WatchGuard AP420 User Manual

DATASHEET

AP420 INDOOR ACCESS POINT

Tri-radio 4x4:4 MU-MIMO, 802.11ac Wave 2 support

2 Gigabit Ethernet ports, 10 integrated antennas, PoE+ power

The AP420 is the fastest indoor access point from WatchGuard, offering blazing fast wireless speeds with its 4x4 802.11ac Wave

2 chipset and comes equipped with multi-user MIMO (MU-MIMO) technology allowing many smartphones, laptops and tablets

to be served by the AP420 at the same time – no more waiting to connect to Wi-Fi. With a third 2x2 MIMO dual band radio for

dedicated Wireless Intrusion Prevention System (WIPS) when the WatchGuard Wi-Fi Cloud is enabled, so you don’t have to sacrifice

performance for security. Best for tradeshow floors, auditoriums, meeting rooms, and shopping malls.

“For customers, high-performance Wi-Fi means fast, reliable connectivity. But for us, it means much more. We need to provide

the access, secure it, and be able to get intelligent information from it to help us optimize our business operations and offering.

The new AP420 with Wi-Fi Cloud gives us all of that by combining performance and security into a solution that’s simple to

deploy and manage. We get reliable high-speed Wi-Fi that’s not only secure, but also delivers an immersive guest experience,

which is good for the customer and good for our brand.”

~ Stuart Rowbotham, Founder at Bromleynet Limited

FLEXIBLE MANAGEMENT OPTIONS

You can manage AP420 access points with either a Firebox®, via the Gateway Wireless
Controller with lightweight feature set, or with WatchGuard’s Wi-Fi Cloud. And with
the Wi-Fi Cloud you get an expanded set of features including strong WIPS security,
marketing tools, and location-based analytics for optimal business insights.

PERFORMANCE WITHOUT COMPROMISE

Incorporating the latest 802.11ac Wave 2 standards, you’ll have speeds of up to 1.73 Gbps
over the air, without sacrificing security. When managed by the Wi-Fi Cloud, the AP420
comes equipped with a third 2x2 MIMO dual band radio for dedicated WIPS, RF optimiza­tion, spectrum monitoring, and troubleshooting built in.

UNIQUELY EFFECTIVE APPROACH TO SECURITY

Using patented Marker Packet technology, WatchGuard’s cloud-managed WIPS defends
your airspace from unauthorized devices, man-in-the-middle and denial-of-service
attacks, rogue APs and more. Now with a dedicated WIPS sensor included, the AP420 can
be added to any existing Wi-Fi network for a powerful layer of patented security features
simply unavailable in most APs.

ADVANTAGES OF CLOUDBASED MANAGEMENT

WatchGuard’s secure Cloud-managed APs deliver the most comprehensive set of features
for the price – including marketing tools for customizable user engagement and location­based analytics for enhanced business insights. With the WatchGuard Wi-Fi Cloud, IT
pros can enjoy an entirely controller-less Wi-Fi management experience including setup,
configuration, monitoring, troubleshooting, and improving corporate and guest Wi-Fi
access, without worrying about the limitations of legacy controller infrastructure. Wi-Fi
Cloud environments easily scale from one to an unlimited number of APs across multiple
locations. APs can be grouped in many ways, including location, building, floor, and
customer to maintain consistent policies.

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com

FEATURES & BENEFITS

• Wave 2 chipset offers the latest

MU-MIMO technology to serve

today’s toughest high-density

environments

• AP420 takes less than two minutes

to activate and configure after

connecting to the Wi-Fi Cloud

• Smart steering automatically

pushes clients with low speeds

to a closer access point*

• Band steering manages spectrum

efficiency, pushing clients to 5GHz

channels for optimal throughput

• Third 2x2 MIMO dual band radio

used as a dedicated WIPS sensor for

24x7x365 security and performance

scanning*

• AP420 continues to scan for wire-

less threats and enforces security

policy even if the connection with

the Wi-Fi Cloud is interrupted*

*Must be Wi-Fi Cloud enabled

WatchGuard Technologies, Inc.

