Secure Wireless LAN

Secure your wireless LAN Edge with Security-driven Wi-Fi

Gartner 2020 Magic Quadrant for the Wired and Wireless LAN Access Infrastructure
web product icon wireless

Secure Wireless LAN Overview

The most common form of access at the LAN Edge for users these days is Wi-Fi. Wireless Access Points can be added to any network to provide Wi-Fi access to employees and guests alike. The challenges of adding wireless to a deployment go far beyond the physical installation of the hardware.

Network IT demands more capability and reliable security from fewer components to save on cost and simplify the environment. Fortinet’s Wireless LAN equipment leverages Security-driven Networking to provide secure wireless access for the enterprise LAN edge.

Perfect for deployments from the campus to the SD-Branch, FortiAPs are Fortinet Security Fabric enabled, providing the broad visibility, automated protection, and integrated threat intelligence required to protect the valuable assets and data of organizations worldwide.

For assistance choosing an AP, visit our Product Compare Tool.

 

Fortinet LAN Edge Security | Security-Driven Networking

LAN Edge equipment from Fortinet converges networking and security into a secure, simple to manage architecture with a single focal point for management and configuration. By leveraging Security-driven networking Fortinet allows you to secure the LAN Edge without the need for costly and complex licensing schemes.

Watch the video

   

Secure Wireless LAN News

   

Secure Wireless LAN Videos

Wireless LAN Edge

Discover the advancements in Fortinet Wireless Management both on the FortiGate itself and with our FortiWLM Wireless Management Platform in FortiOS 6.4. Simplifying and adding depth functionalities whilst allowing true visibility and wireless tools at your fingertips is just part of what FortiOS 6.4 delivers for Fortinet Wireless.

Watch Now
Secure SD-Branch overview
FortiAP with FortiGate | Integrated Wireless Management
Wi-Fi 6 Overview

Secure Wireless LAN Product Details

The challenges associated with enterprise Wi-Fi continue to grow. With IoT, BYOD, and a highly mobile workforce, it’s critical for IT organizations to manage their access points and remain resilient against evolving security threats, whether at the corporate office, or at remote sites. Fortinet offers secure Wireless LAN within a flexible architecture that can be used across SD-Branch deployments, or within a single large site.

   

Features and Benefits

Icon security fabric

Security Fabric Integration

Integration with Fortinet's Security Fabric provides Security-driven Networking out to the edge of the network.
connectivity icon

Automated response to compromised devices

Remove human reaction time from the equation to improve network security at the access layer.
integration icon

Zero-touch deployment

Fast and simple deployment with no requirement for onsite tech support.
simple icon

Simplified deployment and capacity expansion

No licenses to manage, just plug and go.
range of model icon

Scalability from 1 to 10,000 APs

a range of platforms for any sized deployment.
analytics icon

Wireless Presence Analytics

Presence analytics capabilities included.

Secure Wireless LAN Models and Specifications


FortiAPs are available in a variety of models, from 2x2 to 4x4, internal or external antenna, to address specific use cases and price points. Configuration and control of your wireless can be done with Fortinet’s FortiGate Network Security Platform or FortiAP Cloud.  (Note: If you are looking for our Dedicated Controller based solution, it can be found here. If you are interested in managing your FortiGates with attached FortiAPs via the cloud, learn more about FortiGate Cloud here.)

For assistance choosing an AP, visit our Product Compare Tool

Large campuses, distributed enterprises, and small businesses all have diverse WLAN architecture needs. That's why Fortinet provides a full suite of WLAN Access Points as part of our Wireless Infrastructure solution designed to address the unique requirements of every organization.

Specific information by product line can be found by selecting each category.   

 

Standard APs

FortiAP access points are managed centrally by the integrated WLAN controller of any FortiGate security appliance or the FortiAP Cloud provisioning and management portal.    

