Fortinet FortiAP 432G
4x4 Ruggedized Tri-radio indoor/outdoor 11ax (6 Ghz) Capable APs

Overview:

FortiAP™ access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiEdge Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for campus and branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a Single-pane-of-glass management console and protects your network from the latest security threats.

FortiAP 432G are enterprise class 802.11ax ruggedized indoor/outdoor AP that provides three radios for tri-band access on radio capable of four spatial streams. As a Wi-Fi 6E access point it provides 6GHz band operation, OFDMA, a 10 Gigabit Ethernet port, plus an additional 1 Gbps Ethernet port with PoE out. The integrated BLE radio can be used for beacons and locationing applications.

Note: For FAP-432G, use of the 6GHz band is subject to regional regulatory authority approval.

• 802.11ax | Tri-Radio 2.4 GHz + 5 GHz + 6 GHz | 8 External Antennas
• 4x4 MU-MIMO | Up to 1148 Mbps + 2402 Mbps + 4804 Mbps

HARDWARE OFFERINGS	ANTENNA TYPE	INDOOR USE	OUTDOOR USE
4x4 Ruggedized Tri-radio indoor/outdoor 11ax (6 Ghz) Capable APs	External

---

Use Cases:

FortiAPs allow for a versatile collection of installation topologies with options to fit any enterprise.

Campus

A single building with multiple floors, or a corporate or education campus with a group of large buildings.

• High-capacity designs including Dual 5GHz and tri-band with Wi-Fi 6E allow a maximal number of client devices to attach to the network at the same time without over-air congestion
• Complete NOC functionality with network visibility and AIOps simplify a complex network deployment into a solution manageable by IT teams of any size

---

Branch Office / SD-Branch

A highly distributed number of small sites, often with no on-site IT.

• Built in NAC functions* allow secure onboarding of devices at remote locations where IT doesn’t have reliable visibility
• Management orchestration with zero-touch deployment allows for quick and easy rollouts without the need for skilled installers at each site

---

Micro Branch

Ultra small sites that still fall under IT’s responsibility

• Can act as a SASE endpoint as a foundation for zero-trust network access (ZTNA)
• Simple management and provisioning through FortiSASE interface

---

Remote Workers

A remote AP installed at a worker’s home or at micro-branch office space.

• Split tunneling allows local traffic to remain local while sending other traffic to the data center for inspection when needed
• Desktop mounting options for wall-plate models allow the use of Ethernet as well as Wi-Fi connectivity while leveraging the same secure tunnel

---

SMB

Single site or small collection of sites with limited IT resources.

• Built-in NAC functions* bring security to the wireless network with no need to install and manage additional products
• Network and security convergence decreases management overhead while keeping the network secure

*FortiGate-managed installations only.

---

Specifications:

