Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
SecurityPlus
Contributor II

Newest Firmware - FAP-221C

The newest firmware version that I can find for the FAP-221C is 6.0.6, build 0044. Is this the last firmware version that will be available for this model AP?

 

I can find FAP-221C referenced in the release information for 6.0 but not 6.2 or 6.4.

 

I find that this AP Product support expires 14Oct2023, but I don't see the what the last firmware version is or will be. Is this documented?

5 REPLIES 5
ipranger
Contributor

Yes, that is what i'm interested too.

Fortigate 60E v7.x (GA)

ipranger

Now the time has come. 221C did not work anymore on FortiOS7. Very bad. Have here 5 AP's, all Offline. 

 

https://docs.fortinet.com/document/fortiap/6.4.5/fortiap-and-fortios-compatibility-matrix/261175/for...

 

Can't this for 7.0.

Fortigate 60E v7.x (GA)

buusmeister

ipranger wrote:

Now the time has come. 221C did not work anymore on FortiOS7. Very bad. Have here 5 AP's, all Offline. 

 

https://docs.fortinet.com/document/fortiap/6.4.5/fortiap-and-fortios-compatibility-matrix/261175/for...

 

Can't this for 7.0.

By default, when upgrading to FortiOS 7.0, the 221C's don't work with Fortigate since strong cryptographic ciphers are enforced (had the same problem myself), and the "C" series ("legacy") don't support these ciphers. (It is also in the release notes) 

 

In order to get the older AP's to work with a workaround, you need to configure the following: 

 

[strike]config system global [/strike]

[strike]set ssl-static-key-ciphers enable [/strike]

[strike]set strong-crypto disable [/strike]

[strike]end[/strike]

 

Since FortiOS 7.0.1 you can only enable the weak ciphers for the connectivity between the Fortigate and the FortiAP's

config wireless-controller global

set tunnel-mode compatible

end

 

After changing these setting you should see that the FAP's are connecting to the Fortigate once again. 

 

ipranger

Hello @buusmeister, 

 

and very thanks for your reply. Your information explains a lot, of course. And yes, with this the AP's work normally again.

 

Fortigate 60E v7.x (GA)

westekim

Would this possibly be the reason why FAP221C doesn't connect to FortiLAN Cloud also? It registers but the status just stays offline.

 

Edit: No, this was not it. I just had the AP connected behind a firewall that didnt let it connect with ipsec to forticloud, only https (so it managed to register but not actually connect)