Fortinet FortiAP 23JF
Overview:
FortiAP access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiAP Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for protecting your LAN Edge from the campus to branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a single pane-of-glass management console and protects your network from the latest security threats.
Unified Management
Unified management console simplifies operations, ensuring consistency in effective policy enforcement and compliance.
Advanced Security Protection
Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filtering protect the wireless LAN from the latest security threats.
Built-in Wi-Fi Security
Protects the network from advanced wireless threats and satisfies PCI DSS compliance.
Highlights
This enterprise class Wi-Fi 6 wall plate AP provides three radios with internal antennas as well as features such as OFDMA and is PSE-capable. The AP can provide 24/7 scanning across both bands while still providing access on both the 2.4 and 5 GHz bands. The integrated BLE radio can be used for beacons and locationing applications. Additional features include PoE out for downstream devices and RJ45 passthrough. This access point can be installed in minutes, right over the existing wall plate.
Campus
A single building with multiple floors, or a corporate or education campus with a group of large buildings.
- High-capacity designs including Dual 5GHz and tri-band with Wi-Fi 6E allow a maximal number of client devices to attach to the network at the same time without over-air congestion
- Complete NOC functionality with network visibility and AIOps simplify a complex network deployment into a solution manageable by IT teams of any size
Branch Office / SD-Branch
A highly distributed number of small sites, often with no on-site IT.
- Built in NAC functions* allow secure onboarding of devices at remote locations where IT doesn’t have reliable visibility
- Management orchestration with zero-touch deployment allows for quick and easy rollouts without the need for skilled installers at each site
Micro Branch
Ultra small sites that still fall under IT’s responsibility
- Can act as a SASE endpoint as a foundation for zero-trust network access (ZTNA)
- Simple management and provisioning through FortiSASE interface
Remote Workers
A remote AP installed at a worker’s home or at micro-branch office space.
- Split tunneling allows local traffic to remain local while sending other traffic to the data center for inspection when needed
- Desktop mounting options for wall-plate models allow the use of Ethernet as well as Wi-Fi connectivity while leveraging the same secure tunnel
SMB
Single site or small collection of sites with limited IT resources.
- Built-in NAC functions* bring security to the wireless network with no need to install and manage additional products
- Network and security convergence decreases management overhead while keeping the network secure
*FortiGate-managed installations only.
Specifications:
| FortiAP-23JF | |
|---|---|
| Hardware | |
| Hardware Type | Indoor walljack/desktop AP |
| Number of Radios | 3 + 1 BLE |
| Number of Antennas | 4 single band WiFi + 1 dual band scanning + 1 single band 2.4 GHz BLE/ZigBee |
| Antenna Type and Peak Gain | PCB antenna Dual band: 4.0 dBi in 2.4 GHz band and 4.0 dBi in 5 GHz band BLE antenna: 3.5 dBi in 2.4 GHz band |
| Frequency Bands (GHz) | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850 |
| Radio 1 Capabilities | Frequency band: 2.4GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024 QAM MIMO Chains: 2x2 Service |
| Radio 2 Capabilities | Frequency band: 5.0GHz Channel width: 20/40/80MHz Modulation: BPSK, QPSK, 64/256/1024 QAM MIMO Chains: 2x2 Service |
| Radio 3 Capabilities | Frequency bands: 2.4GHz and 5.0GHz MIMO Chains: 1x1 Frequency Scanning |
| Maximum Data Rate | Radio 1: up to 574 Mbps Radio 2: up to 1200 Mbps Radio 3: Frequency scanning only |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertisement @ 10 dBm max TX power |
