In short
WatchGuard access points are Wi-Fi 6 and Wi-Fi 7 APs (AP130 to AP430CR, with the AP340 the Wi-Fi 7 model) managed in WatchGuard Cloud with a Standard Wi-Fi or USP Wi-Fi licence. They suit businesses that run WatchGuard Firebox firewalls. We quote by model, give the exact part number in the quote and can install.
Order the WatchGuard APs
Add products and licences to your basket, then check out when you are ready.
The WatchGuard access point range
WatchGuard's figures, from its access point comparison and data sheets (checked 8 Nov 2026):
| Model | Radios and streams | Max data rate (WatchGuard) | Ports | Mounting | WatchGuard use case |
|---|---|---|---|---|---|
| AP130 | Wi-Fi 6 2x2 (dual radio, 2.4 GHz and 5 GHz) | 1201 Mbps / 574 Mbps | 1 x 1 Gbps (PoE+) | T-bar ceiling, flat surface | "Low-density" use: small offices, remote workers and meeting rooms |
| AP230W | Wi-Fi 6 2x2 with 2x2 dedicated scanning security radio | 1201 Mbps / 574 Mbps | Uplink 1 x 1 Gbps (PoE+); extension 4 x 1 Gbps | flat surface (wall plate) | Hospitality, classrooms, multi-unit dwellings |
| AP330 | Wi-Fi 6 2x2 with 2x2 dedicated scanning security radio | 1201 Mbps / 574 Mbps | 1 x 2.5 Gbps (PoE+, 802.3at Class 4) | T-bar ceiling, flat surface | "Medium-density": retail, K-12 schools and offices |
| AP340 | Wi-Fi 7 (802.11be), tri-band 2x2x2 (2.4, 5 and 6 GHz) with dedicated scan radio | 5.76 Gbps / 2.88 Gbps / 688 Mbps | 1 x 10GbE | T-bar ceiling, flat surface | "Medium- to high-density": branch offices, retail, healthcare |
| AP432 | Wi-Fi 6 4x4 | 2402 Mbps / 1148 Mbps | 1 x 2.5 Gbps (PoE+, 802.3at Class 4) | T-bar ceiling, flat surface | "High-density": large corporate or education campuses |
| AP332CR | Wi-Fi 6 2x2 | 1201 Mbps / 574 Mbps | 1 x 2.5 Gbps (PoE+, 802.3at Class 4) | flat surface, pole | "Medium-density for rugged or outdoor environments" |
| AP430CR | Wi-Fi 6 4x4 with 2x2 dedicated scanning security radio | 2402 Mbps (4x4) / 574 Mbps (2x2) | 1 x 5 Gbps (PoE+), 1 x 1 Gbps | flat surface, pole | "High-density for rugged or outdoor environments" |
WatchGuard: "WatchGuard secure access points deliver Wi-Fi 6 and Wi-Fi 7 high-performance wireless networking with centralized cloud management". The AP340 is WatchGuard's Wi-Fi 7 access point; the AP230W is a wall plate with four extra wired ports, one of which can power a device (802.3af PoE out, per WatchGuard's data sheet).
Add the WatchGuard APs to your basket
Add it and anything else you need, then check out when you are ready.
WatchGuard APs models and part numbers
Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.
| Part number | Model | Vendor description | Key specs | What you order with it | Status | Basket |
|---|---|---|---|---|---|---|
| Confirmed at quote | AP130 | WatchGuard AP130 access point | PoE 802.3at (PoE+); Wi-Fi 6; 2x2; 1 x 1 GbE | Confirmed at quote: WatchGuard Standard Wi-Fi (access point management licence) or WatchGuard USP Wi-Fi (Unified Security Platform access point licence) | Current | |
| Confirmed at quote | AP230W | WatchGuard AP230W access point | PoE 802.3at (PoE+); Wi-Fi 6; 2x2; 1 x 1 GbE | Confirmed at quote: WatchGuard Standard Wi-Fi (access point management licence) or WatchGuard USP Wi-Fi (Unified Security Platform access point licence) | Current | |
| Confirmed at quote | AP330 | WatchGuard AP330 access point | PoE 802.3at (PoE+); Wi-Fi 6; 2x2; 1 x 2.5 GbE | Confirmed at quote: WatchGuard Standard Wi-Fi (access point management licence) or WatchGuard USP Wi-Fi (Unified Security Platform access point licence) | Current | |
| Confirmed at quote | AP340 | WatchGuard AP340 access point | PoE 802.3at (PoE+); Wi-Fi 7; 2x2x2; 1 x 10 GbE | Confirmed at quote: WatchGuard Standard Wi-Fi (access point management licence) or WatchGuard USP Wi-Fi (Unified Security Platform access point licence) | Current | |
| Confirmed at quote | AP432 | WatchGuard AP432 access point | PoE 802.3at (PoE+); Wi-Fi 6; 4x4; 1 x 2.5 GbE | Confirmed at quote: WatchGuard Standard Wi-Fi (access point management licence) or WatchGuard USP Wi-Fi (Unified Security Platform access point licence) | Current | |
| Confirmed at quote | AP332CR | WatchGuard AP332CR access point | PoE 802.3at (PoE+); Wi-Fi 6; 2x2; 1 x 2.5 GbE | Confirmed at quote: WatchGuard Standard Wi-Fi (access point management licence) or WatchGuard USP Wi-Fi (Unified Security Platform access point licence) | Current | |
| Confirmed at quote | AP430CR | WatchGuard AP430CR access point | PoE 802.3at (PoE+); Wi-Fi 6; 4x4; 1 x 5 GbE | Confirmed at quote: WatchGuard Standard Wi-Fi (access point management licence) or WatchGuard USP Wi-Fi (Unified Security Platform access point licence) | Current |
Standard Wi-Fi or USP Wi-Fi?
