Fortinet
FC-10-F433F-247-02-12Fortinet FortiAP 433F
List PriceThis high-throughput, enterprise-class 802.11ax indoor AP carries three radios and eight spatial streams in total. It supports OFDMA, a 2.5 Gigabit Ethernet port and a second Gigabit Ethernet port for PoE diversity, and can scan continuously across both bands while still serving clients on 2.4 GHz and 5 GHz; the integrated BLE radio supports beacon and locationing use cases.
A unified management console simplifies operations, keeping policy enforcement and compliance consistent across the wireless estate.
Wireless LAN security from the leader in network security: an integrated firewall, IPS, application control and web filtering protect the wireless LAN from current threats, supporting PCI DSS compliance.
Key features
- 4x4 Wi-Fi 6 (802.11ax) indoor access point with three radios, external RP-SMA antennas
- Radio 1 up to 1,147 Mbps (2.4 GHz), Radio 2 up to 2,402 Mbps (5 GHz), Radio 3 dedicated to scanning
- 1x 2.5GE + 1x GE RJ45 ports for PoE diversity, plus USB-A and RS-232 serial
- 802.3at PoE by default; can run in a reduced-power 2x2 mode from a single 802.3af port (USB disabled)
- Up to 16 simultaneous SSIDs (14 with background scanning enabled)
- WPA3, WPA2, 802.1X, MAC allow/block lists and captive portal authentication
- Wi-Fi Alliance certified; Kensington lock point
- Managed via the integrated FortiGate WLAN controller, FortiAP Cloud, or as a FortiSASE cloud-managed AP
Works with
- FortiGate firewalls — pair with a FortiGate to manage the AP through its integrated WLAN controller
- the Fortinet range
Frequently asked questions
How is the FortiAP 433F managed?
It can be managed through the integrated WLAN controller of a FortiGate security appliance, the FortiAP Cloud portal, or as a FortiSASE cloud-managed access point.
What's the difference between FortiCare Premium and Elite support?
Both are annual FortiCare support subscriptions for this access point; Elite is priced above Premium as the higher tier, and both are offered here for a 1-year term.
What PoE does the 433F need?
802.3at PoE is the default; the AP draws up to 24.5 W and can also run from a single 802.3af port in a reduced-power 2x2 mode with USB disabled.
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware Type | Indoor AP |
|---|---|
| Number of Radios | 3 + 1 BLE |
| Number of Antennas | 5 External (RP-SMA) + 1 BLE Internal |
| Antenna Type and Peak Gain | Omni directional rubber duck antenna: 4 dBi for 2.4 GHz, 6 dBi for 5 GHz |
| Frequency Bands (GHz) | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850 |
| Radio 1 Capabilities | Frequency Band: 2.4 GHz Channel width: 4x4 20/40 MHz Modulation: BPSK, QPSK, QAM64, QAM256, and QAM1024 MIMO chains: 4x4 service |
| Radio 2 Capabilities | Frequency Band: 5.0 GHz Channel width: 4x4 20/40/80MHz and 2x2 160MHz contiguous Modulation: BPSK, QPSK, QAM64, QAM256, and QAM1024 Mimo chains: 4x4 service |
| Radio 3 Capabilities | Frequency band: 2.4/5.0 GHz MIMO chains: 1x1 frequency scanning |
| Maximum Data Rate | Radio 1: up to 1147 Mbps Radio 2: up to 2402 Mbps Radio 3: scan only |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertisement @ 6 dBm max TX power |
| Interfaces | 1x 100/1000/2500 Base-T RJ45, 1 x 10/100/1000 Base-T RJ45, 1x Type A USB, 1x RS-232 RJ45 Serial Port |
| Power over Ethernet (PoE) | 802.3at PoE default 1 port powered by 802.3at or 2 ports powered by 802.3af - Full System functionality + USB support 1 port is connected to 802.3af - No USB support, Operate in 2x2 mode with reduced power R1/R2 17dBm(Tx power) |
| Simultaneous SSIDs | Up to 16 (14 if background scanning enabled) |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/Device Authentication | WPA™, WPA2™, and WPA3™ with 802.1x or Preshared key, WEP, Web Captive Portal, MAC blocklist and allowlist |
| Maximum Tx Power (Conducted) | Radio 1: 2.4 GHz 24 dBm / 251 mW (4 chains combined)* Radio 2: 5 GHz 23 dBm / 200 mW (4 chains combined)* Radio 3: NA |
| Kensington Lock | Yes |
| IEEE Standards | 802.11a, 802.11b, 802.11d, 802.11e, 802.11g, 802.11h, 802.11i,802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11w, 802.11ac, 802.11ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad, 802.3af, 802.3at, 802.3az, 802.3bz |
| SSID Types Supported | Local-Bridge, Tunnel, and Mesh |
| Per Radio Client Capacity | 512 clients per radio (Radio1 and Radio2) |
| Cellular Co-existence | Yes |
| LED Off Mode | Yes |
| Reset Button | Yes |
Advanced 802.11 features
| OFDMA | Yes (UL and DL) |
|---|---|
| 2.4 GHz OFDMA | Yes |
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO 802.11ax mode | Yes |
| DL-MU-MIMO | Yes |
| HE-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS/Agile DFS | No |
Wireless monitoring
| Rogue Scan radio modes | Background, Dedicated |
|---|---|
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
Dimensions
| Length x Width x Height | 8.27 x 8.27 x 2.22 inches (210 x 210 x 56.5 mm) |
|---|---|
| Weight | 2.19 lbs (0.995 kg) |
| Mounting Options | Ceiling, T-Rail, and Wall |
| Included Accessories | Mount kit for Ceiling, T-Rail and Wall. 5 RP-SMA Male dual-band dipole antenna |
Environment
| Power Supply | SP-FAP400-PA-XX or GPI-130 |
|---|---|
| Power Consumption (Maximum) | 24.5 W |
| Humidity | 5 - 90% non condensing |
| Operating / Storage Temperature | 32–113°F (0–45°C) / -31–-94°F (-35–70°C) |
| Directives | Low Voltage Directive • RoHS |
| UL2043 Plenum Material | No |
| Mean Time Between Failures | > 10 Years |
| Surge Protection Built In | Yes |
| Hit-less PoE Failover | Yes |
Certifications
| WiFi Alliance Certified | Yes |
|---|---|
| DFS | FCC, IC, CE, Japan, Korea, Taiwan |
Warranty
| Limited Lifetime Warranty | Yes |
|---|
Product details
| Brand | Fortinet |
|---|---|
| Part number | FAP-433F-E |
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.