Fortinet FortiGate Reviews

My main use case for Fortinet FortiGate is content filtering, and content filtering is the primary function. I am also doing East and West traffic filtering.

I use content filtering and East-West traffic filtering by creating groups based on separate projects in Active Directory, and on the firewall side, I create policies, web application profiles, and category-based profiles tailored to each project's requirements.

We have separate projects, and I isolate those subnets from one subnet to another so that both subnets do not communicate directly and only communicate via Fortinet FortiGate itself, with policies created to manage the East and West traffic.

Some of the best features of Fortinet FortiGate are its ease of use compared to other vendors, and from a troubleshooting point of view, it is also very useful and easy to troubleshoot. It stands out as easy to use and troubleshoot because I do not need to create separate NAT policies; with Fortinet FortiGate, I align my NAT policies and content filtering within a single policy, making management straightforward, and the logs are clearly visible, making troubleshooting much easier.

Compared to other firewalls, Fortinet FortiGate offers easily manageable features such as vulnerability profiles and threat profiles, which I believe is one of its main advantages.

Fortinet FortiGate has positively impacted my organization with its cost-effectiveness because it provides features that are very similar to others, but at a much lower cost, and everything my organization needs is available with Fortinet FortiGate.

Being cost-effective has allowed us to save a lot of money, which is particularly useful since I was exploring firewalls to secure my internal labs, and finding Fortinet FortiGate was a revelation as I could achieve my requirements without the additional costs of other firewalls.

I wish Fortinet would explore SASE solutions more, as it has become very popular and people are increasingly using it.

I have been using Fortinet FortiGate for around the last seven years.

Fortinet FortiGate is stable, and I have never experienced issues similar to those from the ASA.

Fortinet FortiGate's scalability is very good, and I believe there are no issues.

I have faced challenges related to support, as I have encountered issues where support engineers are not aligned within the time frame, and sometimes they request multiple logs unnecessarily, causing delays and leaving a bad impression on my end users.

I have had a bad experience with customer support many times.

I previously used a Cisco ASA but switched due to certain performance-related issues.

My experience with pricing, setup cost, and licensing went smoothly, with no issues related to licensing or installation, and the overall cost is definitely cheaper than other prominent firewalls along with phenomenal features.

I do not have a business relationship with the vendor other than being a customer, but I do have partners to buy network equipment such as firewalls and switches.

I cannot share exact numbers for ROI, but I saved a lot of money, which made management very happy, especially knowing that I achieved my functional goals with Fortinet FortiGate that might have incurred more costs with other firewalls.

Fortinet FortiGate has positively impacted my organization with its cost-effectiveness because it provides features that are very similar to others, but at a much lower cost, and everything my organization needs is available with Fortinet FortiGate.

My experience with pricing, setup cost, and licensing went smoothly, with no issues related to licensing or installation, and the overall cost is definitely cheaper than other prominent firewalls along with phenomenal features.

I evaluated options including Palo Alto, Cisco, and other products before choosing Fortinet FortiGate.

I would rate Fortinet FortiGate a nine overall, as I only deduct one point for the support issues I have experienced.

I selected nine because, feature-wise, the product is excellent and cost-effective compared to others, but I deducted a point due to the disappointing support from Fortinet.

I advise others looking into using Fortinet FortiGate to check their requirements first, as it provides all kinds of services other firewalls do and is very cost-effective.

People looking for a firewall should definitely evaluate Fortinet FortiGate, as it is very cost-effective and offers all the features they are likely looking for. I gave this review a rating of nine out of ten.

On-premises

Our use case for Fortinet FortiGate is network administration and network security; this is the use for Fortinet FortiGate.

The best features of Fortinet FortiGate are security, configuration facility, and easy configuration. Additionally, we get very good support from the manufacturer. The major impact of Fortinet FortiGate for clients is providing a redundant path from the service locations or servers location to the users that are in another location; this is the best impact.

One area for improvement for Fortinet FortiGate could be the price, as my clients here are small companies, and they might not have the resources or money to always buy a Fortinet FortiGate solution or FortiGate products.

I have been with that platform for about two to three years.

In general, Fortinet FortiGate's stability is very good, but in some cases, there are unusual situations. For example, we have one client with high availability with two Fortinet FortiGates, where one of them has high processor and memory usage while the other one is low, and they work in a passive-active scheme for availability. The strange part is that one Fortinet FortiGate works perfectly, and the other one has high processor and memory consumption.