 

Model RF Technology
Description
FAP-431F 4x4 Wi-Fi 6 (802.11ax) Indoor wireless AP: Tri radio, Internal antenna, 1 x 2.5 GE & 1 x GE RJ45 ports
FAP-433F 4x4 Wi-Fi 6 (802.11ax) Indoor wireless AP: Tri radio, External antenna, 1 x 2.5 GE & 1 x GE RJ45 ports
FAP-231F 2x2 Wi-Fi 6 (802.11ax) Indoor wireless AP: Tri radio, Internal antenna, 2 X GE RJ45 ports
FAP-421E 4x4 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 2 x GE RJ45 port
FAP-423E 4x4 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 port
FAP-321E 3x3 802.11ac Wave 2 Indoor wireless AP: Dual radio, Internal antenna, 1 x GE RJ45 port
FAP-231E 2x2 802.11ac Wave 2 Indoor wireless AP: Tri-radio, Internal antenna, 2 x GE RJ45 port
FAP-221E 2x2 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 1 x GE RJ45 port
FAP-223E 2x2 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 1 x GE RJ45 port
FAP-222E 2x2 802.11ac Wave 2 Outdoor wireless AP:  Dual radio, External antenna, 1 x GE RJ45 port
FAP-224E 2x2 802.11ac Wave 2 Outdoor wireless AP:  Dual radio, Internal antenna, 1 x GE RJ45 port, 1x SFP port
FAP-C24JE 2x2 802.11ac Wave 2 Indoor wallplate AP: Dual radio, Internal antenna, 6 x GE RJ45 ports

 

Universal APs

FortiAP Universal access points are managed centrally by the integrated WLAN controller of any FortiGate security appliance, the FortiAP Cloud provisioning and management portal, or by the FortiWLC dedicated Wireless LAN Controller platform.

 

Model RF Technology Description
FAP-U431F 4x4 Wi-Fi 6 (802.11ax) Indoor wireless AP:  Tri radio, Internal antenna, 1 x 2.5 GE & 1 x GE RJ45 ports
FAP-U433F 4x4 Wi-Fi 6 (802.11ax) Indoor wireless AP:  Tri radio, External antenna, 1 x 2.5 GE & 1 x GE RJ45 ports
FAP-U231F 2x2 Wi-Fi 6 (802.11ax) Indoor wireless AP: Tri radio, Internal antenna, 2 X GE RJ45 ports
FAP-U421EV 4x4 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 2 x GE RJ45 ports
FAP-U423EV 4x4 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 ports
FAP-U422EV 4x4 802.11ac Wave 2 Outdoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 ports
FAP-U321EV 3x3 802.11ac Wave 2 Indoor wireless AP:  Dual radio, Internal antenna, 2 x GE RJ45 ports
FAP-U323EV 3x3 802.11ac Wave 2 Indoor wireless AP:  Dual radio, External antenna, 2 x GE RJ45 ports
FAP-U221EV 2x2 802.11ac Wave 1 Indoor wireless AP:  Dual radio, Internal antenna, 1 x GE RJ45 port
FAP-U223EV 2x2 802.11ac Wave 1 Indoor wireless AP:  Dual radio, External antenna, 1 x GE RJ45 port
FAP-U24JEV 2x2 802.11ac Wave 1 Indoor wallplate AP: Single / Dual radio, Internal antenna, 6 x GE RJ45 ports
Access Point Accessories

Antennas and power supplies for use with FortiAP.

 

Model Description
FAN-612R Sector/Patch Outdoor antenna
FAN-612N Sector/Patch Outdoor antenna
FAN-614R Sector/Patch Outdoor antenna
FAN-664R Sector/Patch Outdoor antenna
ANT-O6ABGN-0606-O Omnidirectional Outdoor antenna
ANT-O6ABGN-0607-PT Sector/Patch Outdoor antenna
ANT-A08O-NM-2 Omnidirectional Outdoor antenna
ANT-BG080-NM Omnidirectional Outdoor antenna

 

Model Description
GPI-115 GE 802.3af power supply
GPI-130 GE 802.3at power supply
FortiGate Integrated Management

The FortiGate Wireless Controller is built into all FortiGate models.  For more information on the various FortiGate models, including manageable AP capacity per model, please see the FortiGate webpage here.    