WatchGuard manages its access points in WatchGuard Cloud with one of two licences (WatchGuard's Wi-Fi package options):
| What you get | Standard Wi-Fi | USP Wi-Fi |
|---|---|---|
| Native WatchGuard Cloud management | Yes | Yes |
| WatchGuard support and hardware warranty (WatchGuard's terms) | Yes | Yes |
| Firmware updates, inventory, SSH/CLI and radio settings | Yes | Yes |
| Captive portal and AP site templates | Yes | Yes |
| Reporting | 24-hour reporting and live status | 30-day reporting |
| PSA API integration | Yes | Yes |
| Syslog server output | No | Yes |
| "IKEv2 VPN Features (RAP)" for remote access points | No | Yes (240 Mbps on the AP340, WatchGuard) |
Standard Wi-Fi suits most offices; USP Wi-Fi adds longer reporting, syslog and remote-AP VPN. The configurator lets you pick either when you add an access point, and we confirm the term at quote. Licence-only renewals are on softwarelicensing.uk (opens in a new tab).
Not sure what you need?
Tell us about your sites and we will recommend the right kit and licences.
What you order with it
Subscription and support part numbers for the hardware above. We confirm the right tier, term and quantity at quote.
WatchGuard Standard Wi-Fi (access point management licence)
| Part number | Description | Term | Basket |
|---|---|---|---|
| Confirmed at quote | WatchGuard Standard Wi-Fi (access point management licence) | term confirmed at quote |
WatchGuard USP Wi-Fi (Unified Security Platform access point licence)
| Part number | Description | Term | Basket |
|---|---|---|---|
| Confirmed at quote | WatchGuard USP Wi-Fi (Unified Security Platform access point licence) | term confirmed at quote |
Security built into the access points
Several models carry a dedicated scanning security radio (AP230W, AP330, AP340, AP430CR) alongside the client radios. WatchGuard says: "WatchGuard detects and classifies unknown access points, including shadowware devices, evil twins, and rogue APs. Integration with ThreatSync XDR makes it possible to automatically block the local/internal IP address of a rogue AP on a Firebox network". Its Wi-Fi 6 and Wi-Fi 7 access points "secure every connection with WPA3 and scale from a single home office to a full corporate campus, managed end to end in WatchGuard Cloud."
They pair naturally with Firebox tabletop firewalls and Firebox rackmount firewalls, managed in the same WatchGuard Cloud account. For a small site, the Wi-Fi 7 Firebox T115-W, T125-W and T145-W combine a firewall and an access point in one box.
PoE and uplinks
Every WatchGuard access point runs on PoE+ (802.3at), so a standard PoE+ switch port powers it. The uplinks differ: 1G on the AP130 and AP230W, 2.5G on the AP330, AP432 and AP332CR, 5G on the AP430CR and 10G on the AP340. WatchGuard notes that the AP430CR "requires 802.3at PoE+" and needs antennas, "sold separately", on its six N-type connectors. Pair them with managed PoE switches from Cisco, Fortinet or HPE.
Part numbers and warranty
WatchGuard does not publish part numbers on its public site ("Log in to your WatchGuard partner account to access SKU information"), so the basket holds each access point by model and we give the exact part number, licence and term in your quote.
WatchGuard's warranty terms: "All WatchGuard hardware includes a one-year hardware warranty", and "An advance Hardware Warranty Replacement is available with an active Support subscription." These are WatchGuard's terms; anything we add is confirmed at quote.
Older WatchGuard access points
WatchGuard's end-of-life table names a replacement for most of its retired access points. The AP125, AP225W, AP325, AP327X and AP420 reach end of life on 31 Dec 2026; the dates and replacements are in the lifecycle box below, and all WatchGuard end-of-life dates are on WatchGuard end of life.