PHYSICAL SPECIFICATIONS

AP420

Property Specification

Physical Dimensions

Weight 2.86 lb. (1.3 kg)

Operating Temperature 0oC to 40oC (32oF to 104oF)

Storage Temperature -25oC to 75oC (-13oF to 167oF)

Humidity 0% to 95% non-condensing

Power Consumption

Chipset Qualcomm QCA9994

Processor and RAM

Physical Specifications

Antenna Internal PIFA x10

2 Gigabit Ethernet ports with RJ45 connector type. One port to connect to the wired
LAN and communicate with the Wi-Fi Cloud. This port can also be used to power the device

Ethernet Ports

using the 802.3at Power over Ethernet (PoE+) standard/802.3af Power over Ethernet(PoE). Using
PoE results in limited feature functionality of the AP. Second port can be used for aggregation or
wired extension of an SSID.

8.66” x 8.66” x 2.24”
(220 mm x 220 mm x 57 mm)

Max: 20W
Min: 16W
Average: 18W

Qualcomm IPQ8064 1.4GHz dual core ARM processor
with 256 MB RAM and 128 MB Flash

USB 1 USB 2.0 port

Reset Pinhole push button

Console RS - 232 Serial

Physical Security Kensington lock slot

LEDs Ethernet, 2.4Ghz, 5GHz, Scanning

Operational Specifications

Input Power 12V DC (6.3mm connector)/802.3af (PoE)/802.3at (PoE+)

Number of Radios

MIMO 4 X 4 for 2.4/5GHz Radios, 2 X 2 for Scanning Radio

Number of Spatial Streams 4 for 2.4/5GHz Radios, 2 for Scanning Radio

RF Transmit Power 27dBm per radio (max); Actual power for Tx will depend on Country Regulatory Domain

Simultaneous MU-MIMO Clients 64

Users in a MU-MIMO group with a 2x2 client 3

Bandwidth Agility Yes

Small Cells Interference Mitigation
(picocells, femtocells, microcells)

Frequency Bands

Dynamic Frequency Selection

3 radios; One 2.4GHz and 5GHz radio each for simultaneous dual band client access.
Dual band 2x2 third radio for smart scanning, for both WIPS and RF Optimization

Supported

2.4-2.4835 GHz, 4.9-5.0GHz, 5.15-5.25 GHz; (UNII-1), 5.25-5.35 GHz, 5.47-5.6 GHz,

5.650-5.725 GHz (UNII-2), 5.725-5.85 GHz (UNII-3)

Supported in compliance to all latest amendments from FCC, CE, IC, CB, TELEC, KCC
regarding certifications.

*Knowledge Base Article: https://watchguardsupport.secure.force.com/publicKB?type=KBArticle&SFDCID=kA22A000000HQObSAO&lang=en_US

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com

WatchGuard Technologies, Inc.

2

WIFI SPECIFICATIONS  Frequency, Modulation, and Data Rates

IEEE 802.11a/n/ac

Scanning Transmission

All regions

Frequency Band

Dynamic Frequency Selection DFS and DFS2

Modulation Type OFDM

Peak Data Rates Up to 1.7 Gbps (MCS 0-31)

Antenna Integrated modular high efficiency PIFA antenna x4 (peak gain: 5.75 dBi)

Frequency Band Scanning Transmission

Modulation Type DSSS, OFDM

Peak Data Rates Up to 800 Mbps (MCS 0-31)

Antenna Integrated modular high efficiency PIFA antenna x4 (peak gain: 4.84 dBi)

4.92 ~ 5.08 GHz

5.15 ~ 5.25 GHz

5.25 ~ 5.35 GHz

5.47~ 5.725 GHz

5.725~ 5.825 GHz

IEEE 802.11b/g/n

All regions

2400 ~ 2483.5 MHz 2400 ~ 2473.5 MHz 2400 ~ 2483.5 MHz

USA & Canada

(FCC/IC)

5.15 ~ 5.25 GHz

5.25 ~ 5.35 GHz

5.725~ 5.825 GHz

USA & Canada

(FCC/IC)

AP420

Europe

(ETSI)

5.15 ~ 5.25 GHz

5.25 ~ 5.35 GHz

5.47~ 5.725 GHz

Europe

(ETSI)

COUNTRYWISE MAX TRANSMIT POWERS DBM

Countries 2.4GHz 5Ghz

Australia 20 23

Canada 30 23

India 20 20

Israel 20 20

Japan 20 20

UAE 20 17

USA 20 23

Note:

The actual transmit power will be the lowest of:

• Value specified in the Device Template

• Maximum value allowed in the regulatory domain

• Maximum power supported by the radio

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com

WatchGuard Technologies, Inc.

