Fortinet FortiAP 432FR
4x4 C1D2 Certified tri-radio 11ax AP
Overview:
FAP-432FR is ideal for hazardous environments such as oil rigs, industrial manufacturing, and transportation sites
This enterprise class 802.11ax ruggedized indoor/outdoor/industrial AP provides three radios and four spacial streams. As a top-of-the-line Wi-Fi 6 access point it provides OFDMA, a 2.5 Gigabit Ethernet port, plus an additional 1 Gbps Ethernet port with PoE out. The AP can provide 24/7 scanning across both bands while still providing access on both the 2.4 GHz and 5 GHz bands. The integrated BLE radio can be used for beacons and locationing applications.
FortiAP™ access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiLAN Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for campus and branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a Singlepane-of-glass management console and protects your network from the latest security threats.
- 802.11ax | Tri-Radio 2.4 GHz + 5 GHz + scanning | 6 External Antennas
- 4×4 MU-MIMO | Up to 1147 Mbps + 2402 Mbps
| HARDWARE OFFERINGS | ANTENNA TYPE | INDOOR USE | OUTDOOR USE |
|---|---|---|---|
| 4x4 C1D2 Certified tri-radio 11ax AP | External |
Highlights
- Unified management console simplifies operations, ensuring consistency in effective policy enforcement and compliance
- Built-in foundation for zerotrust network access (ZTNA) and secure access service edge (SASE), allowing you the flexibility to easily deploy microbranches with the security you need at the edge of your network
- Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filter protect the wireless LAN from the latest security threats
- Protects the network from advanced wireless threats and satisfies industry compliance such as PCI DSS
Campus
A single building with multiple floors, or a corporate or education campus with a group of large buildings.
- High-capacity designs including Dual 5GHz and tri-band with Wi-Fi 6E allow a maximal number of client devices to attach to the network at the same time without over-air congestion
- Complete NOC functionality with network visibility and AIOps simplify a complex network deployment into a solution manageable by IT teams of any size
Branch Office / SD-Branch
A highly distributed number of small sites, often with no on-site IT.
- Built in NAC functions* allow secure onboarding of devices at remote locations where IT doesn’t have reliable visibility
- Management orchestration with zero-touch deployment allows for quick and easy rollouts without the need for skilled installers at each site
Micro Branch
Ultra small sites that still fall under IT’s responsibility
- Can act as a SASE endpoint as a foundation for zero-trust network access (ZTNA)
- Simple management and provisioning through FortiSASE interface
Remote Workers
A remote AP installed at a worker’s home or at micro-branch office space.
- Split tunneling allows local traffic to remain local while sending other traffic to the data center for inspection when needed
- Desktop mounting options for wall-plate models allow the use of Ethernet as well as Wi-Fi connectivity while leveraging the same secure tunnel
SMB
Single site or small collection of sites with limited IT resources.
- Built-in NAC functions* bring security to the wireless network with no need to install and manage additional products
- Network and security convergence decreases management overhead while keeping the network secure
*FortiGate-managed installations only.
