Fortinet FortiGate Reviews

In my company, we use the product for the help it provides us in terms of SD-WAN, site-to-site VPN, RADIUS authentication, web filtering, application control, SSL inspection, and remote access.

The most valuable features of the solution are SD-WAN and site-to-site VPN.

In version 7.2.0, the product offers built-in automation to its users. Earlier, there was no automation offered for the product. Nowadays, the product sends automatic emails to users as a part of its offering to let the users know whenever there is a need for automatic backup when the ISP goes down and the interface status. The automation can be further improved.

Fortinet's support team consists of a huge networking team, because of which there is a delay in response at times. Fortinet's support team needs to improve their time management skills.

I have been using Fortinet FortiGate SWG for five years and six months. My company has a partnership with Fortinet.

It is a scalable solution since the product offers a FortiGuard server that detects vulnerabilities and ensures such detection of vulnerabilities also involves FortiGate.

My company currently works with basic and mid-level sized businesses.

Whenever our company's customers face any issue with the product, we offer our own support team. Fortinet also has its own support team. If required, our company lodges complaints and the issues faced by our customers with Fortinet. Fortinet's support team initiates the replacement if there is a hardware issue with the product. The solution's technical support is good. I rate the technical support an eight out of ten.

Positive

The product is easy to install since we only need to follow the user manual, documents, and articles provided by Fortinet to install the product.

The solution is deployed on-premises.

Just getting the product up and running can take up to forty-five minutes to an hour. The full setup process is carried out based on the requirements of our company's customers, and it can be done in half an hour to forty-five minutes if it is only for basic internet.

In our company, we need around ten engineers for the maintenance and deployment of the solution. The maintenance of the solution is easy since we keep getting constant updates which we can easily use to update the product.

I am unaware of pricing since I am a part of the networking team. My company's sales team manages pricing.

My company basically provides Fortinet FortiGate SWG to our customers. If our company's customers are looking at Palo Alto products, we have another team in our company to provide them with the same. I am an engineer for Fortinet products and can provide support only for Fortinet. There are different sets of engineers managing Palo Alto products.

In Fortinet, you only need one license for all the products. In Palo Alto, for Palo Alto Secure Remote Access, you need to buy a separate license, while there is a need to buy a separate license for Palo Alto SD-WAN. I feel Fortinet products are better since they come in a bundle. With Fortinet, customers don't need to buy different licenses. One can get all the features by installing a single bundled license offered by Fortinet, allowing one to use SD-WAN, site-to-site VPN, remote access web filtering, SSL inspection, and application control.

I rate the overall solution a nine out of ten.

FortiGate Next Generation Firewall's design is good. Technically, I haven't used many of its features. The primary purpose we use the solution in our organization is for its SNAT and DNAT functionalities. The solution is also used for its vulnerability patching mechanism.

The solution's GUI is not very appealing. When using a tool from another vendor, we found the GUI of that tool to be quite appealing. FortiGate Next Generation Firewall uses a very old type of GUI, which is not very appealing. The GUI can be improved.

I have been using FortiGate Next Generation Firewall (NGFW) for six months. My company is just a customer of the product.

I am very impressed with the product's stability. Stability-wise, I rate the solution an eight and a half out of ten.

Scalability-wise, I rate the solution a six out of ten.

My company has 2,000 users of the product.

I didn't need any support. The support is good. I wouldn't say the support is bad. I rate the support a seven and a half out of ten.

Neutral

My company seeks the help of vendors to do the initial setup of the product. After that, we just work on policies, SNAT, DNAT, and virtual IPs.

The setup phase was neither difficult nor easy. I rate the setup phase as three or four out of ten on a scale where one is difficult, and ten is easy.

The solution is deployed on-premises.

The solution's deployment took two to three weeks.

Two people were required for the deployment of the product.

The solution's vendor executed the setup phase.

The solution's pricing is quite high when compared to other vendors. I rate the pricing an eight and a half on a scale of one to ten, where one is low, and ten is high.

I highly recommend the solution to those planning to use it.

Overall, I rate the solution a nine out of ten.

The most valuable feature of FortiGate Next Generation Firewall is its SD-WAN. The way it has been structured makes life easier. We have used it for remote access, especially at the height of COVID. It works very well.

There are times when we would want to set an IP address on a physical interface and then attach secondary IPs or sub-interfaces on that. I'd like to have as many as possible. There's a limitation wherein you can only have about 30 virtual or secondary IPs on a particular interface. I would like that to be expanded to 254 or 256 secondary IPs.

I have been using FortiGate Next Generation Firewall (NGFW) for five years.

I rate FortiGate Next Generation Firewall ten out of ten for stability.

The good part of the solution is that you can have Virtual Domains (VDOMs) that allow you to use it for multiple use cases. Around 20,000 users are using FortiGate Next Generation Firewall in our organization.

I rate FortiGate Next Generation Firewall an eight out of ten for scalability.

Whenever I have a problem and have to call their technical support team, I can email them. In the next few minutes, we'll get on a Zoom or Teams call and exchange notes.

Positive

The solution’s initial setup was easy. I rate FortiGate Next Generation Firewall an eight out of ten for the ease of its initial setup.

