Fortinet
FC-10-PF432-247-02-12Fortinet FortiAP 432F
List PriceThe FortiAP 432F is an enterprise-class 802.11ax ruggedised indoor/outdoor access point with three radios and four spatial streams. Its 802.11ax radios are rated at up to 1,147 Mbps on 2.4 GHz and up to 2,402 Mbps on 5 GHz — lower ceilings than newer 4x4 FortiAP-F models such as the 431F/433F (up to 4,804 Mbps), reflecting its position as an earlier model in the current Wi-Fi 6 line-up.
FortiAP access points are managed centrally through the integrated WLAN controller of any FortiGate security appliance, or through the FortiLAN Cloud provisioning and management portal. With wireless controller functionality built into the FortiGate appliance, Fortinet’s Security Fabric lets you manage wired and wireless security from a single console and protects the network from current threats.
The 432F supports a range of installation topologies, from a single multi-floor building to a campus of several large buildings.
Key features
- 4x4 Wi-Fi 6 (802.11ax) ruggedised indoor/outdoor access point, IP67-rated
- Radio 1 up to 1,147 Mbps (2.4 GHz, 4x4), Radio 2 up to 2,402 Mbps (5 GHz, 4x4), Radio 3 dedicated to frequency scanning
- Integrated BLE radio for beacon and locationing use cases
- 1x 2.5GE + 1x GE RJ45 (802.3af PoE PSE) ports, plus USB-A and RS-232 serial
- 802.3bt PoE by default, ships with a passive PoE injector with reset switch
- Up to 8 SSIDs per client-serving radio (7 with background scanning enabled)
- WPA3, WPA2, 802.1X, MAC allow/block lists and captive portal authentication
- Wall/pole mounting kit included; Wi-Fi Alliance certified, including Passpoint
- Managed via the integrated FortiGate WLAN controller, FortiLAN Cloud, or as a FortiSASE cloud-managed AP
Works with
- FortiGate firewalls — pair with a FortiGate to manage the AP through its integrated WLAN controller
- the Fortinet range
Frequently asked questions
How is the FortiAP 432F managed?
Centrally, through the integrated WLAN controller of any FortiGate security appliance, the FortiLAN Cloud provisioning and management portal, or as a FortiSASE cloud-managed access point.
What's the difference between FortiCare Premium and Elite support?
Both are annual FortiCare support subscriptions for this access point; Elite is priced above Premium as the higher tier, and both are offered here for a 1-year term.
What power does the 432F need?
It's powered by 802.3bt PoE by default, ships with a passive PoE injector with reset switch, and draws up to 25 W (37.9 W with PSE output active).
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware Type | Ruggedized indoor/outdoor AP |
|---|---|
| Number of Radios | 3 + 1 BLE |
| Number of Antennas | 4 dual band WiFi + 1 dual band scanning + 1 single band 2.4 GHz BLE/ZigBee |
| Antenna Type and Peak Gain | WiFi and scanning radio dual band antenna: 5.5 dBi in 2.4 GHz and 7.2 dBi in 5 GHz band BLE antenna: 5.0 dBi in 2.4 GHz band |
| Frequency Bands (GHz) | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850 |
| Radio 1 Capabilities | Frequency band: 2.4 GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024 QAM MIMO Chains: 4x4 Service |
| Radio 2 Capabilities | Frequency band: 5.0 GHz Channel width: 4x4 20/40/80MHz and 2x2 160 MHz contiguous Modulation: BPSK, QPSK, QAM64, QAM256, and QAM1024 MIMO Chains: 4x4 Service |
| Radio 3 Capabilities | Frequency bands: 2.4 GHz and 5.0 GHz MIMO Chains: 1x1 Frequency Scanning |
| Maximum Data Rate | Radio 1: up to 1147 Mbps Radio 2: up to 2402 Mbps Radio 3: Frequency scanning only |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertisement @ 10 dBm max TX power |
| Interfaces | 1x 10/100/1000/2500 Base-T RJ45,1 x 10/100/1000 Base-T RJ45 (802.3af PoE PSE),1x Type A USB, 1x RS-232 RJ45 Serial Port |
| MDI/MDIX | Supported |
| Simultaneous SSIDs | Up to 8 per client serving radio (7 if background scanning is enabled) |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/Device Authentication | WPA™, WPA2™, and WPA3™ with 802.1x or preshared key, WEP, Web Captive Portal, MAC blocklist & allowlist |
| Maximum Tx Power (Conducted) | Radio 1: 2.4 GHz 30 dBm / 1000 mW (4 chains combined)* Radio 2: 5 GHz 26 dBm / 398 mW (4 chains combined)* Radio 3: N/A |
| Kensington Lock | Yes |
| IEEE Standards | 802.11a, 802.11b, 802.11d, 802.11e, 802.11g, 802.11h, 802.11i,802.11j, 802.11k, 802.11n, 802.11r, 802.11u, 802.11v, 802.11w, 802.11ac, 802.11ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad, 802.3af, 802.3at, 802.3az, 802.3bt, 802.3bz |
| SSIDs Supported | Local-Bridge, Tunnel, and Mesh |
| Per Radio Client Capacity | Up to 512 clients per radio (Radio1 and Radio2) |
| Cellular Co-existence | Yes |
| LED Off Mode | Yes |
Advanced 802.11 features
| OFDMA | Yes (UL and DL) |
|---|---|
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS | No |
Wireless monitoring
| Rogue Scan radio modes | Background, Dedicated |
|---|---|
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
Dimensions
| Length x Width x Height | 8.23 x 8.23 x 2.38 inches (209 x 209 x 60.5 mm) |
|---|---|
| Weight | 5.12 lbs (2.325 kg) |
| Package (shipping) Weight | 12.56.93 lbs (5.7 kg) |
Accessories
| Mounting Options | Wall and Pole |
|---|---|
| Included Accessories | Wall and Pole mounting kit |
| Power Supply | 802.3bt PoE, ships with PoE injector (reset functionality) |
| Optional Antennas (Professional Installer Required for FCC domains) | FANT-04ABGN-0606-O-N FANT-04ABGN-1414-P-N FANT-04ABGN-8065-P-N |
Environment
| Power Consumption (Maximum) | 25 W without PSE out and 37.9 W with PSE out |
|---|---|
| PSE functionality | Yes (while powered by PoE injector shipped with product) |
| PoE Mode | 802.3bt PoE default (ships with Passive PoE injector Powered by 802.3at PoE - Operate in 4x4 mode with reduced Tx power Radio1/R2 17dBm This product only supports PSE functionality when it is powered by PoE injector that ships with the product. |
| Humidity | 10 - 90% non condensing |
| Operating / Storage Temperature | -40°F to 140°F (-40°C to 60°C) / -40°F to 176°F (-40°C to 80°C) |
| Directives | Low Voltage Directive • RoHS |
| UL2043 Plenum Material | No |
| Mean Time Between Failures | > 10 Years |
| IP Rating | IP67 |
| Surge Protection Built In | Yes |
| Hit-less PoE Failover | N/A |
Certifications
| WiFi Alliance Certified | Yes (includes Passpoint) |
|---|---|
| DFS | FCC, IC, CE, Japan, Brazil and Taiwan |
Warranty
| Limited Lifetime Warranty | Yes |
|---|
Product details
| Brand | Fortinet |
|---|
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.