How to order
How ordering works. Press Add next to a part number and it goes into your basket; where the hardware needs a subscription or support term, you pick it in the same step. Add mounts, injectors and accessories, then View basket and Request a quote. We check every line, quantity and term against your site and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the wireless network as a project, with the scope confirmed at quote (see network installation).
Lifecycle and replacements
Dates are the vendor's published end-of-sale and support dates. We can quote current replacements and plan the swap.
| Part number | Product | Last order | End of support | Replacement |
|---|---|---|---|---|
| AP120 | WatchGuard AP120 | 1 Dec 2019 | 31 Dec 2022 | Vendor names AP130 |
| AP125 | WatchGuard AP125 | 1 Mar 2022 | 31 Dec 2026 | Vendor names AP130 |
| AP225W | WatchGuard AP225W | 1 May 2022 | 31 Dec 2026 | Vendor names AP230W |
| AP320 | WatchGuard AP320 | 1 Oct 2018 | 1 Oct 2021 | Vendor names AP330 |
| AP322 | WatchGuard AP322 | 1 Dec 2019 | 1 Dec 2022 | Vendor names AP332CR |
| AP325 | WatchGuard AP325 | 1 Jul 2022 | 31 Dec 2026 | Vendor names AP330 |
| AP327X | WatchGuard AP327X | 1 May 2022 | 31 Dec 2026 | Vendor names AP332CR |
| AP420 | WatchGuard AP420 | 1 Nov 2021 | 31 Dec 2026 | Vendor names AP432 |
Vendor sources
- WatchGuard: Secure Wi-Fi Access Points (indoor and outdoor/rugged comparison tables, Wi-Fi package options) (opens in a new tab)
- WatchGuard: Secure Wi-Fi (Wi-Fi 7 firewalls, rogue AP detection) (opens in a new tab)
- WatchGuard Help Center: Access point licences (Standard Wi-Fi, USP Wi-Fi) (opens in a new tab)
- WatchGuard: Product List & SKUs ("Log in to your WatchGuard partner account to access SKU information.") (opens in a new tab)
- WatchGuard Trust Center: End of Life Policy (Product Life Cycle Milestones table) (opens in a new tab)
- WatchGuard AP130 datasheet (PDF) (opens in a new tab)
- WatchGuard AP230W datasheet (PDF) (opens in a new tab)
- WatchGuard AP330 datasheet (PDF) (opens in a new tab)
- WatchGuard AP340 datasheet (PDF) (opens in a new tab)
- WatchGuard AP432 datasheet (PDF) (opens in a new tab)
- WatchGuard AP332CR datasheet (PDF) (opens in a new tab)
- WatchGuard AP430CR datasheet (PDF) (opens in a new tab)
How we can help with your network
Forever Systems can design, supply, stage, install and configure the network around the hardware you buy here, as a project or one step at a time.
- Design: we look at your sites, users and existing kit and size the switches, wireless and firewalls to fit
- Supply: every order gets a personalised quote by part number, with the subscriptions and support each product needs
- Stage: we can pre-configure and label equipment before it reaches site
- Install: we can rack and mount switches, access points and firewalls on site
- Configure: VLANs, wireless, firewall policy, VPNs and management platforms set up and documented at handover
Scope is confirmed at quote, so you only pay for the parts of the project you need.
Frequently asked questions
Do WatchGuard access points need a licence?
WatchGuard manages its access points in WatchGuard Cloud with a Standard Wi-Fi or USP Wi-Fi licence. We quote the licence and term with each access point.
Which WatchGuard access point is Wi-Fi 7?
The AP340, a tri-band 2x2x2 Wi-Fi 7 access point with a 10GbE port and a dedicated scanning security radio. The Firebox T115-W, T125-W and T145-W are WatchGuard's Wi-Fi 7 wireless firewalls.
What replaces the WatchGuard AP325?
WatchGuard names the AP330 as the replacement for the AP325, which reaches end of life on 31 Dec 2026.
What is the difference between Standard Wi-Fi and USP Wi-Fi?
Both include WatchGuard Cloud management, support and hardware warranty. USP Wi-Fi adds 30-day reporting, syslog output and IKEv2 VPN for remote access points.
Can WatchGuard access points work without a Firebox?
Yes. They are managed in WatchGuard Cloud, so they work behind any firewall, though a Firebox adds rogue AP blocking through ThreatSync.
Ready to order?
Build your basket and check out when you are ready.
More watchguard
See all- Firebox T SeriesWatchGuard
7 models: Firebox T115-W, Firebox T125 , Firebox T145 , Firebox T175
- Firebox M SeriesWatchGuard
8 models: Firebox M295, Firebox M395, Firebox M495, Firebox M595