packet
• • • • • •
Aggregation
MIMO Power Save • • • • • •
Short Guard Interval • • • • • •
Wireless Monitoring Capabilities
Rogue Scan Radio Modes Background, Full-time Background, Full-time Background, Full-time Background, Full-time Background, Full-time Background, Full-time
WIPS / WIDS Radio Modes Background, Full-time Background, Full-time Background, Full-time Background, Full-time Background, Full-time Background, Full-time
Packet Sniffer Mode • • • • •
Spectrum Analyzer • • • • •
Certifications
Wi-Fi Alliance Certified • • • • •

DFS Certified CE, Japan CE, Japan CE, Japan, Korea FCC, IC, CE In Process In Process
FortiAP-S Integrated or Cloud Managed Smart (802.11ac Wave 2) Access Points
FAP-S221E FAP-S223E FAP-S421E

High density, high perfor- High density, high perfor- High density, high perfor-
Suggested Use Case
mance 802.11ac indoor mance 802.11ac indoor mance 802.11ac indoor
Hardware
Number of Radios 2 + 1 BT/BLE 2 + 1 BT/BLE 2
4 Internal + 1 BT/BLE 4 External (RP-SMA) +
Number of Antennas 8 Internal
internal 1 BT/BLE internal
PIFA: 3 dBi for 2.4 GHz, Dipole: 4 dBi for 2.4 GHz, PIFA: 4 dBi for 2.4 GHz,
Antenna Type and Peak Gain
5 dBi for 5 GHz 5 dBi for 5 GHz 5 dBi for 5 GHz
2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (4x4:4)
Radio 1 Capabilities
20/40 MHz (64 QAM) 20/40 MHz (64 QAM) 20/40 MHz (64 QAM)

5 GHz a/n/ac (2x2:2) 5 GHz a/n/ac (2x2:2) 5 GHz a/n/ac (4x4:4)

Radio 2 Capabilities
20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM)

Radio 1: up to 300 Mbps Radio 1: up to 300 Mbps Radio 1: up to 600 Mbps

Maximum Data Rate
Radio 2: up to 867 Mbps Radio 2: up to 867 Mbps Radio 2: up to 1,733 Mbps
Bluetooth (BT/BLE) • •

2x GE RJ45, 2x GE RJ45, 2x GE RJ45,

Interfaces 1x Type A USB, 1x Type A USB, 1x Type A USB,
1x RS-232 RJ45 Serial Port 1x RS-232 RJ45 Serial Port 1x RS-232 RJ45 Serial Port

Dual redundant PoE power Dual redundant PoE power Dual redundant PoE power
Power over Ethernet (PoE) ports with support for IEEE ports with support for IEEE ports with support for IEEE
802.3af & 802.3at 802.3af & 802.3at 802.3af & 802.3at

Power Consumption (Max.) 24 W 24 W 24 W

Simultaneous SSIDs 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor)
2.4 GHz: 23 dBm / 200 mW 2.4 GHz: 23 dBm / 200 mW 2.4 GHz: 28 dBm / 631 mW
(2 chains combined)* (2 chains combined)* (4 chains combined)*
Maximum Tx Power
5 GHz: 22 dBm / 158 mW 5 GHz: 22 dBm / 158 mW 5 GHz: 26 dBm / 398 mW
(2 chains combined)* (2 chains combined)* (4 chains combined)*
Kensington Lock • • •
Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh
SSID Types Supported
(when managed by controller) (when managed by controller) (when managed by controller)
Per Radio Client Capacity Up to 512 Up to 512 Up to 512
UL2043 Plenum Material •
Mounting Options Ceiling, T-Rail, and Wall Ceiling, T-Rail, and Wall Ceiling, T-Rail, and Wall
Cellular Coexistence** • • •
LED Off Mode • • •
Advanced 802.11 Features
802.11ac Wave 2 MU-MIMO • • •
Transmit Beam Forming (TxBF) • • •
Low-Density Parity Check
• • •
(LDPC) Encoding
Max Likelihood Demodulation
• • •
(MLD)
Max Ratio Combining (MRC) • • •
802.11ac 20/40/80 MHz
• • •
Channel
A-MPDU and A-MSDU Packet
• • •
Aggregation
MIMO Power Save • • •
Short Guard Interval • • •
Wireless Monitoring Capabilities
Rogue Scan Radio Modes Background, Full-time Background, Full-time Background, Full-time
WIPS / WIDS Radio Modes Background, Full-time Background, Full-time Background, Full-time
Packet Sniffer Mode • • •
Spectrum Analyzer • • •
Certifications
Wi-Fi Alliance Certified • • •
FCC, IC, CE, Japan, Taiwan,
DFS Certified FCC, IC, CE, Japan FCC, IC, CE, Japan
Korea
FortiAP-U Universally Manageable Indoor Access Points
FAP-U221EV FAP-U223EV FAP-U321EV FAP-U323EV FAP-U421EV FAP-U423EV

