Call a Specialist Today! 800-886-4561
Free Shipping! Free Shipping!

WatchGuard AP125
802.11ac wave 2, Dual Radio, 2x2, Indoor, Internal antenna, Cloud ready

WatchGuard AP125

Sorry, this unit has been discontinued and is no longer available for purchase, replace by WatchGuard AP130. End of Sale (EOS): 01 Dec 2019. End of Life (EOL) for the WatchGuard AP125 is 01 March 2025 - you will not be able receive support after this date even with a 1 Year contract.

Sorry, this product is no longer available, please contact us for a replacement.


Live Demo Box, Click here!


Great Wi-Fi security comes in affordable, small packages. The AP125 from WatchGuard is exactly what you’ve been looking for – a small and affordable indoor access point that comes equipped with 2x2 802.11ac Wave 2 Multi-User MIMO (MU-MIMO). This access point also offers dual concurrent 5 GHz and 2.4 GHz band radios, and data rates of up to 867 Mbps and 300 Mbps, respectively. Common use cases include lower-density environments such as small schools, distributed remote offices, and small meeting rooms.

Uniquely Effective Approach to Security
The AP125 supports the only Wireless Intrusion Prevention System (WIPS) in the industry with high accuracy in classifying access points and client devices, properly enabling automatic prevention of Wi-Fi threats and keeping a network protected from wireless man-in-the middle attacks, evil twins, honeypots, and more.

Flexible Management Options
You can manage the AP125 with either a Firebox, via the Gateway Wireless Controller and receive a lightweight feature set, or with WatchGuard’s Wi-Fi Cloud. With the Wi-Fi Cloud you get an expanded set of features including patented security, marketing tools, and location-based analytics for optimal business insights. IT pros can also enjoy an entirely controller-less Wi-Fi management experience including setup, con-figuration, monitoring, troubleshooting, and improved corporate and guest Wi-Fi access, without worrying about the limitations of legacy controller infrastructure. Wi-Fi Cloud en-vironments easily scale from one to an unlimited number of access points across multiple locations. Access points can be grouped in many ways including location, building, floor, and customer to maintain consistent policies.

Performance Without Compromise
By incorporating the latest 802.11ac Wave 2 standards, you’ll have speeds of up to 867 Mbps over the air, without sacrificing security. With MU-MIMO, you get faster user experience, serving multiple devices (smartphones, tablets, laptops) at the same time, so more clients can utilize the network more efficiently.

Features & Benefits

  • Wave 2 chipset offers the latest MU-MIMO technology to provide optimal airtime efficiency
  • Measuring under 6 inches (148mm) square, this small access point packs a real punch
  • AP125 takes less than two minutes to activate and configure after connecting to the Wi-Fi Cloud
  • Support for up to eight individual SSIDs per radio allows for maximum flexibility in network design
  • Smart steering automatically pushes clients with low speeds to a closer access point*
  • Band steering manages spectrum efficiency, pushing clients to 5 GHz channels for optimal throughput
  • AP125 continues to scan for wire-less threats and enforces security policy even if the connection with the Wi-Fi Cloud is interrupted*
*Must have Wi-Fi Cloud enabled with Secure Wi-Fi or Total Wi-Fi license.

Flexible Deployment Options:

WatchGuard offers three deployment scenarios to meet the needs of SMBs and distributed enterprises. Add an AP120 or AP320 to an existing Firebox UTM-protected network to extend that protection to the WLAN, while managing the device with the Firebox’s built-in gateway wireless controller. For full Engage and Analyze features, WIPS protection, scalable management and so much more in a stand-alone deployment, choose our Wi-Fi Cloud option. And for ultimate peace of mind, rely on a Firebox UTM-protected network with WatchGuard Wi-Fi Cloudmanaged APs to realize the full marketing and security potential of a cloud-managed access point solution.

Flexible Deployment Options

Wi-fi Solution:

WatchGuard has you covered, indoors and out

No matter what your wireless battleground is – remote offices, guest Wi-Fi, corporate access, public hotspots, outdoor environments – WatchGuard has a range of access points to fit your business needs. WatchGuard’s Wi-Fi packages allow you to quickly and easily find the right set of features your business needs today…and tomorrow.

WatchGuard Wi-Fi Solution Total Wi-Fi Secure Wi-Fi Basic Wi-Fi
Management Platform Wi-Fi Cloud Wi-Fi Cloud Firebox Appliance*
Number of managed access points
Unlimited Unlimited Limited**
Configuration and Management
SSID configuration with VLAN support, band steering, smart steering, fast roaming, user bandwidth control, Wi-Fi traffic dashboard.