The solution's deployment does not take long. If everything goes fine, you will complete the initial configuration in an hour and test afterward. The testing phase is where you face issues. If you are migrating from another device to FortiGate, you would want everything that was running previously to run even on the newer one.

Three people were required for the solution's deployment, including an external person, myself, and a colleague.

I rate FortiGate Next Generation Firewall a five out of ten for pricing.

I learned from some reviews that FortiGate ranks quite highly compared to Palo Alto and Check Point. Considering our budget, we thought we could manage with FortiGate Next Generation Firewall.

I would strongly recommend FortiGate Next Generation Firewall to others because it's a brilliant next-generation device.

Overall, I rate FortiGate Next Generation Firewall a nine out of ten.

The use cases of the solution depend on what the customer wants from the tool. If a customer is looking for a core firewall, I provide them with FortiGate Next Generation Firewall (NGFW). Suppose a customer is looking for a tool from a patch connectivity perspective with multiple branches and wants those branches to be connected to the data center. In that case, we can suggest FortiGate Next Generation Firewall's features to them.

Routing and reporting are two areas where the product has an added advantage compared to any other product.

Vulnerabilities owing to viruses in the OS need to be reduced in FortiGate Next Generation Firewall from an improvement perspective.

Some vulnerabilities get added to the system every two months, which may be code execution or backend and backdoor issues.

In the future, the product should be able to tackle vulnerabilities. Research and development to increase the product's security capabilities is needed.

I have been using FortiGate Next Generation Firewall for a year now. My company has a partnership with Fortinet.

From a stability perspective considering OS and if the vulnerabilities are present, I rate the stability a seven out of ten since it creates a lot of issues in general.

We suggest FortiGate Next Generation Firewall to small and medium businesses.

When it comes to enterprise-level businesses, and considering the need for two-layer security, consider a perimeter firewall, while I can suggest FortiGate only at a level of a core firewall. Suppose an enterprise customer has multiple branches and more branch networks. In that case, they need SD-WAN connectivity with security, for which I suggest they go for FortiGate's SD-WAN feature.

In general, it will not be enough for enterprise companies to have only Next Generation Firewall alone.

I am not familiar with the technical support team because my support team works with them. The solution's technical support is good. We do not face many issues when dealing with the solution's technical support team.

Previously, we were using Check Point in our company.

Compared to Check Point, FortiGate Next Generation Firewall needs to look at how to improve the way it deals with the vulnerabilities which are not there at Check Point and the security effectiveness provided by Check Point.

It is easy to use and implement since anyone can do its configuration part, but there is some requirement for someone with proper technical skills to implement it properly. I can implement anything in any way, but that doesn't mean I can implement any product properly. The implementation requires certain technical expertise.

The implementation of the solution can take two days.

One person is required for the implementation phase.

The solution's pricing is competitive.

The usefulness of the product is an aspect that depends on the customers using the tool. We cannot even compare two products and say one is good for the customer and the other is bad. If a customer asks me to be an architect for their data center, I would say that for a perimeter firewall, they need to go for Check Point. Coming to a core firewall, if a customer says that they need two layers of security and two different vendors, it should be Check Point on the perimeter level. At the core level, a customer can go for Fortinet. Certain customers prefer the SD-WAN feature from Fortinet if they have branch firewalls and want an SD-WAN feature too. FortiGate has an added advantage because they have an SD-WAN feature with security that we can provide to their branch devices.

I don't have any suggestions for those planning to use the solution since we are pretty new to the solution, and we need to devote time to be able to comment on the solution.

I rate the overall product an eight out of ten.

We are a distributor of Fortinet products. My role primarily involves importing these products and delivering them to our partners and resellers, who in turn sell them to the end customers.

FortiGate is a rapidly growing vendor with a wide range of ready-to-use products. Their delivery time is remarkably quick, usually between two to four weeks. They provide excellent support, especially when it comes to helping resellers who may encounter implementation issues with Fortinet. The technical presales and support teams are readily available to assist them. So, there are definitely several benefits to working with Fortinet.

The interface, pricing, and support are good. FortiGate release new patches and offers regularly. In the integration file, they don't have anything to add because they have a very wide portfolio and models in the next-generation firewalls. FortiGate has a variety of add-on license tools that can be applied to the firewall.

FortiGate should continue to push them to continue to grow up as they've been growing for the last eight years.

FortiGate NGFW can improve technical support. The engineer who answers the technical support call, email, or phone call, whatever the medium may be. The response time is very bad.

I have been working with FortiGate Next Generation Firewall for eight years. 

We don't have broken devices to be repaired or replaced with new ones, so they are very stable while working.

I rate the solution’s stability a ten out of ten.

I rate the solution’s scalability a ten out of ten.

We have all types of business models and customers in our portfolio, such as the midsized business, enterprise, entry-level, and small businesses. We are working with all of that with all of the Fortinet solutions.

The customer support is very slow. The engineer who answers the technical support call, email, or phone call, whatever the medium may be. The response time is very bad. 

On the other hand, Cisco takes one or two hours to respond, while Fortinet takes a few days. This is an area that they could improve on a global scale.