Medium Density, 802.11ac Medium Density, 802.11ac High density, high perfor- High density, high perfor- High density, high perfor- High density, high perfor-
Suggested Use Case
indoor indoor mance 802.11ac W2 indoor mance 802.11ac W2 indoor mance 802.11ac W2 indoor mance 802.11ac W2 indoor
Hardware
Number of Radios 2 + 1 BT/BLE 2 + 1 BT/BLE 2 + 1 BT/BLE 2 + 1 BT/BLE 2 + 1 BT/BLE 2 + 1 BT/BLE
4 Internal + 1 BT/BLE 4 External (RP-SMA) + 6 Internal + 1 BT/BLE 6 External (RP-SMA) + 8 Internal + 1 BT/BLE 8 External (RP-SMA) +
Number of Antennas
Internal 1 BT/BLE Internal Internal 1 BT/BLE Internal Internal 1 BT/BLE Internal
Patch: 3 dBi for 2.4 GHz, 4 Dipole: 3 dBi for 2.4 GHz, 4 Patch: 4.5 dBi for 2.4 GHz, Dipole: 3.5 dBi for 2.4 GHz, Patch: 4 dBi for 2.4 GHz, 5 Dipole: 3 dBi for 2.4 GHz, 3
Antenna Type and Peak Gain
dBi for 5 GHz dBi for 5 GHz 6.5 dBi for 5 GHz 5 dBi for 5 GHz dBi for 5 GHz dBi for 5 GHz
2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (2x2:2) 2.4 GHz b/g/n (3x3:3) 2.4 GHz b/g/n (3x3:3) 2.4 GHz b/g/n (4x4:4) 2.4 GHz b/g/n (4x4:4)
Radio 1 Capabilities
20/40 MHz (64 QAM) 20/40 MHz (64 QAM) 20/40 MHz (64 QAM) 20/40 MHz (64 QAM) 20/40 MHz (64 QAM) 20/40 MHz (64 QAM)
5 GHz a/n/ac (3x3:3) 5 GHz a/n/ac (3x3:3) 5 GHz a/n/ac (4x4:4) 5 GHz a/n/ac (4x4:4)
5 GHz a/n/ac (2x2:2) 5 GHz a/n/ac (2x2:2)
Radio 2 Capabilities 20/40/80 MHz 20/40/80 MHz 20/40/80/160 MHz 20/40/80/160 MHz
20/40/80 MHz (256 QAM) 20/40/80 MHz (256 QAM)
(256/1024 QAM) (256/1024 QAM) (256/1024 QAM) (256/1024 QAM)
Radio 1: up to 300 Mbps Radio 1: up to 300 Mbps Radio 1: up to 450 Mbps Radio 1: up to 450 Mbps Radio 1: up to 600 Mbps Radio 1: up to 600 Mbps
Maximum Data Rate
Radio 2: up to 867 Mbps Radio 2: up to 867 Mbps Radio 2: up to 2,600 Mbps Radio 2: up to 2,600 Mbps Radio 2: up to 3,466 Mbps Radio 2: up to 3,466 Mbps
Bluetooth (BT/BLE) • • • • • •

