Skip to main content
English (UK)
Security-led networking

Purple on Fortinet FortiGate and FortiAP

FortiGate acts as the wireless controller for FortiAP access points. It can redirect guests to an external captive portal and send staff authentication to RADIUS. Purple provides both, adds Multi-PSK (MPSK) for multi-tenant sites and offers Purple Shield DNS filtering alongside FortiGate security.

What Purple supports on Fortinet

Four capabilities are supported on Fortinet, the same four we list for it in the hardware integrations directory. Each one uses settings the FortiGate wireless controller already has, so nothing new is installed on site.

Guest captive portal

The FortiGate wireless controller redirects guests on your guest SSID to a Purple splash page, where they sign in by email, social login or SMS. Every sign-in becomes a consented first-party record you can report on and market to.

802.1X staff WiFi

Add Purple as the RADIUS server for your staff SSID and each person signs in with their own credentials rather than a shared password, so a leaver loses access the moment their account is removed.

Multi-tenant WiFi: Fortinet MPSK (Multiple PSK)

Each resident, tenant or device group gets a personal key on one shared SSID. Purple manages the keys and the FortiGate wireless controller enforces them.

Dynamic VLAN steering

Purple returns a VLAN with each RADIUS decision, so a user or key lands on the right network segment without an SSID per group.

Supported Fortinet platforms

FortiAP Series (231F, 431F), FortiGate NGFW (60F, 100F, 200F), FortiLAN Cloud, FortiAuthenticator

RADIUS servers, ports and the walled garden allowlist are maintained by our support team and can differ per deployment. Get the current Fortinet configuration from Purple Support.

How to set up Purple on Fortinet

A guest WiFi rollout on Fortinet follows the same five steps whatever the size of the estate. The step-by-step guides linked here cover the exact FortiGate wireless controller screens.

  1. Check your platform is on the supported list

    Purple supports FortiAP Series (231F, 431F), FortiGate NGFW (60F, 100F, 200F), FortiLAN Cloud, FortiAuthenticator. If your controller or firmware is not listed, ask us before you start.

  2. Point the guest SSID at Purple in the FortiGate wireless controller

    Set the guest network's captive portal or splash page to Purple's hosted portal and add Purple as its RADIUS server. The Fortinet setup guide walks through each screen.

  3. Add the walled garden and RADIUS details from Purple Support

    The walled garden entries and RADIUS servers are set per deployment and change over time, so take them from the hardware guide on support.purple.ai, not from a summary page.

  4. Build your splash page and choose sign-in methods

    Design the splash page in Purple, pick the login methods and data fields you need, and set consent wording for your region.

  5. Test on real devices, then roll out

    Connect with an iPhone, an Android phone and a laptop before you open the network to guests. If the portal does not appear, the troubleshooting guides below cover the usual causes.

Start with these Fortinet guides

Every Fortinet guide, by task

7 published guides name Fortinet in their title or cover it in depth. This list updates as new guides are published.

Captive portal and splash page setup (2)

802.1X, RADIUS and network access control (1)

iPSK, PPSK and per-device keys (1)

Architecture, comparisons and planning (3)

What you can run on Fortinet

The integration is the entry point. These are the Purple products that run on top of it, each on the Fortinet hardware you already have.

Running more than one vendor?

Purple is one platform across mixed estates. The other hardware hubs cover the same four capabilities:

Comparing Purple with another guest WiFi or RADIUS platform instead? See every Purple comparison or captive portal software compared.

Fortinet and Purple: questions

Does Purple work with Fortinet?

Yes. On Fortinet, Purple provides the guest captive portal, cloud RADIUS for 802.1X staff WiFi, Fortinet MPSK (Multiple PSK) for multi-tenant WiFi and dynamic VLAN steering. Supported platforms: FortiAP Series (231F, 431F), FortiGate NGFW (60F, 100F, 200F), FortiLAN Cloud, FortiAuthenticator.

Do I need to replace my Fortinet access points to use Purple?

No. Purple runs on the access points you already own. You configure the guest SSID in the FortiGate wireless controller to redirect to Purple's hosted splash page and add Purple as a RADIUS server; the hardware stays as it is.

Where do I find the RADIUS servers and walled garden entries for Fortinet?

In the hardware guides on support.purple.ai. Those values are set per deployment and change over time, so we do not publish them on marketing pages or in guides. Always take them from Purple Support.

How does multi-tenant WiFi work on Fortinet?

With Fortinet MPSK (Multiple PSK). Each resident, tenant or device group gets its own key on a shared SSID, and Purple returns the matching VLAN over RADIUS, so each unit gets a private network without an SSID per unit.

Which Fortinet guide should I read first?

Start with "Fortinet FortiAP and guest WiFi integration guide". It covers the FortiGate wireless controller settings for the guest portal. The rest of the Fortinet guides on this page are grouped by task: portal setup, 802.1X and RADIUS, per-user keys and troubleshooting.

Can I run Purple across Fortinet and other hardware?

Yes. Purple is one platform across mixed estates, so sites on different vendors share the same splash pages, sign-in data, reporting and RADIUS policies. The hardware integrations directory lists every supported vendor.

See Purple on your Fortinet network

Tell us what you run today and we will show you the guest, staff and multi-tenant setup on your own hardware.