- Authorized Reseller
- Free Shipping in Canada Restrictions may apply
- Get the Best Price
More models in this series
Fortinet FortiAP 221K
Dual-band Wi-Fi 7 on a 2.5 Gigabit uplink - the entry point into the Wi-Fi 7 range.
- Two radios covering 2.4 GHz and 5 GHz, 2x2 streams
- Wi-Fi 7 (802.11be) without the 6 GHz band or its regulatory questions
- Up to 688 Mbps + 2.882 Gbps across the two bands
- One 2.5 Gigabit Base-T uplink, 802.3at PoE
- The smallest and lightest of the range at 0.85 lbs
Hardware & subscription options
Every orderable Fortinet part number for this appliance, grouped by licensing tier. Pick the line you need and we will quote it — hardware, licence term and support in one place.
Appliance Only
The FortiGate hardware on its own, with no FortiCare or FortiGuard contract attached.
Fortinet FortiAP 221K Appliance
-
Fortinet FortiAP 221K Access Point FortiAP-221K Indoor Wireless AP - (Wi-Fi 7 IEEE Dual-band 2.4/5GHz 2+2 2 streams 2 radios), internal antennas, 100/1000/2500 Base-T RJ45, BT/BLE, 1x RS-232 RJ45 Serial Port. Ceiling/wall mount kit included. For power order: 802.3at PoE injector GPI-130 or AC adapter SP-FAP250-PA. Region Code A. #FAP-221K-AGet a Quote
Accessories and Spares
Power adapters, rack trays and other hardware sold alongside the appliance.
Fortinet Accessories and Spares
-
Fortinet Gigabit PoE Power Injector, 802.3at up to 30 W #GPI-130Get a Quote
FortiCare Support
Support contracts for the access point: ticket handling, hardware replacement and firmware upgrades.
Fortinet FortiCare Support (Service Subscription - Hardware Required)
-
Fortinet FortiCare Premium Support for FortiAP 221K - 1 Year #FC-10-P221K-247-02-12Get a Quote
-
Fortinet FortiCare Premium Support for FortiAP 221K - 3 Year #FC-10-P221K-247-02-36Get a Quote
-
Fortinet FortiCare Premium Support for FortiAP 221K - 5 Year #FC-10-P221K-247-02-60Get a Quote
-
Fortinet FortiCare Elite Support for FortiAP 221K - 1 Year #FC-10-P221K-284-02-12Get a Quote
-
Fortinet FortiCare Elite Support for FortiAP 221K - 3 Year #FC-10-P221K-284-02-36Get a Quote
-
Fortinet FortiCare Elite Support for FortiAP 221K - 5 Year #FC-10-P221K-284-02-60Get a Quote
Fortinet FortiCare Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
Fortinet FortiCare Essential Support for FortiAP 221K (renewal only - not sold with new hardware) - 1 Year #FC-10-P221K-314-02-12Get a Quote
-
Fortinet FortiCare Essential Support for FortiAP 221K (renewal only - not sold with new hardware) - 3 Year #FC-10-P221K-314-02-36Get a Quote
-
Fortinet FortiCare Essential Support for FortiAP 221K (renewal only - not sold with new hardware) - 5 Year #FC-10-P221K-314-02-60Get a Quote
Fortinet FortiCare Support Renewal / Upgrade (Service Subscription - Hardware Required)
-
Fortinet Upgrade FortiCare Premium to Elite for FortiAP 221K (existing FortiCare Premium contract required) - 1 Year #FC-10-P221K-204-02-12Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiAP 221K (existing FortiCare Premium contract required) - 3 Year #FC-10-P221K-204-02-36Get a Quote
-
Fortinet Upgrade FortiCare Premium to Elite for FortiAP 221K (existing FortiCare Premium contract required) - 5 Year #FC-10-P221K-204-02-60Get a Quote
Cloud Management and Services
FortiSASE cloud management for the access point, and the FortiGuard UTP subscription for G-series models.
