WatchGuard AP420
802.11ac wave 2, Tri Radio, 4x4, Indoor, Internal antenna, Cloud ready
Sorry, this unit has been discontinued and is no longer available for purchase, replace by WatchGuard AP330. End of Sale (EOS): 01 Nov 2021. End of Life (EOL) for the WatchGuard AP420 is 01 Jan 2025 - you will not be able receive support after this date even with a 1 Year contract.
Sorry, this product is no longer available, please contact us for a replacement.
WatchGuard AP420 Overview:
802.11ac wave 2, Tri Radio, 4x4, Indoor, Internal antenna, Cloud ready
The AP420 is the fastest indoor access point from WatchGuard, offering blazing fast wireless speeds with its 4x4 802.11ac Wave 2 chipset and comes equipped with multi-user MIMO (MU-MIMO) technology allowing many smartphones, laptops and tablets to be served by the AP420 at the same time - no more waiting to connect to Wi-Fi. With a third 2x2 MIMO dual band radio for dedicated Wireless Intrusion Prevention System (WIPS) when the WatchGuard Wi-Fi Cloud is enabled, so you don’t have to sacrifice performance for security. Best for tradeshow floors, auditoriums, meeting rooms, and shopping malls.
Flexible Management Options
You can manage AP420 access points with either a Firebox, via the Gateway Wireless Controller with lightweight feature set, or with WatchGuard’s Wi-Fi Cloud. And with the Wi-Fi Cloud you get an expanded set of features including strong WIPS security, marketing tools, and location-based analytics for optimal business insights.
Performance Without Compromise
Incorporating the latest 802.11ac Wave 2 standards, you’ll have speeds of up to 1.73 Gbps over the air, without sacrificing security. When managed by the Wi-Fi Cloud, the AP420 comes equipped with a third 2x2 MIMO dual band radio for dedicated WIPS, RF optimiza- tion, spectrum monitoring, and troubleshooting built in.
Uniquely Effective Approach To Security
Using patented Marker Packet technology, WatchGuard’s cloud-managed WIPS defends your airspace from unauthorised devices, man-in-the-middle and denial-of-service attacks, rogue APs and more. Now with a dedicated WIPS sensor included, the AP420 can be added to any existing Wi-Fi network for a powerful layer of patented security features simply unavailable in most APs.
Advantages Of Cloud-based Management
WatchGuard’s secure Cloud-managed APs deliver the most comprehensive set of features for the price - including marketing tools for customizable user engagement and location- based analytics for enhanced business insights. With the WatchGuard Wi-Fi Cloud, IT pros can enjoy an entirely controller-less Wi-Fi management experience including setup, configuration, monitoring, troubleshooting, and improving corporate and guest Wi-Fi access, without worrying about the limitations of legacy controller infrastructure. Wi-Fi Cloud environments easily scale from one to an unlimited number of APs across multiple locations. APs can be grouped in many ways, including location, building, floor, and customer to maintain consistent policies.
Features & Benefits
- Wave 2 chipset offers the latest MU-MIMO technology to serve today’s toughest high-density environments
- AP420 takes less than two minutes to activate and configure after connecting to the Wi-Fi Cloud
- Smart steering automatically pushes clients with low speeds to a closer access point*
- Band steering manages spectrum efficiency, pushing clients to 5GHz channels for optimal throughput
- Third 2x2 MIMO dual band radio used as a dedicated WIPS sensor for 24x7x365 security and performance scanning*
- AP420 continues to scan for wire- less threats and enforces security policy even if the connection with the Wi-Fi Cloud is interrupted*
*Must be Wi-Fi Cloud enabled
WatchGuard Access Point
Offering basic Wi-Fi access doesn't give you a competitive advantage, it offers you a chance to compete. With benefits ranging from increased productivity to improved customer satisfaction, implementing a wireless network for your employees and guests has become the table stakes of doing business. But Wi-Fi also opens your business to significant security risks, and can be complicated to deploy and manage, not to mention expensive.
WatchGuard Wi-Fi Cloud solutions, true game-changers in today's market, are engineered to provide a safe, protected airspace for your Wi-Fi environments, while eliminating administrative headaches and greatly reducing costs. With expansive engagement tools and visibility into business analytics, they deliver the competitive advantage your business needs to succeed.
