FortiGate Integrated Secure Wireless Access

Wi-Fi management and security in a single pane of glass

Gartner 2019 Magic Quadrant for the Wired and Wireless LAN Access Infrastructure
web product icon wireless

FortiGate Integrated Wireless Management Overview

Network IT demands more capability and reliable security from fewer components to save on cost and complexity. Fortinet’s Next Generation Firewall, FortiGate, is supplied with a Wireless LAN and Switch controller built-in to provide Security Driven Networking for Wi-Fi at no extra cost. Perfect for deployments from the campus to the SD-Branch, the integrated solution is Fortinet Security Fabric enabled, providing the broad visibility, automated protection, and integrated threat intelligence required to protect the valuable assets and data of organizations worldwide. 

For assistance choosing an AP, visit our Product Compare Tool.

 

FortiGate Integrated Wireless Management News

   

FortiGate Integrated Wireless Management Videos

Secure SD-Branch overview
FortiAP with FortiGate | Integrated Wireless Management
Wi-Fi 6 Overview

FortiGate Integrated Wireless Management Product Details

The challenges associated with enterprise class Wi-Fi continue to grow. With IoT, BYOD, and a highly mobile workforce, it’s critical for IT organizations to manage their access points while also dealing with evolving security threats, be it at the corporate office, or in remote branches. Fortinet offers an integrated secure Wireless LAN Controller within FortiOS, a purpose-built network security operating system, which forms the foundation of the FortiGate Next Generation Firewall. A flexible architecture that can be used across SD-Branch deployments, or within a single large site.

   

Features and Benefits

Icon security fabric

Security Fabric Integration

Integration with FortiGate firewalls provides Security Driven Networking out to the edge of the network
connectivity icon

Automated response to compromised devices

Remove human reaction time from the equation to improve network security at the access layer.
integration icon

Zero-touch deployment

Fast and simple deployment with no requirement for onsite tech support.
simple icon

Simplified deployment and capacity expansion

No licenses to manage, just plug and go.
range of model icon

Scalability from 1 to 10,000 APs

a range of platforms for any sized deployment.
analytics icon

Wireless device locationing tools included with no additional licenses

Wireless device locating tools included with no additional licenses.

FortiGate Integrated Wireless Management Models and Specifications

FortiAPs are available in a variety of models, from 2x2 to 4x4, internal or external antenna to address specific use cases and price points. Configuration and control of your wireless is done with Fortinet’s FortiGate Network Security Platform.

For assistance choosing an AP, visit our Product Compare Tool. If you are interested in managing your FortiGates with attached FortiAPs via the cloud, learn more about FortiGate Cloud here.    

Large campuses, distributed enterprises, and small businesses all have diverse WLAN architecture needs. That's why Fortinet provides a full suite of WLAN Access Points as part of our Wireless Infrastructure solution designed to address the unique requirements of every organization.

Specific information by product line can be found by selecting each category.   

 

Standard APs

FortiAP access points are managed centrally by the integrated WLAN controller of any FortiGate security appliance or the FortiAP Cloud provisioning and management portal.    

 

Model RF Technology
Description
FAP-421E 4x4 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 2 x GE RJ45 port
FAP-423E 4x4 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 port
FAP-321E 3x3 802.11ac Wave 2 Indoor wireless AP: Dual radio, Internal antenna, 1 x GE RJ45 port
FAP-231E 2x2 802.11ac Wave 2 Indoor wireless AP: Tri-radio, Internal antenna, 2 x GE RJ45 port
FAP-221E 2x2 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 1 x GE RJ45 port
FAP-223E 2x2 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 1 x GE RJ45 port
FAP-222E 2x2 802.11ac Wave 2 Outdoor wireless AP:  Dual radio, External antenna, 1 x GE RJ45 port
FAP-224E 2x2 802.11ac Wave 2 Outdoor wireless AP:  Dual radio, Internal antenna, 1 x GE RJ45 port, 1x SFP port
FAP-C24JE 2x2 802.11ac Wave 2 Indoor wallplate AP: Dual radio, Internal antenna, 6 x GE RJ45 ports
FAP-320C 3x3 802.11ac Wave 1 Indoor wireless AP:  Dual radio, Internal antenna, 2 x GE RJ45 ports, extended temp range

 

Smart APs


FortiAP Smart access points include UTM services onboard and can be managed centrally by the integrated WLAN controller of any FortiGate security appliance or the FortiAP Cloud provisioning and management portal.    

