Enduser devices disconnected randomly

[huseeinalsayed154]

• Some office users have been experiencing intermittent Wi-Fi connectivity issues in some areas during peak hours.
• Affected users may lose access to network resources for a couple of minutes when it happens.
• Users are being disconnected randomly from the wifi while sitting and are unable to connect again unless they move their location 
• My setup is:

1*

Firewall

Foritgate

FG201F

22* 

Foritgate

FortiAP431G

Not Assigned

1*

Switch

Foritgate

FS-148F-FPOE

The logs :

date=2025-09-04 time=13:52:14 eventtime=1756979534438448503 tz="+0400" logid="0104043581" type="event" subtype="wireless" level="notice" vd="root" logdesc="Wireless client WTP disconnected" sn="FP431GTY23046095" ap="AP-YM-AP14" vap="WLAN-USERS-SSID" ssid="My-SSID" radioid=2 user="N/A" group="N/A" stamac="1e:da:47:7b:8e:67" authserver="N/A" srcip=0.0.0.0 channel=36 radioband="802.11ax-5G" signal=0 snr=0 security="WPA2 Enterprise" encryption="AES" action="client-disconnected-by-wtp" reason="4-Way Handshake timeout" mpsk="N/A" msg="Client 1e:da:47:7b:8e:67 disconnected by WTP."

date=2025-09-04 time=13:52:09 eventtime=1756979529259874531 tz="+0400" logid="0104043680" type="event" subtype="wireless" level="notice" vd="root" logdesc="Reassociation response to wireless station" sn="FP431GTY23046095" ap="AP-YM-AP14" vap="WLAN-USERS-SSID" ssid="My-SSID" radioid=2 user="N/A" stamac="1e:da:47:7b:8e:67" authserver="N/A" channel=36 security="WPA2 Enterprise" encryption="AES" action="reassoc-resp" reason="Reserved 0" msg="AP sent reassociation response frame to client 1e:da:47:7b:8e:67" remotewtptime="2452.699812"

date=2025-09-04 time=13:52:09 eventtime=1756979529259866599 tz="+0400" logid="0104043678" type="event" subtype="wireless" level="notice" vd="root" logdesc="Reassociation request from wireless station" sn="FP431GTY23046095" ap="AP-YM-AP14" vap="WLAN-USERS-SSID" ssid="My-SSID" radioid=2 user="N/A" stamac="1e:da:47:7b:8e:67" authserver="N/A" channel=36 security="WPA2 Enterprise" encryption="AES" action="reassoc-req" reason="Reserved 0" msg="AP received reassociation request frame from client 1e:da:47:7b:8e:67" remotewtptime="2452.698063"

date=2025-09-04 time=13:52:09 eventtime=1756979529259857616 tz="+0400" logid="0104043676" type="event" subtype="wireless" level="notice" vd="root" logdesc="Authentication response to wireless station" sn="FP431GTY23046095" ap="AP-YM-AP14" vap="WLAN-USERS-SSID" ssid="My-SSID" radioid=2 user="N/A" stamac="1e:da:47:7b:8e:67" authserver="N/A" channel=36 security="WPA2 Enterprise" encryption="AES" action="auth-resp" reason="Reserved 0" msg="AP sent authentication response frame to client 1e:da:47:7b:8e:67" remotewtptime="2452.694915"

date=2025-09-04 time=13:52:09 eventtime=1756979529259836172 tz="+0400" logid="0104043675" type="event" subtype="wireless" level="notice" vd="root" logdesc="Authentication request from wireless station" sn="FP431GTY23046095" ap="AP-YM-AP14" vap="WLAN-USERS-SSID" ssid="My-SSID" radioid=2 user="N/A" stamac="1e:da:47:7b:8e:67" authserver="N/A" channel=36 security="WPA2 Enterprise" encryption="AES" action="auth-req" reason="Reserved 0" msg="AP received authentication request frame from client 1e:da:47:7b:8e:67" remotewtptime="2452.694726"

date=2025-09-04 time=13:52:09 eventtime=1756979529172577921 tz="+0400" logid="0104043575" type="event" subtype="wireless" level="notice" vd="root" logdesc="Wireless client deauthenticated" sn="FP431GTY23024425" ap="AP-YM-AP09" vap="WLAN-USERS-SSID" ssid="My-SSID" radioid=2 user="N/A" stamac="1e:da:47:7b:8e:67" authserver="N/A" channel=44 security="WPA2 Enterprise" encryption="AES" action="deauth" reason="Reserved 0" msg="AP sent deauthentication frame to client 1e:da:47:7b:8e:67" remotewtptime="2440.472482"

date=2025-09-04 time=13:51:42 eventtime=1756979502202502873 tz="+0400" logid="0104043667" type="event" subtype="wireless" level="notice" vd="root" logdesc="DHCP server sent DHCP ACK" sn="FP431GTY23024425" ap="AP-YM-AP09" vap="WLAN-USERS-SSID" ssid="My-SSID" stamac="1e:da:47:7b:8e:67" server="10.189.92.1" security="WPA2 Enterprise" encryption="AES" action="DHCP-ACK" reason="N/A" msg="DHCP ACK for IP 10.189.92.30 from server 10.189.92.1 with MAC 00:ff:a1:10:df:0c for client 1e:da:47:7b:8e:67 from router 10.189.92.1 on subnet 255.255.252.0 with dns 8.8.8.8, 8.8.4.4" remotewtptime="2413.652295"

date=2025-09-04 time=13:51:42 eventtime=1756979502202487227 tz="+0400" logid="0104043666" type="event" subtype="wireless" level="notice" vd="root" logdesc="Wireless station sent DHCP REQUEST" sn="FP431GTY23024425" ap="AP-YM-AP09" vap="WLAN-USERS-SSID" ssid="My-SSID" stamac="1e:da:47:7b:8e:67" server="0.0.0.0" security="WPA2 Enterprise" encryption="AES" action="DHCP-REQUEST" reason="N/A" msg="DHCP REQUEST for IP 10.189.92.30 from client 1e:da:47:7b:8e:67" remotewtptime="2413.651781"

[AEK]

What are the firmware versions of the FGT, FSW and FAP device?

Also bear in mind the FW-148F-FPOE has 740W power budget, and the 22x FAP-431G may consume a total 697W. So in case you have any additional PoE devices plugged to your FSW then it may reach its limit.

[huseeinalsayed154]

firmware FW 7.4

firmware AP 7.4.6

No additional PoE devices, it is just the 22 APs, each drains 13 to 15 W 

The logs show 4-Way Handshake timeout, so I am not really sure is it somthing related to POE or Authentication. I am using WPA2-Enterprise with no RADIUS, it is just local username and passowrd 

date=2025-09-04 time=13:52:14 eventtime=1756979534438448503 tz="+0400" logid="0104043581" type="event" subtype="wireless" level="notice" vd="root" logdesc="Wireless client WTP disconnected" sn="FP431GTY23046095" ap="AP-YM-AP14" vap="WLAN-USERS-SSID" ssid="My-SSID" radioid=2 user="N/A" group="N/A" stamac="1e:da:47:7b:8e:67" authserver="N/A" srcip=0.0.0.0 channel=36 radioband="802.11ax-5G" signal=0 snr=0 security="WPA2 Enterprise" encryption="AES" action="client-disconnected-by-wtp" reason="4-Way Handshake timeout" mpsk="N/A" msg="Client 1e:da:47:7b:8e:67 disconnected by WTP."