Enterprise-Grade Wireless Intrusion Prevention System (WIPS)
Our cloud-managed access points have built-in WIPS to help ensure you have the protection you need. Using patented Marker Packet technology, WatchGuard WIPS defends your airspace from unauthorised devices, man-in-the-middle and denial-of-service attacks, rogue APs and more - and with close to zero false positives. For even greater protection, deploy our APs with a WatchGuard Firebox to extend the Firebox's best-in-class UTM defenses, like application control and zero day malware protection, to your WLAN.
Flexible Management Options
WatchGuard offers two management scenarios to meet the needs of SMBs and distributed enterprises. You can manage any of our access points with either a Firebox via the Gateway Wireless Controller with lightweight feature set, or with WatchGuard’s Wi-Fi Cloud. And with the Wi-Fi Cloud you get an expanded set of features including strong WIPS security, marketing tools, and location-based analytics for optimal business insights. And for ultimate peace of mind, rely on a Firebox UTM-protected network with WatchGuard Wi-Fi Cloud-managed APs to realize the full marketing and security potential of a cloud-managed access point solution.
Patented Wireless Security
Our cloud-managed access points have built-in Wireless Intrusion Prevention System (WIPS) to help ensure you have the protection you need. Using patented Marker Packet technology, WatchGuard WIPS defends your airspace 24/7 from unauthorised devices, man-in-the-middle and denial-of-service attacks, rogue APs and more - and with close to zero false positives. With WatchGuard cloud-managed APs running WIPS, IT pros can deliver the high performance wireless connectivity their users demand, without compromising on security.
Management That Scales
WatchGuard grows with you. Wi-Fi Cloud environment can take your business from 1 to an unlimited number of access points across multiple locations, with no infrastructure, eliminating administrative headaches and greatly reducing cost. APs can be grouped in many ways including location, building, floor, and customer to maintain consistent policies.
GO Mobile Web App
The GO mobile web experience allows you to manage your wireless networks using any mobile device. Managing customer engagement is entirely integrated with standard features enabling simple setup of customized splash pages and personalized customer promotions.
RESTful API
WatchGuard Wi-Fi Cloud is built from the ground up on RESTful APIs to handle even the largest WLAN networks that, until now, would need to be served by on-premises WLAN controller solutions.
Reach Out to Mobile Users
Turn your Wi-Fi environment into a potent source of revenue and customer loyalty by leveraging the combined benefits of secure cloud-managed Wi-Fi, captive portal technology, and social media interaction. Use splash pages like the one at right to grab the attention of today's mobile and connected consumers, engage them with videos, polls and surveys, and then take advantage of built-in analytics tools to better understand their habits and preferences.
Powerful Engagement & Analytics Tools
Gain actionable insights into customers with social login analytics. In combination with the social Wi-Fi features, data can be used to analyze demographic information including gender, age, and customer buying tendencies. Wi-Fi device location, customer dwell time, footfall, and new vs. repeat users can be captured with zone-based analytics. Dashboards and reports allow administrators to quickly view analytics at all levels, from the highest to the most granular view, across time segments and location groups - and there are no hidden third party costs.
Flexible Deployment Options:
WatchGuard offers three deployment scenarios to meet the needs of SMBs and distributed enterprises. Add an AP120 or AP320 to an existing Firebox UTM-protected network to extend that protection to the WLAN, while managing the device with the Firebox's built-in gateway wireless controller. For full Engage and Analyze features, WIPS protection, scalable management and so much more in a stand-alone deployment, choose our Wi-Fi Cloud option. And for ultimate peace of mind, rely on a Firebox UTM-protected network with WatchGuard Wi-Fi Cloudmanaged APs to realize the full marketing and security potential of a cloud-managed access point solution.
Wi-fi Solution:
WatchGuard has you covered, indoors and out
No matter what your wireless battleground is - remote offices, guest Wi-Fi, corporate access, public hotspots, outdoor environments - WatchGuard has a range of access points to fit your business needs. WatchGuard’s Wi-Fi packages allow you to quickly and easily find the right set of features your business needs today…and tomorrow.
