Fortinet FortiAP 222KL Access Point
FortiGate, FortiEdge Cloud, or SASE-managed — 2x2 Outdoor Dual-radio 11be, LoRaWAN, LTE Capable AP

Overview:

FortiAP™ access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiEdge Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for campus and branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a Single-pane-of-glass management console and protects your network from the latest security threats.

The FortiAP-222KL is an enterprise class Wi-Fi 7 ruggedized outdoor access point that provides two Wi-Fi radios with external antennas and two spatial streams. This access point supports LoRaWAN modules plus LTE Cat4 backhaul, in addition to a 2.5 Gbps PoE-in port and a 1 Gbps RJ45 Ethernet port that can also operate as PSE-PD.

The AP can provide background scanning across all bands while still providing access on the 2.4 GHz and 5 GHz bands, making it well suited for IoT applications.

Note: For FAP-222KL, use of the LTE module is subject to country/region of use (not supported in early release).

• Two-Radio 2.4 GHz + 5 GHz (2 External Dual-band Antennas) | LoRaWAN (1 External Antenna) + LTE Cat4 (1 External Antenna) + GNSS (1 Internal Antenna)
• 2x2 MU-MIMO | Up to 688 Mbps + 2.88 Gbps data rate

AP MODEL	WI-FI GENERATION	DESCRIPTION	BLE SUPPORT	C1D2/ATEX	POE BUDGET	LIGHTWEIGHT UTP
FAP-222KL	Wi-Fi 7	2x2 Outdoor Dual-radio 11be, LoRaWAN, LTE, PSE	NA	In Process	802.3bt	—

---

Use Cases:

FortiAPs allow for a versatile collection of installation topologies with options to fit any enterprise.

Campus

A single building with multiple floors, or a corporate or education campus with a group of large buildings.

• High-capacity designs including Dual 5GHz and tri-band with Wi-Fi 6E allow a maximal number of client devices to attach to the network at the same time without over-air congestion
• Complete NOC functionality with network visibility and AIOps simplify a complex network deployment into a solution manageable by IT teams of any size

---

Branch Office / SD-Branch

A highly distributed number of small sites, often with no on-site IT.

• Built in NAC functions* allow secure onboarding of devices at remote locations where IT doesn’t have reliable visibility
• Management orchestration with zero-touch deployment allows for quick and easy rollouts without the need for skilled installers at each site

---

Micro Branch

Ultra small sites that still fall under IT’s responsibility

• Can act as a SASE endpoint as a foundation for zero-trust network access (ZTNA)
• Simple management and provisioning through FortiSASE interface

---

Remote Workers

A remote AP installed at a worker’s home or at micro-branch office space.

• Split tunneling allows local traffic to remain local while sending other traffic to the data center for inspection when needed
• Desktop mounting options for wall-plate models allow the use of Ethernet as well as Wi-Fi connectivity while leveraging the same secure tunnel

---

SMB

Single site or small collection of sites with limited IT resources.

• Built-in NAC functions* bring security to the wireless network with no need to install and manage additional products
• Network and security convergence decreases management overhead while keeping the network secure

*FortiGate-managed installations only.

---

Specifications:

	FortiAP 222KL
Hardware
Hardware Type	Outdoor
Number of Radios	2 Wi-Fi + LoRaWAN + 1 LTE + 1 GNSS
Number of Antennas	5 External Antennas
Antenna Type Support	N-Type (5 total)
Antenna Type and Peak Gain	Wi-Fi: 5 dBi @2.4GHz, 6.5 dBi @5GHz LoRaWAN: Omni Directional, 4 dBi LTE: 4 dBi GNSS: Patch, 2.7 dBi
Frequency Bands (GHz)	2.4GHz Band: 2.4-2.484GHz 5.0GHz Band: UNII-1 5.15-5.25GHz, UNII-2A 5.25-5.35GHz, UNII-2C 5.47-5.725GHz, UNII-3 5.725-5.85GHz, UNII-4 5.85-5.925GHz
Radio 1 Capabilities (2.4GHz Wi-Fi)	Frequency band: 2.4GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024/4096 QAM MIMO Chains: 2x2 Service Radio
Radio 2 Capabilities (5.0GHz Wi-Fi)	Frequency band: 5.0GHz UNII-1 to UNII-4 Channel width: 20/40/80/160/240MHz Modulation: BPSK, QPSK, 64/256/1024/4096 QAM MIMO Chains: 2x2 Service Radio
Maximum Data Rate	2.4GHz band: up to 688 Mbps 5.0GHz band: up to 4.324 Gbps
Maximum Tx Power (Conducted)	2.4GHz band: 25 dBm/316 mW (2 chains combined)* 5.0GHz band: 26 dBm/400 mW (2 chains combined)*
LoRaWAN	US: 902-928 MHz; 8×125 kHz uplink (902.3-914.9MHz); 1×500 kHz downlink (923.3-927.5MHz); SF7-SF12; TX Power 26 dBm; RX Sensitivity -139 dBm Europe: 863-870 MHz; 8×125 kHz uplink (868.1-868.5MHz); 1×125 kHz downlink (869.525MHz); SF7-SF12; TX Power 14 dBm; RX Sensitivity -139 dBm
LTE Frequency (Worldwide)	4G: B1, B2, B3, B4, B5, B7, B8, B8_US, B9, B12, B13, B14, B18, B19, B20, B25, B26, B28 3G: B1, B2, B4, B5, B6, B8, B19 2G: B2, B3, B5, B8
LTE Data Rate	Downlink: 150 Mbps Uplink: 50 Mbps
LTE SIM Management	eSIM
Bluetooth Low Energy (BT/BLE) Radio	No
Trusted Platform Module (TPM)	Yes
GNSS	GPS L1 C/A: 1575.42 MHz, GLONASS L1: 1598.0625-1605.375 MHz, BeiDou: 1561.098 MHz, Galileo E1: 1575.42 MHz Supports multi-GNSS including QZSS and SBAS ranging Indoor and outdoor multi-path detection and compensation GNSS sensitivity: -165 dBm (Tracking), -148 dBm (acquisition)
Interfaces	x1 100M/1000M/2.5G Multigigabit Ethernet (RJ45), 802.3bt PoE-IN (Port 1) x1 10M/100M/1000M Ethernet (RJ45), 802.3af PoE-OUT (Port 2) x1 RS-232 RJ45 Serial Console
Power over Ethernet (PoE)	x1 802.3bt PoE
Simultaneous SSIDs	Up to 8 per client serving radio
EAP Type(s)	EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST, EAP-TTLS/PAP
User/Device Authentication	WPA™, WPA2™, and WPA3™ with 802.1x or Preshared key, WEP, Web Captive Portal, MAC blocklist and allowlist
IEEE Standards	802.11a, 802.11b, 802.11be, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11k, 802.11mc, 802.11n, 802.11r, 802.11u, 802.11v, 802.11w, 802.11ac, 802.11ax, 802.1Q, 802.1X, 802.3ad, 802.3at, 802.3az, 802.3bt, 802.3bz
SSID Types Supported	Local-Bridge, Mesh, and Tunnel
Per Radio Client Capacity	Up to 512 clients per radio (Radio1 and Radio2)
Cellular Co-existence	Yes
LED Off Mode	Yes
Advanced 802.11 Features
OFDMA	Yes
Spatial Reuse (BSS Coloring)	Yes
UL MU-MIMO	Yes
DL-MU-MIMO	Yes
Enhanced Target Wake Time (TWT)	Yes
ZeroWait DFS	No
Onboard Security Functions
UTP Capable	No
Wireless Monitoring Capabilities
Rogue Scan radio modes	Background
WIPS / WIDS radio modes	Background
Packet Sniffer Mode	Yes
Spectrum Analyzer	Yes
Dimensions
Length x Width x Height — Device	8.66 x 8.66 x 2.36 inches (220 x 220 x 60 mm)
Length x Width x Height — Shipping	11.85 x 10.23 x 7.24 inches (301 x 260 x 184 mm)
Weight	5.95 lbs (2.7 kg)
Package (shipping) Weight	14.3 lbs (6.5 kg)
Mounting Options	Wall and Pole mounting brackets (included)
Included Accessories	802.3bt PoE, Mounting bracket, Grounding cable
Environment
CPU/RAM	Quad-core ARM Cortex-A53 1.5GHz / 2 GB
Power Supply	802.3bt PoE (Included)
Power Consumption (Maximum)	26 Watts
PoE Mode	Full — 802.3bt or Passive (shipped with unit): Tx Power - Full; Chain 2x2; PSE - Enabled
Humidity	5% to 90% non condensing
Operating / Storage Temperature	-40°F to 158°F (-40°C to 70°C) / -58°F to 178°F (-50°C to 80°C)
Operating Altitude	9,842 ft (3000 m)
Mean Time Between Failures	> 10 Years
IP Rating	IP67
Wind Rating	165 mph (266 km/h)
Certifications
Regulatory Compliance	FCC/ISED, CE, Class 1 Division 2, ATEX Zone 2
WiFi 7 Certified	In Progress
DFS	FCC, IC, and CE
Hazardous Location	In Progress
Warranty
Limited Lifetime Warranty	Yes

Note: * Frequency selection, power, and some communication features may be restricted to abide by regional regulatory compliance laws. Use of the LTE module is subject to country/region of use (not supported in early release).

---

Documentation:

Download the Fortinet FortiAP Series Datasheet (PDF).

---