FortiAP
Indoor, outdoor and remote access points — FortiGate, cloud or controller managed
- Licensing
- Per access point; management included with FortiGate
- Management
- FortiGate-managed, cloud-managed, or FortiAP-HD controller
- Security
- Enforced via FortiGate — same policy as wired
FortiAP delivers wireless with security enforced through the FortiGate rather than by the AP, which means wireless traffic gets the same IPS, application control and web filtering as wired traffic under the same policy set. Management is via FortiGate, FortiAP Cloud, or a dedicated FortiAP-HD WLAN controller.
Where it fits — and where it stops fitting
Coverage and capacity are different problems: a warehouse needs coverage, a lecture theatre needs capacity, which means more APs at lower power rather than fewer at higher. Give us a floor plan and a client count and we will size it properly instead of guessing from square footage. A WiFi 7 AP on a 1 Gbps PoE port is money spent on a bottleneck.
Highlights
- No separate WLAN controller to buy when FortiGate-managed
- Wireless traffic inspected under the same policy as wired
- Indoor, outdoor and remote-worker models
- Regional SKUs — frequency and power are regulated
Typical deployments
- Wireless for a site that already has a FortiGate
- Distributed sites with no local firewall, managed from the cloud
- Secure home-office access points tunnelling back to corporate
What to work out first
FortiAP offers three management models and choosing between them is the first decision, not an afterthought. FortiGate-managed puts the WLAN controller inside the firewall you already have. Cloud-managed via FortiAP Cloud suits distributed sites with no local firewall. FortiAP-HD uses a dedicated WLAN controller for large, dense deployments.
Security is delivered through the FortiGate rather than by the AP itself, which means wireless traffic gets exactly the same IPS, application control and web filtering as wired traffic, under the same policy set. There is no separate wireless security posture to maintain or to drift.
The range covers indoor, outdoor-rated, and remote/teleworker models. Frequency selection and transmit power are restricted by regional regulation, so the regional SKU matters.
Questions worth answering before you order
How dense is the client population?
Coverage and capacity are different problems. A warehouse needs coverage; a lecture theatre or open-plan floor needs capacity, which means more APs at lower power, not fewer at higher. Give us a floor plan and client count and we will size it properly.
WiFi 6, 6E or 7?
6E and 7 open the 6 GHz band, which is genuinely transformative in congested environments — but only if your clients support it and your switching can feed it. A WiFi 7 AP on a 1 Gbps PoE port is money spent on a bottleneck.
Indoor, outdoor or remote?
Outdoor models are environmentally sealed and usually need external antennas and different mounting. Remote/teleworker models build a secure tunnel back to the corporate FortiGate from a home network.
Which management model?
If you have a FortiGate at the site, FortiGate-managed is almost always right and costs nothing extra. Check the firewall's max-FortiAP figure first.
What this includes
Fortinet publishes no throughput table for this product — it is licensed per user, endpoint, workload or account. What follows is capability and sizing, not benchmarks.
What you are buying
| Licensing | Per access point; management included with FortiGate |
|---|---|
| Management | FortiGate-managed, cloud-managed, or FortiAP-HD controller |
| Security | Enforced via FortiGate — same policy as wired |
| Models | Indoor, outdoor-rated and remote/teleworker |
How this is sized
Fortinet licenses this product per user, endpoint, workload or account rather than by appliance throughput, so there is no comparable performance table to publish. We size it from your actual environment — tell us the numbers and we will work it through with you.
| Licensing | Per access point; management included with FortiGate |
|---|
Sources
- Fortinet product line overview — retrieved 2026-09-01
Reproduced from Fortinet published documentation and subject to change without notice. Where a figure is load-bearing for your design, ask us to confirm it in writing before you order — we will.