Fortinet FortiGate Reviews

We use this solution for different reasons.

We use it for the firewall with SDWAN functionality

We use it in some use cases as a VPN Server.

 We use it as a Wi-Fi controller on some sites.

We use if for internal network segregation and routing

Fortinet FortiGate has improved the way our organization functions.

Versatile with a lot of controls and expert level customizations for advanced users

NGFW features seems to be effective are relatively easy to implement. 

Fortigate DC Agent is a useful free feature to automatically detect logged on users and implement user based access policy

Basic VPN is included without extra charges

The Wi-Fi controller feature needs a lot of improvement. The function itself is not as stable as it should be in our use case which might be a problem in either the APs or the controller.

Would like to see more wizards and automation for more features such as virtual servers, SSL VPN, and others where policies, rules entries are created automatically form wizard input.

Some of the features related to load-balancing and traffic shaping are not as straightforward as they need to be. 

The VPN functionality needs low-level debugging get what really going on. Log level is too detailed and requires someone who is quite experienced to analyze and solve those issues. 

Zero-trust base features are lagging behind the other competition, based on what I have read. Would like to see those features in a clearly in the UI.

I have been using Fortinet FortiGate for four years.

We are not using the latest version, but close to it.

There are some stability issues when move to a newer version. It's always good to be a couple of steps behind when you upgrade as usually the latest major releases are a not stable. We are quite cautious to update.

The stability of VPN connection phase is can be enhanced

Wifi AP/Controller stability is an issue for us

It's quite scalable. The scalability and the migration are okay as well. Licensing model is also stright forword and certain features such as basic SSL VPN requires no to min additional cost per user.

Their technical service is quite good. The application notes and the help on the web are quite good.

I would rate technical support an eight out of ten.

By the time I joined a Fortigate was selected against pfsense.

The initial setup is intermediate in complexity but support and online documentation covers for it.

If you're a small-medium size business:

- Size your use case carefully as licensing price jumps significantly with HW changes. 

- Customizable Forticilent SW can be downloaded for free with FNDN membership

- If you have multi sites and require Fortigate based 2FA then consider getting a dedicated fortiauthenticator (VM) with fortiokens acting a central RADIUS server which can be cheaper than cloud tokens an with additional authentication flexibilities.

pfsense; was decided against based required features (mainly VPN which is based in OpenVPN)

Paloalto; is a more expensive with comparable security features based on a recent NSS LABs report

Follow the instructions on the application manual carefully. Otherwise, certain features would not be running quite as they need them to without clear errors reported. 

Contact technical support, they're responsive and have solutions for most of the problems.

Chose/size the HW carefully based on your use case as certain features are HW accelerated  in higher variants but takes a huge toll on CPU/ memory when running on lower variants.

Consider using Fortigate DC Agent which is  useful free feature to automatically detect logged on users and implement user based access policy

Consider segregating functions on different units instead of having all features on a Fortigate (i.e avoid having wifi controller + firewall + VPN on a single unit specially for lower variants)

Because of the flexibility, the advanced user features, the high level of security controls, and the tweaks that are available for the user, I would rate this solution an eight out of ten.

We primarily use the solution for security, including threat prevention.

The threat prevention is the solution's most valuable aspect.

The solution's initial setup is very simple and straightforward. It's not hard to implement it.

The stability if the product is very good so far. We haven't had any issues.

The pricing of the product is reasonable.

The logs need to be better. They need to be more visible and easier to access.

The VPN features could use some improvement.

I've been using the solution for about two years at this point. It hasn't been too long.

The stability is excellent. We haven't had any issues in that sense. It's not buggy and there aren't glitches. It doesn't crash or freeze. We find it reliable.

I do not foresee the product being easy to scale. We find it so hard. It does not seem to be possible.

Currently, we have around 15 users and there are five to ten people handling the management aspect of the product.