WatchGuard Wi-Fi Solution | Total Wi-Fi | Secure Wi-Fi | Basic Wi-Fi |
---|---|---|---|
Management Platform | Wi-Fi Cloud | Wi-Fi Cloud | Firebox Appliance* |
Scalability Number of managed access points |
Unlimited | Unlimited | Limited** |
Configuration and Management SSID configuration with VLAN support, band steering, smart steering, fast roaming, user bandwidth control, Wi-Fi traffic dashboard. |
|||
Additional Wi-Fi Cloud-Based Management |
|||
Intelligent Network Visibility and Troubleshooting |
|||
Verified Comprehensive Security A patented WIPS technology defends your business from the six known Wi-Fi threat categories, enabling a Trusted Wireless Environment. |
|||
GO Mobile Web App Quickly and easily set-up your WLAN network from any mobile device. |
|||
Guest Engagement Tools Splash pages, social media integrations, surveys, coupons, videos, and so much more. |
|||
Location-Based Analytics Leverage metrics like footfall, dwell time, and conversion to drive business decisions and create customizable reports. |
|||
Support Hardware warranty with advance hardware replacement, customer support, and software updates |
Standard | Standard | Standard |
*Requires Firebox with active support contract.
**20 access points recommended for each Firebox model. For the T-15 Firebox model 4 access points are recommended.
No need to rip and replace, just add WIPS
Each WatchGuard access point has the flexibility to operate as both an access point and a dedicated WIPS security sensor. This means that when deployed as dedicated WIPS sensors, the devices work with your existing access points (Cisco, Aruba, Ruckus, Ubiquiti, etc) and add enterprise-grade wireless security protection to your network. In this case, instead of delivering secure Wi-Fi traffic to users, we deliver unprecedented WIPS security protection that is 100% dedicated to scanning the air and protecting your business from wireless threats.
Trusted Wireless Environment:
What is a Trusted Wireless Environment?
In a world with growing open Wi-Fi networks, Wi-Fi hackers are able to not only steal personal information but also spread malware to computers on the network, costing your businesses millions. Simply put, the Wi-Fi system that you installed seven years ago is no longer adequate. As you face the responsibility of evolving your Wi-Fi networks, you're finding that many vendors do not enable you with the right products. WatchGuard is the only company that offers a framework for building a complete Wi-Fi network that is fast, easy to manage, and most importantly, secure. Companies that offer a Trusted Wireless Environment deliver on these three core pillars:
- Market-Leading Performance: You should never be forced to compromise security to achieve the necessary performance to support your environment with the speed, connections and client density that it needs.
- Scalable Management: With easy set-up and management, you should be able to control your entire wireless network from a single interface and execute key processes to safeguard the environment and its users.
- Verified Comprehensive Security: You need proof that the security solution that defends your business against Wi-Fi attacks can deliver on the following benefits:
- Provide automatic protection from the six known Wi-Fi threat categories
- Allow legitimate external access points to operate in the same airspace
- Restrict users from connecting to unsanctioned Wi-Fi access points
The Six Known Wi-Fi Threat Categories That Leave Your Business Vulnerable
Rogue Access Point
Allows attackers to bypass perimeter security.
Rogue Client
Delivers malware payloads to the network after connecting to malicious APs.
Neighbor Access Point or Client Misassociation
Risks infection from connecting to other SSIDs while in range of the authorised AP.
Ad-Hoc Network
Uses peer-to-peer connections to evade security controls and risk exposure to malware.
"Evil Twin" Access Point
Lures users to connect to it so as to spy on traffic, steal data and infect systems.
Misconfigured Access Point
Opens networks to attack as a result of configuration errors.
Additional Resources
Solution Brief - Trusted Wireless Environment
Don't let Wi-Fi be your biggest security gap. Hackers prefer to go after the weak link in the security chain and it doesn't take much to hack into the Wi-Fi network using easily accessible tools and a plethora of online how-to videos. What's worse - your business networks become compro-mised due to malware implanted and credentials stolen over Wi-Fi, and it can cost millions in fines and breach remediation expenses to fix.