| Interfaces | 7x 10/100/1000 Base-T RJ45 Ports (1x 802.3at PoE (PD), 1x 802.3af PoE (PSE), 2x Non-PoE Ports, 1x Pass-through in, 1x Pass-through out, 1x RS-232 RJ45 Serial Port |
| Power over Ethernet (PoE) | 1 x 802.3at PoE default Operational modes: powered by 802.af PoE - Only Radio functionality ; powered by 802.3at - All radio+ PSE (7W); Powered by DC power adaptor - All radio's + USB + PSE ( 802.3af) |
| Simultaneous SSIDs | Up to 16 (14 if background scanning enabled) |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/Device Authentication | WPA™, WPA2™, and WPA3™ with 802.1x or preshared key, WEP, Web Captive Portal, MAC blocklist & allowlist |
| Maximum Tx Power (Conducted) | Radio 1: 2.4GHz: 23 dBm / 200 mW (2 chains combined) Radio 2: 5GHz: 22 dBm / 158 mW (2 chains combined) Radio 3: NA |
| Kensington Lock | Yes |
| IEEE Standards | 802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i,802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.11ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad, 802.3af, 802.3at, 802.3az, 802.3bz |
| SSID Types Supported | Local-Bridge, Tunnel, and Mesh |
| Per Radio Client Capacity | Up to 512 clients per radio (Radio1 and Radio2) |
| Cellular Co-existence | Yes |
| LED Off Mode | Yes |
| Advanced 802.11 Features | |
| OFDMA | Yes |
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO 802.11ax mode | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS/Agile DFS | No |
| Wireless Monitoring Capabilities | |
| Rogue Scan radio modes | Background, Dedicated |
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
| Dimensions | |
| Length x Width x Height | 6.6 x 4.6 x 1.1 inches (168 x 117 x 28 mm) |
| Weight | 0.99 lbs (0.45 kg) |
| Package (shipping) Weight | 1.54 lbs (0.7 kg) |
| Mounting Options | Wall Plate, Optional Desk Mount FAP-MNT-WJ-20 |
| Included Accessories | Standard Mount kit for Ceiling, T-Rail, and Wall |
| Environment | |
| Power Supply | 802.3at PoE: GPI-130 Optional DC power adaptor SP-FAP23J-PAX-10 |
| Power Consumption (Maximum) | 17W |
| PSE functionality | Yes |
| Humidity | 10 - 90% non condensing |
| Operating / Storage Temperature | 32–122°F (0 - 50°C) / -22–158°F (-30–70°C) |
| Directives | Low Voltage Directive • RoHS |
| UL2043 Plenum Material | No |
| Mean Time Between Failures | > 10 Years |
| IP Rating | N/A |
| Surge Protection Built In | Yes |
| Hit-less PoE Failover | N/A |
| Certifications | |
| WiFi Alliance Certified | No |
| DFS | No |
| Warranty | |
| Limited Lifetime Warranty | Yes |
Antenna Radiation Patterns
Documentation:
Download the
Fortinet FortiAP Series Datasheet
(PDF).
Pricing Notes:
- FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades - FortiCare Elite Support
FortiCare Premium Support with FortiCare Elite Ticket Handling. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.
Fortinet Products
FortiAP-HD-431G Base Appliance
Tri-radio (802.11 b/g/n/ax 2x2 MU-MIMO and 802.11 a/n/ac/ax 2x2 MU-MIMO), internal antennas, 4 x 10/100/1000 RJ45 port (1x 802.3at PoE PD, 1x 802.3af PoE PSE, 2x Non-PoE Ports), BT / BLE, Console Port (RJ45). Wall plate mounting kit included. For power order: 802.3at PoE injector GPI-130 or AC adapter SP-FAP23J-PA-10. Optional desktop stand: FAP-MNT-WJ-20. Region Code A
#FAP-23JF-A
Fortinet Products
FortiAP-23JF Wall Plate Access Point
Tri-radio (802.11 b/g/n/ax 2x2 MU-MIMO and 802.11 a/n/ac/ax 2x2 MU-MIMO), internal antennas, 4 x 10/100/1000 RJ45 port (1x 802.3at PoE PD, 1x 802.3af PoE PSE, 2x Non-PoE Ports), BT / BLE, Console Port (RJ45). Wall plate mounting kit included. For power order: 802.3at PoE injector GPI-130 or AC adapter SP-FAP23J-PA-10. Optional desktop stand: FAP-MNT-WJ-20. Region Code A
#FAP-23JF-A
FortiAP 23JF FortiCare Premium Support
FortiAP 23JF FortiCare Elite Support
FortiAP-23JF Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
FortiAP-23JF 1 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-P23JF-314-02-12
FortiAP-23JF 3 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-P23JF-314-02-36
FortiAP-23JF 5 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-P23JF-314-02-60