Over the past two years, we really haven't had any issues that would require us to reach out to technical support. The user experience has been good. If we run into little issues, we may reach out directly to the vendors, however, I can't say that I've spoken with technical support. I wouldn't be able to evaluate their services or speak to their level of knowledge or responsiveness for that reason.

I've used other solutions in the past, including, for example, Sophos. However, I have found Fortigate to be more reasonably priced and generally much better as a product.

The initial setup is very easy. It's straightforward. We didn't run into any complexities. We were able to set it up without any issues at all.

The initial implementation was handled by the vendors. They were great at assisting us with the process.

We've found that the cost of the product isn't too high. They are a bit higher than other options, such as Meraki, however, it's still not so bad.

You need to pay for the hardware and then you need to pay for the licensing as well.

We are just a customer. We don't have a business relationship with Fortinet.

We are using the latest version of the solution at this point.

Overall, we've been pretty happy with the solution. I would rate it at an eight out of ten.

We are basically system integrators. We design and implement firewall solutions for our customers. We also provide after-sales services. 

We have deployed this firewall for different types of clients. We are providing solutions starting with FG-30E, which is the lowest model in the FortiGate series, and up to 1000 series.

We understand a customer's requirement of current internet users. After that, we design a perfect solution through which they can not only protect their network but also have load balancing between multiple internet service providers. They can also have secure connectivity from a remote office by using a single box device.

The web filtering facility and application control are the most valuable features from the point of view of our clients. The VPN feature is also quite popular amongst our clients. Two-factor authentication is one of the good features in Fortinet. These features are important for the current scenario of security. Security has become a necessity nowadays. With cyber-attacks becoming more common, protecting an organization's data is one of the major tasks. 

It is also very stable and scalable, and it is very straightforward to configure. Their technical support is also good.

Security is a continuous process. In every product, there is a requirement for improvement. Its pricing should also be improved according to Indian market requirements.

They must also improve on the reporting part. Its reporting can be more precise. If we can get a real-time report in a specific format, it will be helpful for customers to know about the current status of their security.

I have been working with this solution for the last 12 to 13 years.

It is very stable. We have been working with this solution for a long time, and we found it to be stable.

It is a scalable solution, and you can also upgrade. They come up with a new feature every time. Whenever you're updating your firewall firmware, it is ready to mitigate threats available in the fiber scenario.

Our clients are small, medium, and large businesses. We have deployed it for small offices or retail stores as well as for big manufacturing units. We also have clients from Education and Healthcare. Some of the large companies have between 800 to 1,000-plus devices protected through this firewall.

Their technical support is good.

I have a little bit of experience with other firewalls such as Sophos and Check Point. There are some basic differences in the features and their functionality, but I cannot say that this one is the best, or this one is not good. I have more confidence in Fortinet FortiGate, so we are focusing only on this.

In terms of support, we had purchased a Check Point product for a customer, and we were trying to get support from the team, but it was very difficult. Sophos is okay in terms of support.

Its initial setup is very straightforward. It is very easy if one knows the basic concepts. It has a graphical user interface, which makes it straightforward to configure. You can configure it step by step. The basic implementation of this firewall can be done in a very simple way. There could be some complexity at the Enterprise level, but at a basic level, it is very straightforward.

The deployment duration depends on the complexity level. A simple deployment can be completed in a few hours. A complex deployment can take one to two days depending upon the requirements. This is because, in addition to implementation, we also have to test the solution as per a customer's requirements to see whether it is fulfilling the given task or not.

We are a very small company with seven to eight people. We have a total of three people working with firewalls. They're network and support engineers.

Our clients definitely get a return on investment. It is a really good product, and the stability of the product is a very important factor for our clients.

Pricing and licensing is a little bit complicated in FortiGate. They are always on the higher side. This is one issue that we always raise with the company that they should reduce the price according to Indian market requirements. There are no costs in addition to the standard licensing fees.

It is a good product, but I would always recommend selecting an implementer partner carefully. The implementor should be able to implement all the features so that you get the best benefits of the firewall. An implementation partner is very important. If you don't have a proper partner, you will probably end up with a mashup, and you won't be able to use all the features. Your performance might also not get optimized.