MARKET-LEADING PERFORMANCE
SCALABLE MANAGEMENT
COMPREHENSIVE SECURITY
Don't Let Wi-Fi Be Your Biggest Security Gap
In 2017, there were 8.4 billion connected devices and the volume is expected to hit 20.4 billion by 2020, according to analyst firm Gartner. Hackers prefer to go after the weak link in the security chain and it doesn't take much to hack into the Wi-Fi network using easily accessible tools and a plethora of online how-to videos. Even the most rookie hacker can intercept traffic flowing over Wi-Fi and steal valuable data from your smartphone, tablet, smartwatch, or laptop. What's worse - your business networks become compromised due to malware implanted and credentials stolen over Wi-Fi, and it can cost millions in fines and breach remediation expenses to fix.
Create a Trusted Wireless Environment with WatchGuard
With WatchGuard Wi-Fi Cloud and WIPS (Wireless Intrusion Prevention System), it is easy to quickly create a Trusted Wireless Environment with WIPS and automatically protect your Wi-Fi network against the six known Wi-Fi threat categories.
WIPS is a collection of features that run on WatchGuard APs and Wi-Fi Cloud. You can use WatchGuard APs for both Wi-Fi access and WIPS security protection, or you can use APs as dedicated WIPS security sensors that you can deploy together with other WatchGuard APs or third-party APs and Wi-Fi controllers.
To create a Trusted Wireless Environment, WatchGuard APs must have either a Total Wi-Fi or Secure Wi-Fi AP management subscription.
Specifications:
AP420 Specifications | |
---|---|
Hardware Details | |
Deployment | Indoor |
Supported Frequency Bands | 2.4 GHz and 5 GHz concurrent |
Frequency Bands (GHz)* | 2.400-2.474GHz, 5.150-5.250GHz, 5.250-5.350GHz, 5.470-5.725GHz, 5.725-5.850GHz |
Number of Antennas | 10 internal |
Antennas | Internal PIFA x10 |
Radios & Streams | 4x4:4 MU-MIMO, Wave 2, 3rd WIPS radio |
Maximum TX Power* | 27 dBm |
Maximum Data Rate (5/2.4 GHz) | 1.7 Gbps / 800 Mbps |
SSID | 8 |
Security Settings | WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK (Mixed), WPA-802.1X (Enterprise) WPA2-802.1X (Enterprise) WPA-802.1X/WPA2-802.1X (Mixed), TKIP, AES, TKIP/AES, Captive Portal, MAC whitelist/blacklist, VLAN Tagging |
Ethernet | 2 Gigabit Ethernet ports with RJ45 connector type. One port to connect to the wired LAN and communicate with the Wi-Fi Cloud. This port can also be used to power the device using the 802.3at Power over Ethernet (PoE+) standard/802.3af Power over Ethernet(PoE). Using PoE results in limited feature functionality of the AP. Second port can be used for aggregation or wired extension of an SSID |
Power over Ethernet (PoE) | 802.3at (PoE+) |
A/C Adapter (Sold Separately) | Optional |
PoE Injector (Sold Separately) | Optional |
Support & Maintenance | 1-year or 3-year subscription to Standard Support for hardware warranty with advance hardware replacement, technical support, and software updates - included with purchase |
Environmental Information | |
Operating Temperature | 32 to 104°F (0 to 40°C) |
