FortiAP

Wi-Fi access points that are managed by, and protected by, your FortiGate firewall.

Access points connect to a FortiGate, which acts as the wireless controller. Wi-Fi networks are defined as part of firewall policy, so wireless traffic gets the same inspection as wired traffic. Radios can also scan for nearby rogue access points.

Wi-Fi is often how inmates use tablets, so it’s where much of the control has to happen. Administrators need to know which device is connected, in which unit, and when, and they need to stop devices from talking to each other over the air.

• Blocks tablet-to-tablet communication on the same Wi-Fi network.
• Shows which device connected, on which access point and when, which places it in a unit or area.
• Turns inmate Wi-Fi on and off by schedule.
• Flags unknown Wi-Fi networks, including possible contraband hotspots.

• Intra-SSID blocking: devices on the inmate SSID can’t reach each other directly.
• SSID schedules: an inmate wireless network can be switched off at set times.
• Per-device authentication: 802.1X ties each session to a device or account rather than a shared password.
• Separate SSIDs map to separate firewall zones, so inmate tablets never share a path with staff devices.
• WPA2/WPA3-Enterprise with 802.1X authenticates each user or device individually, instead of using a shared password.
• Wireless intrusion detection flags rogue access points and hotspots in range.
• Central management keeps settings uniform without visiting each secure area.