I would rate Fortinet FortiGate an eight out of ten.

We primarily use the solution as a hardware firewall. In China, there's a lot of content that would be available in the West that isn't allowed here. We're able to block certain content from getting through filters.

The solution offers a very good package for all kinds of virtual appliances, subscriptions, and so on. It's a reasonable price. It's not too much.

The services on offer are just superb. 

The way it can block certain content is very useful for us. It gives you a good heads up as to what streams are being blocked from the network, which helps with visibility.

The simplicity of the product is great. It's very easy to use, which is a compliment we get all the time in terms of feedback.

There seems to be good reporting features. 

The scalability is there. If you need to expand the product, you can.

The menu structure is more logical than, for example, Cisco or SonicWall. I find that the Fortinet is easier to understand in terms of the installation process and setup. 

The only problem that we have here in China is that the whole subscription process on Fortinet is a little bit difficult if you are doing it from China. China has kind of a firewall around the country, and we sometimes have complications due to that aspect.

As a whole, I don't think that the product is actually missing any features.

You do need some IT knowledge in order to effectively work with the solution.

I've been working with the solution since about 2016. It's been a few years at this point.

The solution is very stable. There aren't issues with bugs or glitches. It doesn't crash or freeze. It's very reliable.

The scalability is good. You can expand it as needed and add on extra apps to add in extra functionality if you want to.

We mostly deal with mid-range companies. 

I only talk with people here in China that are the Chinese sellers or distributors from Fortinet. They are Chinese and I don't speak or understand one single character Chinese. So for me, it's very difficult to communicate with technical support. Most of the time, I let them talk with one of the people who I know who is fluent in English and Chinese. That's what I do. 

Most of the time, I can do all the research on the internet to see what kind of device I need and then I get a translator and we figure it out.

We only use Fortinet's FortiGate for our hardware firewall protection.

However, if our clients need extra security, we may add other brands and security layers. We also work with SonicWall, Checkpoint, and Barracuda, for example.

I've also worked with pfSense, which is free, however, it has much more of a do-it-yourself approach. It's also quite different from other solutions. If you have Cisco experience, you'll be able to navigate Fortinet, whereas pfSense requires much more in-depth study. It has its own language, basically. That's one of the reasons you won't find too many of its configurations in China.

The initial setup, for me, at least, is very straightforward. It's just a few clicks and you're set up. It may be a bit more complex for someone else who may not be as familiar with the product.

I have partners that assist with the initial setup and I have network engineers who are doing the job for me. They are working for me as they are my employees. As their boss, of course, I have to know a little bit about how to handle it as well. We handle the implementation process for our clients. We implement it according to ISO and Chinese security standards.

The solution is pretty affordable. It's not overly expensive. It's not like Cisco where you pay an awful lot of money mostly for the name.

There are extra apps you can add to the product, however, those come with an extra price tag as well. That said, it allows you to do more things and expands its capabilities.

I like to use Fortinet due to the fact that with the device you can do so much more, it's not only web filtering. If you decide to use it for something else, you just pay some money to Fortinet for another package and you are good to go. It makes it a little bit easier for small or large companies as it's so flexible in its offering. 

In China, due to business constraints, licensing is quite complicated here.

I'm a service provider in China. Basically, I'm connecting companies, foreign companies or Chinese companies, or even foreign public services to business VPNs or business cross border interconnections.

Whether we use the latest version of the solution or not depends on the client, their needs, and the environment. If a client needs more security, we may even layer in other brands to help with that.

We tend to keep deployments on-premises as you can run into issues with using the cloud in China. We prefer to have it on-premises and then bring lines in to hook everything up. It's simpler and there are fewer issues.

In general, I would rate the solution at a ten out of ten. We've just been pleased with the product and the ease of use.

