We performed a comparison between Fortinet FortiGate, Fortinet FortiGate-VM, and Palo Alto Networks VM-Series based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls.
"The feature I like most is the SD-WAN. It allows you to manage more than one ISP at the same time. And there is a high-availability mode, so if one of your ISPs is down, you still have a backup."
"The most valuable features of Fortinet FortiGate are remote access, web filtering, and IPS."
"Its user interface is good, and it is always working fine."
"The main benefit is the grouping of our security monitoring."
"FortiGate's web and URL filtering are unlike any other firewall I've used. The functionality of URL filtering in those solutions is problematic because everything is encrypted, and firewalls can't break that encryption protocol. Fortinet has an SSL proxy, so the encryption is done before the packet ever leaves the FortiGate. The URL filter is definitely one of the most helpful features."
"Anti-Spam web content filterinG."
"Secure, user-friendly, stable, and scalable network security solution. Installation is straightforward."
"I like Fortinet FortiGate's antispam filter, SPN, and clustering features."
"The initial setup was quite straightforward."
"It's a relatively simple product that is easy to use. It's not overly complex."
"It is very useful to make lists for rules and prepare firewall rules."
"Fortinet FortiGate-VM is very easy to create the user of VPN, allowing them to use it quickly. Additionally, the integration and interface are good."
"An enhanced security solution for any kind of alert that we have configured."
"Technical support is very helpful."
"The dashboards are a good feature."
"The policies are very valuable. They allow me to secure and manage future traffic effectively."
"The most valuable feature is the CLI."
"The most valuable features are security and support."
"It provides complete security posture from end-to-end. This has given us better visibility into what our security aspects are."
"It scales linearly with load and no issues."
"The most valuable features are web control and IPS/IDS."
"In terms of security breaches, the product aids in categorizing and monitoring traffic, allowing for the identification of potentially malicisous or incorrectly formatted applications."
"The product provides more visibility into our traffic."
"It is an easy-to-scale product."
"I would like to see improvements in the product's application rules."
"I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity."
"Technical support could be better. You don't always get the level of help you need right away."
"They've become quite expensive."
"Lacks training for new features."
"The solution lacks sufficient filtering."
"They have to just improve its performance when we enable all UTM features. When you enable all the features, the performance of FortiGate, as well as of Sophos and SonicWall, goes down."
"The pricing could be reduced or include the first year warranty."
"Now they do have the ability to pop up a command line, which is nice, however, the fact that you can't do everything within the GUI is probably a problem."
"The stability could be improved. I find Cisco to be more stable than Fortigate, which is I major differentiator between the two."
"When new versions are deployed they tend to be a little buggy, so they should be more fully tested before release."
"Sizing can be challenging for customers interested in using Fortinet FortiGate-VM."
"There should be integration with an active directory — with Microsoft."
"The users must buy FortiSIEM to get advanced analytics."
"It needs an Application Inspection."
"The solution should provide more useful GUI features."
"The implementation should be simplified."
"The only minor issue we've faced is with the app's ID configuration, which requires specific matching for application filtering."
"It would be helpful if we had a direct number for the support manager or the supporting engineer. That would be better than having to email every time because there would be less wait."
"It can definitely improve on the performance."
"It has to be more scalable for the deployment of VMs on the cloud."
"The user-friendliness of the UI could be improved."
"There is no proper support channel to follow up on cases."
"The product could be better in terms of performance than one of its competitors."
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it kind of depends what you value most.
PA is good at app control, web filtering and such like, they have always been top of the pile there. The GUI is very good, and their product is very user-focused.
Fortinet is good for scalability and predictable high throughput (ASICs in the hardware), and useful things like authentication flexibility, CLI config (if you have any networking/Cisco people, they always seem to prefer CLI over GUI) and have better OT features, maybe relevant to your manufacturing use?
Fortinet seem to have a broader integration offering with their security fabric than PA do, plus they can do Fortinet-based wifi, switching, etc. Depends if you are prepared to go all-in with a single vendor.
Hi,
Both FT and PA have compelling features for large Enterprises. I would like to add a few good points about Fortinetwhich might be helpful ( from my 13 years of engagement with them as Distributor and Partner)
Fortinet:
Have higher throughput; which comes with competitive rates
Wide range of models to select to meet your requirement, without spending heavliy
Outstanding customer support and very active customer care team
Easly available skilled resources from the channel for deployment and post-implementation support
Regards
Abhilash
Hello. The question is what you are going to have as a result of application