Additional Wi-Fi Cloud-Based Management
Radio Resource Management, Hotspot 2.0, enhanced client roaming, nested folders for configuration before deployment, integration with 3rd party WLAN controllers.


Intelligent Network Visibility and Troubleshooting
Pinpoint meaningful network problems and application issues by seeing when an anomaly occurs above baseline thresholds and remotely troubleshoot.

Verified Comprehensive Security
A patented WIPS technology defends your business from the six known Wi-Fi threat categories, enabling a Trusted Wireless Environment.
GO Mobile Web App
Quickly and easily set-up your WLAN network from any mobile device.
Guest Engagement Tools
Splash pages, social media integrations, surveys, coupons, videos, and so much more.
Location-Based Analytics
Leverage metrics like footfall, dwell time, and conversion to drive business decisions and create customizable reports.
Hardware warranty with advance hardware replacement, customer support, and software updates
Standard Standard Standard

*Requires Firebox with active support contract.
**20 access points recommended for each Firebox model. For the T-15 Firebox model 4 access points are recommended.

No need to rip and replace, just add WIPS

Each WatchGuard access point has the flexibility to operate as both an access point and a dedicated WIPS security sensor. This means that when deployed as dedicated WIPS sensors, the devices work with your existing access points (Cisco, Aruba, Ruckus, Ubiquiti, etc) and add enterprise-grade wireless security protection to your network. In this case, instead of delivering secure Wi-Fi traffic to users, we deliver unprecedented WIPS security protection that is 100% dedicated to scanning the air and protecting your business from wireless threats.

Trusted Wireless Environment:

WatchGuard Solutions

What is a Trusted Wireless Environment?

In a world with growing open Wi-Fi networks, Wi-Fi hackers are able to not only steal personal information but also spread malware to computers on the network, costing your businesses millions. Simply put, the Wi-Fi system that you installed seven years ago is no longer adequate. As you face the responsibility of evolving your Wi-Fi networks, you’re finding that many vendors do not enable you with the right products. WatchGuard is the only company that offers a framework for building a complete Wi-Fi network that is fast, easy to manage, and most importantly, secure. Companies that offer a Trusted Wireless Environment deliver on these three core pillars:

  1. Market-Leading Performance: You should never be forced to compromise security to achieve the necessary performance to support your environment with the speed, connections and client density that it needs.
  2. Scalable Management: With easy set-up and management, you should be able to control your entire wireless network from a single interface and execute key processes to safeguard the environment and its users.
  3. Verified Comprehensive Security: You need proof that the security solution that defends your business against Wi-Fi attacks can deliver on the following benefits:
    • Provide automatic protection from the six known Wi-Fi threat categories
    • Allow legitimate external access points to operate in the same airspace
    • Restrict users from connecting to unsanctioned Wi-Fi access points

The Six Known Wi-Fi Threat Categories That Leave Your Business Vulnerable


Rogue Access Point

Allows attackers to bypass perimeter security.


Rogue Client

Delivers malware payloads to the network after connecting to malicious APs.


Neighbor Access Point or Client Misassociation

Risks infection from connecting to other SSIDs while in range of the authorized AP.


Ad-Hoc Network

Uses peer-to-peer connections to evade security controls and risk exposure to malware.


"Evil Twin" Access Point

Lures users to connect to it so as to spy on traffic, steal data and infect systems.


Misconfigured Access Point

Opens networks to attack as a result of configuration errors.

Additional Resources

Solution Brief - Trusted Wireless Environment

Don’t let Wi-Fi be your biggest security gap. Hackers prefer to go after the weak link in the security chain and it doesn’t take much to hack into the Wi-Fi network using easily accessible tools and a plethora of online how-to videos. What’s worse – your business networks become compro-mised due to malware implanted and credentials stolen over Wi-Fi, and it can cost millions in fines and breach remediation expenses to fix.





Don’t Let Wi-Fi Be Your Biggest Security Gap

In 2017, there were 8.4 billion connected devices and the volume is expected to hit 20.4 billion by 2020, according to analyst firm Gartner. Hackers prefer to go after the weak link in the security chain and it doesn’t take much to hack into the Wi-Fi network using easily accessible tools and a plethora of online how-to videos. Even the most rookie hacker can intercept traffic flowing over Wi-Fi and steal valuable data from your smartphone, tablet, smartwatch, or laptop. What’s worse - your business networks become compromised due to malware implanted and credentials stolen over Wi-Fi, and it can cost millions in fines and breach remediation expenses to fix.

