Fortinet
FC-10-P831F-595-02-60Fortinet FortiAP 831F
List PriceThe Fortinet FortiAP 831F is a high-throughput, enterprise-class Wi-Fi 6 (802.11ax) indoor access point with three radios and 8 spatial streams. It supports OFDMA, a 2.5 Gigabit Ethernet port plus an additional 1 Gbps Ethernet port for PoE diversity, and can provide 24/7 background scanning across both bands while still serving clients on 2.4GHz and 5GHz.
The 5GHz data radio can run in an 8x8 MIMO mode for a single high-density 5GHz cell, or split into two independent 4x4 radios for a dual-5GHz configuration — giving up to 4.804 Gbps of combined 5GHz throughput alongside 1147.5 Mbps on the 2.4GHz radio. The integrated Bluetooth Low Energy radio can be used for beacon and locationing applications.
As with the wider FortiAP family, the 831F is designed to be managed centrally — either through a FortiGate's integrated wireless controller, or, as confirmed by Fortinet's own FortiSASE cloud-management subscription for this model, as a cloud-managed access point.
Key features
- Tri-radio, 8-spatial-stream design — Radio 1 (2.4GHz, 4x4) up to 1147.5 Mbps; Radio 2 (5GHz) up to 4.804 Gbps in 8x8 MIMO mode, or 4x4+4x4 dual-5GHz mode; Radio 3 dedicated 2.4/5GHz scanning
- 2.5 Gigabit Ethernet port plus a secondary 1 Gbps port, USB 3.0, and an RS-232 serial console port
- Dual redundant PoE input — 2x 802.3at/bt (30W passive) for full functionality, or 1x 802.3at PoE with USB 3.1 disabled
- Up to 24 simultaneous SSIDs
- Wi-Fi 6 efficiency features — OFDMA (UL and DL), Spatial Reuse (BSS Coloring), UL/DL MU-MIMO and Target Wake Time
- Dedicated security scanning radio with WIPS/WIDS and rogue AP detection in dedicated mode, plus packet sniffer and spectrum analyzer tools
- WPA3, WPA2 and 802.1X authentication, Web Captive Portal, and MAC blocklist/allowlist
- FortiSASE cloud-management subscription available for cloud-managed deployments
- Ceiling, T-Rail or wall mountable, backed by a limited lifetime hardware warranty
Works with
- FortiGate firewalls — for integrated WLAN controller management
- The Fortinet range
Frequently asked questions
How is the FortiAP-831F managed?
Fortinet offers a FortiSASE subscription specifically for cloud-managed FortiAP deployments on this model, so it can be run as a cloud-managed access point without an on-site controller. As with the rest of the FortiAP range it can also be managed through a FortiGate's integrated wireless controller.
What does the FortiSASE cloud-management subscription include?
The FortiAP-831F FortiSASE subscription covers cloud management of the AP with 2 Mbps of bandwidth included, sold as a 5-year term for this model.
What power does the FortiAP-831F need?
It supports dual redundant PoE input — two 802.3af/at/bt ports for full functionality (radios, USB 3.0 and PoE redundancy), or a single 802.3at PoE port with USB disabled — plus a 12V DC / 3A power option. Maximum power consumption is 33W.
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware type | Indoor AP |
|---|---|
| Number of radios | 3 + 1 BLE |
| Number of antennas | 4x 2.4GHz Wi-Fi + 8x 5GHz Wi-Fi + 1 dual band scanning + 1x 2.4GHz BLE |
| Antenna type and peak gain | PIFA: 4.0 dBi (2.4GHz Wi-Fi), 6.0 dBi (5.0GHz Wi-Fi), 4.0 dBi (dual band scanning), 4.5 dBi (2.4GHz BLE) |
| Frequency bands | 2.400–2.4835 GHz, 5.150–5.250 GHz, 5.250–5.350 GHz, 5.470–5.725 GHz, 5.725–5.850 GHz |
| Radio 1 | 2.4GHz, 20/40MHz channel width, BPSK/QPSK/QAM64, 4x4 MIMO |
| Radio 2 | 5.0GHz, 20/40/80/80+80/160MHz, BPSK/QPSK/QAM64/256/1024, 8x8 MIMO (mode 1) or 4x4+4x4 (mode 2) |
| Radio 3 | 2.4GHz and 5.0GHz, 1x1 MIMO, frequency scanning |
| Maximum data rate | Radio 1: up to 1147.5 Mbps; Radio 2: up to 4.804 Gbps (8x8 MIMO or 4x4+4x4 MIMO) |
| Bluetooth Low Energy radio | Bluetooth scanning and iBeacon advertisement at 10 dBm max TX power |
| Interfaces | 1x 100/1000/2500 Base-T RJ45, 1x 10/100/1000 Base-T RJ45, 1x USB 3.0, 1x RS-232 RJ45 serial port |
| Power over Ethernet | 2x 802.3at/bt/30W passive PoE in (full function); 1x 802.3at PoE in (USB 3.1 disabled) |
| Simultaneous SSIDs | Up to 24 |
| EAP types | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/device authentication | WPA, WPA2 and WPA3 with 802.1X or preshared key, WEP, Web Captive Portal, MAC blocklist & allowlist |
| Maximum Tx power (conducted) | Radio 1 (2.4GHz): 27 dBm / 500 mW; Radio 2 (5GHz): 25.5 dBm / 354 mW (4 chains combined) |
| Per-radio client capacity | Up to 512 clients per radio (Radio 1 and Radio 2) |
| SSID types supported | Local-Bridge, Tunnel, and Mesh |
| Kensington lock | Yes |
| Cellular co-existence | Yes |
| IEEE standards | 802.11a/b/d/e/g/h/i/j/k/n/r/v/ac/ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad/af/at/az/bz |
Advanced 802.11 features
| OFDMA | Yes (UL and DL) |
|---|---|
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO (802.11ax mode) | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS / Agile DFS | No |
Wireless monitoring capabilities
| Rogue scan radio modes | Dedicated |
|---|---|
| WIPS / WIDS radio modes | Dedicated |
| Packet sniffer mode | Yes |
| Spectrum analyzer | Yes |
Dimensions
| Length x width x height | 9.05 x 9.05 x 2.15 inches (230 x 230 x 55 mm) |
|---|---|
| Weight | 2.25 lbs (1.02 kg) |
| Package (shipping) weight | 4.2 lbs (1.9 kg) |
| Mounting options | Ceiling, T-Rail, and Wall |
| Included accessories | Mount kit for ceiling, T-Rail, and wall |
Environment
| Power supply | 802.3af/at/bt PoE with dual redundant 802.3af/at input; 12V DC / 3A |
|---|---|
| Power consumption (maximum) | 33 W |
| PSE functionality | No |
| Humidity | 5–90% non-condensing |
| Operating / storage temperature | 32–122°F (0–50°C) / -22–158°F (-30–70°C) |
| Directives | Low Voltage Directive, RoHS |
| Mean time between failures | > 10 years |
| Surge protection built in | Yes |
Certifications and warranty
| Wi-Fi Alliance certified | Yes |
|---|---|
| DFS | CE |
| Limited lifetime warranty | Yes |
Product details
| Brand | Fortinet |
|---|---|
| Part number | FortiAP-831F |
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.