Fortinet
FC-10-PF231-247-02-12Fortinet FortiAP 231F
List PriceThe Fortinet FortiAP 231F is a 2x2 MU-MIMO Wi-Fi 6 (802.11ax) indoor access point with a dedicated third radio for background scanning and Bluetooth Low Energy. It is managed centrally either through the integrated WLAN controller of a FortiGate security appliance or through the FortiAP Cloud provisioning and management portal, putting wireless LAN edge security under the same policy console as the rest of the network.
Because wireless management sits inside Fortinet's Security Fabric, wired and wireless traffic are handled from a single pane of glass. Integrated Firewall, IPS, Application Control and Web Filtering extend to the wireless LAN rather than stopping at the switch.
The unified console keeps policy enforcement and compliance consistent across sites, and the FortiAP-231F's advanced 802.11 feature set is built to satisfy PCI DSS wireless requirements out of the box.
Key features
- Tri-radio design — two 2x2 MU-MIMO Wi-Fi radios (2.4GHz up to 574 Mbps, 5GHz up to 1201 Mbps) plus a dedicated 2.4/5GHz scanning radio
- Wi-Fi 6 efficiency features — OFDMA, Spatial Reuse (BSS Coloring), UL and DL MU-MIMO, and Target Wake Time
- Built-in Bluetooth Low Energy radio for iBeacon advertisement and BLE scanning
- Dedicated security scanning radio supporting WIPS/WIDS and rogue AP detection in background or dedicated mode, plus packet sniffer and spectrum analyzer tools
- Up to 16 simultaneous SSIDs (14 with background scanning enabled)
- WPA3, WPA2 and 802.1X authentication, Web Captive Portal, and MAC blocklist/allowlist
- Managed by FortiGate (integrated wireless controller) or FortiAP Cloud, with an optional FortiSASE subscription for cloud-managed deployments
- 802.3at PoE powered, ceiling, T-Rail or wall mountable
- Backed by a limited lifetime hardware warranty
Works with
- FortiGate firewalls — for integrated WLAN controller management
- The Fortinet range
Frequently asked questions
How is the FortiAP-231F managed?
Either through the integrated WLAN controller built into any FortiGate security appliance, through the FortiAP Cloud provisioning and management portal, or via a FortiSASE subscription for cloud-managed deployments — all under Fortinet's Security Fabric single-pane-of-glass console.
What's the difference between FortiCare Premium and Elite Support?
Both are annual FortiCare support subscriptions for the FortiAP-231F. Elite Support sits above Premium as the higher tier — Fortinet also sells a Premium-to-Elite upgrade SKU, confirming Elite is a superset of Premium cover rather than a separate track.
What power does the FortiAP-231F need?
It is powered by 802.3at PoE by default (802.3af PoE also works but disables the USB port), with a maximum power draw of 17W. Power can be supplied via a PoE switch/injector or the SP-FAP200-PA-XX AC adaptor or GPI-130 injector.
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware type | Indoor AP |
|---|---|
| Number of radios | 3 + 1 BLE |
| Number of antennas | 3 dual band internal Wi-Fi + 1 BLE/ZigBee |
| Antenna type and peak gain | PIFA antenna, dual band: 4.5dBi for 2.4GHz and 5.5dBi for 5GHz; BLE antenna 4.0dBi at 2.4GHz |
| Frequency bands | 2.400–2.4835 GHz, 5.150–5.250 GHz, 5.250–5.350 GHz, 5.470–5.725 GHz, 5.725–5.850 GHz |
| Radio 1 | 2.4GHz, 20/40MHz channel width, BPSK/QPSK/64/256/1024 QAM, 2x2 MIMO |
| Radio 2 | 5.0GHz, 20/40/80MHz channel width, BPSK/QPSK/64/256/1024 QAM, 2x2 MIMO |
| Radio 3 | 2.4GHz and 5.0GHz, 1x1 MIMO, frequency scanning |
| Maximum data rate | Radio 1: up to 574 Mbps; Radio 2: up to 1201 Mbps; Radio 3: scanning only |
| Bluetooth Low Energy radio | Bluetooth scanning and iBeacon advertisement at 10 dBm max TX power |
| Interfaces | 2x 10/100/1000 Base-T RJ45, 1x USB 2.0, 1x RS-232 RJ45 serial port |
| Power over Ethernet | 1x 802.3at PoE (default); 1x 802.3af PoE (no USB function) |
| Simultaneous SSIDs | Up to 16 (14 if background scanning enabled) |
| EAP types | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/device authentication | WPA, WPA2 and WPA3 with 802.1X or preshared key, WEP, Web Captive Portal, MAC blocklist & allowlist |
| Maximum Tx power (conducted) | Radio 1 (2.4GHz): 23 dBm / 200 mW; Radio 2 (5GHz): 22 dBm / 158 mW (2 chains combined) |
| Per-radio client capacity | Up to 512 clients per radio (Radio 1 and Radio 2) |
| SSID types supported | Local-Bridge, Tunnel, and Mesh |
| Kensington lock | Yes |
| Cellular co-existence | Yes |
| IEEE standards | 802.11a/b/e/g/h/i/j/k/n/r/v/ac/ax, 802.1Q, 802.1X, 802.3ad/af/at/az |
Advanced 802.11 features
| OFDMA | Yes |
|---|---|
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO (802.11ax mode) | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS / Agile DFS | No |
Wireless monitoring capabilities
| Rogue scan radio modes | Background, Dedicated |
|---|---|
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet sniffer mode | Yes |
| Spectrum analyzer | Yes |
Dimensions
| Length x width x height | 6.0 x 6.0 x 2.86 inches (153.2 x 153.2 x 53.0 mm) |
|---|---|
| Weight | 1.0 lbs (0.543 kg) |
| Package (shipping) weight | 2.1 lbs (0.95 kg) |
| Mounting options | Ceiling, T-Rail, and Wall |
| Included accessories | Standard mount kit for ceiling, T-Rail, and wall |
Environment
| Power supply | 802.3at PoE, SP-FAP200-PA-XX or GPI-130 |
|---|---|
| Power consumption (maximum) | 17 W |
| Humidity | 5–90% non-condensing |
| Operating / storage temperature | 32–122°F (0–50°C) / -22–158°F (-30–70°C) |
| Directives | Low Voltage Directive, RoHS |
| Mean time between failures | > 10 years |
| Surge protection built in | Yes |
Certifications and warranty
| Wi-Fi Alliance certified | No |
|---|---|
| DFS | CE |
| Limited lifetime warranty | Yes |
Product details
| Brand | Fortinet |
|---|---|
| Part number | FortiAP-231F |
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.