Fortinet
FC-10-P431F-247-02-12Fortinet FortiAP U431F
List PriceStandalone access points are simplest to manage centrally. FortiAP Cloud gives network administrators a single, intuitive interface to deploy, monitor, troubleshoot and optimise FortiAP-U units from anywhere.
The U431F can be managed through the FortiAP Cloud provisioning and management portal, the integrated WLAN controller on any FortiGate security appliance, or a dedicated FortiWLC controller.
This enterprise-class 802.11ax indoor AP carries three radios plus OFDMA, a 2.5 Gigabit Ethernet port and a second Gigabit Ethernet port for PoE diversity. It can run dual 5 GHz bands for extra capacity while still covering 2.4 GHz clients, or dedicate a radio to full-time scanning; the integrated BLE radio supports beacon and locationing use cases.
The FortiAP-U family spans the performance range from branch to campus deployments, up to this fastest 4x4:4 Wi-Fi 6 model, all managed from the same Cloud, FortiOS or WLAN Controller options.
Key features
- 4x4 Wi-Fi 6 (802.11ax) indoor access point with three radios plus BT/BLE, internal antennas
- Dual 5 GHz radio operation for extra capacity, or dedicate a radio to full-time scanning
- Up to 4,804 Mbps per radio with OFDMA, MU-MIMO Wave 2, Transmit Beamforming (TxBF) and LDPC encoding
- 1x 2.5GE + 1x GE RJ45 ports for PoE diversity, plus USB-A and RS-232 serial
- Dual redundant PoE inputs (802.3at)
- Up to 16 simultaneous SSIDs (14 with background scanning enabled)
- WPA3, WPA2, 802.1X, MAC blacklist/whitelist and captive portal authentication
- Ceiling, T-Rail and wall mounting kit included; Kensington lock point
- Managed via FortiAP Cloud, an integrated FortiGate WLAN controller, or FortiWLC
Works with
- FortiGate firewalls — pair with a FortiGate to manage the AP through its integrated WLAN controller
- the Fortinet range
Frequently asked questions
How is the U431F managed?
Centrally, through FortiAP Cloud's provisioning and management portal, the integrated WLAN controller of any FortiGate security appliance, or a dedicated FortiWLC controller.
What's the difference between FortiCare Premium and Elite support?
Both are annual FortiCare support subscriptions for this access point; Elite is priced above Premium as the higher tier, and both are offered here for a 1-year term.
What PoE does the U431F need?
It has dual redundant PoE power ports supporting IEEE 802.3at, and draws up to 24.5 W maximum; power can also be supplied via the SP-FAP200-PA or GPI-130 adapter.
Sizing a wireless deployment? Call 0333 242 1314 or email sales@clisecure.com.
Hardware
| Hardware Type | Indoor AP |
|---|---|
| Number of Radios | 3 + 1 BT/BLE |
| Number of Antennas | 10 Internal + 1 BT/BLE Internal |
| Antenna Type and Peak Gain | PIFA: 4 dBi for 2.4 GHz, 5 dBi for 5 GHz |
| Frequency Bands (GHz) | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850 |
| Radio 1 Capabilities | 5.0 GHz a/n/ac/ax (4x4:4 stream) 20/40/80/160 MHz (64 QAM and 1024 QAM) |
| Radio 2 Capabilities | 2.4 GHz or 5.0 GHz (high band) a/b/g/n/ac/ax (4x4:4 stream) 20/40/80/160 MHz (64 QAM and 1024 QAM) |
| Radio 3 Capabilities | 2.4/5.0 GHz dual band b/g/n/ac (2x2:2 stream) 20/40 MHz (64 QAM) |
| Maximum Data Rate | Radio 1: up to 4,804 Mbps Radio 2: up to 4,804 Mbps Radio 3: up to 300 Mbps |
| Bluetooth Low Energy (BT/BLE) Radio | Bluetooth scanning and iBeacon advertisement @ 4 dBm max TX power |
| Interfaces | 1x 10/100/1000/2500 Base-T RJ45, 1x 10/100/1000 Base-T RJ45, 1x Type A USB, 1x RS-232 RJ45 Serial Port |
| Power over Ethernet (PoE) | Dual redundant PoE power ports with support for IEEE 802.3at |
| Power over Ethernet (PoE) | Dual redundant PoE power ports with support for IEEE 802.3at (2x2 @ 17 dBm with 802.3af; USB disabled) |
| Simultaneous SSIDs | Up to 16 (14 if background scanning enabled) |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST |
| User/Device Authentication | WPA™, WPA2™, and WPA3™ with 802.1x or Preshared key, WEP, Web Captive Portal, MAC blacklist & whitelist |
| Maximum Tx Power | Radio 1: 5 GHz: 24 dBm / 251 mW (4 chains combined)* Radio 2: 2.4 GHz: 26 dBm / 398 mW (4 chains combined)* 5 GHz: 24 dBm / 251 mW (4 chains combined)* Radio 3: 2.4 GHz: 22 dBm / 158 mW (2 chains combined)* |
| Kensington Lock | Yes |
| IEEE Standards | 802.11a, 802.11b, 802.11d, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.1X, 802.3af, 802.3at, 802.3az |
| SSID Types Supported | Local-Bridge, Mesh, & Tunnel |
| Per Radio Client Capacity | Up to 512 |
| Cellular Co-existence** | Yes |
| LED Off Mode | Yes |
Advanced 802.11 features
| 802.11ac MU-MIMO Wave 2 | Yes |
|---|---|
| Transmit Beam Forming (TxBF) | Yes |
| Low-Density Parity Check (LDPC) Encoding | Yes |
| Maximum Likelihood Demodulation (MLD) | Yes |
| Maximum Ratio Combining (MRC) | Yes |
| A-MPDU and A-MSDU Packet Aggregation | Yes |
| MIMO Power Save | Yes |
| Short Guard Interval | Yes |
| OFMDA | Yes |
Wireless monitoring
| Rogue Scan Radio Modes | Background, Dedicated |
|---|---|
| WIPS / WIDS Radio Modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
Dimensions
| Length x Width x Height | 8.46 x 8.46 x 2.26 inches (215 x 215 x 57.5 mm) |
|---|---|
| Weight | 1.0 lb (0.453 kg) |
| Package (shipping) Weight | 1.8 lbs (0.82 kg) |
| Mounting Options | Ceiling, T-Rail and Wall |
| Included Accessories | Mount kits for Ceiling, T-Rail, and Wall |
Environment
| Power Supply | SP-FAP200-PA-XX, or GPI-130 |
|---|---|
| Power Consumption (Maximum) | 24.5 W |
| Humidity | 10–90% Non-Condensed 5–90% Condensed |
| Operating / Storage Temperature | 32–122°F (0–50°C) / -31–158°F (-35–70°C) |
| Directives | Low Voltage Directive • RoHS |
| UL2043 Plenum Material | Yes |
| Mean Time Between Failures | >30 Years |
| Hit-less PoE Failover | Yes (802.3at only) |
Certifications
| Wi-Fi Alliance Certified | No |
|---|
Warranty
| Limited Lifetime Warranty | Yes |
|---|
Product details
| Brand | Fortinet |
|---|---|
| Part number | FAP-U431F-E |
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.