We have created a virtual cloud on-prem, providing services to our different IT domains in terms of software, database and ERP. We've also created a virtual firewall handling the security and protecting servers in the network. No unwanted or unauthorized user can access the servers. That's a good sign of security and the handling of the network. It provides us with oversight. I'm a senior network engineer and we are customers of Fortinet. 

With the Covid pandemic, the VPN has become the most valuable feature. With the majority of traffic connecting from remote locations, the VPN provides stability and reliability. The antivirus and its IPS, intrusion prevention system, also helps with stability.

In our environment, we need multiple virtual firewalls to facilitate end users and customers. Fortinet doesn't provide that but they really should include that feature. 

I've been using this solution for three years. 

Overall stability of the solution is good. I am totally dependent on this device. Basically, it's deployed on the edge of our network. All the software and HR, admin, every department is behind this network. And every user connects their internet services via the VPN. 

Scalability of this solution is good, we can add devices whenever we like. 

Whenever there's an issue and we contact support, the response is positive. The support is impressive. 

We previously used Cisco ASA but that model didn't support the latest technology, and was also very expensive. The main issue that caused us to switch solutions was the throughput of the interface. Cisco was providing us with one gig interface. Because of our gradually increasing bandwidth and network requirements, we had to move to more bandwidth and a 10 gig interface, which Fortinet provides. Although Cisco provides the same on a different model, that model was very expensive. That's why we chose to switch to Fortinet Firewall.

The initial setup is simple. It's only complex if the design hasn't been sorted or tested. If we're deploying, we study the network, traffic patterns, and traffic path, which is, I think, the most important thing about deploying any network device. We can easily create or delete, modify or customize and optimize the feature, the network, the routing, the policy, and the different features of this device. Most of the time we carry out the implementation ourselves, deploying in different phases; firstly connecting the network, and then partially shifting the traffic phase by phase. When we removed ASA and shifted all the traffic to Fortinet, the overall performance and overall working was very impressive. Downtime probably came to a total of 15 to 20 hours. We have multiple groups using this product - I would estimate somewhere between 12,000 to 13,000 users and the solution is used continuously. 

I think the licensing of Fortinet is in the middle range. We also had a demonstration from the vendor that gave us the confidence to work with these devices. We purchased the solution on a bundle basis which the vendor offered us. There are additional costs if we enable a new feature not included in the bundle.

I think Fortinet is a cheaper, stable, scalable, and reliable device. 

From my experience, I would rate this solution a nine out of 10. 

We primarily use the solution for edge protection as well as the VPN and SD-WAN.

The solution has many valuable features. We tend to use all of them.

The initials setup is pretty easy.

The solution offers very good documentation.

The solution can scale well.

We've been happy with the technical support we receive.

The product is reliable and stable.

The support costs and licensing are sometimes so expensive. They should work on their pricing model.

I've been using the solution since 2018. It's been a few years at this point.

The stability is very good. We don't deal with bugs or glitches. It doesn't crash or freeze. It's reliable.

The scalability is very good. If you need to scale it as an organization, you can do so.

We have 100 users. They are largely network engineers, however, we have technicians and active users.

We do plan to increase usage in the near future. We have more projects coming up.

We've used technical support in the past and we've had pretty good experiences. We're satisfied with the level of support we've received.

Their documentation is always good too. We've accessed cloud documentation via the portal and have found it to be helpful. The articles are very complete.

We previously used Juniper. We switched due to the host and the usability of Fortinet.

The initial setup isn't complex at all. We found it to be quite easy. It's straightforward.

The deployment took us about three to four weeks or so.

We use two people for deployment and maintenance.

I handled the implementation myself. I didn't need the help of a reseller, integrator, or consultant.

The solution is pretty expensive. That said, we see the value of the solution as it provides great value to our organization.

We pay to license the product on a yearly basis.

I'm not sure of the exact amount we pay, however, as it is not an aspect of the solution I handle directly.

We are customers and resellers of Fortinet products.

We work with both on-premises and cloud deployment models.

