Fortinet FortiAP-21D
Thin Wireless LAN Access Points
Sorry, this product is no longer available. Please contact us for a replacement.
Click here to jump to more pricing!
Overview:
FortiAP are thin access points, delivering secure, identity-driven WiFi access for your enterprise network, managed centrally by the integrated WLAN controller of any FortiGate® security appliance. With the integration of the wireless controller functionality into the market leading FortiGate appliance, Fortinet delivers a true Unified Access Layer. This enables you to easily manage wired and wireless security from a Single Pane of Glass management console and protects your network from the latest security threats.
Outdoor Enterprise WLAN Deployment
FortiAP Remote WLAN access points have been purpose-built for installation in remote locations, with coverage areas of up to 300m2. Preprovisioned APs can be shipped to a remote user and connect back to the FortiGate wireless controller via a secure tunnel over any Internet connection. The AP can broadcast the same SSID at the remote location as it does at headquarters, providing a seamless roaming experience for users. The wired ports can also be bridged to an SSID, enabling devices such as VoIP phones to seamlessly connect back to the corporate network. The remote series of FortiAPs are designed to increase the security remote wireless LANs, while simplifying management and reducing helpdesk calls.
Highlights
- Leverage existing FortiGate or FortiWiFi platforms as controllers for low TCO.
- Integration with FortiManager and FortiAnalyzer for centralized management and reporting.
- Fast Roaming for uninterrupted data access.
- Automatic Radio Resource Provisioning (ARRP) for optimized throughput.
- Layer 7 application control prioritizes business traffic.
- Rogue AP detection and mitigation to satisfy PCI DSS Key Features & Benefits compliance.
| Key Features & Benefits | |
|---|---|
| Advanced Security Protection | Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filtering protect the wireless LAN from the latest security threats. |
| Integrated WIDS and Rogue AP Suppression | Protects the network from advanced wireless threats and satisfies PCI DSS compliance. |
| Deep Application Control | Fortinet goes above Wireless Multimedia Extensions (WME) by offering deep Layer 7 inspection to precisely control applications and bandwidth usage. |
| "Single Pane of Glass" Management Console | Unified management console simplifies operations, ensuring consistent and effective policy enforcement and compliance. |
Hardware:
FortiAP 11C
The FortiAP 11C is a small plug-and-play 1x1 MIMO access point suitable for traveling road warriors or teleworkers, featuring an integrated power plug for easy storage and installation. It has two Ethernet ports (LAN and WAN), allowing you to connect wired devices like VoIP phones back to the corporate network, enabling an instant office for the distributed workforce.
FortiAP 14C
The FortiAP 14C is a cost-effective 1x1 MIMO access point, with integrated 5 port 10/100 Ethernet switch in small desktop form factor. The AP is designed for deployment in small remote offices or hotels, allowing a number of additional wired devices to be connected directly to the AP, such as PCs, VoIP phones or printers.
FortiAP 21D
The FortiAP 21D is a tiny 2x2 MIMO access point, powered from a standard USB port (or included USB power adapter). This AP is perfect for deployment as cost-effective FortiPresence analytics sensor, or for traveling employees. The dual Ethernet ports enable bridging of devices like VoIP phones back to the corporate network.
FortiAP 25D
The FortiAP 25D is a small power-strip design dual-band 2x2 MIMO access point. With 5 Ethernet ports, this AP is well suited to desktop deployments in hotels or hospitality environments, enabling the connection of Point-of-Sale and other remote equipment back to the corporate network.
FortiAP 28C
The FortiAP 28C is designed for larger remote offices, featuring a higher performance dual-band 2x2 MIMO radio and a 10 port Gigabit Ethernet switch. This AP can be deployed to provide all of the wired and wireless connectivity and security for your remote office.
Deployment:
Remote Telecommuter or SOHO Deployment
Remote Deployment with Local Bridging
Specifications:
| FortiAP 11C | FortiAP 14C | FortiAP 21D | FortiAP 25D | FortiAP 28C | |
|---|---|---|---|---|---|
| Hardware | |||||
| Hardware Type | Remote (Indoor) | Remote (Indoor) | Remote (Indoor) | Remote (Indoor) | Remote (Indoor) |
| Number of Radios | 1 | 1 | 1 | 1 | 1 |
| Number of Antennas | 1 internal | 1 internal | 2 internal | 2 internal | 2 internal |
| Peak Antenna Gain | 2 dBi for 2.4 GHz | 2 dBi for 2.4 GHz | 2.5 dBi for 2.4 GHz | 2 dBi for 2.4 GHz, 3 dBi for 5 GHz | 3 dBi for 2.4 GHz, 4 dBi for 5 GHz |
| Frequency Bands (GHz) * | 2.400–2.4835 | 2.400–2.4835 | 2.400–2.4835 | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850 | 2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850 |
| Frequency of Radio 1 | 2.4 GHz b/g/n | 2.4 GHz b/g/n | 2.4 GHz b/g/n | 2.4 GHz b/g/n, 5 GHz a/n | 2.4 GHz b/g/n, 5 GHz a/n |
| Frequency of Radio 2 | – | – | – | – | – |
| Throughput | Up to 150 Mbps | Up to 150 Mbps | Up to 300 Mbps | Up to 300 Mbps | Up to 300 Mbps |
| Tx/Rx Streams | 1x1 MIMO 1 spatial stream | 1x1 MIMO 1 spatial stream | 2x2 MIMO 2 spatial stream | 2x2 MIMO 2 spatial stream | 2x2 MIMO 2 spatial stream |
