Fortinet
FAP-23JF-EFortinet FortiAP 23JF
List PriceThe Fortinet FortiAP 23JF is a 2x2 MU-MIMO Wi-Fi 6 (802.11ax) wall-plate access point built to sit directly on a wall jack, with four Gigabit Ethernet ports for pass-through wired devices. It is managed centrally either through the integrated WLAN controller of a FortiGate security appliance or through the FortiAP Cloud provisioning and management portal.
Because wireless management sits inside Fortinet's Security Fabric, wired and wireless traffic are handled from a single pane of glass. Integrated Firewall, IPS, Application Control and Web Filtering extend to the wireless LAN rather than stopping at the switch.
The unified console keeps policy enforcement and compliance consistent across sites, and the FortiAP-23JF's advanced 802.11 feature set is built to satisfy PCI DSS wireless requirements out of the box.
Key features
- Tri-radio design — two 2x2 MU-MIMO Wi-Fi radios (2.4GHz up to 574 Mbps, 5GHz up to 1200 Mbps) plus a dedicated 2.4/5GHz scanning radio
- Wall-plate form factor with 4x 10/100/1000 RJ45 ports — 1x 802.3at PoE PD (device), 1x 802.3af PoE PSE (pass-through power out), 2x non-PoE, plus pass-through in/out and an RS-232 serial console port
- Wi-Fi 6 efficiency features — OFDMA, Spatial Reuse (BSS Coloring), UL and DL MU-MIMO, and Target Wake Time
- Built-in Bluetooth Low Energy radio for iBeacon advertisement and BLE scanning
- Dedicated security scanning radio supporting WIPS/WIDS and rogue AP detection in background or dedicated mode, plus packet sniffer and spectrum analyzer tools
- Up to 16 simultaneous SSIDs (14 with background scanning enabled)
- WPA3, WPA2 and 802.1X authentication, Web Captive Portal, and MAC blocklist/allowlist
- Managed by FortiGate (integrated wireless controller) or FortiAP Cloud, with an optional FortiSASE subscription for cloud-managed deployments
- Backed by a limited lifetime hardware warranty
Works with
- FortiGate firewalls — for integrated WLAN controller management
- The Fortinet range
Frequently asked questions
How is the FortiAP-23JF managed?
Either through the integrated WLAN controller built into any FortiGate security appliance, through the FortiAP Cloud provisioning and management portal, or via a FortiSASE subscription for cloud-managed deployments — all under Fortinet's Security Fabric single-pane-of-glass console.
What's the difference between FortiCare Premium and Elite Support?
Both are FortiCare support subscriptions for the FortiAP-23JF available in 1, 3 and 5-year terms. Elite Support sits above Premium as the higher tier — Fortinet also sells a Premium-to-Elite upgrade SKU, confirming Elite is a superset of Premium cover rather than a separate track.
What power does the FortiAP-23JF need?
It is powered by 802.3at PoE by default via the GPI-130 injector, giving full radio functionality plus PSE pass-through power. An optional DC power adaptor (SP-FAP23J-PA-10, sold without power cord) is also available. Maximum power consumption is 17 W.
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware type | Indoor wall-jack / desktop AP |
|---|---|
| Number of radios | 3 + 1 BLE |
| Number of antennas | 4 single band Wi-Fi + 1 dual band scanning + 1 single band 2.4GHz BLE/ZigBee |
| Antenna type and peak gain | PCB antenna, dual band: 4.0 dBi in 2.4GHz and 4.0 dBi in 5GHz; BLE antenna: 3.5 dBi in 2.4GHz |
| Frequency bands | 2.400–2.4835 GHz, 5.150–5.250 GHz, 5.250–5.350 GHz, 5.470–5.725 GHz, 5.725–5.850 GHz |
| Radio 1 | 2.4GHz, 20/40MHz channel width, BPSK/QPSK/64/256/1024 QAM, 2x2 MIMO |
| Radio 2 | 5.0GHz, 20/40/80MHz channel width, BPSK/QPSK/64/256/1024 QAM, 2x2 MIMO |
| Radio 3 | 2.4GHz and 5.0GHz, 1x1 MIMO, frequency scanning |
| Maximum data rate | Radio 1: up to 574 Mbps; Radio 2: up to 1200 Mbps; Radio 3: scanning only |
| Bluetooth Low Energy radio | Bluetooth scanning and iBeacon advertisement at 10 dBm max TX power |
| Interfaces | 7x 10/100/1000 Base-T RJ45 ports: 1x 802.3at PoE (PD), 1x 802.3af PoE (PSE), 2x non-PoE, 1x pass-through in, 1x pass-through out, 1x RS-232 serial |
| Power over Ethernet | 802.3at PoE default — powers all radios plus USB and PSE pass-through (7W); 802.3af PoE gives radio functionality only; DC adaptor powers all radios, USB and PSE (802.3af) |
| Simultaneous SSIDs | Up to 16 (14 if background scanning enabled) |
| EAP types | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/device authentication | WPA, WPA2 and WPA3 with 802.1X or preshared key, WEP, Web Captive Portal, MAC blocklist & allowlist |
| Maximum Tx power (conducted) | Radio 1 (2.4GHz): 23 dBm / 200 mW; Radio 2 (5GHz): 22 dBm / 158 mW (2 chains combined) |
| Per-radio client capacity | Up to 512 clients per radio (Radio 1 and Radio 2) |
| SSID types supported | Local-Bridge, Tunnel, and Mesh |
| Kensington lock | Yes |
| Cellular co-existence | Yes |
| IEEE standards | 802.11a/b/e/g/h/i/j/k/n/r/v/ac/ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad/af/at/az/bz |
Advanced 802.11 features
| OFDMA | Yes |
|---|---|
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO (802.11ax mode) | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS / Agile DFS | No |
Wireless monitoring capabilities
| Rogue scan radio modes | Background, Dedicated |
|---|---|
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet sniffer mode | Yes |
| Spectrum analyzer | Yes |
Dimensions
| Length x width x height | 6.6 x 4.6 x 1.1 inches (168 x 117 x 28 mm) |
|---|---|
| Weight | 0.99 lbs (0.45 kg) |
| Package (shipping) weight | 1.54 lbs (0.7 kg) |
| Mounting options | Wall plate; optional desk mount FAP-MNT-WJ-20 |
Environment
| Power supply | 802.3at PoE: GPI-130; optional DC power adaptor SP-FAP23J-PAX-10 |
|---|---|
| PSE functionality | Yes |
| Power consumption (maximum) | 17 W |
| Humidity | 10–90% non-condensing |
| Operating / storage temperature | 32–122°F (0–50°C) / -22–158°F (-30–70°C) |
| Directives | Low Voltage Directive, RoHS |
| Mean time between failures | > 10 years |
| Surge protection built in | Yes |
Certifications and warranty
| Wi-Fi Alliance certified | No |
|---|---|
| DFS | No |
| Limited lifetime warranty | Yes |
Product details
| Brand | Fortinet |
|---|---|
| Part number | FAP-23JF-E |
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.