 

Model RF Technology
Description
FAP-S221E 2x2 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 2 x GE RJ45 ports
FAP-S223E 2x2 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 ports
Universal APs

FortiAP Universal access points are managed centrally by the integrated WLAN controller of any FortiGate security appliance, the FortiAP Cloud provisioning and management portal, or by the FortiWLC dedicated Wireless LAN Controller platform.

 

Model RF Technology Description
FAP-U431F     4x4 Wi-Fi 6 (802.11ax)     Indoor wireless AP:  Tri radio, Internal antenna, 1 x 2.5 GE & 1 x GE RJ45 ports    
FAP-U433F     4x4 Wi-Fi 6 (802.11ax)     Indoor wireless AP:  Tri radio, External antenna, 1 x 2.5 GE & 1 x GE RJ45 ports    
FAP-U421EV 4x4 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 2 x GE RJ45 ports
FAP-U423EV 4x4 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 ports
FAP-U422EV 4x4 802.11ac Wave 2 Outdoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 ports
FAP-U321EV 3x3 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 2 x GE RJ45 ports
FAP-U323EV 3x3 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 ports
FAP-U221EV 2x2 802.11ac Wave 1 Indoor wireless AP:  Dual radio, Internal antenna, 1 x GE RJ45 port
FAP-U223EV 2x2 802.11ac Wave 1 Indoor wireless AP:  Dual radio, External antenna, 1 x GE RJ45 port
FAP-U24JEV 2x2 802.11ac Wave 1 Indoor wallplate AP: Single / Dual radio, Internal antenna, 6 x GE RJ45 ports
Access Point Accessories

Antennas and power supplies for use with FortiAP.

 

Model Description
FAN-612R Sector/Patch Outdoor antenna
FAN-612N Sector/Patch Outdoor antenna
FAN-614R Sector/Patch Outdoor antenna
FAN-664R Sector/Patch Outdoor antenna
ANT-O6ABGN-0606-O Omnidirectional Outdoor antenna
ANT-O6ABGN-0607-PT Sector/Patch Outdoor antenna
ANT-A08O-NM-2 Omnidirectional Outdoor antenna
ANT-BG080-NM Omnidirectional Outdoor antenna

 

Model Description
GPI-115 GE 802.3af power supply
GPI-130 GE 802.3at power supply

The FortiGate Wireless Controller is built into all FortiGate models.  For more information on the various FortiGate models, including manageable AP capacity per model, please see the FortiGate webpage here.    

If you are interested in managing your FortiGates with attached FortiAPs via the cloud, please see the FortiCloud page here.

The FortiWLM series offers RF management of FortiGate wireless controllers and access points along with an extensive set of troubleshooting and reporting tools.  It is available in both physical and virtual form factors.  All platforms include 50 licensed APs, expansion to manage greater than 50 APs requires the purchase of FortiWLM licenses.

Appliances:

Model Max Number of Managed APs
Max Number of Managed FortiGates
Interfaces
FWM-1000D 15000 600 4 x GE RJ45 ports, 4 x GE SFP ports

Virtual Instances:

Model Max Number of Managed APs
Max Number of Managed FortiGates
FWM-VM 15000 600

Licenses:

Model Additional APs Licensed
FWM-NM-50-A 50
FWM-NM-250-A 250
FWM-NM-2500-A 2500
FortiPresence

FortiPresence

Presence analytics with captive portal integration, free tier available. Login here.

Identity and Access Management

FortiAuthenticator user identity management appliances strengthen enterprise security by simplifying and centralizing the management and storage of user identity information.

Total Users
500
Description
4x GE RJ45 ports, 1x 1 TB HDD
Total Users
2,000
Description
4x GE RJ45 ports, 2x 1 TB HDD
Total Users
10,000
Description
4x GE RJ45 ports, 2x GE SFP, 2x 2 TB HDD
Total Users
20,000
Description
4x GE RJ45 ports, 2x GE SFP, 2x 2 TB SAS Drive
Total Users
40,000
Description
4x GE RJ45 ports, 2x GE SFP, 2x 2 TB SAS Drive

Virtual Instances:

Users
100
Description
Base FortiAuthenticator-VM with 100 user license
Users
+100
Description
License to add 100 users to base VM
Users
+1000
Description
License to add 1000 users to base VM
Users
+10000
Description
License to add 10000 users to base VM
Users
+100000
Description
License to add 100000 users to base VM
FortiPlanner
Simplify WLAN planning and deployment with FortiPlanner, Fortinet’s graphical Wireless LAN planning and post-deployment site survey tool. FortiPlanner uses signal propagation ray-tracing algorithms to generate accurate predictive plans. After deployment, verify your installation with a real-time coverage heat map generate from collected survey data.
 