Most clients are in one location, but two or three clients have SD-WAN characteristics in their implementations.

I would rate their support a nine out of ten. The support is very good, but it's not always easy to find a Spanish speaker, as some clients don't know how to speak English and need support in Spanish.

I integrate SD-WAN features for some clients; specifically, I have three or four clients with SD-WAN integrations, while most of my clients are with one location. I find it easy integrating these capabilities.

Security is very good with Fortinet for my clients; this is one of the best reasons to make a decision to buy a Fortinet solution.

Fortinet FortiGate saves a lot of time in expert hours from an expert engineer because the administration of the Fortinet FortiGate solution is easy, which may lead to fewer hours of an engineer spent on Fortinet FortiGate. It could save approximately 40 hours a month.

I would recommend this solution to others; it's the best solution in the market. The main advice I give to people who consider using Fortinet FortiGate is for security and administration, as we can get complete visibility of the network.

On a scale of 1-10, I rate this solution a 10.

On-premises

Other

I have been using Fortinet FortiGate for the past six years.

I have been using Fortinet FortiGate to provide security for network and perimeter networks and gateways, and I rely on Fortinet FortiGate to protect my applications from various Layer 4 and Layer 7 attacks and traffic from malicious IPs while blocking traffic from unwanted IPs.

Fortinet FortiGate is also mainly used to establish IPsec tunnel connectivity with other networks, and users from outside the office network can connect to resources via IPsec VPN as well as site-to-site and client-to-site VPN, which leverages access and resource availability across various networks and simplifies resource accessibility worldwide.

One of the main features that I use in real time with Fortinet FortiGate is web filtering and App IDs based on application control. Previously, I allowed application access policies based on ports, but it could not prevent traffic based on the same application port with different use cases. For example, port 443 can be used for various purposes, but it could not restrict access for some specific applications. The App ID based control is useful for me to restrict traffic based on application usage and user access, which is the primary purpose of Fortinet FortiGate in real time.

Fortinet FortiGate offers next-generation firewall features and security features that restrict access for malicious traffic, URLs, and IPs, which is a major feature that Fortinet FortiGate offers.

The next-generation firewall capabilities including deep packet inspection and application controls via App IDs, Intrusion Prevention Systems, web filtering, URL filtering, and anti-malware protections are essential features that are present in Fortinet FortiGate to prevent various cyber attacks and threats in the network.

Fortinet FortiGate is also mainly used to establish IPsec tunnel connectivity with other networks, and users from outside the office network can connect to resources via IPsec VPN as well as site-to-site and client-to-site VPN, which leverages access and resource availability across various networks and simplifies resource accessibility worldwide.

The security features could have been more similar to those in the Palo Alto firewall with major data protections and WildFire, and deeper inspection capabilities, which Fortinet FortiGate lacks. Additionally, I notice that Fortinet FortiGate often experiences resource utilization problems where memory is heavily occupied regularly, necessitating cleanup tasks.

During firmware upgrades, the process is not smooth; one of the VMs often goes out of sync and exits the HA cluster. Therefore, I separate the HA between the firewalls and perform upgrade activities one by one manually. The graphical dashboard representation of the data is frequently inaccurate, leading me to rely on syslogs for more dependable information. The log retention period on the device seems too short despite having ample memory and disk capacity, which is a major issue.

I have been working in my current field for the past seven years.

The scalability experience indicates that if I need additional features or security capabilities, such as sandbox features, I can add them by opting for separate licenses, making it convenient for me.

Fortinet FortiGate customer support appears somewhat good, but for complex cases or major incidents, I often do not receive prompt support from the OEM, resulting in multiple follow-ups to get the necessary assistance.

Previously, I used to have a Cisco ASA firewall, which had fewer security features for protecting the network from day-to-day attacks and threats. Fortinet FortiGate firewall has next-generation capabilities with various security features including deep inspections, filters, URL filters, URL categories, and IPS protections while controlling application access based on application IDs, along with anti-malware protections to safeguard applications from malicious threats and attacks. By using Fortinet FortiGate, I significantly reduced major attacks that could exploit my network.

I would advise others considering Fortinet FortiGate, particularly those concerned about budget and pricing with decent performance and support, to proceed with Fortinet FortiGate, as compared to other next-generation firewall products, Fortinet FortiGate has lower license support costs, which is a significant advantage. Moreover, from my experience, it performs its job effectively with no major issues related to performance or functionalities including policy control, VPN, and security features. I would rate this product a 7 out of 10.