FortiAP 432G
Hardware
Hardware Type	Wi-Fi 6E 4x4 MIMO Outdoor AP
Number of Radios	3 + 1 BLE
Number of Antennas	External: x4 Dual band WiFi + x4 Tri-band WiFi and Scanning + x1 2.4GHz band BLE/ZigBee
Antenna Type Support	N-Type (9 total): Dual Band Antenna (4); Tri Band Antenna (4); BLE/Scan antenna (1)
Antenna Type and Peak Gain	Omni Directional antenna. Dual band: 5.1 dBi for 2.4GHz, 6.4 dBi for 5 GHz Tri-band: 4.9 dBi for 2.4GHz, 5.8 dBi for 5 GHz, and 6.0 dBi for 6GHz band BLE Antenna: 4.7 dBi for 2.4GHz GPS Antenna: ceramic patch circular polarized: 3.0 dBi Peak gain
Antenna Beam width	Wi-Fi: 2.4GHz Band: 360° Horizontal and 65° Vertical 5.0GHz Band: 360° Horizontal and 50° Vertical 6.0GHz Band: 360° Horizontal and 65° Vertical BLE: 2.4GHz Band: 225° Horizontal and 55° Vertical GPS: 1.5-1.6GHz Band: 360° Horizontal and 98° Vertical
Supported Frequency Bands (GHz)*	2.4-2.484GHz 5.15-5.25GHz 5.25-5.35GHz 5.47-5.725GHz 5.725-5.85GHz 5.925–6.425GHz 6.425-6.525GHz 6.525–6.875GHz 6.875–7.125GHz
Radio 1 Capabilities	Frequency band: 2.4GHz, Channel width: 20/40MHz, Modulation: BPSK, QPSK, 64/256/1024 QAM, MIMO Chains: 4x4 Service
Radio 2 Capabilities	Frequency band: 5.0GHz, Channel width: 20/40/80MHz, Modulation: BPSK, QPSK, 64/256/1024 QAM, MIMO Chains: 4x4 Service
Radio 3 Capabilities	Frequency band: 2.4GHz, 5.0GHz, and 6.0GHz, Channel width: 20/40/80/160MHz, Modulation: BPSK, QPSK, 64/256/1024 QAM, MIMO Chains: 4X4 Service
Maximum Data Rate	2.4GHz: up to 1148 Mbps, 5.0GHz: up to 2402 Mbps, 6.0GHz: up to 4804 Mbps
Bluetooth Low Energy Radio	Bluetooth scanning and iBeacon advertizement @10 dBm max TX power
Trusted Platform Module (TPM)	Yes
Interfaces	x1 100M/1000M/2.5G/5.0G/10G Multigigabit Ethernet (RJ45) x1 10M/100M/1000M Ethernet (RJ45) x1 Type 3.0 USB at 2.5W x1 RS-232 RJ45 Serial Port
Power over Ethernet (PoE)	LAN1: 802.3bt, LAN2: N/A
Hit-less PoE Failover	N/A
Simultaneous SSIDs	Up to 8 per client serving radio (7 if background scanning is enabled)
EAP Type(s)	EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST, EAP-TTLS/PAP
User/Device Authentication	WPA™, WPA2™, and WPA3™ with 802.1x or Preshared key, WEP, Web Captive Portal, MAC blacklist and whitelist
Maximum Tx Power (Conducted)	2.4GHz band: 25 dBm/316 mW (2 chains combined)* 5.0GHz band: 26 dBm/400 mW (2 chains combined)* 6.0GHz band: 23 dBm/200 mW (2 chains combined@320MHz BW)*
Kensington Lock	Yes
IEEE Standards	802.11a, 802.11b, 802.11be, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.11ax, 802.11mc, 802.1X, 802.3ad, 802.3at, 802.3bt, 802.3az, 802.1Q, 802.11u, 802.11w, 802.3bz
SSID Types Supported	Local-Bridge, Mesh, and Tunnel
Per Radio Client Capacity	Up to 512 clients per radio
Cellular Co-existence	Yes
LED Off Mode	Yes
Advanced 802.11 Features
OFDMA	Yes
Spatial Reuse (BSS Coloring)	Yes
UL MU-MIMO	Yes
DL-MU-MIMO	Yes
Enhanced Target Wake Time (TWT)	Yes
ZeroWait DFS	No
Onboard Security Functions
UTP Capable	In Progress
UTP Features	To be confirmed
Wireless Monitoring Capabilities
Rogue Scan radio modes	Background, Dedicated
WIPS / WIDS radio modes	Background, Dedicated (recommended)
Packet Sniffer Mode	Yes
Spectrum Analyzer	Yes
Dimensions
Length x Width x Height	10.2 x 8.7 x 2.6 in (259 x 220 x 66 mm)
Weight	2.65 lbs (1.2 kg)
Package (shipping) Weight	5.73 lbs (2.6 kg)
Mounting Options	Pole, Wall
Included Accessories	Mounting Kit
Environment
CPU/RAM	Quad-core ARM Cortex-A53 1.5GHz / 2 GB
Power Supply	802.3bt PoE: GPI-145 or 802.3at PoE: GPI-130 or 12V, 2.5A, 30 Watt DC power supply
Power Consumption (Max)	28.9 W
PoE Mode	802.3bt (full mode), 802.3at (high mode), 802.3af (low mode)
Humidity	5% to 90% non-condensing
Operating/Storage Temp.	-22°F to 122°F (-30°C to 50°C) / -40°F to 158°F (-40°C to 70°C)
Directives	Low Voltage Directive • RoHS
UL2043 Plenum Material	Yes
Mean Time Between Failures	>10 Years
IP Rating	IP67
Surge Protection Built In	Yes
Certifications
Wi-Fi Alliance Certified	Certified (Wi-Fi 7 in progress)
DFS	Europe, FCC, Japan, Australia, Brazil, Taiwan, India
Warranty
Limited Lifetime Warranty	Yes

Note: * Frequency selection, power, and some communication features may be restricted to abide by regional regulatory compliance laws.

---

Antenna Radiation Patterns

Documentation:

Download the Fortinet FortiAP Series Datasheet (PDF).

---