FortiPlanner
Free Deployment and Planning Utility (up to 10 APs)
FC-10-FNDN1-652-02-12
FNDN Deploy Toolkit – includes FortiPlanner (unlimited APs)
FC-10-FNDN2-139-02-12
FNDN Site Toolkit – includes up to 15 users of FortiPlanner (unlimited APs)
FortiDeploy
FortiDeploy allows for zero-touch bulk provisioning of FortiAPs to a specific FortiGate, FortiManager, or FortiCloud.
 
FDP-SINGLE-USE
Zero-touch bulk provisioning for all FortiAP on this order

Wireless Use Cases

Securing the wireless at new branches can be expensive, difficult, and time consuming to deploy. The same simplicity, manageability, and security offered in our Secure SD-WAN solution leveraging the FortiGate NGFW can be carried over into wired and wireless access management to create a Secure SD-Branch. FortiAPs, integrate directly into the FortiOS security infrastructure via our FortiLink protocol. Learn more here.

Fortinet sd-branch

Our Customers Emphasize the Value of FortiGate Integrated Wireless Access in Gartner Peer Insights Reviews

Wireless networks have become ubiquitous, and as the technology has matured, selecting a solution is rarely about the AP hardware itself, but the overall manageability, simplicity, and features that the overall solution can offer. 

Organizations are increasingly selecting Fortinet's wireless offering because our ease of use and unbeatable TCO.  Without the burdensome licensing processes and costs found in most vendors, and with a focus on simple streamlined user experiences, Fortinet customers get the best of both worlds, while still deploying rock solid reliable wireless access throughout their location. 

To see what recent customers have to say about Fortinet wireless, check out our reviews on Gartner Peer Insights.  Here are just a handful of recent headline comments.

Easy To Install And Use An Access Point

Network Specialist, Energy and Utilities

"FortiAPs support wi-fi's latest technologies, 802.11ac Wave2, 4x4 protocols. FortiAPs can be used singly as stand-alone or as an integrated solution with UTM Firewall. We are using FortiAP in our remote office. As with other manufacturers, FortiAP can broadcast SSIDs at 5 GHz and 2.4 GHz. Security technologies are at the same level as other products. The difference between these products is their signal quality and performance status, signal quality and losses in the transmitted packages. Our remote device is connecting 5 devices in the office and we did not have any problems in this sense."

Easy To Set Up And Maintain

Sr. Security Analyst, Security and Risk Management

"The FortiAP devices are easy to setup and maintain. Their coverage is better than our previous vendor. Having the ability to put some devices in rogue AP detection mode is a plus as well."

Plug And Play Installation And Easy Configuration.

Systems and Security Architect

"APs were easy to install and configure. Coverage is great. Had to perform minor tweaks with Tx power and there are plenty of documents available from Fortinet and via other sources to get the best throughput, performance and coverage."

Flexible installation and easy to connect

Security and Risk Management, Finance Industry

"We use FortiAP to connect users with wireless in just a small business unit. Directly connected to Fortigaste Firewall."

 

Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences, and do not represent the views of Gartner or its affiliates.

Product Demo

FortiGate Integrated Controller Demo

Understand how to use FortiGate as a wireless controller and understand the FortiLink protocol.

Watch Now

FAQs

Below are answers to common questions regarding FortiGate Integrated Secure Wireless Access and related services:    

What license do I need to buy to enable the wireless controller on my FortiGate?

There are no additional licenses that need to be purchased to enable or use the Wireless Controller function on a FortiGate.

How many APs can my FortiGate manage?

Please refer to the FortiGate datasheet for your specific model for information on maximum AP capacity.

How many APs will I need for my building?

AP density will vary depending on the number of users and what applications need to be supported.  Fortinet offers planning software: FortiPlanner to aid in determining the proper number and placement of APs.