Operating Relative Humidity | 0-95% Non-condensing |
Storage Temperature | -13 to 167°F (-25 to 75°C) |
Non-Operating Relative Humidity | 0-95% Non-condensing |
Power Consumption | |
Maximum | 20W |
Minimum | 16W |
Average | 18W |
Dimensions | |
Product Dimensions | 8.66” x 8.66” x 2.24” (220 x 220 x 57 mm) |
Shipping Dimensions | 12.5” x 11.5” x 3” (317.5 x 292.1 x 76.2 mm) |
Product Weight | 2.86 lbs (1.3 kg) |
Shipping Weight (includes A/C adapter, mounting kit, etc.) | 3.65 lbs (1.6 kg) |
Mounting Options (Included) | T-Bar Ceiling |
Mounting Options (Sold Separately) | Flat surface (wall, hard ceiling) |
Certifications | |
Wireless | FCC, IC, CE, MIC |
Safety | NRTL/C, CB, CE |
Control of Hazardous Substances | WEEE, RoHS |
*Country-specific restrictions apply
Wi-Fi Specifications - Frequency, Modulation, and Data Rates | |||
---|---|---|---|
IEEE 802.11b/g/n | |||
Frequency Band | Scanning | Transmission | |
All regions | USA & Canada (FCC/IC) |
Europe (ETSI) |
|
2400 ~ 2483.5 MHz | 2400 ~ 2473.5 MHz | 2400 ~ 2483.5 MHz | |
Modulation Type | DSSS, OFDM | ||
Peak Data Rates | Up to 800 Mbps (MCS 0-31) | ||
Antenna | Integrated modular high efficiency PIFA antenna x4 (peak gain: 4.84 dBi) | ||
IEEE 802.11a/n/ac | |||
Frequency Band | Scanning | Transmission | |
All regions | USA & Canada (FCC/IC) |
Europe (ETSI) |
|
4.92 ~ 5.08 GHz 5.15 ~ 5.25 GHz 5.25 ~ 5.35 GHz 5.47~ 5.725 GHz 5.725~ 5.825 GHz |
5.15 ~ 5.25 GHz 5.25 ~ 5.35 GHz 5.725~ 5.825 GHz |
5.15 ~ 5.25 GHz 5.25 ~ 5.35 GHz 5.47~ 5.725 GHz |
|
Dynamic Frequency Selection | DFS and DFS2 | ||
Modulation Type | OFDM | ||
Peak Data Rates | Up to 1.7 Gbps (MCS 0-31) | ||
Antenna | Integrated modular high efficiency PIFA antenna x4 (peak gain: 5.75 dBi) |
Maximum Transmit Power For 5GHz | |
---|---|
802.11a (legacy) | 6Mbps: 27 dBm 36Mbps: 25 dBm 48Mbps: 24 dBm 54Mbps: 24 dBm |
802.11n HT20 (legacy) | MCS 0,1,8,9,16,17, 24,25: 27 dBm MCS 2,3,10,11,18,19,26,27: 26 dBm MCS 4, 5, 12, 13, 20, 21, 28, 29: 25 dBm MCS 6, 14, 22, 30: 24 dBm MCS 7, 15, 23, 31: 23 dBm |
802.11n HT40 | MCS 0,1,8,9,16,17,24,25: 25 dBm MCS 2,3,10,11,18,19,26,27: 24 dBm MCS 4,5,12,13,20,21,28,29: 23 dBm MCS 6,7,14,15,22,23,30,31: 22 dBm |
802.11ac 256QAM VHT80 | 3/4 Code Rate: 21 dBm 5/6 Code Rate: 20 dBm |
Maximum Transmit Power For 2.4GHz | |
802.11b (legacy) | 1Mbps - 11Mbps: 27 dBm |
802.11g (legacy) | 6Mbps: 27 dBm 54Mbps: 24 dBm |
802.11n HT20 (legacy) | MCS 0,1,8,9,16,17, 24,25: 27 MCS 2,3,10,11,18,19,26,27: 26 MCS 4, 5, 12, 13, 20, 21, 28, 29: 25 MCS 6, 14, 22, 30: 24 MCS 7, 15, 23, 31: 23 dBm |
802.11n HT40 | MCS 0,1,8,9,16,17,24,25: 25 dBm MCS 2,3,10,11,18,19,26,27: 24 dBm MCS 4,5,12,13,20,21,28,29: 23 dBm MCS 6,7,14,15,22,23,30,31: 22 dBm |
Receive Sensitivity For 5GHz | |
802.11a (legacy) | 6Mbps: -91 dBm 36Mbps: -78 dBm 48Mbps: -75 dBm 54Mbps: -73 dBm |
802.11n HT20 (legacy) | MCS 0,8: -91 dBm MCS 1,9: -88 dBm MCS 2 ,10: -85 dBm MCS 3,11: -81 dBm MCS 4,12: -77 dBm MCS 5,13: -74 dBm MCS 6,14: -72 dBm MCS 7,15: -71 dBm |