3

Maximum Aggregate Transmit Power

AP420

AP420

For 5GHz

MCS I ndex Transmit Power(dBm)

802.11a (legacy)

6Mbps 27

36Mbps 25

48Mbps 24

54Mbps 24

802.11n HT20 (legacy)

MCS 0,1,8,9,16,17, 24,25 27

MCS 2,3,10,11,18,19,26,27 26

MCS 4, 5, 12, 13, 20, 21, 28, 29 25

MCS 6, 14, 22, 30 24

MCS 7, 15, 23, 31 23

802.11n HT40

MCS 0,1,8,9,16,17,24,25 25

MCS 2,3,10,11,18,19,26,27 24

MCS 4,5,12,13,20,21,28,29 23

MCS 6,7,14,15,22,23,30,31 22

802.11ac 256QAM VHT80

For 2.4GHz

MCS Index Transmit Power(dBm)

802.11b (legacy)

1Mbps - 11Mbps 27

802.11g (legacy)

6Mbps 27

54Mbps 24

802.11n HT20 (legacy)

MCS 0,1,8,9,16,17, 24,25 27

MCS 2,3,10,11,18,19,26,27 26

MCS 4, 5, 12, 13, 20, 21, 28, 29 25

MCS 6, 14, 22, 30 24

MCS 7, 15, 23, 31 23

802.11n HT40

MCS 0,1,8,9,16,17,24,25 25

MCS 2,3,10,11,18,19,26,27 24

3/4 Code Rate 21

5/6 Code Rate 20

MCS 4,5,12,13,20,21,28,29 23

MCS 6,7,14,15,22,23,30,31 22

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com

WatchGuard Technologies, Inc.

4

Receive Sensitivity

For 5GHz For 2.4GHz

AP420

MCS I ndex

802.11a (legacy)

6Mbps -91

36Mbps -78

48Mbps -75

54Mbps -73

802.11n HT20 (legacy)

MCS 0,8 -91

MCS 1,9 -88

MCS 2,10 -85

MCS 3,11 -81

MCS 4,12 -77

MCS 5,13 -74

MCS 6,14 -72

MCS 7,15 -71

802.11n HT40

MCS 0,8 -87

MCS 1,9 -85

Receive
Sensitivity

MCS I ndex

1Mbps -94

11Mbps -86

6Mbps -90

24Mbps -81

36Mbps -78

48Mbps -74

54Mbps -73

802.11n HT20

MCS 0,8 -90

MCS 1,9 -87

MCS 2 ,10 -84

Receive
Sensitivity

802.11b

802.11g

MCS 2 ,10 -82

MCS 3,11 -78

MCS 4,12 -74

MCS 5,13 -70

MCS 6,14 -69

MCS 7,15 -68

802.11ac 256QAM VHT80

MCS 0 -84

MCS 1 -82

MCS 2 -79

MCS 3 -75

MCS 4 -71

MCS 5 -67

MCS 6 -66

MCS 7 -65

MCS 8 -60

MCS 9 -58

MCS 3,11 -80

MCS 4,12 -77

MCS 5,13 -73

MCS 6,14 -71

MCS 7,15 -69

802.11n HT40

MCS 0,8 -86

MCS 1,9 -84

MCS 2,10 -81

MCS 3,11 -77

MCS 4,12 -74

MCS 5,13 -70

MCS 6,14 -68

MCS 7,15 -66

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com

WatchGuard Technologies, Inc.

