Fortinet FortiAP 432F
4x4 MU-MIMO | Up to 1147 Mbps + 2402 Mbps

Overview:

The FortiAP 432F is enterprise class 802.11ax ruggedized indoor/outdoor AP provides three radios and four spacial streams.

FortiAP™ access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiLAN Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for campus and branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a Singlepane-of-glass management console and protects your network from the latest security threats.

• 802.11ax | Tri-Radio 2.4 GHz + 5 GHz + scanning | 6 External Antennas
• 4x4 MU-MIMO | Up to 1147 Mbps + 2402 Mbps

HARDWARE OFFERINGS	ANTENNA TYPE	INDOOR USE	OUTDOOR USE
4x4 Ruggedized indoor/outdoor tri-radio 11ax AP	External

Rugged APs meet C1D2 requirements for use in hazardous environments, expanding our line of IP67 rated APs to more OT use cases.

---

Use Cases:

FortiAPs allow for a versatile collection of installation topologies with options to fit any enterprise.

Campus

A single building with multiple floors, or a corporate or education campus with a group of large buildings.

• High-capacity designs including Dual 5GHz and tri-band with Wi-Fi 6E allow a maximal number of client devices to attach to the network at the same time without over-air congestion
• Complete NOC functionality with network visibility and AIOps simplify a complex network deployment into a solution manageable by IT teams of any size

---

Branch Office / SD-Branch

A highly distributed number of small sites, often with no on-site IT.

• Built in NAC functions* allow secure onboarding of devices at remote locations where IT doesn’t have reliable visibility
• Management orchestration with zero-touch deployment allows for quick and easy rollouts without the need for skilled installers at each site

---

Micro Branch

Ultra small sites that still fall under IT’s responsibility

• Can act as a SASE endpoint as a foundation for zero-trust network access (ZTNA)
• Simple management and provisioning through FortiSASE interface

---

Remote Workers

A remote AP installed at a worker’s home or at micro-branch office space.

• Split tunneling allows local traffic to remain local while sending other traffic to the data center for inspection when needed
• Desktop mounting options for wall-plate models allow the use of Ethernet as well as Wi-Fi connectivity while leveraging the same secure tunnel

---

SMB

Single site or small collection of sites with limited IT resources.

• Built-in NAC functions bring security to the wireless network with no need to install and manage additional products
• Network and security convergence decreases management overhead while keeping the network secure

---

Specifications:

	FortiAP 432F
Hardware
Hardware Type	Ruggedized indoor/outdoor AP
Number of Radios	3 + 1 BLE
Number of Antennas	4 dual band WiFi + 1 dual band scanning + 1 single band 2.4 GHz BLE/ZigBee
Antenna Type and Peak Gain	WiFi and scanning radio dual band antenna: 5.5 dBi in 2.4 GHz and 7.2 dBi in 5 GHz band BLE antenna: 5.0 dBi in 2.4 GHz band
Frequency Bands (GHz)	2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850
Radio 1 Capabilities	Frequency band: 2.4 GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024 QAM MIMO Chains: 4x4 Service
Radio 2 Capabilities	Frequency band: 5.0 GHz Channel width: 4x4 20/40/80MHz and 2x2 160 MHz contiguous Modulation: BPSK, QPSK, QAM64, QAM256, and QAM1024 MIMO Chains: 4x4 Service
Radio 3 Capabilities	Frequency bands: 2.4 GHz and 5.0 GHz MIMO Chains: 1x1 Frequency Scanning
Maximum Data Rate	Radio 1: up to 1147 Mbps Radio 2: up to 2402 Mbps Radio 3: Frequency scanning only
Bluetooth Low Energy Radio	Bluetooth scanning and iBeacon advertisement @ 10 dBm max TX power
Interfaces	1x 10/100/1000/2500 Base-T RJ45,1 x 10/100/1000 Base-T RJ45 (802.3af PoE PSE),1x Type A USB, 1x RS-232 RJ45 Serial Port
MDI/MDIX	Supported
Simultaneous SSIDs	Up to 8 per client serving radio (7 if background scanning is enabled)
EAP Type(s)	EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST
User/Device Authentication	WPA™, WPA2™, and WPA3™ with 802.1x or preshared key, WEP, Web Captive Portal, MAC blocklist & allowlist
Maximum Tx Power (Conducted)	Radio 1: 2.4 GHz 30 dBm / 1000 mW (4 chains combined)* Radio 2: 5 GHz 26 dBm / 398 mW (4 chains combined)* Radio 3: N/A
Kensington Lock	Yes
IEEE Standards	802.11a, 802.11b, 802.11d, 802.11e, 802.11g, 802.11h, 802.11i,802.11j, 802.11k, 802.11n, 802.11r, 802.11u, 802.11v, 802.11w, 802.11ac, 802.11ax (Wi-Fi 6), 802.1Q, 802.1X, 802.3ad, 802.3af, 802.3at, 802.3az, 802.3bt, 802.3bz
SSIDs Supported	Local-Bridge, Tunnel, and Mesh
Per Radio Client Capacity	Up to 512 clients per radio (Radio1 and Radio2)
Cellular Co-existence	Yes
LED Off Mode	Yes
Advanced 802.11 Features
OFDMA	Yes (UL and DL)
Spatial Reuse (BSS Coloring)	Yes
UL MU-MIMO	Yes
DL-MU-MIMO	Yes
Enhanced Target Wake Time (TWT)	Yes
ZeroWait DFS	No
Wireless Monitoring Capabilities
Rogue Scan radio modes	Background, Dedicated
WIPS / WIDS radio modes	Background, Dedicated (recommended)
Packet Sniffer Mode	Yes
Spectrum Analyzer	Yes
Dimensions
Length x Width x Height	8.23 x 8.23 x 2.38 inches (209 x 209 x 60.5 mm)
Weight	5.12 lbs (2.325 kg)
Package (shipping) Weight	12.56.93 lbs (5.7 kg)
Accessories
Mounting Options	Wall and Pole
Included Accessories	Wall and Pole mounting kit
Power Supply	802.3bt PoE, ships with PoE injector (reset functionality)
Optional Antennas (Professional Installer Required for FCC domains)	FANT-04ABGN-0606-O-N FANT-04ABGN-1414-P-N FANT-04ABGN-8065-P-N
Environment
Power Consumption (Maximum)	25 W without PSE out and 37.9 W with PSE out
PSE functionality	Yes (while powered by PoE injector shipped with product)
PoE Mode	802.3bt PoE default (ships with Passive PoE injector Powered by 802.3at PoE - Operate in 4x4 mode with reduced Tx power Radio1/R2 17dBm This product only supports PSE functionality when it is powered by PoE injector that ships with the product.
Humidity	10 - 90% non condensing
Operating / Storage Temperature	-40°F to 140°F (-40°C to 60°C) / -40°F to 176°F (-40°C to 80°C)
Directives	Low Voltage Directive • RoHS
UL2043 Plenum Material	No
Mean Time Between Failures	> 10 Years
IP Rating	IP67
Surge Protection Built In	Yes
Hit-less PoE Failover	N/A
Certifications
WiFi Alliance Certified	Yes (includes Passpoint)
DFS	FCC, IC, CE, Japan, Brazil and Taiwan
Warranty
Limited Lifetime Warranty	Yes

