Fortinet FortiAP-223C
Thin Wireless LAN Access Points

Overview:

FortiAP are thin access points, delivering secure, identity-driven WiFi access for your enterprise network, managed centrally by the integrated WLAN controller of any FortiGate® security appliance. With the integration of the wireless controller functionality into the market leading FortiGate appliance, Fortinet delivers a true Unified Access Layer. This enables you to easily manage wired and wireless security from a Single Pane of Glass management console and protects your network from the latest security threats.

Indoor Enterprise WLAN Deployment

FortiAP indoor WLAN access points come in a range of form factors and performance profiles, with a model to suit any indoor enterprise wireless LAN deployment. Smoke detector style models provide a discreet look to prevent tampering. Other models are equipped with external antenna connectors, for use with directional or panel antennas, while the plenumrated models support the extended temperature range required for installation in ceilings.

Highlights

• Supports latest 802.11ac technology with association rate of up to 1.3 Gbps.
• Leverage existing FortiGate or FortiWiFi platforms as controllers for low TCO.
• Integration with FortiManager and FortiAnalyzer for centralized management and reporting.
• Fast Roaming for uninterrupted data access.
• Automatic Radio Resource Provisioning (ARRP) for optimized throughput.
• Layer 7 application control prioritizes business traffic.
• Rogue AP detection and mitigation to satisfy PCI DSS compliance.

Key Features & Benefits
Advanced Security Protection	Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filtering protect the wireless LAN from the latest security threats.
Integrated WIDS and Rogue AP Suppression	Protects the network from advanced wireless threats and satisfies PCI DSS compliance.
Deep Application Control	Fortinet goes above Wireless Multimedia Extensions (WME) by offering deep Layer 7 inspection to precisely control applications and bandwidth usage.
"Single Pane of Glass" Management Console	Unified management console simplifies operations, ensuring consistent and effective policy enforcement and compliance.

Hardware:

FortiAP 24D

The FortiAP 24D is a cost-effective single Radio 802.11n AP, designed for non-mission critical applications in low density indoor environments like small branch offices. The integrated switch-ports allow you to connect additional wired devices directly to the AP, such as PCs or printers.

FortiAP 221C, 223C and 321C

The FortiAP 221C, FortiAP 223C and FortiAP 321C are dual-Radio 802.11ac APs, designed for medium density indoor environments, including hotspot and guest or social WiFi deployments. The smoke detector form factor of the FortiAP 221C and FortiAP 321C is perfect where discreet installation is required, like school classrooms and retail stores. The RP-SMA antenna connectors on the FortiAP 223C allow directional or panel antennas to be installed, providing a range of antenna options in environments with challenging coverage requirements. Both the FortiAP 221C and FortiAP 223C are also dual-Radio and dual-band devices, supporting simultaneous client connections and rogue AP scanning for PCI compliance.

FortiAP 320C

The FortiAP 320C is the highest performance dual-Radio 802.11ac AP, with client association rates of up to 1,300 Mbps. Leveraging powerful 3x3 MIMO technology and three spatial streams, this AP is designed for high density environments that need the highest level of data throughput possible. Designed with dual redundant PoE Ethernet ports to provide maximum resiliency, this AP is ideal for mission-critical environments such as hospitals and manufacturing facilities. The plenum-rated enclosure and extended temperature range also allows deployment above ceiling tiles in office environments or in non-temperature controlled warehouses.

Deployment:

Centralized or Local Wireless Controller

Maximum Client Association Rates

Antenna Radiation Patterns:

RF RX/TX Performance Table:

	FortiAP 221C / 223C						FortiAP 320C
	Radio 1				Radio 2		Radio 1		Radio 2
802.11 a/g	2.4 GHz Tx Power (dBm)	Rx Sensitivity (dBm)	5 GHz Tx Power (dBm)	Rx Sensitivity (dBm)	5 GHz Tx Power (dBm)	Rx Sensitivity (dBm)	2.4 GHz Tx Power (dBm)	Rx Sensitivity (dBm)	5 GHzTx Power (dBm)	Rx Sensitivity (dBm)
6 Mbps	20	-86	—	-86	18	-86	19	-85	21	-89
9 Mbps	20	-85	—	-85	18	-85	19	-84	21	-88
12 Mbps	20	-83	—	-83	17	-83	19	-83	21	-87
18 Mbps	20	-81	—	-81	17	-81	19	-81	21	-85
24 Mbps	20	-78	—	-78	17	-78	19	-78	20	-84
36 Mbps	20	-75	—	-75	16	-75	16	-74	19	-83
48 Mbps	19	-74	—	-74	15	-74	16	-70	18	-79
54 Mbps	17	-73	—	-73	15	-73	16	-69	17	-76
802.11n HT20
MCS 0/8	18	-86	—	-86	18	-86	18	-85	20	-89
MCS 1/9	18	-83	—	-83	18	-83	18	-83	20	-88
MCS 2/10	18	-81	—	-81	18	-81	18	-81	20	-87
MCS 3/11	18	-78	—	-78	18	-78	18	-78	19	-85
MCS 4/12	18	-76	—	-76	17	-76	16	-74	19	-84
MCS 5/13	18	-72	—	-74	16	-74	16	-70	18	-83
MCS 6/14	17	-71	—	-73	15	-73	15	-69	17	-79
MCS 7/15	16	-70	—	-72	14	-72	15	-68	16	-73
802.11n HT40
MCS 0/8	18	-83	—	-83	18	-83	17	-82	18	-91
MCS 1/9	18	-80	—	-80	18	-80	17	-80	18	-85
MCS 2/10	18	-78	—	-78	18	-78	17	-78	18	-85
MCS 3/11	18	-75	—	-75	18	-75	17	-75	18	-80
MCS 4/12	18	-73	—	-73	16	-73	15	-71	18	-78
MCS 5/13	18	-72	—	-72	15	-72	15	-67	17	-76
MCS 6/14	17	-71	—	-70	14	-70	14	-66	16	-74
MCS 7/15	16	-70	—	-69	13	-69	14	-65	15	-71
802.11 ac VHT20
MCS 0	—	—	—	—	18	-90	—	—	20	-85
MCS 1	—	—	—	—	17	-86	—	—	20	-84
MCS 2	—	—	—	—	17	-82	—	—	20	-83
MCS 3	—	—	—	—	17	-78	—	—	19	-82
MCS 4	—	—	—	—	17	-74	—	—	19	-81
MCS 5	—	—	—	—	16	-70	—	—	18	-78
MCS 6	—	—	—	—	15	-69	—	—	17	-74
MCS 7	—	—	—	—	14	-68	—	—	16	-70
MCS 8	—	—	—	—	13	-67	—	—	15	-69
802.11 ac VHT40
MCS 0	—	—	—	—	18	-86	—	—	18	-85
MCS 1	—	—	—	—	16	-82	—	—	18	-84
MCS 2	—	—	—	—	16	-78	—	—	18	-83
MCS 3	—	—	—	—	16	-74	—	—	18	-82
MCS 4	—	—	—	—	16	-70	—	—	18	-81
MCS 5	—	—	—	—	15	-69	—	—	17	-78
MCS 6	—	—	—	—	14	-68	—	—	16	-74
MCS 7	—	—	—	—	13	-66	—	—	15	-70
MCS 8	—	—	—	—	13	-64	—	—	14	-69
MCS 9	—	—	—	—	12	-62	—	—	14	-68
802.11 ac VHT80
MCS 0	—	—	—	—	18	-81	—	—	18	-78
MCS 1	—	—	—	—	16	-78	—	—	18	-75
MCS 2	—	—	—	—	16	-74	—	—	18	-73
MCS 3	—	—	—	—	16	-70	—	—	18	-70
MCS 4	—	—	—	—	16	-69	—	—	18	-67
MCS 5	—	—	—	—	15	-68	—	—	17	-65
MCS 6	—	—	—	—	14	-66	—	—	16	-62
MCS 7	—	—	—	—	13	-64	—	—	15	-60
MCS 8	—	—	—	—	13	-62	—	—	14	-58
MCS 9	—	—	—	—	12	-60	—	—	14	-56