If you are interested in managing your FortiGates with attached FortiAPs via the cloud, please see the FortiCloud page here.

The FortiWLM series offers RF management of FortiGate wireless controllers and access points along with an extensive set of troubleshooting and reporting tools.  It is available in both physical and virtual form factors.  All platforms include 50 licensed APs, expansion to manage greater than 50 APs requires the purchase of FortiWLM licenses.

Appliances:

Model Max Number of Managed APs
Max Number of Managed FortiGates
Interfaces
FWM-1000D 15000 600 4 x GE RJ45 ports, 4 x GE SFP ports

Virtual Instances:

Model Max Number of Managed APs
Max Number of Managed FortiGates
FWM-VM 15000 600

Licenses:

Model Additional APs Licensed
FWM-NM-50-A 50
FWM-NM-250-A 250
FWM-NM-2500-A 2500
FortiAP Cloud Management

FortiAP Cloud management allows for centralized hosted cloud control of standalone FortiAP devices. No subscription is required for basic FortiAP Cloud management capabilities. Subscriptions are available to access advanced configuration and longer log retention. The FortiAP Cloud portal can be found at www.fortiapcloud.com.

SKU
FC-10-90AP1-639-02-DD
Description
1-year FortiCloud FAP (FAP/FAP-U/FAP-C) Advanced Management License Includes: Premium FAP management features (where applicable for model), 1-year log retention, 24x7 FortiCare
SKU
FC-10-90APS-639-02-DD
Description
1-year FortiCloud FAP-S Advanced Management License Includes: FortiGuard subscription services, Premium AP management features, 1-year log retention, 24x7 FortiCare

Existing FortiGate customers interested in managing FortiAPs that are connected to FortiGates via the cloud should leverage FortiGate Cloud.

FortiPresence

Presence analytics with captive portal integration, free tier available. Login here.

FC-10-FPCLD-169-02-DD
includes advanced features and 1 year rolling Data Retention per AP License
Identity and Access Management

FortiAuthenticator user identity management appliances strengthen enterprise security by simplifying and centralizing the management and storage of user identity information.

Total Users
500
Description
4x GE RJ45 ports, 1x 1 TB HDD
Total Users
2,000
Description
4x GE RJ45 ports, 2x 1 TB HDD
Total Users
10,000
Description
4x GE RJ45 ports, 2x GE SFP, 2x 2 TB HDD
Total Users
20,000
Description
4x GE RJ45 ports, 2x GE SFP, 2x 2 TB SAS Drive
Total Users
40,000
Description
4x GE RJ45 ports, 2x GE SFP, 2x 2 TB SAS Drive

Virtual Instances:

Users
100
Description
Base FortiAuthenticator-VM with 100 user license
Users
+100
Description
License to add 100 users to base VM
Users
+1000
Description
License to add 1000 users to base VM
Users
+10000
Description
License to add 10000 users to base VM
Users
+100000
Description
License to add 100000 users to base VM
FortiPlanner
Simplify WLAN planning and deployment with FortiPlanner, Fortinet’s graphical Wireless LAN planning and post-deployment site survey tool. FortiPlanner uses signal propagation ray-tracing algorithms to generate accurate predictive plans. After deployment, verify your installation with a real-time coverage heat map generate from collected survey data.
 
FortiPlanner
Free Deployment and Planning Utility (up to 10 APs)
FC-10-FNDN1-652-02-12
FNDN Deploy Toolkit – includes FortiPlanner (unlimited APs)
FC-10-FNDN2-139-02-12
FNDN Site Toolkit – includes up to 15 users of FortiPlanner (unlimited APs)
FortiDeploy
FortiDeploy allows for zero-touch bulk provisioning of FortiAPs to a specific FortiGate, FortiManager, or FortiCloud.
 