---

RF Rx/Tx Performance Table:

	Radio 1		Radio 2		Radio 3
	2.4 GHz Tx Power per chain (dBm)	Rx Sensitivity (dBm)	5 GHz Tx Power per Chain (dBm)	Rx Sensitivity (dBm)	2.4 GHz Tx Power per chain (dBm)	5 GHz Tx Power per Chain (dBm)	Rx Sensitivity (dBm)
802.11b
1 Mbps	24	-99	-	-	20	-	-92
11 Mbps	24	-91	-	-	18	-	-91
802.11g
6 Mbps	24	-94	-	-	20	-	-92
54 Mbps	23	-78	-	-	18	-	-77
802.11n HT20
MSSO	24	-94	-	-	20	-	-92
MCS7	23	-75	-	-	17	-	-74
802.11n HT40
MSSO	23	-92	-	-	19	-	-90
MCS7	22	-73	-	-	17	-	-72
802.11ax HE20
MSSO	23	-90	-	-	-	-	-
MCS11	21	-71	-	-	-	-	-
802.11ax HE40
MSSO	21	-91	-	-	-	-	-
MCS11	19	-72	-	-	-	-	-
802.11a
6 Mbps	-	-	22	-92	-	20	-93
54 Mbps	-	-	22	-76	-	19	-76
802.11n HT20
MCS0	-	-	22	-93	-	20	-93
MCS7	-	-	21	-74	-	19	-73
802.11n HT40
MCS0	-	-	22	-91	-	19	-90
MCS7	-	-	21	-72	-	18	-71
802.11ac VHT20
MCS0	-	-	22	-91	-	19	-93
MCS9	-	-	20	-72	-	18	-69
802.11ac VHT40
MCS0	-	-	22	-91	-	19	-90
MCS9	-	-	19	-72	-	16	-64
802.11ac VHT80
MCS0	-	-	20	-86	-	17	-88
MCS9	-	-	17	-62	-	17	-61
802.11ax HE20
MCS0	-	-	22	-91	-	-	-
MCS11	-	-	19	-72	-	-	-
802.11ax HE40
MCS0	-	-	22	-91	-	-	-
MCS11	-	-	19	-72	-	-	-
802.11ax HE80
MCS0	-	-	20	-87	-	-	-
MCS11	-	-	18	-58	-	-	-

---

Antenna Radiation Patterns

---

Documentation:

Download the Fortinet FortiAP Series Datasheet (PDF).

---