	FAP 24D
	Radio 1		Radio 2
802.11 a/g	5 GHz Tx Power (dBm)	Rx Sensitivity	2.4 GHzTx Power (dBm)	Rx Sensitivity
6 Mbps	20	-94	20	-88
9 Mbps	19	-92	20	-88
12 Mbps	19	-90	20	-86
18 Mbps	19	-83	20	-84
24 Mbps	19	-80	20	-80
36 Mbps	18	-77	19	-77
48 Mbps	18	-76	19	-74
54 Mbps	17	-73	18	-72
802.11n HT20
MCS0	20	-92	20	-92
MCS1	19	-90	20	-90
MCS2	19	-87	20	-87
MCS3	19	-85	20	-85
MCS4	19	-82	20	-82
MCS5	18	-79	19	-78
MCS6	18	-76	19	-77
MCS7	17	-74	18	-74
802.11n HT40
MCS0 /8	20	-91	20	-92
MCS1 /9	19	-88	20	-89
MCS2 /10	19	-85	20	-86
MCS3 /11	19	-82	20	-83
MCS4 /12	19	-79	20	-80
MCS5 /13	18	-76	19	-77
MCS6 14	18	-74	19	-74
MCS7 /15	17	-72	18	-71

Specifications:

	FortiAP 24D	FortiAP 221C	FortiAP 223C	FortiAP 320C	FortiAP 321C
Hardware
Hardware Type	Indoor	Indoor	Indoor	Indoor Plenum Rated	Indoor
Number of Radios	1	2	2	2	2
Number of Antennas	2 Internal	4 internal	4 RP-SMA External	6 Internal	6 Internal
Peak Antenna Gain	4.6 dBi for 2.4 GHz, 6.3 dBi for 5 GHz	3.5 dBi for 2.4 GHz, 6 dBi for 5 GHz	3 dBi for 2.4 GHz, 3 dBi for 5 GHz	5 dBi for 2.4 GHz, 6 dBi for 5 GHz	4 dBi for 2.4 GHz, 5 dBi for 5 GHz
Frequency Bands (GHz) *	2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850	2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850	2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850	2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850	2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850
Frequency of Radio 1	2.4 GHz b/g/n or 5 GHz a/n	2.4 GHz b/g/n or 5 GHz a/n	2.4 GHz b/g/n or 5 GHz a/n	2.4 GHz b/g/n	2.4 GHz b/g/n
Frequency of Radio 2	-	5 GHz a/n/ac	5 GHz a/n/ac	5 GHz a/n/ac	5 GHz a/n/ac
Throughput	Up to 300 Mbps	Radio 1: Up to 300 Mbps, Radio 2: Up to 867 Mbps	Radio 1: Up to 300 Mbps, Radio 2: Up to 867 Mbps	Radio 1: Up to 450 Mbps, Radio 2: Up to 1300 Mbps	Radio 1: Up to 450 Mbps, Radio 2: Up to 1300 Mbps
Tx/Rx Streams	2x2 MIMO 2 spatial stream	2x2 MIMO 2 spatial stream	2x2 MIMO 2 spatial stream	3x3 MIMO with 3 spatial streams	3x3 MIMO with 3 spatial streams
Ethernet Ports	1x GE RJ45 WAN port, 4x FE RJ45 LAN ports	1x GE RJ45	1x GE RJ45	2x GE RJ45	1x GE RJ45
USB Port	1x Type A	–	–	1x Type A	–
Serial Console Port	–	–	–	Yes	–
Power over Ethernet (PoE)	IEEE 802.3af (12.9 W)	IEEE 802.3af (12.9 W)	IEEE 802.3af (12.9 W)	Dual redundant PoE power ports with support for IEEE 802.3af (12.9 W)	IEEE 802.3af (12.9 W)
WME Multimedia Extensions	Yes (4 priority queues for voice, video, data and background traffic)	Yes (4 priority queues for voice, video, data and background traffic)	Yes (4 priority queues for voice, video, data and background traffic)	Yes (4 priority queues for voice, video, data and background traffic)	Yes (4 priority queues for voice, video, data and background traffic)
Simultaneous SSIDs	8 ( 7 if background scanning is enabled)	16 (14 if background scanning enabled)	16 (14 if background scanning enabled)	16 (14 if background scanning enabled)	16 (14 if background scanning enabled)
EAP Type(s)	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST
User/Device Authentication	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist
Maximum Tx Power	18 dBm (63 mW) *	20 dBm (100 mW) *	17 dBm (50 mW) *	21 dBm (126 mW) *	20 (100 mW) *
Physical Security	–	Kensington Lock	Kensington Lock	Kensington Lock	Kensington Lock
Mean Time Between Failures	> 10 years	> 10 years	> 10 years	> 10 years	> 10 years
IEEE Specifications	802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x	802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x, 802.3af, 802.11ac	802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x, 802.3af, 802.11ac	802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x, 802.3af, 802.11ac	802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x, 802.3af, 802.11ac