2x GE RJ45, 2x GE RJ45, 2x GE RJ45, 2x GE RJ45,

1x GE RJ45, 1x GE RJ45,
Interfaces 1x Type A USB, 1x Type A USB, 1x Type A USB, 1x Type A USB,
1x Type A USB 1x Type A USB
1x RS-232 RJ45 Serial Port 1x RS-232 RJ45 Serial Port 1x RS-232 RJ45 Serial Port 1x RS-232 RJ45 Serial Port

Dual redundant PoE power Dual redundant PoE power Dual redundant PoE power Dual redundant PoE power
Power over Ethernet (PoE) IEEE 802.3af or 802.3.at IEEE 802.3af or 802.3.at ports with support for IEEE ports with support for IEEE ports with support for IEEE ports with support for IEEE
802.3af & 802.3at 802.3af & 802.3at 802.3af & 802.3at 802.3af & 802.3at
15 W when supplied by 15 W when supplied by 24.5 W when supplied by 24.5 W when supplied by
802.3at power and 802.3at power and 802.3at power and 802.3at power and
Power Consumption (Max.) 12.5 W 12.5 W
12.8 W when in 802.3af 12.8 W when in 802.3af 12.5 W when in 802.3af 12.5 W when in 802.3af
power mode power mode power mode power mode
Simultaneous SSIDs 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor) 16 (14 client,2 monitor)
2.4 GHz: 25 dBm / 316 mW 2.4 GHz: 25 dBm / 316 mW 2.4 GHz: 26.7 dBm / 468 2.4 GHz: 26.7 dBm / 468 2.4 GHz: 28 dBm / 631 mW 2.4 GHz: 28 dBm / 631 mW
(2 chains combined)* (2 chains combined)* mW (3 chains combined)* mW (3 chains combined)* (4 chains combined)* (4 chains combined)*
Maximum Tx Power
5 GHz: 23 dBm/ 200 mW 5 GHz: 23 dBm/ 200 mW 5 GHz: 24.7 dBm / 295 mW 5 GHz: 24.7 dBm / 295 mW 5 GHz: 26 dBm / 398mW 5 GHz: 26 dBm / 398mW
(2 chains combined)* (2 chains combined)* (3 chains combined)* (3 chains combined)* (4 chains combined)* (4 chains combined)*
Kensington Lock • • • • • •

SSID Types Supported Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh

Per Radio Client Capacity Up to 128 Up to 128 Up to 256 Up to 256 Up to 256 Up to 256
UL2043 Plenum Material • •
Mounting Options Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall Ceiling, T-Rail and Wall
Cellular Coexistence** • • • • • •
LED Off Mode • • • • • •
Advanced 802.11 Features
802.11ac Wave 2 MU-MIMO • • • •
Transmit Beam Forming (TxBF) • • • • • •
Low-Density Parity Check
• • • • • •
(LDPC) Encoding
Max Likelihood Demodulation
• • • • • •
(MLD)
Max Ratio Combining (MRC) • • • • • •
802.11ac 20/40/80 MHz
• • • • • •
Channel
A-MPDU and A-MSDU Packet
• • • • • •
Aggregation
MIMO Power Save • • • • • •
Short Guard Interval • • • • • •
Wireless Monitoring Capabilities
Rogue Scan Radio Modes Background, Full-time Background, Full-time Background, Full-time Background, Full-time Background, Full-time Background, Full-time
WIPS / WIDS Radio Modes Background, Full-time Background, Full-time Background, Full-time Background, Full-time Background, Full-time Background, Full-time
Packet Sniffer Mode • • • • • •
Spectrum Analyzer • • • • • •
Certifications
Wi-Fi Alliance Certified • • • • • •
FCC, CE, IC, Japan, Taiwan, FCC, CE, IC, Japan, Taiwan,
DFS Certified FCC, CE, Japan FCC, CE, Japan FCC, CE, IC, Japan FCC, CE, IC, Japan
korea korea
FortiAP-U Universally Manageable Wi-Fi 6 (802.11ax) Access Points
FAP-U431F FAP-U433F

Suggested Use Case High performance 802.11ax indoor High performance 802.11ax indoor