Fortinet Cloud Management and Services (Service Subscription - Hardware Required)
-
Fortinet FortiSASE subscription for FortiAP 221K - cloud management with bandwidth included - 1 Year #FC-10-P221K-595-02-12Get a Quote
-
Fortinet FortiSASE subscription for FortiAP 221K - cloud management with bandwidth included - 3 Year #FC-10-P221K-595-02-36Get a Quote
-
Fortinet FortiSASE subscription for FortiAP 221K - cloud management with bandwidth included - 5 Year #FC-10-P221K-595-02-60Get a Quote
What each FortiCare and FortiGuard option includes
Fortinet licensing separates the hardware, the support contract and the security services. These are the combinations you will see in the part numbers above.
Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle - IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service - for the term of the contract.
Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
Hardware unit, FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle - IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam - for the term of the contract.
Enterprise Protection
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Enterprise services bundle: IPS, AI-based inline malware prevention, advanced malware protection, inline CASB database, data loss prevention, application control, URL, DNS and video filtering, antispam, attack surface security, and FortiConverter Service.
Unified Threat Protection (UTP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the UTP services bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, application control, URL, DNS and video filtering, and antispam.
Advanced Threat Protection (ATP)
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and the Advanced Threat Protection bundle: IPS, AV, botnet IP and domain, mobile malware, FortiGate Cloud Sandbox including virus outbreak and content disarm and reconstruct, and application control.
FortiCare Essential Support
FortiCare Essential ticket handling, hardware replacement, firmware and general upgrades, and application control.
FortiCare Premium Support
FortiCare Premium ticket handling, advanced hardware replacement (NBD), firmware and general upgrades, and application control.
FortiCare Elite Support
FortiCare Premium support with FortiCare Elite ticket handling.
Some services are sold on annual contracts only, with no multi-year part number available. We confirm the available terms when we quote.
Upgrading or extending an existing FortiCare contract is quoted separately - send us the serial number and we will price the upgrade.
Fortinet FortiAP 221K Specifications
Fortinet published maximums, measured under the test conditions noted below.
Hardware
| Type | Indoor AP |
|---|---|
| Number of Radios | 2 Wi-Fi + 1 BLE |
| Number of Antennas | 2 x dual band Wi-Fi + 1 x BLE/Zigbee antenna |
| Antenna Type Support | Internal |
| Antenna Peak Gain | PIFA 2.4/5 GHz dual band 5.7 dBi at 2.4 GHz and 5.9 dBi at 5 GHz; PFA BLE 3.5 dBi at 2.4 GHz |
| Interfaces | 1 x 100M/1000M/2.5G multigigabit Ethernet (RJ45), 1 x RS-232 RJ45 serial port |
| Power over Ethernet | 802.3at |
| Trusted Platform Module (TPM) | Not fitted |
| GNSS | Not fitted |
| Kensington Lock | Yes |
| Wi-Fi Standard | Wi-Fi 7, IEEE 802.11be, dual band 2.4 / 5 GHz, 2+2, 2 streams |
Radios
| Radio 1 (2.4 GHz) | 20/40 MHz, BPSK/QPSK/64/256/1024 QAM, 2x2 MIMO |
|---|---|
| Radio 2 (5 GHz) | U-NII-1 to U-NII-4, 20/40/80/160 MHz, BPSK/QPSK/16/64/256/1024/4096 QAM, 2x2 MIMO |
| Frequency Bands | 2.4 GHz ISM 2.4-2.484 GHz; 5 GHz U-NII-1 5.15-5.25, U-NII-2A 5.25-5.35, U-NII-2C 5.47-5.73, U-NII-3 5.725-5.85, U-NII-4 5.85-5.895 GHz |
| Maximum Data Rate | 2.4 GHz up to 688 Mbps, 5 GHz up to 2.882 Gbps |
| Maximum Tx Power (conducted) | 2.4 GHz 26 dBm / 400 mW (2 chains combined), 5 GHz 23 dBm / 200 mW (2 chains combined) |