5

Datasheet

6

Radiation Pattern for 2G antennas (Ant 1,2,3,4)

Note:

The actual transmit power will be the lowest of:

• Value speciied in the Device Template

• Maximum value allowed in the regulatory domain

• Maximum power supported by the radio

Country-Wise Max Transmit Powers (dBm)

Countries 2.4GHz 5Ghz

Aust ra l i a 20 23

Ca nad a 30 23

India 20 20

Israel 20 20

J a p a n 20 20

U A E 20 17

U SA 20 23

Datasheet

7

Radiation Pattern for 2G antennas (Ant 9,10)

INTERNAL ANTENNA RADIATION PATTERNS

Radiation Pattern for 2G antennas (Ant 1,2,3,4)

XY-cut XZ-cut YZ-cut

Radiation Pattern for 5G antennas (Ant 5,6,7,8)

Radiation Pattern for 5G antennas(Ant 5,6,7,8)

Directional Gain

2G1

2G2

2G3

2G4

AP420

AP420

XY-cut XZ-cut YZ-cut

Radiation Pattern for 2G antennas (Ant 9,10)

XY-cut XZ-cut YZ-cut

Directional Gain 2G9 2G10

Radiation Pattern for 5G antennas(Ant 9,10)

Radiation Pattern for 5G antennas (Ant 9,10)

XY-cut XZ-cut YZ-cut

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com

WatchGuard Technologies, Inc.

6

Access Point Security Modes:

• WPA/WPA2 (802.11i) with TKIP or AES-CCMP encryption and PSK or 802.1x authentication

• Integrated WIPS background wireless scanning and Rogue AP prevention

WIPS Sensor Mode:

• Dedicated WIPS sensor scans for 24x7x365 protection from wireless threats

REGULATORY SPECIFICATIONS

RF and Electromagnetic

Country Certification

USA FCC Part 15.247, 15.407

Canada IC

AP420

Europe CE EN300.328, EN301.893

Countries covered under Europe certification: Austria, Belgium, Cyprus, Denmark, Estonia, Finland, France, Ger­many, Greece, Hungary, Ireland, Italy, Iceland, Luxembourg, Latvia, Lithuania, Malta, Netherlands, Norway, Poland,
Portugal, Spain, Sweden, Slovakia, Slovenia, Switzerland, The Czech Republic, UK.

Safety

Country Certification

USA UL 60950

Canada cUL 60950

European Union (EU) EN 60950, RoHS

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com

WatchGuard Technologies, Inc.

7

ORDERING INFORMATION

Access Point

Part Number Description

WGA42723

WGA42721

WGA42733

WGA42731

WGA42703

WGA42701

Power Options

Part Number Description

WG8599 (US) WatchGuard 802.3at PoE+ Injector with AC cord (US)

WG8600 (EU)

WG8601 (UK)

WG8602 (AU)

WG8025

WatchGuard AP420 and 3-yr Total Wi-Fi

Total Wi-Fi Package includes AP with subscription to manage that AP in Wi-Fi Cloud, Standard Support, WIPS, Engage Captive Portals,
Analyze Location Analytics, and Go Mobile Web App

WatchGuard AP420 and 1-yr Total Wi-Fi

Total Wi-Fi Package includes AP with subscription to manage that AP in Wi-Fi Cloud, Standard Support, WIPS, Engage Captive Portals,
Analyze Location Analytics, and Go Mobile Web App

WatchGuard AP420 and 3-yr Secure Wi-Fi

Secure Wi-Fi Package includes AP with subscription to manage that AP in Wi-Fi Cloud, Standard Support, and WIPS

WatchGuard AP420 and 1-yr Secure Wi-Fi

Secure Wi-Fi Package includes AP with subscription to manage that AP in Wi-Fi Cloud, Standard Support, and WIPS

WatchGuard AP420 and 3-yr Basic Wi-Fi

Basic Wi-Fi Package includes AP with subscription to manage that AP with a Gateway Wireless Controller and Standard Support

WatchGuard AP420 and 1-yr Basic Wi-Fi

Basic Wi-Fi Package includes AP with subscription to manage that AP with a Gateway Wireless Controller and Standard Support

WatchGuard 802.3at PoE+ Injector with AC cord (EU)

WatchGuard 802.3at PoE+ Injector with AC cord (UK)

WatchGuard 802.3at PoE+ Injector with AC cord (AU)

Power Supply for WatchGuard AP420

AP420

Mounting Options

Part Number Description

WG8020

WG8026

WG8021

WG8027

Flat Surface Mount Kit

Flat surfaces (wall, hard ceiling) mount kit for WatchGuard AP420

T-grid Rails (9/16”,15mm) Mount Kit

Drop ceiling T-grid rails (9/16”, 15mm) mount kit for WatchGuard AP325/AP420

T-grid Rails Interlude and Silhouette Mount Kit

Drop ceiling T-grid rails (interlude and silhouette) mount kit for WatchGuard AP325/AP420

T-grid Rails (15/16”, 24mm) Mount Kit

Drop ceiling T-grid rails (interlude and silhouette) mount kit for WatchGuard AP325/AP420

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 WEB www.watchguard.com

WatchGuard Technologies, Inc.