Hardware
Number of Radios 3 + 1 BT/BLE 3 + 1 BT/BLE
Number of Antennas 10 Internal + 1 BT/BLE Internal 10 External (RP-SMA) + 1 BT/BLE Internal
Antenna Type and Peak Gain PIFA: 4 dBi for 2.4 GHz, 5 dBi for 5 GHz Dipole: 4 dBi for 2.4 GHz, 5 dBi for 5 GHz
5.0 GHz a/n/ac/ax (4x4:4) 5.0 GHz a/n/ac/ax (4x4:4)
Radio 1 Capabilities 20/40/80/160 MHz 20/40/80/160 MHz
(64, 1024 QAM) (64, 1024 QAM)
2.4/5.0 GHz a/b/g/n/ac/ax (4x4:4) 2.4/5.0 GHz a/b/g/n/ac/ax (4x4:4)
Radio 2 Capabilities 20/40/80/160 MHz 20/40/80/160 MHz
(64, 1024 QAM) (64, 1024 QAM)
2.4/5.0 GHz b/g/n/ac (2x2:2) 2.4/5.0 GHz b/g/n/ac (2x2:2)
Radio 3 Capabilities 20/40 MHz 20/40 MHz
(64 QAM) (64 QAM)
Radio 1: up to 4,804 Mbps Radio 1: up to 4,804 Mbps
Maximum Data Rate Radio 2: up to 4,804 Mbps Radio 2: up to 4,804 Mbps
Radio 3: up to 300 Mbps Radio 3: up to 300 Mbps
Bluetooth (BT/BLE) • •

1x 2.5GE RJ45, 1x GE RJ45, 1x 2.5GE RJ45, 1x GE RJ45,

Interfaces
1x Type A USB, 1x RS-232 RJ45 Serial Port 1x Type A USB, 1x RS-232 RJ45 Serial Port

Dual redundant PoE power ports with support for IEEE Dual redundant PoE power ports with support for IEEE
Power over Ethernet (PoE)
802.3af & 802.3at 802.3af & 802.3at

Power Consumption (Max.) 24.5 W 24.5 W

Simultaneous SSIDs 16 (14 client,2 monitor) 16 (14 client,2 monitor)

Radio 1: 5 GHz: 24 dBm / 251 mW (4 chains combined)* Radio 1: 5 GHz: 24 dBm / 251 mW (4 chains combined)*
Radio 2: 2.4 GHz: 26 dBm / 398 mW (4 chains combined)* Radio 2: 2.4 GHz: 26 dBm / 398 mW (4 chains combined)*
Maximum Tx Power
5 GHz: 24 dBm / 251 mW (4 chains combined)* 5 GHz: 24 dBm / 251 mW (4 chains combined)*
Radio 3: 2.4 GHz: 22 dBm / 158 mW (2 chains combined)* Radio 3: 2.4 GHz: 22 dBm / 158 mW (2 chains combined)*
Kensington Lock • •
SSID Types Supported Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel & Mesh
Per Radio Client Capacity Up to 512 Up to 512
UL2043 Plenum Material • •
Mounting Options Wall Mount or Pole Mount Wall plate or desk stand
Cellular Coexistence** • •
LED Off Mode • •
Advanced 802.11 Features
802.11ac Wave 2 MU-MIMO • •
Transmit Beam Forming (TxBF) • •
Low-Density Parity Check
• •
(LDPC) Encoding
Max Likelihood Demodulation
• •
(MLD)
Max Ratio Combining (MRC) • •
802.11ac 20/40/80 MHz
• •
Channel
A-MPDU and A-MSDU Packet
• •
Aggregation
MIMO Power Save • •
Short Guard Interval • •
Wireless Monitoring Capabilities
Rogue Scan Radio Modes Background, Full-time Background, Full-time
WIPS / WIDS Radio Modes Background, Full-time Background, Full-time
Packet Sniffer Mode • •
Spectrum Analyzer • •
Certifications
Wi-Fi Alliance Certified
DFS Certified
FortiAP-U Universally Manageable Outdoor and Wall Plate Access Points
FAP-U422EV FAPU24JEV

