Product Overview
Overview:
FortiAP access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiAP Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for protecting your LAN Edge from the campus to branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a single pane-of-glass management console and protects your network from the latest security threats.
Unified Management:
Unified management console simplifies operations, ensuring consistency in effective policy enforcement and compliance.
Advanced Security Protection:
Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filtering protect the wireless LAN from the latest security threats.
Built-in Wi-Fi Security:
Protects the network from advanced wireless threats and satisfies PCI DSS compliance.
Highlights:
This enterprise class Wi-Fi 6 wall plate AP provides three radios with internal antennas as well as features such as OFDMA and is PSE-capable. The AP can provide 24/7 scanning across both bands while still providing access on both the 2.4 and 5 GHz bands. The integrated BLE radio can be used for beacons and locationing applications. Additional features include PoE out for downstream devices and RJ45 passthrough. This access point can be installed in minutes, right over the existing wall plate.
Specifications:
| FortiAP-23JF | |
|---|---|
| Hardware | |
| Hardware Type | Indoor walljack/desktop AP |
| Number of Radios | 3 + 1 BLE |
| Number of Antennas | 4 single band WiFi + 1 dual band scanning + 1 single band 2.4 GHz BLE/ZigBee |
| Antenna Type and Peak Gain | PCB antenna Dual band: 4.0 dBi in 2.4 GHz band and 4.0 dBi in 5 GHz band BLE antenna: 3.5 dBi in 2.4 GHz band |
| Frequency Bands (GHz) | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850 |
| Radio 1 Capabilities | Frequency band: 2.4GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024 QAM MIMO Chains: 2x2 Service |
| Radio 2 Capabilities | Frequency band: 5.0GHz Channel width: 20/40/80MHz Modulation: BPSK, QPSK, 64/256/1024 QAM MIMO Chains: 2x2 Service |
| Radio 3 Capabilities | Frequency bands: 2.4GHz and 5.0GHz MIMO Chains: 1x1 Frequency Scanning |
| Maximum Data Rate | Radio 1: up to 574 Mbps Radio 2: up to 1200 Mbps Radio 3: Frequency scanning only |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertisement @ 10 dBm max TX power |
| Interfaces | 7x 10/100/1000 Base-T RJ45 Ports (1x 802.3at PoE (PD), 1x 802.3af PoE (PSE), 2x Non-PoE Ports, 1x Pass-through in, 1x Pass-through out, 1x RS-232 RJ45 Serial Port |
| Power over Ethernet (PoE) | 1 x 802.3at PoE default Operational modes: powered by 802.af PoE - Only Radio functionality ; powered by 802.3at - All radio+ PSE (7W); Powered by DC power adaptor - All radio's + USB + PSE ( 802.3af) |
| Simultaneous SSIDs | Up to 16 (14 if background scanning enabled) |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User/Device Authentication | WPA™, WPA2™, and WPA3™ with 802.1x or preshared key, WEP, Web Captive Portal, MAC blocklist & allowlist |
| Maximum Tx Power (Conducted) | Radio 1: 2.4GHz: 23 dBm / 200 mW (2 chains combined) Radio 2: 5GHz: 22 dBm / 158 mW (2 chains combined) Radio 3: NA |
| Kensington Lock | Yes |
| IEEE Standards | 802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i,802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.11ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad, 802.3af, 802.3at, 802.3az, 802.3bz |
| SSID Types Supported | Local-Bridge, Tunnel, and Mesh |
| Per Radio Client Capacity | Up to 512 clients per radio (Radio1 and Radio2) |
| Cellular Co-existence | Yes |
| LED Off Mode | Yes |
| Advanced 802.11 Features | |
| OFDMA | Yes |
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO 802.11ax mode | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS/Agile DFS | No |
| Wireless Monitoring Capabilities | |
| Rogue Scan radio modes | Background, Dedicated |
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
| Dimensions | |
| Length x Width x Height | 6.6 x 4.6 x 1.1 inches (168 x 117 x 28 mm) |
| Weight | 0.99 lbs (0.45 kg) |
| Package (shipping) Weight | 1.54 lbs (0.7 kg) |
| Mounting Options | Wall Plate, Optional Desk Mount FAP-MNT-WJ-20 |
| Included Accessories | Standard Mount kit for Ceiling, T-Rail, and Wall |
| Environment | |
| Power Supply | 802.3at PoE: GPI-130 Optional DC power adaptor SP-FAP23J-PAX-10 |
| Power Consumption (Maximum) | 17W |
| PSE functionality | Yes |
| Humidity | 10 - 90% non condensing |
| Operating / Storage Temperature | 32–122°F (0 - 50°C) / -22–158°F (-30–70°C) |
| Directives | Low Voltage Directive • RoHS |
| UL2043 Plenum Material | No |
| Mean Time Between Failures | > 10 Years |
| IP Rating | N/A |
| Surge Protection Built In | Yes |
| Hit-less PoE Failover | N/A |
| Certifications | |
| WiFi Alliance Certified | No |
| DFS | No |
| Warranty | |
| Limited Lifetime Warranty | Yes |
