�ݺ�ߣ

FORTINET SECURE
WIRELESS OVERVIEW

2
? Fortinet Inc. All Rights Reserved.
Fortinet
Security
Fabric
Broad
visibility and protection of the entire
digital attack surface to better
manage risk
Integrated
solution that reduces management
complexity and shares threat
intelligence
Automated
self-healing networks with AI-driven
security for fast and efficient
operations
Security-Driven
Networking
Zero Trust
Access
Adaptive Cloud
Security
FORTIOS
FortiGuard Threat
Intelligence
Open
Ecosystem
Fabric Management
Center
NOC SOC
02012021
SP-FAP250-PAX-10

3
Security Driven Networking
Deliver Enterprise Protection And User Experience At Any Edge
5G
Operational
Technologies
Endpoints
Mobile
Users
IoT
IaaS
Internet
SaaS
DC
Edge
Compute
Campus
Branch
Travel
WFH
WAN
Edge
WAN
Edge
Home
Edge
Off-Net
Edge
Wi-Fi
Edge
Switch
Edge
Cloud
Edge
DC
Edge
Cloud
Edge
Internet
Edge
Compute
Edge
LTE Edge
OT Edge

4
Fortinet sees three key elements for successful local area networking:
1. Secure
2. Simple
3. Adaptive
The Fortinet Secure LAN Edge delivers on all three
A secure, integrated approach to local area networking
Fortinet��s secure LAN Edge vision

5
Fortinet Recognized as a Visionary in the 2020 Gartner Magic
Quadrant for Wired and Wireless LAN Access Infrastructure
These graphics were published by Gartner, Inc. as part of a
larger research document and should be evaluated in the
context of the entire document. The Gartner documents are
available upon request from our website:
https://www.fortinet.com/solutions/gartner-wired-wireless-lan
Gartner does not endorse any vendor, product or service depicted in its research
publications, and does not advise technology users to select only those vendors
with the highest ratings or other designation. Gartner research publications
consist of the opinions of Gartner��s research organization and should not be
construed as statements of fact. Gartner disclaims all warranties, expressed or
implied, with respect to this research, including any warranties of merchantability
or fitness for a particular purpose.

6
A Gartner Peer Insights Customers�� Choice?
Recognized by 3,600+ Customers in Multiple Categories and Markets
Customers�� Choice
? Enterprise Firewall
? WAN Edge/SD-WAN
? Wired and Wireless LAN Access Infrastructure
The GARTNER PEER INSIGHTS CUSTOMERS�� CHOICE badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved. Gartner Peer Insights Customers�� Choice
constitute the subjective opinions of individual end-user reviews, ratings, and data applied against a documented methodology; they neither represent the views of, nor constitute an endorsement by, Gartner or its affiliates.
Top 5
Vendor in 8
markets
3600+
Reviews
14
Markets

7
Business value of moving to a Fortinet LAN Edge
Convergence of
Network and
Security
Consolidate Functions, IT Footprint,
OS, and Configurations, Address IoT
Simplified
Operations
Enhance business agility with a single UI,
single OS
TCO Benefits
It��s about value not price
Fewer licenses, less time spent
learning multiple interfaces

8
Fortinet secure LAN Edge through FortiLink
? Integrated Security
? Direct control, configuration, and management
of FortiAPs and FortiSwitch through FortiOS
? Extends the next-generation firewall (NGFW)
features and inspection to the LAN
? A significant step beyond centralized
management
? Simplicity
? Agile deployment and management
? Flexible architecture to scale as needed
? Lower Total Cost of Ownership
? Access Management included with FortiOS
? No additional licenses required
Security-driven networking
FortiGate
FortiAP
FortiLink
FortiLink
FortiSwitch

9
? Secure
? Automatic discovery policy application
? Flexible triggers and actions
? Rules point to policy
? Simple
? Defaults are ready to go
? Easy network deployment
? User devices and FortiGuard IoT identification*
? Scalable
? Quickly enable NAC on port(s) or entire
network
? EMS tags with dynamic addresses
? Actions can be port or device specific
Secure onboarding of devices
FortiGate
FortiAP
FortiLink
FortiSwitch
Fabric NAC

10
FortiManager pushes configuration
to FortiGate, which includes switch
and AP details
Zero touch deployment
Ship switches, APs and FortiGates
to the site, plug it all in, and
connect it to the internet
FortiGate sends a message to
FortiDeploy, learns it��s
FortiManager

11
Use Cases
Campus Teleworker
Solutions across deployment types
SD-Branch

12
Solution Details

13
Features you expect from Enterprise Wi-Fi
? Broadcast / Multicast management
? Multiple PSK for WPA2 personal
? Fast failover controller redundancy
? Rogue detection and Suppression
? WIDS
? Frequency and AP load balance
? Mesh wireless network
? Remote APs
? Onboard BT/BLE
? Location Tracking (with FortiPresence)
? SSID scheduling
? DFS Fallback
? Captive Portal
? DOS attack prevention
? Wave-2 operation on 802.3af
? 802.3az-Power-efficient Ethernet
? Fast roaming mechanisms 802.11 r/k/v
? Bonjour genius
? Channel utilization (Duty-cycle measurement)
? QoS profiles (per SSID/per Client)
? WMM Access Control
? Automatic channel selection
? Probe response suppression
? Protected Management Frames
? Opportunistic Key Caching
? TX Beamforming
? HotSpot 2.0
? Per Group rate limiting