High performance 802.11ac Low cost, compact

Suggested Use Case
W2 outdoor 802.11ac wallplug/wall plate
Hardware
Number of Radios 2 + 1 BT/BLE 1 or 2 + 1 BT/BLE
8 External (Type N) + 2 Internal + 1 BT/BLE
Number of Antennas
1 BT/BLE Internal Internal
Dipole: 5 dBi for 2.4 GHz, Patch: 3 dBi for 2.4 GHz, 4
Antenna Type and Peak Gain
7 dBi for 5 GHz dBi for 5 GHz
2.4 GHz b/g/n (4x4:4) 2.4 GHz b/g/n (2x2:2)
Radio 1 Capabilities
20/40 MHz (64 QAM) 20/40 MHz (64 QAM) or
5 GHz a/n/ac (2x2:2)
20/40/80 MHz (256 QAM)
5 GHz a/n/ac (4x4:4) or 2.4 GHz b/g/n (1x1:1)
Radio 2 Capabilities 20/40/80/160 MHz 20/40 MHz (64 QAM) &
(256/1024 QAM) 5 GHz a/n/ac (1x1:1)
20/40/80 MHz (256 QAM)
Radio 1: up to 600 Mbps
Maximum Data Rate up to 867 Mbps
Radio 2: up to 3,466 Mbps
Bluetooth (BT/BLE) • •
2 + 4x GE RJ45 Ports
2x GE RJ45, (1x 802.3at PoE (PD), 1x
Interfaces
1x RS-232 RJ45 Serial Port 802.3af PoE (PSE), 1x pass-
thru in, 1x pass-thru out)
802.3af (max PSE output of
Power over Ethernet (PoE) Proprietary or 802.3at 4W) or 802.3at
(full 802.3af PSE output)
24W (Depends on PoE
Power Consumption (Max.) 22 W connected and USB power
consumed)
Simultaneous SSIDs 16 (14 client,2 monitor) 16 (14 client,2 monitor)
2.4 GHz: 24 dBm / 251 mW 2.4 GHz: 23 dBm / 200 mW
(4 chains combined)* (2 chains combined)*
Maximum Tx Power
5 GHz: 24 dBm / 251 mW 5 GHz: 21 dBm / 126 mW
(4 chains combined)* (2 chains combined)*
Kensington Lock
SSID Types Supported Local-Bridge, Tunnel & Mesh Local-Bridge, Tunnel
Per Radio Client Capacity Up to 256 Up to 128
UL2043 Plenum Material
Mounting Options Wall Mount or Pole Mount Wall plate or desk stand
Cellular Coexistence** • •
LED Off Mode • •
Advanced 802.11 Features
802.11ac Wave 2 MU-MIMO •
Transmit Beam Forming (TxBF) • •
Low-Density Parity Check
• •
(LDPC) Encoding
Max Likelihood Demodulation
• •
(MLD)
Max Ratio Combining (MRC) • •
802.11ac 20/40/80 MHz
• •
Channel
A-MPDU and A-MSDU Packet
• •
Aggregation
MIMO Power Save • •
Short Guard Interval • •
Wireless Monitoring Capabilities
Rogue Scan Radio Modes Background, Full-time Background, Full-time
WIPS / WIDS Radio Modes Background, Full-time Background, Full-time
Packet Sniffer Mode • •
Spectrum Analyzer • •
Certifications
Wi-Fi Alliance Certified • •
DFS Certified FCC, IC, CE, Japan CE, Japan
FortiWiFi™ Firewall and WiFi Gateway
FWF-30E FWF-50E FWF-50E-2R FWF-60D FWF-60E FWF-90D

Indoor Motels, Clinics, Small

Suggested Deployment Home/small office Home/small office Distributed office Distributed office Distributed office
Enterprise, Retail
Hardware
Form Factor Desktop, wall mountable Desktop, wall mountable Desktop, wall mountable Desktop, wall mountable Desktop, wall mountable Desktop, wall mountable

Dimension 1.61 x 8.27 x 5.24 in 1.44 x 5.5 x 8.52 1.44 x 5.5 x 8.52 1.50 x 8.50 x 5.83 in 1.5 x 8.5 x 6.3 in 1.72 x 8.5 x 8.78 in

