Fortinet
FC-10-APGIS-768-02-12Fortinet FortiAP U231G
List PriceFortiAP access points are managed centrally through the integrated WLAN controller built into any FortiGate security appliance, or via the FortiLAN Cloud provisioning and management portal. Because wireless control sits inside the FortiGate appliance itself, this suits campus and branch deployments where wired and wireless security are run from a single console as part of Fortinet's Security Fabric.
The FortiAP U231G is an indoor Wi-Fi 6E access point with three radios covering 2.4GHz, 5GHz and 6GHz simultaneously (6GHz band availability is subject to regional regulatory approval), using internal antennas and 2x2:2 MIMO on each Wi-Fi radio. An integrated Bluetooth Low Energy radio supports beacon and locationing applications, and it connects over a 2.5 Gigabit Ethernet port plus a Gigabit Ethernet port.
Wireless traffic can be protected by the same firewall, IPS, application control and web filtering engines used on the wired network, giving consistent policy enforcement across a site and helping satisfy PCI DSS requirements for wireless.
Key features
- Tri-radio Wi-Fi 6E (802.11ax): simultaneous 2.4GHz, 5GHz and 6GHz operation, 2x2:2 MIMO per radio (6GHz subject to regional regulatory approval)
- Internal antennas
- Up to 2,401 Mbps on the 6GHz radio, 1,201 Mbps on 5GHz, and 574 Mbps on 2.4GHz
- UL/DL MU-MIMO, OFDMA and Spatial Reuse (BSS Coloring) support
- Integrated Bluetooth Low Energy radio for beacon and locationing applications
- Up to 24 simultaneous SSIDs, up to 512 clients per radio
- 1x 2.5GE and 1x GE RJ45 ports, powered by 802.3at PoE
- Rogue Scan, WIPS/WIDS, packet sniffer and spectrum analyser modes built in
- Managed by an integrated FortiGate WLAN controller or the FortiLAN Cloud portal
- Ceiling, T-Rail and wall mount kit included
Works with
- FortiGate firewalls — pair with a FortiGate for integrated WLAN controller management
- the Fortinet range
Frequently asked questions
How is the FortiAP U231G managed?
Centrally, through the integrated WLAN controller on a FortiGate security appliance, or via the FortiLAN Cloud provisioning and management portal.
What's the difference between FortiCare Premium and FortiCare Elite support?
FortiCare Premium and FortiCare Elite are Fortinet's two support subscription tiers, each offered in 1, 3 and 5 year terms; Elite is the higher tier. Current terms and pricing for this model are confirmed on request.
How is the FortiAP U231G powered?
By 802.3at PoE (via a GPI-130 injector) as the default power source; an SP-FAP400-PA-XX AC adapter is also available for locations without PoE.
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware Type | Indoor AP |
|---|---|
| Number of Radios | 3 + 1 BLE |
| Number of Antennas | Internal x2 dual-band Wi-Fi + x2 tri-band Wi-Fi & scanning + 1 single-band 2.4GHz BLE/ZigBee |
| Antenna Type and Peak Gain | PIFA antenna. Dual band: 4.5 dBi (2.4GHz), 5.5 dBi (5GHz). Tri-band: 4.5 dBi (2.4GHz), 5.5 dBi (5GHz), 5.5 dBi (6GHz). BLE antenna: 4.0 dBi (2.4GHz) |
| Frequency Bands (GHz) | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850, 5.925–6.425, 6.425–6.525, 6.525–7, 5.925–6.875, 6.875–7.125 |
| Radio 1 Capabilities | 2.4GHz, 20/40MHz channel width, BPSK/QPSK/64/256/1024 QAM, 2x2 MIMO |
| Radio 2 Capabilities | 5.0GHz, 20/40/80/80+80MHz channel width, BPSK/QPSK/64/256/1024 QAM, 2x2 MIMO |
| Radio 3 Capabilities | 6.0GHz, 20/40/80/160MHz channel width, BPSK/QPSK/64/256/1024 QAM, 2x2 service and scanning |
| Maximum Data Rate | Radio 1: up to 574 Mbps. Radio 2: up to 1,201 Mbps. Radio 3: up to 2,401 Mbps |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertisement @ 10 dBm max TX power |
| Interfaces | 1x 100/1000/2500 Base-T RJ45, 1x 10/100/1000 Base-T RJ45, 1x Type 3.0 USB, 1x RS-232 RJ45 serial port |
| Power over Ethernet (PoE) | 1x 802.3at PoE default |
| Simultaneous SSIDs | Up to 24 |
| Maximum Tx Power (Conducted) | Radio 1 2.4GHz: 23 dBm/200 mW (2 chains combined). Radio 2 5GHz: 23 dBm/158 mW (2 chains combined). Radio 3 6GHz: 21 dBm/80 mW (2 chains combined @ 160MHz BW) |
| Kensington Lock | Yes |
Wireless features
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
|---|---|
| User/Device Authentication | WPA, WPA2 and WPA3 with 802.1x or preshared key, WEP, web captive portal, MAC blocklist & allowlist |
| SSID Types Supported | Local-Bridge, Tunnel, and Mesh |
| Per Radio Client Capacity | Up to 512 clients per radio |
| IEEE Standards | 802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.11ax, 802.1X, 802.3ad, 802.3af, 802.3at, 802.3az |
Advanced 802.11 features
| OFDMA | Yes |
|---|---|
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS | No |
Wireless monitoring
| Rogue Scan radio modes | Background, Dedicated |
|---|---|
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
Dimensions
| Length x Width x Height | 7.18 x 7.18 x 2.12 inches (182.4 x 182.4 x 54.0 mm) |
|---|---|
| Weight | 1.75 lbs (0.8 kg) |
| Mounting Options | Ceiling, T-Rail, and Wall |
| Included Accessories | Standard mount kit for ceiling, T-Rail, and wall |
Environment
| Power Supply | SP-FAP400-PA-XX AC adapter or 802.3at PoE (GPI-130) |
|---|---|
| Power Consumption (Maximum) | Depends on PoE connected |
| Humidity | 5–90% non-condensing |
| Operating / Storage Temperature | 32°–122°F (0°–50°C) / -22°–158°F (-30°–70°C) |
| Mean Time Between Failures | > 10 years |
| Surge Protection Built In | Yes |
Certifications
| WiFi Alliance Certified | Yes |
|---|---|
| DFS | CE |
Warranty
| Limited Lifetime Warranty | Yes |
|---|
Product details
| Brand | Fortinet |
|---|
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.