8

AP420

AP420

About WatchGuard Technologies, Inc.

WatchGuard® Technologies, Inc. is a global

leader in network security, secure Wi-Fi,

and network intelligence products and

services to more than 80,000 customers

worldwide. The company’s mission is to

make enterprise-grade security accessible

WATCHGUARD HAS YOU COVERED, INDOORS AND OUT

No matter what your wireless battleground is – remote offices, guest Wi-Fi, corporate access,
public hotspots, outdoor environments – WatchGuard has a range of access points to fit your
business needs. WatchGuard’s Wi-Fi packages allow you to quickly and easily find the right set
of features your business needs today…and tomorrow.

WatchGuard Wi-Fi Solution

Management Platform

Scalability

Number of managed access points.

Configuration and Management

SSID configuration with VLAN support, band steering, smart steering, fast roaming,
user bandwidth control, Wi-Fi traffic dashboard.

Additional Wi-Fi Cloud-Based Management

Radio Resource Management, Hotspot 2.0, enhanced client roaming, nested folders
for configuration before deployment, integration with 3rd party WLAN controllers.

Intelligent Network Visibility and Troubleshooting

Pinpoint meaningful network problems and application issues by seeing when an
anomaly occurs above baseline thresholds and remotely troubleshoot.

Verified Comprehensive Security

A patented WIPS technology defends your business from the six known Wi-Fi threat
categories, enabling a Trusted Wireless Environment.

GO Mobile Web App

Quickly and easily set-up your WLAN network from any mobile device.

Guest Engagement Tools

Splash pages, social media integrations, surveys, coupons, videos, and so much more.

Location-Based Analytics

Leverage metrics like footfall, dwell time, and conversion to drive business decisions
and create customizable reports.

Support

Hardware warranty with advance hardware replacement, customer support,
and software updates

*Requires Firebox with active support contract.

**20 access points recommended for each Firebox model. For the T-15 Firebox model 4 access points are recommended.

Total Wi-Fi

Wi-Fi Cloud Wi-Fi Cloud

Unlimited Unlimited Limited**

  

 

 

 

 





Standard Standard Standard

Secure Wi-Fi Basic Wi-Fi

Firebox

Appliance*

to companies of all types and sizes

through simplicity, making WatchGuard

an ideal solution for distributed

enterprises and SMBs. WatchGuard is

headquartered in Seattle, Washington,

with offices throughout North America,

Europe, Asia Pacific, and Latin America. To

learn more, visit WatchGuard.com.

AP420

2.4GHz

Power / Ethernet

5GHz

3rd radio

NO NEED TO RIP AND REPLACE, JUST ADD WIPS

Each WatchGuard access point has the flexibility to operate as both an access point and a
dedicated WIPS security sensor. This means that when deployed as dedicated WIPS sensors,
the devices work with your existing access points (Cisco, Aruba, Ruckus, Ubiquiti, etc) and add
enterprise-grade wireless security protection to your network. In this case, instead of deliv­ering secure Wi-Fi traffic to users, we deliver unprecedented WIPS security protection that is
100% dedicated to scanning the air and protecting your business from wireless threats.

USB Port

Console PortReset Button

For additional details, talk to your authorized WatchGuard reseller or visit

https://www.watchguard.com/wifi

Kensington lock slot

U.S. SALES 1.800.734.9905 INTERNATIONAL SALES +1.206.613.0895 www.watchguard.com

No express or implied warranties are provided for herein. All specifications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. © 2019 WatchGuard Technologies, Inc. All rights reserved. WatchGuard,
the WatchGuard logo and Firebox are trademarks or registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners. Part No. WGCE67024_121619

9