| Ethernet Ports | 2x GE RJ45 ports (1x WAN port, 1x LAN port) | 5x FE RJ45 ports (1x WAN port, 4x LAN ports) | 2x FE RJ45 ports (1x WAN port, 1x LAN port) | 1x GE RJ45 WAN port, 4x FE RJ45 LAN ports | 10x FE RJ45 ports (2x WAN ports, 8x LAN ports) |
| USB Port | 1x Type A, 1x Mini-B | – | 1x Type A | – | 2x Type A, 1x Type B |
| Serial Console Port | – | – | – | – | – |
| Power over Ethernet (PoE) | – | – | – | – | – |
| WME Multimedia Extensions | Yes (4 priority queues for voice, video, data and background traffic) | Yes (4 priority queues for voice, video, data and background traffic) | Yes (4 priority queues for voice, video, data and background traffic) | Yes (4 priority queues for voice, video, data and background traffic) | Yes (4 priority queues for voice, video, data and background traffic) |
| Simultaneous SSIDs | 8 (7 if background scanning enabled) | 8 (7 if background scanning enabled) | 8 (7 if background scanning enabled) | 8 (7 if background scanning enabled) | 8 (7 if background scanning enabled) |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST | EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST |
| User/Device Authentication | WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist | WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist | WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist | WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist | WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist |
| Maximum Tx Power | 17 dBm (50 mW) * | 17 dBm (50 mW) * | 17 dBm (50 mW) * | 16 dBm (40 mW) * | 17 dBm (50 mW) * |
| Physical Security | – | – | – | – | Kensington Lock |
| Mean Time Between Failures | >10 years | >10 years | >10 years | >10 years | >10 years |
| IEEE Specifications | 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x | 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x | 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x 20 MHz and 40 MHz High- | 802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x 20 MHz and 40 MHz High- | 802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x20 MHz and 40 MHz High- |
| 802.11n Features | – – – |
– – – |
20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save |
20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save |
20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save |
| Advanced 802.11n to enhance rate-over-range including: | – – – – |
– – – – |
Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Transmit beamforming (TxBF) Maximum Ratio Combining (MRC) for improved receiver |
Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Transmit beamforming (TxBF) Maximum Ratio Combining (MRC) for improved receiver |
Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Transmit beamforming (TxBF) Maximum Ratio Combining (MRC) for improved receiver |
| Mounting Options | – | Desktop, Wall | Desktop, Wall | Desktop, Wall | Desktop, Wall |
| Included Accessories | International power plugs | AC power adapter and wall mount kit | AC power adapter and wall mount kit | AC power adapter and wall mount kit | AC power adapter and wall mount kit |
| FortiPresence Capable | Yes | Yes | Yes | Yes | Yes |
| Wireless Monitoring Capabilities | |||||
| Frequencies scanned | – | – | – | 2.4 and 5 GHz | 2.4 and 5 GHz |
| Background scan with client access on 2.4 and 5 GHz | – | – | – | – | – |
| Full-time scan as dedicated monitor | – | – | – | Yes | Yes |
| Dimensions | |||||
| Length x Width x Height | 1.5 x 3.5 x 4.3 inches (3.4 x 8.9 x 11 cm) | 3.86 x 4.92 x 1.06 inches (9.8 x 12.5 x 2.7 cm) | 2.9 x 3.2 x 0.9 inches (7.3 x 8.1 x 2.2 cm) | 0.9 x 2.8 x 1.4 inches (2.28 x 7 x 3.5 cm) | 7.09 x 8.43 x 1.38 inches (18 x 21.4 x 3.5 cm) |
| Weight | 0.5 lbs (0.22 kg) | 0.1 lbs (0.2 kg) | 0.14 lbs (65 g) | 0.62 lbs (0.28 kg) | 1.1 lbs (0.5 kg) |
| Package (shipping) Weight | 1.6 lbs (0.74 kg) | 1.2 lbs (0.56 kg) | 0.77 lbs (0.35 kg) | 1.01 lbs (0.46 kg) | 3.2 lbs (1.47 kg) |
| Environment | |||||
| Power Supply | Integrated Power Supply with 100–240V AC, 50–60 Hz Input | Adapter Input: 100–240V AC, 50–60 Hz | "USB Mini-B Powered, 5V 2A Adapter Input: 100–240V AC, 50–60 Hz" | Adapter Input: 100–240V AC, 50–60 Hz | Adapter Input: 100–240V AC, 50–60 Hz |
| Power Consumption (Average) | 4.38 W | 3.35 W | 3.3 W | 2.5 W | 14 W |
| Power Consumption (Maximum) | 6.86 W | 3.85 W | 5.5 W | 2.7 W | 15 W |
| Humidity | 10–90% non-condensing | 20–90% non-condensing | 10–85%, non-condensing (Operating) | 0–90% non-condensing | 20–90% non-condensing |
| Operating Temperature | -4–140°F (-20–60°C) | -4–158°F (0–40°C) | -4–158°F (0–40°C) | -4–158°F (0–40°C) | 32–104°F (0–40°C) |
| Storage Temperature | -4–158°F (-20–70°C) | -13–158°F (-25–70°C) | -4–158°F (-20–70°C) | -4–140°F (-20–60°C) | -13–158°F (-25–70°C) |
| Directives | Low Voltage Directive • RoHS | Low Voltage Directive • RoHS | Low Voltage Directive • RoHS | Low Voltage Directive • RoHS | Low Voltage Directive • RoHS |
| Certifications | |||||
| WiFi Alliance Certified | No | No | No | No | No |
| Warranty | |||||
| Limited Lifetime Warranty | Yes | Yes | Yes | Yes | Yes |
Documentation:
Download the Fortinet FortiAP Remote Series Datasheet (PDF).
Pricing Notes:
- All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
- 24x7 FortiCare Contract
24x7 Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.