Wi-Fi Security

TJ-Maxx Wifi Breach

Wi-Fi Mobile Communications


Create a Trusted Wireless Environment with WatchGuard

With WatchGuard Wi-Fi Cloud and WIPS (Wireless Intrusion Prevention System), it is easy to quickly create a Trusted Wireless Environment with WIPS and automatically protect your Wi-Fi network against the six known Wi-Fi threat categories.

WIPS is a collection of features that run on WatchGuard APs and Wi-Fi Cloud. You can use WatchGuard APs for both Wi-Fi access and WIPS security protection, or you can use APs as dedicated WIPS security sensors that you can deploy together with other WatchGuard APs or third-party APs and Wi-Fi controllers.

To create a Trusted Wireless Environment, WatchGuard APs must have either a Total Wi-Fi or Secure Wi-Fi AP management subscription.

WatchGuard Wireless Packages


AP125 Physical Specifications

AP125 Specifications
Physical Specifications
Property Specification
Physical Dimensions 148mm X 148mm X 33mm
Weight 237g (0.522 lb)
Operating Temperature 0° - 45°C (32° - 113°F)
Storage Temperature -20° - 65°C (-4° - 149°F)
Humidity 5% to 95% non-condensing
Processor RAM Qualcomm IPQ4028 717 MHz quad-core ARM processor with 256 MB RAM and 64 MB Flash.
Port Description Connector Type Speed/Protocol
Power 12V DC/802.3af (PoE) 5.5MM overall diameter/2.1mm center pin/hole N/A
Reset Reset to factory default settings Pin hole push button Hold down and power cycle the device to reset
LAN1 Gigabit Ethernet port that can be used for wired extension for an SSID RJ-45 10/100/1000 Mbps Gigabit Ethernet
LAN2/PoE Gigabit Ethernet port used to connect to the wired LAN and communicate with the WatchGuard Wi-Fi Cloud. This port can also be used to power the device using the 802.3af (PoE) standard. RJ-45 10/100/1000 Mbps Gigabit Ethernet 802.3af Class 0 PoEPoE input voltage: 48V
Operational Specifications
Input Power 12V DC/1.5A (5.5mm overall diameter/2.1 center pin/hole)/802.3af (PoE)
Number of Radios 2 radios; One 2.4GHz and 5GHz radio each for simultaneous dual band client access.
Max Clients Supported 512 clients per radio *dependent upon cases
MIMO 2x2 for 2.4/5GHz Radios
Number of Spatial Streams 2 for 2.4/5GHz Radios
RF Transmit Power 20 dBm per radio chain (max); Actual power for Tx will depend on Country Regulatory Doman
Simultaneous MU-MIMO Clients Two 1x1 MU-MIMO clients
Users in a MU-MIMO group with a 2x2 client 1
Bandwidth Agility Yes
Frequency Bands 2.4-2.4835 GHz, 4.9-5.0GHz, 5.15-5.25 GHz; (UNII-1), 5.25-5.35 GHz, 5.47-5.6 GHz,5.650-5.725 GHz (UNII-2), 5.725-5.85 GHz (UNII-3)
Dynamic Frequency Selection Supported in compliance to all latest amendments from FCC, CE, IC, CB, TELEC, KCCregarding certifications.
Wi-Fi Specifications – Frequency, Modulation, and Data Rates
IEEE 802.11b/g/n
Frequency Band Scanning Transmission
All regions USA & Canada
2400 ~ 2483.5 MHz 2400 ~ 2473.5 MHz 2400 ~ 2483.5 MHz
Modulation Type DSSS, OFDM
Peak Data Rates Up to 300 Mbps (MCS 0-15)
Antenna Integrated modular high efficiency PIFA antenna x4 (x2 per band)
IEEE 802.11a/n/ac
Frequency Band Scanning Transmission
All regions USA & Canada
4.92 ~ 5.08 GHz
5.15 ~ 5.25 GHz
5.25 ~ 5.35 GHz
5.47~ 5.725 GHz
5.725~ 5.825 GHz
5.15 ~ 5.25 GHz
5.25 ~ 5.35 GHz
5.725~ 5.825 GHz
5.15 ~ 5.25 GHz
5.25 ~ 5.35 GHz
5.47~ 5.725 GHz
Dynamic Frequency Selection DFS and DFS2
Modulation Type OFDM
Peak Data Rates Up to 867 Mbps (MCS 0-15)
Antenna Integrated modular high efficiency PIFA antenna x4 (x2 per band)
Maximum Transmit Power For 2.4GHz
802.11b 1Mbps: 20 dBm
11Mbps: 21 dBm
802.11g 6Mbps: 21 dBm
54Mbps: 18 dBm
802.11n HT20 MCS 0: 20 dBm
MCS 7: 18 dBm
802.11n HT40 MCS 0: 20 dBm
MCS 7: 18 dBm
Maximum Transmit Power For 5GHz
802.11a 6Mbps: 21 dBm
54Mbps: 19 dBm
802.11n HT20 MCS: 21 dBm
MCS 7: 19 dBm
802.11n HT40 MCS 0: 20 dBm
MCS 7: 18 dBm
802.11n VHT80 MCS 0: 20 dBm
MCS 7: 18 dBm
MCS 8: 17 dBm
MCS 9: 16 dBm
Receive Sensitivity For 2.4GHz
802.11g 6 Mbps: -95 dBm
54 Mbps: -77 dBm
54 Mbps: -72 dBm
802.11n HT20 MCS 0: -94 dBm
MCS 7: -74 dBm
802.11n HT40 MCS 0: -92 dBm
MCS 7: -71 dBm
Receive Sensitivity For 5GHz
802.11a 6 Mbps: -93 dBm
54 Mbps: -76 dBm
802.11n HT20 MCS 0: -93 dBm
MCS 7: -73 dBm
802.11n HT40 MCS 0: -89 dBm
MCS 7: -71 dBm
802.11ac HT20 MCS 8: -68 dBm
802.11ac HT20 MCS 9: -64 dBm
802.11ac HT80 MCS 9: -61 dBm

