Fortinet FortiAP 23JK
FortiGate, FortiEdge Cloud, or SASE-managed — 2x2 Indoor quad-radio 11be 6Ghz Capable AP
Fortinet Products
FortiAP-23JK Access Point
Click here to jump to more pricing!
Overview
The Fortinet FortiAP™ 23JK is a high-performance indoor Wi-Fi 7 access point designed for modern enterprise and branch environments. Centrally managed through FortiGate®, FortiEdge Cloud, or Fortinet’s secure access service edge (SASE) platform, it offers simplified deployment and unified management across your network.
Equipped with quad radios—including support for the 2.4GHz, 5GHz, and 6GHz frequency bands—the FortiAP 23JK delivers lightning-fast wireless connectivity, robust scanning capabilities, and integrated BLE/ZigBee for IoT applications such as asset tracking and proximity services. With its support for up to 10GbE uplinks and multiple SSIDs, the 23JK ensures both high throughput and flexible access control.
- Tri-Band Access: Operates concurrently on 2.4GHz, 5GHz, and 6GHz with a dedicated scanning radio
- Integrated IoT Support: Built-in BLE/ZigBee radio for advanced IoT and location-based services
- Enterprise Performance: 2x2 MU-MIMO with maximum data rates up to 5.76 Gbps on the 6GHz band
- High-Speed Uplinks: Includes 1x 10G and 1x 1G Ethernet port for multigigabit backhaul
- Flexible Deployment: Supports local bridging, tunneling, and mesh networking modes
Highlights
- Centralized management via FortiGate, FortiEdge Cloud, or SASE portal
- Zero Trust Network Access (ZTNA) ready with secure micro-segmentation
- Integrated firewall, IPS, and content filtering to protect wireless traffic
- High client density support—up to 512 clients per radio
- Designed for indoor enterprise deployments and modern microbranches
| HARDWARE OFFERINGS | ANTENNA TYPE | INDOOR USE | OUTDOOR USE |
|---|---|---|---|
| 2x2 Indoor Tri-radio 11be 6Ghz Capable Desktop APs | Internal | - |
Highlights
- Unified management console simplifies operations, ensuring consistency in effective policy enforcement and compliance
- Built-in foundation for zerotrust network access (ZTNA) and secure access service edge (SASE), allowing you the flexibility to easily deploy microbranches with the security you need at the edge of your network
- Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filter protect the wireless LAN from the latest security threats
- Protects the network from advanced wireless threats and satisfies industry compliance such as PCI DSS
Specifications:
| FortiAP 32JK | |
|---|---|
| Hardware | |
| Hardware Type | Wi-Fi 7 Indoor AP |
| Number of Radios | 3 Wi-Fi + 1 BLE |
| Number of Antennas | 5.x2 Dual band Wi-Fi + x2 6GHz band Wi-Fi + x1 BLE/ ZigBee antenna |
| Antenna Type Support | N/A |
| Antenna Type and Peak Gain | PCB 2.4/5GHz dual band antenna: 4.0 dBi for 2.4GHz, 4.4 dBi for 5 GHz PCB 6GHz antenna: 3.6 dBi for 6GHz band PCB BLE antenna: 3.7 dBi for 2.4GHz |
| Supported Frequency Bands (GHz)* | 2.4GHz Band: ISM 2.4‑2.484GHz 5.0GHz Band: UNII‑1 5.15‑5.25GHz, UNII‑2A 5.25‑5.35GHz, UNII‑2C 5.47‑5.73GHz, UNII‑3 5.725‑5.85GHz, UNII‑4 5.85‑5.895GHz 6.0GHz Band: UNII-5 5.925-6.425GHz, UNII-6‑6.425-6.525GHz, UNII-7 6.525-6.875, UNII-8 6.875-7.125GHz |
| Radio 1 Capabilities | Frequency band: 2.4GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024/4096 QAM MIMO Chains: 2x2 Service |
| Radio 2 Capabilities | Frequency band: 5.0GHz UNII-1 to UNII-4 Channel width: 20/40/80/160MHz Modulation: BPSK, QPSK, 16/64/256/1024/4096 QAM MIMO Chains: 2x2 Service |
| Radio 3 Capabilities | Frequency band: 6.0GHz UNII-5 to UNII-8 Channel width: 20/40/80/160/320MHz Modulation: BPSK, QPSK, 16/64/256/1024/4096 QAM MIMO Chains: 2x2 Service |
