Fortinet
FC-10-F431F-247-02-12Fortinet FortiAP 431F
List PriceThe Fortinet FortiAP 431F is a high-throughput, enterprise-class Wi-Fi 6 (802.11ax) indoor access point with three radios and 8 spatial streams across its 4x4 MU-MIMO data radios. A 2.5 Gigabit Ethernet port plus an additional 1 Gbps Ethernet port give PoE diversity for high-capacity deployments.
A dedicated scanning radio provides 24/7 background scanning across both bands while the two main radios continue serving 2.4GHz and 5GHz clients, and the integrated Bluetooth Low Energy radio supports beacon and locationing applications.
It is managed centrally through the integrated WLAN controller of a FortiGate security appliance or through the FortiAP Cloud provisioning and management portal, with Integrated Firewall, IPS, Application Control and Web Filter extending Fortinet's Security Fabric protection to the wireless LAN and helping satisfy PCI DSS compliance.
Key features
- Tri-radio, 8 spatial-stream design — two 4x4 MU-MIMO Wi-Fi radios (2.4GHz up to 1147 Mbps, 5GHz up to 2402 Mbps) plus a dedicated 2.4/5GHz scanning radio
- 2.5 Gigabit Ethernet uplink plus a secondary 1 Gbps port for PoE diversity, USB Type A and an RS-232 serial console port
- Wi-Fi 6 efficiency features — OFDMA (UL and DL), Spatial Reuse (BSS Coloring), UL/DL MU-MIMO, HE-MU-MIMO and Target Wake Time
- Built-in Bluetooth Low Energy radio for iBeacon advertisement and BLE scanning
- Dedicated security scanning radio supporting WIPS/WIDS and rogue AP detection, plus packet sniffer and spectrum analyzer tools
- Up to 16 simultaneous SSIDs (14 with background scanning enabled)
- WPA3, WPA2 and 802.1X authentication, Web Captive Portal, and MAC blocklist/allowlist
- Managed by FortiGate (integrated wireless controller) or FortiAP Cloud, with an optional FortiSASE subscription for cloud-managed deployments
- Hit-less PoE failover support, ceiling, T-Rail or wall mountable
- Backed by a limited lifetime hardware warranty
Works with
- FortiGate firewalls — for integrated WLAN controller management
- The Fortinet range
Frequently asked questions
How is the FortiAP-431F managed?
Either through the integrated WLAN controller built into any FortiGate security appliance, through the FortiAP Cloud provisioning and management portal, or via a FortiSASE subscription for cloud-managed deployments — all under Fortinet's Security Fabric single-pane-of-glass console.
What's the difference between FortiCare Premium and Elite Support?
Both are FortiCare support subscriptions for the FortiAP-431F. Elite Support sits above Premium as the higher tier — Fortinet also sells a Premium-to-Elite upgrade SKU, confirming Elite is a superset of Premium cover rather than a separate track.
What power does the FortiAP-431F need?
It uses 802.3at PoE by default. One port powered by 802.3at, or two ports powered by 802.3af, gives full system functionality including USB support; a single 802.3af port disables USB and runs the radios in a reduced-power 2x2 mode. Power can also be supplied via the SP-FAP400-PA-XX AC adaptor or GPI-130 injector.
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware type | Indoor AP |
|---|---|
| Number of radios | 3 + 1 BLE |
| Number of antennas | 5 internal + 1 BLE internal |
| Antenna type and peak gain | PIFA: 4 dBi for 2.4GHz, 5 dBi for 5GHz |
| Frequency bands | 2.400–2.4835 GHz, 5.150–5.250 GHz, 5.250–5.350 GHz, 5.470–5.725 GHz, 5.725–5.850 GHz |
| Radio 1 | 2.4GHz, 20/40MHz channel width, BPSK/QPSK/QAM64/256/1024, 4x4 MIMO |
| Radio 2 | 5.0GHz, 20/40/80MHz (4x4) and 160MHz contiguous (2x2), BPSK/QPSK/QAM64/256/1024, 4x4 MIMO |
| Radio 3 | 2.4/5.0GHz, 1x1 MIMO, frequency scanning |
| Maximum data rate | Radio 1: up to 1147 Mbps; Radio 2: up to 2402 Mbps; Radio 3: scan only |
| Bluetooth Low Energy radio | Bluetooth scanning and iBeacon advertisement at 6 dBm max TX power |
| Interfaces | 1x 100/1000/2500 Base-T RJ45, 1x 10/100/1000 Base-T RJ45, 1x USB Type A, 1x RS-232 RJ45 serial port |
| Power over Ethernet | 802.3at PoE default; one 802.3at port or two 802.3af ports give full system + USB; a single 802.3af port disables USB and runs 2x2 mode with reduced Tx power |
| Simultaneous SSIDs | Up to 16 (14 if background scanning enabled) |
| EAP types | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/device authentication | WPA, WPA2 and WPA3 with 802.1X or preshared key, WEP, Web Captive Portal, MAC blocklist and allowlist |
| Maximum Tx power (conducted) | Radio 1 (2.4GHz): 24 dBm / 251 mW; Radio 2 (5GHz): 23 dBm / 200 mW (4 chains combined) |
| Per-radio client capacity | 512 clients per radio (Radio 1 and Radio 2) |
| SSID types supported | Local-Bridge, Tunnel, and Mesh |
| Kensington lock | Yes |
| Cellular co-existence | Yes |
| IEEE standards | 802.11a/b/d/e/g/h/i/j/k/n/r/v/w/ac/ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad/af/at/az/bz |
Advanced 802.11 features
| OFDMA | Yes (UL and DL) |
|---|---|
| 2.4 GHz OFDMA | Yes |
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO (802.11ax mode) | Yes |
| DL-MU-MIMO | Yes |
| HE-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS / Agile DFS | No |
Wireless monitoring capabilities
| Rogue scan radio modes | Background, Dedicated |
|---|---|
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet sniffer mode | Yes |
| Spectrum analyzer | Yes |
Dimensions
| Length x width x height | 8.27 x 8.27 x 2.22 inches (210 x 210 x 56.5 mm) |
|---|---|
| Weight | 2.16 lbs (0.98 kg) |
| Mounting options | Ceiling, T-Rail, and Wall |
| Included accessories | Mount kit for ceiling, T-Rail and wall |
Environment
| Power supply | SP-FAP400-PA-XX or GPI-130 |
|---|---|
| Power consumption (maximum) | 24.5 W |
| Humidity | 5–90% non-condensing |
| Operating / storage temperature | 32–113°F (0–45°C) / -31–-94°F (-35–70°C) |
| Directives | Low Voltage Directive, RoHS |
| Mean time between failures | > 10 years |
| Surge protection built in | Yes |
| Hit-less PoE failover | Yes |
Certifications and warranty
| Wi-Fi Alliance certified | Yes |
|---|---|
| DFS | FCC, IC, CE, Japan, Korea, Taiwan |
| Limited lifetime warranty | Yes |
Product details
| Brand | Fortinet |
|---|---|
| Part number | FAP-431F-E |
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.