Kensington Lock •
1 x GE RJ45 WAN, 2 x GE RJ45 WAN, 2 x GE RJ45 WAN, 3 x GE RJ45 WAN/DMZ, 3 x GE RJ45 WAN/DMZ, 2 x GE RJ45 WAN ports,
Ethernet Interfaces
4 x GE RJ45 Switch ports 5 x GE RJ45 Switch ports 5 x GE RJ45 Switch ports 7 x GE RJ45 Switch ports 7 x GE RJ45 Switch ports 14 x GE RJ45 Switch ports
Mesh Root • • •

Other WiFi Variants — + Storage (FWF-51E) — POE (PSE) — POE (PSE)

Wireless
IEEE Standard 802.11 a/b/g/n 802.11 a/b/g/n 802.11 a/b/g/n/ac 802.11 a/b/g/n 802.11 a/b/g/n/ac 802.11a/b/g/n
Number of Radios 1 1 2 1 1 1
Radio 1 Band (association rate) 2.4GHz / 5GHz (300Mbps) 2.4GHz / 5GHz (300Mbps) 2.4GHz (300Mbps) 2.4GHz / 5GHz (300Mbps) 2.4GHz / 5GHz (300Mbps) 2.4GHz / 5GHz (300Mbps)
Radio 2 Band (association rate) — — 5GHz (867 Mbps) — — —
MIMO 2x2 2x2 2x2 2x2 2x2 2x2
Max / recommended number of
128 / 30 128 / 30 128 / 30 128 / 30 128 / 30 128 / 30
concurrent clients
Antenna Type and Count 2 F-type antennas (RP-SMA) 2 F-type antennas (RP-SMA) 2 F-type antennas (RP-SMA) 2 di-pole antennas (RP-SMA) 2 di-pole antennas (RP-SMA) 2 di-pole antennas (RP-SMA)
Antenna Gain 3 dBi/(3dBi-5GHz) 3 dBi/(3dBi-5GHz) 3 dBi/(6dBi-5GHz) 3 dBi/(6dBi-5GHz) 3 dBi/(6dBi-5GHz) up to 5dB
2.4G:20.5 dBM,
Max TX Power 17dBm 17dBm 17dBm 17dBm 17dBm
5G:16.5dBm
Number of SSIDs 8 (7 client, 1 monitor) 8 (7 client, 1 monitor) 8 (7 client, 1 monitor) 8 (7 client, 1 monitor) 8 (7 client, 1 monitor) 8 (7 client, 1 monitor)
Traffic Queues 4 queues 4 queues 4 queues 4 queues 4 queues 4 queues
802.11n 20/40Mhz HT • • • • • •
Short Guard • • • • • •
802.11ac 80 MHz channel
MAC Service Data Unit (MSDU)
aggregation and MAC Protocol
• • • • • •
Data Unit (MPDU) frame ag-
gregation
Cyclic-delay diversity (CDD) • • • • • •
Power Save (WME-PS) • • • • • •
802.11n Max ratio combining
• • • • • •
(MRC)
Transmit Beam Forming (TxBF) • • • • • •
Low Density Parity Check
• • • • • •
encoding (LDPC)
802.11n Maximum Likelihood
• • • • • •
Detection (MLD)
Rogue AP scanning
Dual Band Scanning • • • • • •
Background Scan • • • • • •
Full-time dedicated monitor • • • • • •
Single Radio Dual band
• • • • • •
scanning
Management
WebUI & CLI • • • • • •
Max managed APs 2 10 10 10 20 32
Cloud deployment support • • • • • •
Certifications
Wi-Fi Alliance Certified
DFS Certified Region: J Region: J

* Certification covers following specifications: - 802.11a/b/g/n, Short Guard Interval, TX A-MPDU, STBC, 40 MHz operation in 5 GHzWPA™ Personal, WPA™ Enterprise /Personal, WPA2™ , Enterprise / Personal, WMM™, EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/
EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST, 802.11 d/h, WMM Power Save..

