Fortinet
FC-10-PG431-247-02-12Fortinet FortiAP 431G
List PriceFortiAP access points are managed centrally through the integrated WLAN controller built into any FortiGate security appliance, or via the FortiLAN Cloud provisioning and management portal. Because wireless control sits inside the FortiGate appliance itself, this suits campus and branch deployments where wired and wireless security are run from a single console as part of Fortinet's Security Fabric.
The FortiAP-431G is an indoor Wi-Fi 6E access point with three radios covering 2.4GHz, 5GHz and 6GHz simultaneously (6GHz band availability is subject to regional regulatory approval), using internal antennas. It runs 4x4:4 MIMO on each Wi-Fi radio, adds an integrated Bluetooth Low Energy radio for beacon and locationing use, and connects over two 5 Gigabit Ethernet ports.
Wireless traffic can be protected by the same firewall, IPS, application control and web filtering engines used on the wired network, giving consistent policy enforcement across a site and helping satisfy PCI DSS requirements for wireless.
Key features
- Tri-radio Wi-Fi 6E (802.11ax): simultaneous 2.4GHz, 5GHz and 6GHz operation, 4x4:4 MIMO per radio (6GHz subject to regional regulatory approval)
- Internal antennas
- Up to 4,804 Mbps on the 6GHz radio, 2,402 Mbps on 5GHz, and 1,148 Mbps on 2.4GHz
- UL/DL MU-MIMO, OFDMA and Spatial Reuse (BSS Coloring) support
- Integrated Bluetooth Low Energy radio for beacon and locationing applications
- Up to 24 simultaneous SSIDs, up to 512 clients per radio
- Two 5 Gigabit Ethernet (5GE) RJ45 ports, powered by 802.3bt PoE or dual 802.3at PoE
- Rogue Scan, WIPS/WIDS, packet sniffer and spectrum analyser modes built in
- Managed by an integrated FortiGate WLAN controller, FortiLAN Cloud, or a FortiSASE cloud-management subscription
- Ceiling, T-Rail and wall mount kit included
Works with
- FortiGate firewalls — pair with a FortiGate for integrated WLAN controller management
- the Fortinet range
Frequently asked questions
How is the FortiAP-431G managed?
Centrally, through the integrated WLAN controller on a FortiGate security appliance or the FortiLAN Cloud provisioning portal, or via a FortiSASE cloud-management subscription for sites without an on-site controller — a FortiSASE option is included in this listing.
What's the difference between FortiCare Premium and FortiCare Elite support?
Both are FortiCare support subscriptions for this AP, available in the terms shown below; FortiCare Elite is Fortinet's higher-tier option, priced above Premium.
How is the FortiAP-431G powered?
By a single 802.3bt PoE connection by default, or dual 802.3at PoE for current sharing. An SP-FAP250-PA AC power adapter is also available for locations without PoE.
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware Type | Indoor AP |
|---|---|
| Number of Radios | 3 + 1 BLE |
| Number of Antennas | Internal x4 dual-band Wi-Fi + x4 tri-band Wi-Fi & scanning + 1 single-band 2.4GHz BLE/ZigBee |
| Antenna Type and Peak Gain | PIFA antenna. Dual band: 4.0 dBi (2.4GHz), 5.6 dBi (5GHz). Tri-band: 4.0 dBi (2.4GHz), 6.0 dBi (5GHz), 5.7 dBi (6GHz). BLE antenna: 5.1 dBi (2.4GHz) |
| Frequency Bands (GHz) | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850, 5.925–6.425, 6.425–6.525, 6.525–7, 5.925–6.875, 6.875–7.125 |
| Radio 1 Capabilities | 2.4GHz, 20/40MHz channel width, BPSK/QPSK/64/256/1024 QAM, 4x4 MIMO |
| Radio 2 Capabilities | 5.0GHz, 20/40/80/80+80MHz channel width, BPSK/QPSK/64/256/1024 QAM, 4x4 MIMO |
| Radio 3 Capabilities | 6.0GHz, 20/40/80/160MHz channel width, BPSK/QPSK/64/256/1024 QAM, 4x4 service + 2x2 scanning |
| Maximum Data Rate | Radio 1: up to 1,148 Mbps. Radio 2: up to 2,402 Mbps. Radio 3: up to 4,804 Mbps |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertisement @ 10 dBm max TX power |
| Interfaces | 2x 100/1000/2500/5000 Base-T RJ45, 1x Type 3.0 USB, 1x RS-232 RJ45 serial console |
| Power over Ethernet (PoE) | 1x 802.3bt PoE default, or 2x 802.3at PoE (dual PoE current sharing) |
| Simultaneous SSIDs | Up to 24 |
| Maximum Tx Power (Conducted) | Radio 1 2.4GHz: 27 dBm/501 mW (4 chains combined). Radio 2 5GHz: 26 dBm/400 mW (4 chains combined). Radio 3 6GHz: 24 dBm/251 mW (4 chains combined @ 160MHz BW) |
| Kensington Lock | Yes |
Wireless features
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
|---|---|
| User/Device Authentication | WPA, WPA2 and WPA3 with 802.1x or preshared key, WEP, web captive portal, MAC blocklist & allowlist |
| SSID Types Supported | Local-Bridge, Tunnel, and Mesh |
| Per Radio Client Capacity | Up to 512 clients per radio |
| IEEE Standards | 802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.11ax, 802.1X, 802.3ad, 802.3at, 802.3bt, 802.3az |
Advanced 802.11 features
| OFDMA | Yes |
|---|---|
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS | No |
Wireless monitoring
| Rogue Scan radio modes | Background, Dedicated |
|---|---|
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
Dimensions
| Length x Width x Height | 8.85 x 8.85 x 2.12 inches (225.0 x 225.0 x 54.0 mm) |
|---|---|
| Weight | 3.05 lbs (1.4 kg) |
| Mounting Options | Ceiling, T-Rail, and Wall |
| Included Accessories | Standard mount kit for ceiling, T-Rail, and wall |
Environment
| Power Supply | SP-FAP400-PA-XX AC adapter or 802.3bt PoE; also supports dual PoE sharing with 2x 802.3at PoE (GPI-130) or single 802.3at PoE (GPI-130) with no USB and reduced transmit power |
|---|---|
| Power Consumption (Maximum) | 31.7 Watts |
| Humidity | 5–90% non-condensing |
| Operating / Storage Temperature | 32°–122°F (0°–50°C) / -22°–158°F (-30°–70°C) |
| Mean Time Between Failures | > 10 years |
| Surge Protection Built In | Yes |
Certifications
| WiFi Alliance Certified | Yes |
|---|---|
| DFS | CE |
Warranty
| Limited Lifetime Warranty | Yes |
|---|
Product details
| Brand | Fortinet |
|---|---|
| Part number | FAP-431G-E |
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.