802.11n HT40 | MCS 0,8: -87 dBm MCS 1,9: -85 dBm MCS 2 ,10: -82 dBm MCS 3,11: -78 dBm MCS 4,12: -74 dBm MCS 5,13: -70 dBm MCS 6,14: -69 dBm MCS 7,15: -68 dBm |
802.11ac 256QAM VHT80 | MCS 0: -84 dBm MCS 1: -82 dBm MCS 2: -79 dBm MCS 3: -75 dBm MCS 4: -71 dBm MCS 5: -67 dBm MCS 6: -66 dBm MCS 7: -65 dBm MCS 8: -60 dBm MCS 9: -58 dBm |
Receive Sensitivity For 2.4GHz | |
802.11b | 1Mbps: -94 dBm 11Mbps: -86 dBm |
802.11g | 6Mbps: -90 dBm 24Mbps: -81 dBm 36Mbps: -78 dBm 48Mbps: -74 dBm 54Mbps: -73 dBm |
802.11n HT20 (legacy) | MCS 0,8: -90 dBm MCS 1,9: -87 dBm MCS 2 ,10: -84 dBm MCS 3,11: -80 dBm MCS 4,12: -77 dBm MCS 5,13: -73 dBm MCS 6,14: -71 dBm MCS 7,15: -69 dBm |
802.11n HT40 | MCS 0,8: -86 dBm MCS 1,9: -84 dBm MCS 2 ,10: -81 dBm MCS 3,11: -77 dBm MCS 4,12: -74 dBm MCS 5,13: -70 dBm MCS 6,14: -68 dBm MCS 7,15: -66 dBm |
Internal Antenna Radiation Patterns:
Comparision Guide:
WatchGuard Access Point Models
Recommended Use Case |
AP125Lower-density high performance ideal for small schools, distributed remote offices, and small meeting rooms |
AP225WMedium-density high performance ideal for multi-dwelling units (MDU) structures such as dorm rooms, hotels, assisted living, and military housing units. |
AP325Medlum-density high performance including K-12 schools, SMBs, restaurants |
AP327XMedium-density high performance IP-67 rated rugged outdoor including school campuses, RV parks, manufacturing yards, warehouses |
AP420High-density, high performance including large schools, meeting rooms, shopping malls |
Radios & Streams | 2x2:2 MU-MIMO Wave 2 | 2x2:2 MU-MIMO Wave 2 3rd WIPS Radio | 2x2:2 MU-MIMO Wave 2 3rd WIPS Radio | 2x2:2 MU-MIMO Wave 2 | 4x4:4 MU-MIMO Wave 2 3rd WIPS radio |
Deployment | Indoor | Indoor | Indoor | Outdoor | Indoor |
Number of Antennas | 4 internal | 4 internal | 6 internal | 4 N-Type External Connectors | 10 internal |
Maximum Data Rate | 867 Mbps/300 Mbps | 867 Mbps / 400 Mbps | 867 Mbps/300 Mbps | 867 Mbps/400 Mbps | 1.7 Gbps/800 Mbps |
Ports | 2x Gbe | 3x Gbe | 2x Gbe | 2x Gbe | 2x Gbe |
Power over Ethernet (PoE) | 802.3af (PoE) | 802.3at (POE+) | 802.3at (PoE+) | 802.3at (PoE+) | 802.3at (PoE+) |
Product Dimensions | 5.83"x 5.83"x 1.29" (148 x 148 x 33 mm) | 7.3"x 4.9" x 1" (186.4) 123.9x 25.5mm) | 7.72"x 7.72"x 1.69" (196x 196 x 43 mm) | 8.42"x 8.42"x 2.66" (213.9 x 213.9 X 67.5 mm) | 8.66"x 8.66"x 2.24" (220 x 220 x 57 mm) |
Product View:
Back
Front
Left
Right
Top
Documentation:
Download the WatchGuard AP420 Datasheet (PDF).
Download the WatchGuard Secure Cloud-Managed WiFi Access Point Datasheet (PDF).
Pricing Notes:
- All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
- Pricing and product availability subject to change without notice.
Our Price: £78.95
Inc. VAT: £94.74
Our Price: Request a Quote
Our Price: £101.51
Inc. VAT: £121.81
Our Price: Request a Quote
Our Price: £154.14
Inc. VAT: £184.97
Our Price: Request a Quote
Our Price: £30.08
Inc. VAT: £36.10
Our Price: £11.28
Inc. VAT: £13.54
Our Price: £11.28
Inc. VAT: £13.54
Our Price: £48.88
Inc. VAT: £58.66