** Additional filtration added to reduce interference in 2.4GHz band from nearby cellular equipment.
FortiGate/FortiWiFi® Wireless Controller (with FortiOS 6.0)
FortiGate/FortiWiFi
FortiGate/FortiWiFi FortiGate 300D, 400D &
70D, 80D, 90D, 90E, 92D FortiGate 100D Series FortiGate 200D Series
30D/E, 50E & 60D/E Series 500D
Series
Hardware
Product Range / Form Factor Entry / Desktop Entry / Desktop-2 RU Mid Range / 1 RU Mid Range / 1-2 RU Mid Range / 1 RU
GE Interfaces 5-10 4 - 78 8 - 40 18 - 88 10 - 18
8 (FG-200D-POE)
2/- 4/- 16 (FG-140D-POE)
GE PoE/PoE+ Interfaces 24 (FG-240D-POE) -
(FG-60D-POE) (FG-90D/70D-POE)
32 (FG-280D-POE)
10 GE Interfaces - - - - -
40 GE Interfaces - - - - -
Capacity
Maximum Supported APs
2-5 16 32 64 256
(Tunnel Mode)
Maximum Supported APs (Total) 2 - 20 32 64 128 512
Max number of SSIDs 32 32 256 256 256
Max CAPWAP throughput 250 Mbps - 1.9 Gbps 260 Mbps - 2.2 Gbps 1.2 Gbps 1.8 Gbps 5.4 - 10 Gbps
Max Concurrent Sessions 500 K - 1.8 Mil 1.5 - 2 Mil 3 Mil 3.2 Mil 5.5 - 6 Mil
FortiGate 600C, 600D, FortiGate 1000,2000 & FG-5000 FG-VM
800C, 800D & 900D 3000 Series Series Series
Hardware

Product Range / Form Factor Mid Range / 1 RU High End / 2-3 RU High End / 3-13 RU -

GE Interfaces 16-34 18 - 34 2 - 28 Refer to Data Sheet

GE PoE/PoE+ Interfaces - - - -
10 GE Interfaces 0-2 2 - 48 2 - 112 Refer to Data Sheet
40 GE Interfaces - 4 - -
100 GE Interfaces - 6 2 -
Capacity
Maximum Supported APs
512 1,024 Up to 14,336 (1,024/blade) 32 - 1,024
(Tunnel Mode)
Maximum Supported APs (Total) 1,024 4,096 Up to 57,344 (4,096/blade) 64 - 4,096
Max number of SSIDs 256 1,024 Up to 14,336 (1,024/blade) 32 - 1,024
Max CAPWAP throughput 5.5 Gbps - 11 Gbps 11 Gbps - 22 Gbps Refer to Datasheet Refer to Data Sheet
Max Concurrent Sessions 3 - 11 Mil 11 - 95 Mil 10 - 100 Mil Refer to Data Sheet
Fortinet Infrastructure Wi-Fi Access Points
AP 122 AP 822i/822e OAP 832e

Classrooms, Dormitory Com-

In-room hotel, hospital, Parking Lots, Courtyards,
Suggested Use Case mon Areas, Moderate Density
dormitory University Grounds
Enterprise
Hardware
Outdoor 67 rated, wall or
Form Factor Small, wall mountable Wall or ceiling wall mountable
pole wall mountable