Specifications:
| FortiAP 432FR | |
|---|---|
| Hardware | |
| Hardware Type | Indoor / Outdoor / Industrial AP |
| Number of Radios | 3 + 1 BLE |
| Number of Antennas | 4 dual band WiFi + 1 dual band scanning + 1 single band 2.4 GHz BLE/ZigBee |
| Antenna Type and Peak Gain | WiFi and scanning radio dual band antenna: 5.5 dBi in 2.4 GHz and 7.2 dBi in 5 GHz band BLE antenna: 5.0 dBi in 2.4 GHz band |
| Frequency Bands (GHz) | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850 |
| Radio 1 Capabilities | Frequency band: 2.4 GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024 QAM MIMO Chains: 4x4 Service |
| Radio 2 Capabilities | Frequency band: 5.0 GHz Channel width: 4x4 20/40/80MHz and 2x2 160 MHz contiguous Modulation: BPSK, QPSK, QAM64, QAM256, and QAM1024 MIMO Chains: 4x4 Service |
| Radio 3 Capabilities | Frequency bands: 2.4 GHz and 5.0 GHz MIMO Chains: 1x1 Frequency Scanning |
| Maximum Data Rate | Radio 1: up to 1147 Mbps Radio 2: up to 2402 Mbps Radio 3: Frequency scanning only |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertisement @ 10 dBm max TX power |
| Interfaces | 1x 10/100/1000/2500 Base-T RJ45,1 x 10/100/1000 Base-T RJ45 (802.3af PoE PSE),1x Type A USB, 1x RS-232 RJ45 Serial Port |
| MDI/MDIX | Supported |
| Simultaneous SSIDs | Up to 8 per client serving radio (7 if background scanning is enabled) |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/Device Authentication | WPA™, WPA2™, and WPA3™ with 802.1x or preshared key, WEP, Web Captive Portal, MAC blocklist & allowlist |
| Maximum Tx Power (Conducted) | Indoor / Outdoor / Industrial: Radio 1: 2.4 GHz 29 dBm / 794 mW (4 chains combined) Radio 2: 5 GHz 28 dBm / 630 mW (4 chains combined) Radio 3: N/A |
| Kensington Lock | No |
| IEEE Standards | 802.11a, 802.11b, 802.11d, 802.11e, 802.11g, 802.11h, 802.11i,802.11j, 802.11k, 802.11n, 802.11r, 802.11u, 802.11v, 802.11w, 802.11ac, 802.11ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad, 802.3af, 802.3at, 802.3az, 802.3bt, 802.3bz |
| SSIDs Supported | Local-Bridge, Tunnel, and Mesh |
| Per Radio Client Capacity | Up to 512 clients per radio (Radio1 and Radio2) |
| Cellular Co-existence | Yes |
| LED Off Mode | Yes |
| Advanced 802.11 Features | |
| OFDMA | Yes (UL and DL) |
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS | No |
| Wireless Monitoring Capabilities | |
| Rogue Scan radio modes | Background, Dedicated |
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
| Dimensions | |
| Length x Width x Height | 8.23 x 8.23 x 2.38 inches (209 x 209 x 60.5 mm) |
| Weight | 5.12 lbs (2.325 kg) |
| Package (shipping) Weight | 12.56.93 lbs (5.7 kg) |
| Accessories | |
| Mounting Options | Wall and Pole |
| Included Accessories | Wall and Pole mounting kit |
| Power Supply | 802.3bt PoE, ships with PoE injector (reset functionality) |
| Optional Antennas (Professional Installer Required for FCC domains) | FANT-04ABGN-0606-O-N FANT-04ABGN-1414-P-N FANT-04ABGN-8065-P-N |
| Environment | |
| Power Consumption (Maximum) | 25 W without PSE out and 37.9 W with PSE out |
| PSE functionality | Yes (while powered by PoE injector shipped with product) |
| PoE Mode | 802.3bt PoE default (ships with Passive PoE injector Powered by 802.3at PoE - Operate in 4x4 mode with reduced Tx power Radio1/R2 17dBm This product only supports PSE functionality when it is powered by PoE injector that ships with the product. |
| Humidity | 10 - 90% non condensing |
| Operating / Storage Temperature | -40°F to 140°F (-40°C to 60°C) / -40°F to 176°F (-40°C to 80°C) |