Internal Antenna Radiation Patterns

2.4GHz Antenna

Radiation Pattern for 2.4GHz Antenna

5GHz Antenna

Radiation Pattern for 5GHz Antenna

Product Views:


AP120 Bottom


AP120 Bottom


AP120 Bottom


AP120 Bottom


AP120 Bottom


Product Comparison:

WatchGuard Access Point Models

AP125 AP225W AP325 AP327X AP420
Recommended Use Case


Lower-density high performance ideal for small schools, distributed remote offices, and small meeting rooms


Medium-density high performance ideal for multi-dwelling units (MDU) structures such as dorm rooms, hotels, assisted living, and military housing units.


Medlum-density high performance including K-12 schools, SMBs, restaurants


Medium-density high performance IP-67 rated rugged outdoor including school campuses, RV parks, manufacturing yards, warehouses


High-density, high performance including large schools, meeting rooms, shopping malls
Radios & Streams 2x2:2 MU-MIMO Wave 2 2x2:2 MU-MIMO Wave 2 3rd WIPS Radio 2x2:2 MU-MIMO Wave 2 3rd WIPS Radio 2x2:2 MU-MIMO Wave 2 4x4:4 MU-MIMO Wave 2 3rd WIPS radio
Deployment Indoor Indoor Indoor Outdoor Indoor
Number of Antennas 4 internal 4 internal 6 internal 4 N-Type External Connectors 10 internal
Maximum Data Rate 867 Mbps/300 Mbps 867 Mbps / 400 Mbps 867 Mbps/300 Mbps 867 Mbps/400 Mbps 1.7 Gbps/800 Mbps
Ports 2x Gbe 3x Gbe 2x Gbe 2x Gbe 2x Gbe
Power over Ethernet (PoE) 802.3af (PoE) 802.3at (POE+) 802.3at (PoE+) 802.3at (PoE+) 802.3at (PoE+)
Product Dimensions 5.83"x 5.83"x 1.29" (148 x 148 x 33 mm) 7.3"x 4.9" x 1" (186.4) 123.9x 25.5mm) 7.72"x 7.72"x 1.69" (196x 196 x 43 mm) 8.42"x 8.42"x 2.66" (213.9 x 213.9 X 67.5 mm) 8.66"x 8.66"x 2.24" (220 x 220 x 57 mm)

Pricing Notes:

WatchGuard Products
WatchGuard 802.3at PoE+ Injector with AC cord (US)
Our Price: $60.00
email subscribe

Enjoy Exclusive Weekly Deals from Virtual Graffiti