802.11ac 80MHz Channel	–	Yes	Yes	Yes	Yes
802.11n Features	20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save	20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save	20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save	20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save	20 MHz and 40 MHz High-Throughput (HT) SupportIncreased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet AggregationConserve power via Dynamic MIMO power save
Advanced 802.11n to enhance rate-over-range including:	Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Maximum Ratio Combining (MRC) for improved receiver performance	Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Maximum Ratio Combining (MRC) for improved receiver performance	Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Maximum Ratio Combining (MRC) for improved receiver performance	Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Maximum Ratio Combining (MRC) for improved receiver performance	Low-density parity check (LDPC) encodingMaximum likelihood demodulation (MLD)Maximum Ratio Combining (MRC) for improved receiver performance
Mounting Options	Wall	Ceiling, T-Rail and wall	Ceiling, T-Rail and wall	Ceiling, T-Rail and wall	Ceiling, T-Rail and wall
Included Accessories	Wall mount kit	Ceiling, T-Rail and wall mount kit	Ceiling, T-Rail and wall mount kit	Ceiling, T-Rail and wall mount kit	Ceiling, T-Rail and wall mount kit
FortiPresence Capable	Yes	Yes	Yes	Yes	Yes
Wireless Monitoring Capabilities
Frequencies scanned	2.4 and 5 GHz	2.4 and 5 GHz	2.4 and 5 GHz	2.4 and 5 GHz	2.4 and 5 GHz
Background scan with client access on 2.4 and 5 GHz	–	Yes	Yes	Yes	Yes
Full-time scan as dedicated monitor	Yes	Yes	Yes	Yes	Yes
Full-time scan with client access on 5G GHz	–	Yes	Yes	Yes	Yes
Dimensions
Length x Width x Height	6.69 x 4.37 x 1.02 inches (17.0 x 11.1 x 2.6 cm)	6.3 x 6.3 x 1.5 inches (16.0 x 16.0 x 3.8 cm)	6.3 x 6.3 x 1.5 inches (16.0 x 16.0 x 3.8 cm)	6.5 x 6.5 x 1.4 inches (16.5 x 16.5 x 3.5 cm)	6.3 x 6.3 x 1.66 inches (16.2 x 16.2 x 4.2 cm)
Weight	0.5 lb (0.225 kg)	0.64 lb (0.3 kg)	0.64 lb (0.3 kg)	1.33 lb (0.6 kg)	0.77 lb (0.35 kg)
Package (shipping) Weight	1.1 lb (0.5 kg)	1.21 lb (0.55 kg)	1.37 lb (0.62 kg)	1.79 lb (0.81 kg)	1.33 lb (0.6 kg)
Environment
Power Supply	Adapter Input: 100–240V, 50/60Hz, 0.4A Output: 12V DC, 2A	Adapter Input: 100–240V, 50/60Hz, 0.4A Output: 12V DC, 2A	Adapter Input: 100–240V, 50/60Hz, 0.4A Output: 12V DC, 2A	Adapter Input: 100–240V, 50/60Hz, 0.4A Output: 12V DC, 2A	Adapter Input: 100–240V, 50/60Hz, 0.4A Output: 12V DC, 2A
Power Consumption (Average)	3 W	7.8 W	7.8 W	10.5 W	4.9 W
Power Consumption (Maximum)	3.36 W	15.72 W	12 W	12.08 W	12.48 W
Humidity	5–90% non condensing	5–90% non condensing	5–90% non condensing	5–90% non condensing	5–90% non condensing
Operating Temperature	32–104˚F (0–40˚C)	32–104˚F (0–40˚C)	32–104˚F (0–40˚C)	-4–122˚F (-20–50˚C)	32–113˚F (0–45˚C)
Storage Temperature	-4–140˚F (-20–60˚C)	-4–140˚F (-20–60˚C)	-4–140˚F (-20–60˚C)	-40–158˚F (-40–70˚C)	-4–140˚F (-20–60˚C)
Directives	Low Voltage Directive • RoHS	Low Voltage Directive • RoHS	Low Voltage Directive • RoHS	Low Voltage Directive • RoHS	Low Voltage Directive • RoHS
Certifications
WiFi Alliance Certified	No	Yes	No	Yes	No
Warranty
Limited Lifetime Warranty	Yes	Yes	Yes	Yes	Yes

Documentation:

Download the Fortinet FortiAP Indoor Series Datasheet (PDF).