Neutral

The initial setup of the solution is easy, which is the most important feature for in-domain-wide resellers, partners, and customers. In the end, if you want to use Fortinet as a firewall administrator in your network, it is highly recommended because it is extremely easy to set up, especially for first-time users.  

Even if you have previous experience with Cisco or Check Point, setting up Fortinet is easy. It is a very user-friendly configuration.

I rate the solution setup a ten out of ten. It is very user-friendly.

FortiGate Next-Generation Firewall is cheaper than Cisco or CheckPoint or Palo Alto and more expensive than Barracuda or Sophos or any smaller brands. The prices fit right where they are on the global market.

I advise you to buy it ASAP because it's a very good product.

From my experience as a distributor, some customers don't buy technical support on the devices. They buy only devices. I will advise them to buy the technical support of FortiCare service. In that case, they will have technical support by phone call, or by mail. They will have a replacement if anything is broken 24/7.

Overall, I rate the solution an eight out of ten.

We have deployed this firewall for many companies. Our clients are financial and medical companies.

It enabled our clients to reach locations and access their applications easily with no latency. It provided ease of access.

Its threat prevention capabilities are most valuable. 

It's a user-friendly firewall. Most of the tasks are very simple. It's simple to configure and troubleshoot this firewall. 

The improvement is related to logs. Instead of the CLI, we should be able to have more insights into the logs of the firewall in the GUI.

I faced a lot of issues when I was trying to deploy the firewall through FortiManager. The firewall is stable, but FortiManager is too buggy, and it doesn't work properly. It gives too many errors.

There are some issues with Fortinet SD-WAN. It's quite complex.

I've been using this solution for more than four years.

It's a very stable product.

It's scalable. We have plans to increase its usage.

Most of the time, they are helpful, but there are times when they don't resolve an issue right away. They take the log, and then they take their time to give input on the issue. Most of the time, they take one or two days to get back after analyzing the logs. Instead of that, they can just schedule a session to resolve the issue right away because sometimes the issue impacts the production environment, so we need to resolve that issue as soon as possible. Overall, I'd rate them a six out of ten.

Neutral

I have worked with other firewalls. Fortinet FortiGate is better than Palo Alto and Check Point firewalls. It's more user-friendly.

I have deployed it for a bank at a core level. On the perimeter, there was a Palo Alto firewall, and at the core level, we deployed the FortiGate firewall at DC and DR locations. After that, we deployed SD-WAN. We replaced the MPLS switch with the Fortinet SD-WAN device, so the whole branch traffic comes to the SD-WAN box, and from there, it comes to the FortiGate firewall, and then it goes to the Palo Alto firewall for the internet access and resource access. While migrating branches from MPLS to SD-WAN, we did require a maintenance window.

There was no difficulty. It was very user-friendly. I have had many difficulties with the Check Point firewall. I have deployed major projects on the FortiGate firewall. I migrated more than a thousand branches on Fortinet SD-WAN and implemented FortiGate super massive firewalls at DC and DR locations. There were no complexities. Only at one location, I had an issue related to SD-WAN, but my query was resolved by Fortinet's local team.

It's an on-premises firewall for the DC and DR locations. I have never worked on cloud projects, but if there is any opportunity to deploy it on the cloud, I will do it. I have only done on-premises deployment.

I am an implementation engineer. I deployed and configured the whole firewall. I also troubleshot any issues. When I had any queries, they were clarified by Fortinet's engineers.

Its pricing is good. It's average or normal as compared to Palo Alto and Check Point firewalls. 

I didn't evaluate other options.

I'd recommend this firewall to others. Most of the time, when I do PoCs, I recommend Fortinet FortiGate. It's quite easy to manage and deploy.

I'd rate Fortinet FortiGate an eight out of ten.

We use SD-WAN to connect the checking role between our branch offices, like Yap installation or fire shooting. We use Fortinet FortiGate to control the different segmentation.

The IT manager could monitor every security device and increase SD-WAN. Still, the SD-WAN function had to be integrated into our older device. So now our IT manager can see all the end user information about the network information and security event in the single panel base. SD-WAN has helped the organization to remediate threats.

We provided great information to our end users, and our guys could quickly interact with the tool for information.

Security, SD-WAN, and Streetscape are valuable features. It is a straightforward solution for our partners. The solution is more efficient for user applications.

In the next release, the tool can have more features in a single box that can be multi-applied to integrate everything.

I have been using the solution for twenty-thirty years.

It is a stable solution.

It is a scalable solution.

The customer service and support team is good. 

Positive

We used CheckPoint previously. We switched because it was high-priced.

The initial setup was easy.

It was deployed through a vendor team of one-two person.

We think the price is lower, and suitable for most end users.

I would rate the solution an eight out of ten.

The tool is a nice product and easy to handle. The software's user interface is also good. You can easily implement remote access in the solution. 

I would like to see improvements in the product's application rules. 

I have been working with the tool since 2015. 

The tool is stable. 

The tool is scalable. 

I did not contact the tool's technical support team because it is very strong and stable. 

The tool is easy to deploy. 

I would rate the product an eight out of ten.