Dimension 5.51 x 5.35 x 1.18 in 7.1 x 7.1 x 2.7 in 11.0 x 8.54 x 2.0 in

1x GE RJ45 (PD), 1x FE,

1x GE RJ45 (PD), 1x GE 1x GE RJ45 (PD), 1x GE
Ethernet Interfaces 1x FE PoE (PSE), 1x pass
RJ45 (disabled) RJ45
through RJ45 pair
PoE 802.3af, 802.3at 802.3af, 802.3at 802.3at
Mounting kits, omnidirectional Mounting kits and omnidirec-
Included accessories Mounting kit
antennas for AP822e tional antennas
Mesh capable • •
Wireless
IEEE Standard 802.11 a/b/g/n/ac 802.11 a/b/g/n/ac 802.11 a/b/g/n/ac
Number of Radios 2 2 2
Radio 1 Band (association rate) 2.4 GHz / 5 GHz (300 Mbps) 2.4 GHz / 5 GHz (300 Mbps) 2.4 GHz (450 Mbps)
Radio 2 Band (association rate) 5 GHz a/n/ac (867 Mbps) 5 GHz a/n/ac (867 Mbps) 5 GHz a/n/ac (1,300 Mbps)
MIMO 2x2 (dual stream) 2x2 (dual stream) 3x3 (3 stream)
Max / recommended number of
128 / 20 per radio 128 / 50 per radio 128 / 50 per radio
concurrent clients
822i: 4 - Internal
Antenna Type and Count 4 - Internal 6 N-type External
822e: 4 - External
AP 822i :3.3 dBi /
(6 dBi for 5 GHz)
Antenna Gain 3.6 dBi / (5 dBi for 5 GHz) 6 dBi / (7dBi for 5 GHz)
AP 822e :3.3 dBi /
(6 dBi for 5 GHz)
AP 822i : 23 & 22 dBm -
20 dBm (2.4 GHz) 2.4/5 GHz 29 dBm (2.4 GHz)
Max TX Power
20 dBm (5 GHz) AP 822e : 24 & 24 dBm - 23 dBm (5 GHz)
2.4/5 GHz
Number of SSIDs 64 64 64
802.11n 20/40Mhz HT • • •
802.11ac 80 MHz channel • • •
Security
WEP, WPA-PSK, WPA-TKIP,
WPA2-AES, 802.11i, 802.1X
(EAP-TLS, EAP-TTLS, PEAP, • • •
LEAP, EAP-FAST, EAP-SIM, EAP-
AKA, and EAP-MD5)
802.1X and captive portal
authentication against local da-
• • •
tabase on the controller, RADIUS,
and Active Directory
RADIUS-assisted per-user and
per-ESSID access control via • • •
MAC filtering
Operation Mode
Centralized deployment mode • • •
Distributed deployment mode • • •
Remote VPN tunnel mode • • •
Certifications
Wi-Fi Alliance Certified* • • •
DFS Certified** Region A, K, J, E Region A, K, J, E Region A, J, E
FortiWLC Wireless Controllers
FWC-50D FWC-200D FWC-500D FWC-1000D FWC-3000D

Small enterprises, remote Medium enterprises, branch Large enterprises, regional

Suggested Use Case Large enterprises Large enterprises
offices offices offices
Hardware
Form Factor 1 RU 1 RU 1 RU 2 RU 2 RU
4x GE RJ45, 4x GE SFP, 2x
Ethernet Interfaces 4x GE RJ45 4x GE RJ45 2x GE RJ45, 4x 10GE SFP+ 2x GE RJ45, 8x 10GE SFP+
10GE SFP+
Capacity
Max. Access Points 50 200 500 1,000 3,000
Max. Clients 1,500 2,500 7,500 20,000 45,000
FWC-50D-VM FWC-200D-VM FWC-500D-VM FWC-1000D-VM FWC-3000D-VM
Small enterprises, remote Medium enterprises, branch Large enterprises, regional
Suggested Use Case Large enterprises Large enterprises
offices offices offices
Hardware
Max. vCPU 4 4 8 24 48
Max. PAM 4 GB 8 GB 16 GB 32 GB 64 GB
Min. HDD Size 16 GB 16 GB 16 GB 16 GB 16GB
Capacity
Max. Access Points 50 200 500 1,000 3,000
Max. Clients 1,250 2,500 6,250 10,000 30,000

FortiWLM Wireless Manager

FWM-100D FWM-1000D FWM-VM

Suggested Use Case Small enterprises Medium to large enterprises —

Hardware
Supports VMware, Hyper-V,
Form Factor 1 RU 1 RU
AWS and KVM hypervisors.
Ethernet Interfaces 4x GE RJ45 4x GE RJ45, 4x GE SFP —
Capacity
Number of Infrastructure APs 1,000 15,000 15,000
Number of Stations 5,000 75,000 75,000

www.fortinet.com

This document is provided as a convenient comparison of Fortinet products and services. The datasheet for any product or service can be found on www.fortinet.com should be consulted for the most updated specifications.
Copyright© 2019 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of
Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other resultsmay vary. Network
variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters
a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance
metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants,
representations,and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.
WLMTX-2019-R62-JUN