14
Including high density features
? Data Rate control
? Broadcast / Multicast
management
? DHCP Starvation Attack
Prevention
? Client Privacy
? Probe Response suppression
? Bandwidth throttling and traffic
shaping

15
Access Points you expect from Enterprise Wi-Fi
? Latest Wi-Fi 6 technology
? 4x4 models for high throughput
? 2x2 models for price sensitivity
? Internal or external antenna
? Dual 5GHz operation
? IP67 models for Outdoor
installations and meshing
? Wall Plate form factor for in-
room installations

16
? Wireless Controller integrated directly into the FortiGate
? Leverages FortiLink for secure integration of the LAN Edge
? Cloud management of Access Points
? Manage your wireless network without a FortiGate
Flexible management without the cost
No licenses or subscriptions needed to configure and operate your Access Points

17
Expand capabilities with additional products
FortiWLM adds centralized troubleshooting and
visibility for deployments up to 600 FortiGates.
Avialable within FortiManager for single pane-of-glass.
FortiPresence adds presence analytics with 1 year of
data storage across locations
Available cloud hosted or as an on-site VM

Wireless Overview Customer Deck_Mar21_bdbcommented.pptx

19
FortiAP-U: Flexible Deployment Modes
Radio 1 Radio 2 Radio 3
Mode 1 5 GHz-Full (4x4) Service 2.4 GHz (4x4) Service 2x2 Scanning
Mode 2 5 GHz-Full (4x4) Service 5 GHz-Full (4x4) Service 2x2 Scanning
Mode 3 5 GHz-Full (4x4) Service 5 GHz-Full (4x4) Service 2.4 GHz (2x2) Service

20
Wi-Fi 6

21
Specification
Use Case Mid Density Indoor AP
Form Factor Wall/Ceiling Mount
Rx / Tx 2x2
Radio 1 2.4 GHz Wi-Fi 6 2x2, 2 spatial streams
Radio 2 5 GHz Wi0Fi 6 2x2, 2 spatial streams
Radio 3 2.4 Ghz / 5 GHz 802.11ac w2 1x1 (scanning only)
BLE Yes
PoE 802.3 at
Antennas Internal
Ethernet Interfaces 2 x GE RJ45
Value (2x2) �C FAP-231F

22
Specification
Rx / Tx 2x2
Radio 1 2.4 GHz / 5GHz Wi-Fi 6 2x2, 2 spatial streams
Radio 3
2.4 Ghz / 5 GHz 802.11ac w2 1x1 (scanning or 2.4GHz
client service)
BLE Yes
PoE 802.3 at
Antennas Internal
Value (2x2) �C FAP-U231F

23
Specification
Use Case Mid Density Outdoor AP
Rx / Tx 2x2
Radio 3 2.4GHz / 5GHz 802.11ac 1x1 (scanning only)
BLE Yes
PoE 802.3 at
Antennas Internal
Value (2x2) �C FAP-234F

24
Specification
Use Case Mid Density Outdoor AP
Form Factor Wall/Desk Mount
Rx / Tx 2x2
BLE Yes
PoE 802.3 at
Antennas Internal
Ethernet Interfaces
6 x GE RJ45:
? 1 x GE RJ45 (PD 802.3at)
? 1 x GE RJ45 (PSE 802.3af)
? 2 x GE RJ45
? 1 x GE RJ45 (Pass Through In)
? 1 x GE RJ45 (Pass Through Out)
Value (2x2) �C FAP-23JF

25
High Performance (4x4) �C FAP-431F & FAP-433F
FAP-431F
FAP-433F
Specification
Use Case High Density, High Performance Indoor AP
Rx / Tx 4x4
Radio 1 2.4 GHz 802.11b/g/n/ax 4x4, 4 stream
Radio 2 5 GHz 802.11a/n/ac/ax 4x4, 4 stream
Radio 3 2.4/5 GHz 802.11a/b/g/n/ac 1x1, 1 stream (scanning)
BLE Yes
PoE 802.3 at
Antennas 5x Internal or 5x External (SKU dependent)
Ethernet Interfaces 1 x 2.5G & 1 x GE RJ45

26
High Performance (4x4) �C FAP-U431F & FAP-U433F
FAP-U431F
FAP-U433F
Specification
Rx / Tx 4x4
Radio 1 2.4 GHz or 5GHz 802.11a/b/g/n/ac/ax 4x4, 4 stream
Radio 2 5 GHz 802.11a/n/ac/ax 4x4, 4 stream
Radio 3 2.4/5 GHz 802.11a/b/g/n/ac 2x2, 2 stream
BLE Yes
PoE 802.3 at
Antennas 10x Internal or 10x External (SKU dependent)
Ethernet Interfaces 1 x 2.5G & 1 x GE RJ45