| Directives | Low Voltage Directive • RoHS |
| UL2043 Plenum Material | No |
| Mean Time Between Failures | > 10 Years |
| IP Rating | IP67 |
| Surge Protection Built In | Yes |
| Hit-less PoE Failover | N/A |
| Certifications | |
| FCC/ISED CE Marked UKCA Marked AS/NZS Radio Equipment Directive (RED) 2014/53/EU UL/IEC/EN 62368-1 IEC 60529 Class I Division 2 (CID2) EN 50385 EN 62311 |
|
| Radio Equipment Directive (RED) | 2014/53/EU |
| WiFi Alliance Certified | Yes (includes Passpoint) |
| DFS | In Process |
| Warranty | |
| Limited Lifetime Warranty | Yes |
Antenna Radiation Patterns
RF Rx/Tx Performance Table:
| Radio1 2.4GHz Band | Radio2 5.0GHz Band | Radio3 6GHz Band | ||||
|---|---|---|---|---|---|---|
| Tx power/chain (dBm) | Rx Sensitivity (dBm) | Tx power/chain (dBm) | Rx Sensitivity (dBm) | Tx power/chain (dBm) | Rx Sensitivity (dBm) | |
| 802.11b | ||||||
| 1 Mbps | 23 | -99 | ||||
| 11 Mbps | 23 | -91 | ||||
| 802.11g/a | 802.11g | 802.11a | ||||
| 6 Mbps | 23 | -94 | 23 | -92 | 17 | -94 |
| 54 Mbps | 23 | -78 | 22 | -75 | 17 | -77 |
| 802.11n HT20 | ||||||
| MSSO | 23 | -94 | 23 | -91 | ||
| MCS7 | 23 | -77 | 21 | -73 | ||
| 802.11n HT40 | ||||||
| MSSO | 23 | -93 | 23 | -89 | ||
| MCS7 | 21 | -74 | 21 | -70 | ||
| 802.11ac VHT20 | ||||||
| MCS0 | 23 | -95 | 23 | -91 | ||
| MCS9 | 21 | -73 | 21 | -70 | ||
| 802.11ac VHT40 | ||||||
| MCS0 | 23 | -92 | 23 | -89 | ||
| MCS9 | 20 | -73 | 20 | -67 | ||
| 802.11ac VHT80 | ||||||
| MCS0 | 22 | -85 | ||||
| MCS9 | 19 | -62 | ||||
| 802.11ax HE20 | ||||||
| MCS0 | 23 | -94 | 22 | -91 | 17 | -94 |
| MCS11 | 20 | -71 | 19 | -63 | 15 | -67 |
| 802.11ax HE40 | ||||||
| MCS0 | 20 | -92 | 22 | -88 | 16 | -91 |
| MCS11 | 17 | -63 | 19 | -60 | 14 | -63 |
| 802.11ax HE80 | ||||||
| MCS0 | 21 | -85 | 16 | -88 | ||
| MCS11 | 18 | -57 | 13 | -61 | ||
| 802.11ax HE160 | ||||||
| MCS0 | 15 | -85 | ||||
| MCS11 | 12 | -58 | ||||
Documentation:
Download the
Fortinet FortiAP Series Datasheet
(PDF).
Pricing Notes:
- FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades - FortiCare Elite Support
FortiCare Premium Support with FortiCare Elite Ticket Handling. - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.
Fortinet Products
FortiAP-432FR Outdoor Wireless FortiAP - Tri radio UL Class 1, Division 2 Certified (1x 802.11b/g/n/ax 4x4 radio, 1 x 802.11a/n/ac/ax 4x4 Radio and 1x 802.11 a/b/g/n/ac Wave 2, 2x2), 1x 10/100/1000/2500 Base-T RJ45, 1x 10/100/1000 Base-T RJ45, BT/BLE + Zigbee, Console Port (RJ45). External Dual Band N-Type Omni Directional antennas, Integrated mounting bracket for Antenna included + Wall/Pole Mount mounting kit. PoE Injector Included. Region Code A
#FAP-432FR-A
Tri radio (1x 802.11b/g/n/ax 4x4 radio, 1 x 802.11a/n/ac/ax 4x4 Radio and 1x 802.11 a/b/g/n/ac Wave 2, 2x2), 1x 10/100/1000/2500 Base-T RJ45, 1x 10/100/1000 Base-T RJ45, BT/BLE + Zigbee, Console Port (RJ45). External Dual Band N-Type Omni Directional antennas, Integrated mounting bracket for Antenna included + Wall/Pole Mount mounting kit. For power order: 802.3at PoE injector GPI-130 or AC adapter SP-FAP400-PA Region Code A
FortiAP-432FR FortiCare Premium Support
FortiAP-432FR FortiCare Elite Support
FortiAP-432FR FortiCare Elite Support
FortiAP-432FR 1 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-FR432-314-02-12
FortiAP-432FR 3 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-FR432-314-02-36
FortiAP-432FR 5 Year Forticare Essential Support for FortiAP. Available only for renewal and not with initial Hardware purchase
#FC-10-FR432-314-02-60