| Maximum Data Rate | 2.4GHz band: up to 688 Mbps 5.0GHz band: up to 2.882 Gbps 6.0GHz band: up to 5.765 Gbps |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertizement @10 dBm max TX power |
| Trusted Platform Module (TPM) | Yes |
| GNSS | N/A |
| Interfaces | WAN1: x1 100M/1000M/2.5G/5.0G/10G Multigigabit Ethernet (RJ45), 802.3bt PoE(PD) LAN ports: x3 10M/100M/1000M Gigabit Ethernet (RJ45), LAN3 802.3af PoE (PSE) RJ-45 Ports (1xPass-through in, 1xPass-through out) x1 RS-232 RJ45 Serial Port |
| Power over Ethernet (PoE) | WAN1: 802.3bt |
| Hit-less PoE Failover | N/A |
| Simultaneous SSIDs | Up to 8 per client serving radio (7 if background scanning is enabled) |
| EAP Type(s) | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST, EAP‑TTLS/PAP |
| User/Device Authentication | WPA™, WPA2™, and WPA3™ with 802.1x or Preshared key, WEP, Web Captive Portal, MAC blacklist and whitelist |
| Maximum Tx Power (Conducted) | 2.4GHz band: 25 dBm/316 mW (2 chains combined)* 5.0GHz band: 22 dBm/158 mW (2 chains combined)* 6.0GHz band: 21 dBm/125 mW (2 chains combined@320MHz BW)* |
| Kensington Lock | Yes |
| IEEE Standards | 802.11a, 802.11b, 802.11be, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.11ax, 802.11mc, 802.1X, 802.3ad, 802.3af, 802.3at, 802.3bt, 802.3az, 802.1Q, 802.11u, 802.11w, 802.3bz |
| SSID Types Supported | Local-Bridge, Mesh, and Tunnel |
| Per Radio Client Capacity | Up to 512 clients per radio (Radio1, Radio2, and Radio3) |
| Cellular Co-existence | Yes |
| LED Off Mode | Yes |
| Advanced 802.11 Features | |
| OFDMA | Yes |
| Spatial Reuse (BSS Coloring) | Yes |
| UL MU-MIMO | Yes |
| DL-MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS | No |
| Onboard Security Functions | |
| UTP Capable | In Progress |
| UTP Features | To be confirmed |
| Wireless Monitoring Capabilities | |
| Rogue Scan radio modes | Background, Dedicated |
| WIPS / WIDS radio modes | Background, Dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
| Dimensions | |
| Length x Width x Height | 7.08 x 4.72 x 1.57 inches (180 x 120 x 40 mm) |
| Weight | 1.15 lbs (0.52 kg) |
| Package (shipping) Weight | 1.85 lbs (0.84 kg) |
| Mounting Options | Wall mount default option and Table top stand option |
| Included Accessories | Standard Wall Mounting Kit |
| Environment | |
| CPU/RAM | Quad-core ARM Cortex-A53 1.5GHz / 2 GB |
| Power Supply | 802.3bt PoE (GPI-145) or 802.3at PoE ( GPI-130) without PSE OUT 48V 1A DC power supply (SP-FAP23J-PA-10) |
| Power Consumption (Max) | 31 W - PoE input 19 W - PoE input (without PSE OUT) 27.25 W - 54V DC power supply |
| Power Sourcing Equipment (PSE) | 802.3af PSE OUT on LAN3 port |
| PoE Mode | 802.3bt: R1(2.4GHz) + R2(5GHz) + R3(6GHz) + PSE-OUT 802.3at: R1(2.4GHz) + R2(5GHz) + R3(6GHz) without PSE-OUT |
| Humidity | 5% to 90% non-condensing |
| Operating/Storage Temp. | 32°F to 113°F (0°C to 45°C) / -22°F to 158°F (-30°C to 70°C) |
| Directives | Low Voltage Directive * RoHS |
| UL2043 Plenum Material | Yes |
| Mean Time Between Failures | >10 Years |
| IP Rating | N/A |
| Surge Protection Built In | N/A |
| Certifications | |
| Wi-Fi Alliance Certified | Certified (Wi-Fi 7 in progress) |
| DFS | Europe, FCC, Japan, Australia, N |
| Warranty | |
| Limited Lifetime Warranty | Yes |
Note: * Frequency selection, power, and some communication features may be restricted to abide by regional regulatory compliance laws.
Documentation:
Download the FortiAP Series Data Sheet (PDF).
Pricing Notes:
- All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
- 24x7 FortiCare Contract
24x7 Support, Advanced Hardware Replacement (NBD), Firmware and General Upgrades - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.
Fortinet Products
FortiAP-23JK Access Point