FDP-SINGLE-USE
Zero-touch bulk provisioning for all FortiAP on this order

Secure Wireless LAN Use Cases

SD-Branch

Securing the wireless at new branches can be expensive, difficult, and time consuming to deploy. The same simplicity, manageability, and security offered in our Secure SD-WAN solution leveraging the FortiGate NGFW can be carried over into wired and wireless access management to create a Secure SD-Branch. FortiAPs, integrate directly into the FortiOS security infrastructure via our FortiLink protocol. Learn more here.

Campus

Local-area networks (LANs) in campus settings are dynamic and complex, making them challenging to secure and manage. By leveraging the FortiGate Next Generation Firewall as a LAN controller, IT can simplify their work load by consolidating functions into a single management interface that converges both networking and security. Learn more here.

Teleworker

Extending corporate network access to remote workers can put a heavy burden on IT who must manage many remote sites that they have no control over. By deploying FortiAPs as remote APs, the same secure network that employees are used to in the office can be extended to their home. Learn more here.

Product Demo

FortiGate Integrated Controller Demo
FortiAP Cloud Project Demo

Our Customers Emphasize the Value of Secure Wireless LAN in Gartner Peer Insights Reviews

Wireless networks have become ubiquitous, and as the technology has matured, selecting a solution is rarely about the AP hardware itself, but the overall manageability, simplicity, and features that the overall solution can offer. 

Organizations are increasingly selecting Fortinet's wireless offering because our ease of use and unbeatable TCO.  Without the burdensome licensing processes and costs found in most vendors, and with a focus on simple streamlined user experiences, Fortinet customers get the best of both worlds, while still deploying rock solid reliable wireless access throughout their location. 

To see what recent customers have to say about Fortinet wireless, check out our reviews on Gartner Peer Insights.  Here are just a handful of recent headline comments.

★★★★★
"Easy Installation and Configuration"

Infrastructure and Operations, Healthcare, $50M – 250M company

"We have an approximate of more than 30 FortiAP in the company, performing different functions in the WLAN, from employees SSID, Visitors, Administrative Area. This device provides an excellent coverage area, good connection and excellent communication speed."

★★★★★
"FortiAP For Secure Wifi"

CxO in the Financial Industry, $50M – 250M company

"Since we have implemented fortiAP as our wifi solution, we have reached goals that we have been planning for a years. We have a secure wifi connection both for corporate network and for the guests. The coverage is great and management of users is superb. For example if somebody tries to download something big and slows the whole network we can track him down in a seconds."

★★★★★
"Secure Wifi For Your Organization"

Infrastructure and Operations, Finance, $50M – 250M company

"If you need to implement SECURE WiFi network, I believe this is one of the best solutions in the market today. It was easy to implement, and already out of the box it came with a pretty good security standard. So we also got not only secure corporate WiFi network but also totally separated guest network which is great from a security point of view."

★★★★★
"Easy To Implement Wireless Management Tool With Lot Of Security In Mind"

Consultant, Finance, $50M – 250M company

"Great wireless access management and security solution that we have deployed and configured in a matter of days. Guest network, corporate network, with all the needed security features that works stable for months since deployed."

★★★★★
"Very Ease To Setup And Great Management Integration With Fortigates"

CIO, Communications, $50M – 250M company

"The possibility to deploy the FortiAP together with other family products was a great experience to us thinking about support, management and security."

 

Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences, and do not represent the views of Gartner or its affiliates.

FAQs

Below are answers to common questions regarding FortiGate Integrated Secure Wireless Access and related services:    

What license do I need to buy to enable the wireless controller on my FortiGate?
There are no additional licenses that need to be purchased to enable or use the Wireless Controller function on a FortiGate.

How many APs can my FortiGate manage?
Please refer to the FortiGate datasheet for your specific model for information on maximum AP capacity.

How many APs will I need for my building?
AP density will vary depending on the number of users and what applications need to be supported.  Fortinet offers planning software: FortiPlanner to aid in determining the proper number and placement of APs.