Fortinet FortiAP 221K
FortiGate, FortiEdge Cloud, or SASE-managed — 2x2 Indoor Dual-radio 11be Capable APs

Overview:

FortiAP™ access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiEdge Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for campus and branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a Single-pane-of-glass management console and protects your network from the latest security threats.

The FortiAP-221K is a retail grade indoor Wi-Fi 7 dual-band access point designed for enterprise environments. It features two radios and two spatial streams (2×2) across the 2.4 GHz and 5 GHz bands, delivering reliable wireless connectivity for modern workplaces.

Integrated BLE location services and Zigbee support for IoT applications extend visibility beyond traditional endpoints, while a 2.5 Gigabit Ethernet uplink supports higher throughput requirements. The AP also enables continuous 24×7 background scanning across all bands, maintaining security monitoring without interrupting client connectivity.

• Wi-Fi 7 | Dual-Radio 2.4 GHz + 5 GHz | 2 Internal Antennas
• 2x2 MU-MIMO | Up to 688 Mbps + 2.88 Gbps data rate

AP MODEL	WI-FI GENERATION	DESCRIPTION	BLE SUPPORT	USB SUPPORT	POE BUDGET	LIGHTWEIGHT UTP
FAP-221K	Wi-Fi 7	2x2 Indoor dual-radio	5.2	—	802.3at	—

---

Use Cases:

FortiAPs allow for a versatile collection of installation topologies with options to fit any enterprise.

Campus

A single building with multiple floors, or a corporate or education campus with a group of large buildings.

• High-capacity designs including Dual 5GHz and tri-band with Wi-Fi 6E allow a maximal number of client devices to attach to the network at the same time without over-air congestion
• Complete NOC functionality with network visibility and AIOps simplify a complex network deployment into a solution manageable by IT teams of any size

---

Branch Office / SD-Branch

A highly distributed number of small sites, often with no on-site IT.

• Built in NAC functions* allow secure onboarding of devices at remote locations where IT doesn’t have reliable visibility
• Management orchestration with zero-touch deployment allows for quick and easy rollouts without the need for skilled installers at each site

---

Micro Branch

Ultra small sites that still fall under IT’s responsibility

• Can act as a SASE endpoint as a foundation for zero-trust network access (ZTNA)
• Simple management and provisioning through FortiSASE interface

---

Remote Workers

A remote AP installed at a worker’s home or at micro-branch office space.

• Split tunneling allows local traffic to remain local while sending other traffic to the data center for inspection when needed
• Desktop mounting options for wall-plate models allow the use of Ethernet as well as Wi-Fi connectivity while leveraging the same secure tunnel

---

SMB

Single site or small collection of sites with limited IT resources.

• Built-in NAC functions* bring security to the wireless network with no need to install and manage additional products
• Network and security convergence decreases management overhead while keeping the network secure

*FortiGate-managed installations only.

---

Specifications:

	FortiAP 221K
Hardware
Hardware Type	Indoor AP
Number of Radios	2 Wi-Fi + 1 BLE
Number of Antennas	x2 Dual band Wi-Fi + x1 BLE/ZigBee antenna
Antenna Type Support	Internal
Antenna Type and Peak Gain	PIFA 2.4/5GHz dual band antenna: 5.7 dBi for 2.4GHz, 5.9 dBi for 5 GHz PFA BLE antenna: 3.5 dBi for 2.4GHz
Frequency Bands (GHz)	2.4GHz Band: ISM 2.4-2.484GHz 5.0GHz Band: UNII-1 5.15-5.25GHz, UNII-2A 5.25-5.35GHz, UNII-2C 5.47-5.73GHz, UNII-3 5.725-5.85GHz, UNII-4 5.85-5.895GHz
Radio 1 Capabilities	Frequency band: 2.4GHz Channel width: 20/40MHz Modulation: BPSK, QPSK, 64/256/1024/4096 QAM MIMO Chains: 2x2 Service
Radio 2 Capabilities	Frequency band: 5.0GHz UNII-1 to UNII-4 Channel width: 20/40/80/160MHz Modulation: BPSK, QPSK, 16/64/256/1024/4096 QAM MIMO Chains: 2x2 Service
Maximum Data Rate	2.4GHz band: up to 688 Mbps 5.0GHz band: up to 2.882 Gbps
Bluetooth Low Energy (BT/BLE) Radio	Bluetooth scanning and iBeacon advertizement @10 dBm max TX power
Trusted Platform Module (TPM)	No
GNSS	No
Interfaces	x1 100M/1000M/2.5G Multigigabit Ethernet (RJ45) x1 RS-232 RJ45 Serial Port
Power over Ethernet (PoE)	x1 802.3at PoE default
Hit-less PoE Failover	N/A
Simultaneous SSIDs	Up to 8 per client serving radio (7 if background scanning is enabled)
EAP Type(s)	EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST, EAP-TTLS/PAP
User/Device Authentication	WPA™, WPA2™, and WPA3™ with 802.1x or Preshared key, WEP, Web Captive Portal, MAC blacklist and whitelist
Maximum Tx Power (Conducted)	2.4GHz band: 26 dBm/400 mW (2 chains combined)* 5.0GHz band: 23 dBm/200 mW (2 chains combined)*
Kensington Lock	Yes
IEEE Standards	802.11a, 802.11b, 802.11be, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11k, 802.11n, 802.11r, 802.11v, 802.11ac, 802.11ax, 802.11mc, 802.1X, 802.3af, 802.3at, 802.3bt, 802.3az, 802.1Q, 802.11u, 802.11w, 802.3bz
SSID Types Supported	Local-Bridge, Mesh, and Tunnel
IPv6 Support	Yes
Per Radio Client Capacity	Up to 128 clients per radio (Radio1 and Radio2)
Cellular Co-existence	No
LED Off Mode	Yes
Advanced 802.11 Features
OFDMA	Yes
Spatial Reuse (BSS Coloring)	Yes
UL MU-MIMO	Yes
DL-MU-MIMO	Yes
Enhanced Target Wake Time (TWT)	Yes
ZeroWait DFS	No
Onboard Security Functions
UTP Capable	No
UTP Features	N/A
Wireless Monitoring Capabilities
Rogue Scan radio modes	Background, Dedicated
WIPS / WIDS radio modes	Background, Dedicated (recommended)
Packet Sniffer Mode	Yes
Spectrum Analyzer	Yes
Dimensions
Length x Width x Height	6.02 x 6.02 x 1.97 inches (153 x 153 x 50 mm)
Weight	0.85 lbs (0.385 kg)
Package (shipping) Weight	1.5 lbs (0.68 kg)
Mounting Options	Ceiling, T-Rail, and Wall
Included Accessories	Standard Mounting Kit for Ceiling, T-Rail, and Wall
Environment
Power Supply	802.3at PoE: GPI-130 or 12V, 1.5A, 18 Watt DC PA or SP-FAP200-PA-XX
Power Consumption (Maximum)	16.3 Watts
PoE Mode	802.3at: Tx Power - Full, 2x2 MIMO
Humidity	5% to 90% non condensing
Operating / Storage Temperature	32°F to 122°F (0°C to 50°C) / -22°F to 158°F (-30°C to 70°C)
Directives	Low Voltage Directive* RoHS
UL2043 Plenum Material	Yes
Mean Time Between Failures	> 10 Years
IP Rating	N/A
Surge Protection Built In	N/A
Certifications
WiFi 7 Certified	Certified
DFS	FCC, IC
Warranty
Limited Lifetime Warranty	Yes

Note: * Frequency selection, power, and some communication features may be restricted to abide by regional regulatory compliance laws.

---

Documentation:

Download the Fortinet FortiAP Series Datasheet (PDF).

---