| Bluetooth Low Energy | Bluetooth scanning and iBeacon advertisement at 10 dBm maximum Tx power |
| Per Radio Client Capacity | Up to 128 clients per radio (radios 1 and 2) |
Advanced 802.11 Features
| OFDMA | Yes |
|---|---|
| Spatial Reuse (BSS Colouring) | Yes |
| UL MU-MIMO | Yes |
| DL MU-MIMO | Yes |
| Enhanced Target Wake Time (TWT) | Yes |
| ZeroWait DFS | No |
| IPv6 Support | Yes |
| UTP Capable | No |
| Cellular Co-existence | No |
Wireless Monitoring
| Rogue Scan Radio Modes | Background, dedicated |
|---|---|
| WIPS / WIDS Radio Modes | Background, dedicated (recommended) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
Management
| Managed By | FortiGate, FortiEdge Cloud or FortiSASE - no separate wireless controller |
|---|---|
| Simultaneous SSIDs | Up to 24 |
| SSID Types Supported | Local-Bridge, Mesh and Tunnel |
| EAP Types | EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST |
| User and Device Authentication | WPA, WPA2 and WPA3 with 802.1x or pre-shared key, WEP, web captive portal, MAC blacklist and allowlist |
Dimensions
| Length x Width x Height | 6.02 x 6.02 x 1.97 in (153 x 153 x 50 mm) |
|---|---|
| Weight | 0.85 lbs (0.385 kg) |
| Package (shipping) Weight | 1.5 lbs (0.68 kg) |
| Mounting Options | Ceiling, T-rail and wall |
| Included Accessories | Standard mounting kit for ceiling, T-rail and wall |
Power and Environment
| Power Supply | 802.3at PoE via GPI-130, or a 12 V 1.5 A 18 W DC supply, or SP-FAP200-PA-XX |
|---|---|
| Power Consumption (maximum) | 16.3 W |
| PoE Mode | 802.3at: full Tx power, 2x2 MIMO |
| Humidity | 5% to 90% non-condensing |
| Operating Temperature | 32-122 F (0-50 C) |
| Storage Temperature | -22-158 F (-30-70 C) |
| Surge Protection Built In | Not applicable |
| IP Rating | Not applicable |
Certifications
| Wi-Fi 7 Certified | Certified |
|---|---|
| DFS | FCC, IC |
| UL2043 Plenum Material | Yes |
| Limited Lifetime Warranty | Yes |
| Mean Time Between Failures | More than 10 years |
Specifications are from Fortinet’s July 2026 FortiAP series datasheet.
This model carries 128 clients per radio where the rest of the K-series carries 256 or 512. It is sized for a small room or a low-density area, not a dense floor.
It has no TPM and no GNSS, and is not UTP capable - the larger K-series models are.
FortiAPs ship under a region code - the part number above is the Region A variant sold in Canada.
FortiCare Essential is sold as a renewal only on FortiAP and cannot be bought with new hardware.
Part numbers are Fortinet catalogue SKUs listed for reference. Availability, term and lead time are confirmed at quote.
FortiAP 221K
Dual-band Wi-Fi 7 on a 2.5 Gigabit uplink - the entry point into the Wi-Fi 7 range.
Wi-Fi 7 Without the 6 GHz Question
The 221K is the dual-band member of the Wi-Fi 7 range: 2.4 and 5 GHz only, which sidesteps the regional approval question that still attaches to 6 GHz in some domains. For a branch or a floor of ordinary client devices, most of which cannot use 6 GHz anyway, it delivers the 802.11be efficiency gains on a 2.5 Gigabit uplink at the lowest point in the K-series.
Managed From the Firewall, Not a Controller
A FortiAP has no separate controller to buy, licence or patch. It is managed from a FortiGate, from FortiEdge Cloud or through FortiSASE, which means the wireless policy and the security policy are configured in the same place and the access point is part of the Security Fabric rather than a device bolted on beside it. For a site that already runs a FortiGate, adding wireless is adding an access point and nothing else.
Interested in the Fortinet FortiAP 221K?
Simply tell us your deployment needs and we will confirm availability, lead time and licence type, then get back to you with a quote.
Request a Quote