27
High Performance (4x4) �C FAP-432F
Specification
Use Case High Density, High Performance Outdoor AP
Form Factor Wall/Pole Mount
Rx / Tx 4x4
Radio 1 2.4GHz Wi-Fi 6 4x4, 4 stream
Radio 2 5GHz Wi-Fi 6 4x4, 4 stream
BLE Yes
PoE 802.3 at
Antennas External
Ethernet Interfaces 1 x 2.5 GE & 1 x GE RJ45 ports

28
Older APs

29
Specification
Rx / Tx 2x2
Radio 1
2.4 GHz 802.11b/g/n
2x2, 2 stream (300 Mbps)
Radio 2
5 GHz 802.11a/n/ac 2x2 MU-MIMO
Radio 3 -
BLE Yes
PoE 802.3 af
Antennas
FAP-221E: 4x Internal
FAP-223E: 4x External
FAP-221E
FAP-223E
Value (2x2, 11ac) �C FAP-221E & FAP-223E

30
FAP-U221EV
FAP-U223EV
Value (2x2, 11ac) �C FAP-U221EV & FAP-U223EV
Specification
Rx / Tx 2x2
Radio 1
2.4 GHz 802.11b/g/n
Radio 2
5 GHz 802.11a/n/ac
Radio 3 -
BLE Bluetooth scanning and iBeacon advertisement
PoE 802.3 af
Antennas
FAP-U221EV: 4x Internal
FAP-U223EV: 4x External

31
Specification
Rx / Tx 4x4
Radio 1
2.4 GHz 802.11b/g/n
Radio 2
4x4, 4 stream (1,733 Mbps)
Radio 3 -
PoE 802.3 at (2x2 if run on 802.3af)
Antennas
FAP-U421EV: 8x Internal
FAP-U423EV: 8x External
FAP-U421EV
FAP-U423EV
High Performance (4x4, 11ac) �C FAP-U421EV & FAP-U423EV

32
FAP-U422EV
Outdoor High Performance (4x4, 11ac) �C FAP-U422EV
Specification
Use Case High Density, High Performance Outdoor AP
Form Factor IP67, Wall/Pole Mount
Rx / Tx 4x4
Radio 1
2.4 GHz 802.11b/g/n
Radio 2
4x4, 4 stream (1,733 Mbps)
Radio 3 -
PoE 802.3 at
Antennas FAP-U422EV: 8x External

33
FAP-C24JE
Wallplate (2x2, 11ac) �C FAP-C24JE
Specification
Use Case Wallplate Indoor AP
Form Factor Wallplate Mount
Rx / Tx 2x2
Radio 1
2.4 GHz 802.11b/g/n
Radio 2
Radio 3 -
BLE -
PoE 802.3 at
Antennas 4x Internal
Ethernet Interfaces
6 x GE RJ45:
? 1 x GE RJ45 (PD 802.3at)
? 1 x GE RJ45 (PSE 802.3af)
? 2 x GE RJ45

34
Specification
Use Case Wallplate Indoor AP
Form Factor Wallplate Mount
Rx / Tx 2x2 or 1x1
Radio 1
2.4 GHz 802.11b/g/n and/or 5 GHz 802.11a/n/ac
Configurable as 1 2x2, or 2 1x1 radios
Radio 2 -
Radio 3 -
PoE 802.3 at
Antennas 2x Internal
Ethernet Interfaces
6 x GE RJ45:
? 1 x GE RJ45 (PD 802.3at)
? 1 x GE RJ45 (PSE 802.3af)
? 2 x GE RJ45
FAP-U24JEV
Wallplate (2x2, 11ac) �C FAP-U24JEV

35
High Density/Guest deployments
? Data Rate control �C Remove undesired Data Rates and control modulations to provide cleaner air
conditions when many client are using the air
? Broadcast and Multicast management- Limit and control the broadcast and multicast unnecessary
frames to allow maximum air air time to stations.
? Prevent DHCP Starvation Attacks �C Eliminate the risks of malicious guest wireless devices on dhcp
server.
? Client Privacy �C Prevent users from clogging the network by sending traffic to each other and
protecting them from possible attacks
? Probe Response suppression �C Control the conditions under which Access points respond to Probe
requests from client stations.
? Bandwidth throttling and traffic shaping
? Bandwidth can be control on per station, SSID, AP and many other criteria including Application
specific bandwidth limitation

�ݺ�ߣ

Wireless Overview Customer Deck_Mar21_bdbcommented.pptx

Recommended

More Related Content

Similar to Wireless Overview Customer Deck_Mar21_bdbcommented.pptx (20)

Recently uploaded (20)

Wireless Overview Customer Deck_Mar21_bdbcommented.pptx