I definitely recommend this solution to other organizations. We've had a positive experience.

In general, I would rate the solution at a nine out of ten. If the pricing were better, I would rate it higher.

IPS is the main use case because we want to protect our devices, users, and data from external dangers. 

We most probably are using the model of the last year. If the services connected to the hardware are possible on the cloud, we always prefer the cloud. The hardware must be placed on-premises. 

Its administrative panel is very intuitive and simple. It is simpler than the other solutions that we had. As an administrator, we are always looking for the easiest solution to manage network policies.

We are able to filter everything on our network and also use the VPN feature, which is important these days when people are working remotely during COVID. 

They can do more tests before they release new versions because I would like to be more assured. We had some experiences where they release something new and great, but some of the old features are disabled or they don't work well, which impacts the product satisfaction. The manufacturer should be able to prove that everything works or not only that it might work. This is applicable to most of the other services, software, and hardware companies. They all should work on this. We cannot trust every new release, such as a beta release, on the first day. We wait for some comments on the forums and from other companies that we know. We always wait a few weeks before we use the updated version. 

They should also extend the VPN client application, especially for Linux versions. Currently, it has an application for Linux devices, but it doesn't work the way we want to connect to the VPN. They use only the old connection, not the new one. They have VPN client applications for Windows and Mac, but they can add more useful features to better manage the devices and monitor the current health of each device. Such features would be helpful for our company. 

I have been using this solution for the last two years. 

It is stable, and I don't see any cons of this. 

Currently, everyone who is connected with the company is using this solution. We have up to 240 people.

I have interacted with them but only through emails. There were separate tickets and stories, and I don't remember right now how it was.

It was just a product for home-usage. It was a Cisco device from the small business series. It was less advanced than the similar devices available in the market currently. It was a huge step forward for us to switch to FortiGate.

It was a huge jump for us on the administrative side to implement this kind of hardware because we previously used just a simple product for home-usage. 

We hired a consultant to do this for us and to explain how the system works. After a few weeks, we did new certifications and training for this, and now, it works well for us.

I would recommend this solution. We plan to keep using this solution.

I would rate Fortinet FortiGate an eight out of ten.

We mostly use the solution for our internet-facing firewall.

The next-generation firewall features are the solution's most valuable aspect.

The implementation and deployment are pretty simple.

The pricing is very good.

We've found the solution to be pretty stable.

The solution isn't really lacking features per se.

The product does need better support in the cloud environment. It's not exactly cloud-native right now.

The solution needs to do more on the deployment in the multi-cloud. For example, clients have GCP and AWS. How do we deploy FortiGate in a cloud environment? Right now, there's no solution for that.

We're worried that the scalability isn't as good as it could be.

We've been using the solution for about two years or so. It hasn't been an extremely long time, however, it's been a while.

Stability, in our experience, is quite good. It doesn't run a lot of unexpected downtimes or anything of that nature. We haven't encountered any serious problems. There have been a few minor items here and there, however, by and large, it's quite good.

The solution isn't exactly scalable, especially when it comes to the public cloud environment. We'll need to scale up, so we will have to figure out how to do it effectively.

We primarily work with medium and large enterprises.

We find the solution to be pretty straightforward to set up and deploy. We didn't have any difficulties with implementation. 

The deployment takes less than a week. It's a pretty quick process.

We provide maintenance services for our clients.

We actually provide deployment services to our customers that need it. We can handle this aspect for customers.

The solution is on the cheaper side. There are other products that are competitors that are much more expensive.

That said, the pricing isn't just based on licensing costs. There are add-on costs as well a company will need to consider.

We are more of a solution integrator. We are not a straight reseller. We are partners, however. We recommend people to use products. That said, we don't actually resell the actual boxes.

We use different versions and deployments of the solution. It really is dependant on the client and their needs.

We mostly work with Fortinet. It's the main solution we recommend and use.

I'd recommend the solution to other organizations. We've had a pretty good experience.

I'd rate the solution eight out of ten.