Hybrid Cloud

Other

I use Fortinet FortiGate for security as a firewall.

Fortinet FortiGate helps improve my organization since it's quick and easy to install, and we don't have to call support frequently.

It's very similar to a Cisco firewall, yet they are less expensive. It has all the features the competitors have, including VPN.

Fortinet FortiGate is easy to install and deploy quickly. There's a user-friendly GUI or if you like, CLI, for those who prefer it over CLI you can use that. 

From a support perspective, I had more issues that I didn't think the person on my case handled the way I was expecting. We called them for a geolocation issue and we didn't get any proper assistance.

I've used the solution for about seven years. 

It is pretty stable. We once had an issue and we had a workaround from Fortinet FortiGate before they deployed a patch.

Fortinet FortiGate is scalable. On a scale of one to ten for scalability, I would rate it as seven out of ten.

I don't call them frequently, which is a good sign. However, we called them for a geolocation issue and we didn't get any proper assistance. If I had to rate them on a scale, I would rate them eight out of ten.

Positive

I used Checkpoint and used to love them. However, they are expensive and can be complex. I love Palo Alto. That said, they are not that flexible for me. I also used Cisco.

It was easy to set it up, for the most part. The deployment of Fortinet FortiGate is straightforward. On a scale from one to ten, I'd rate ease of deployment at an eight.

We did switch from a competitor and were able to set it up very quickly.

It takes only two people to deploy.

The price is very interesting and it ends up being a very cost-effective solution. 

The price is the first main difference compared to others. Its prices are very interesting. At the company I work for, people tend to go with Fortinet FortiGate, and it's used especially in my country, as it's a cost-effective solution.

I evaluated and compared Palo Alto and Cisco with Fortinet FortiGate after Checkpoint.

I will recommend Fortinet FortiGate to others, depending on the organization's requirements, needs, and budget. 

I would rate Fortinet FortiGate as a seven out of ten simply due to the fact that I'm more of a Cisco person. I prefer Cisco since I've been working with it for a long time.

On-premises

I use Fortinet FortiGate for SD-WAN, specifically for branches, and for firewall purposes. 

Fortinet FortiGate is sold to everyone, including banks, mining companies, and oil companies, as it's one of the most popular SD-WAN products that we sell. These are mainly medium-sized businesses or enterprise businesses because we only sell business-to-business, B2B, and we don't sell to normal clients, only businesses.

We usually do not have any problems. It's a very easy-to-use product. We also have a SOC or service operations center. They are certified in Fortinet FortiGate.

From the point of view of a reseller, Fortinet FortiGate improves our business because it is one of the products that we sell the most. We also use it on our backend because the devices have many slots and support substantial bandwidth.

The most valuable features of Fortinet FortiGate are its SD-WAN capabilities, such as dynamic routing, and other features, including security options such as antivirus, IPS, and IDS—all integrated into one device. 

Another beneficial aspect of using Fortinet FortiGate is that if you have a LAN network, you can integrate it with FortiSwitch. You can manage everything from Fortinet FortiGate. It is easy to manage and integrate with other Fortinet devices.

Fortinet FortiGate is a very good device overall, though it can be improved in certain areas regarding the licenses, particularly the big one called unified threat management, which has many capabilities. The big license options have web filtering, IDS, and a lot of other things, but it's not like they are all good. That's the only thing I would change because the rest is very good.

I have about 4 or 5 years of experience with Fortinet FortiGate.

I find Fortinet FortiGate to be quite stable, as I have never heard of any issues where they broke or malfunctioned; they are always working. I would rate the stability of Fortinet FortiGate a ten out of ten.

I would rate the scalability for Fortinet FortiGate as an eight out of ten

We don't usually use that service. We only engage with Fortinet support when a device is broken and needs RMA, so I am not familiar with their operational teams.

Neutral

We used to use Cisco firewalls and devices, which are also quite good. However, Cisco is more expensive, approximately twice their prices, but they are similar in functionality. With Fortinet, we are partner experts, which is a big advantage, whereas with Cisco, we are premium partners, which is not the biggest status, so if we are going to resell to our clients, we don't have the best discount or prices.

I am not part of the initial setup or deployment process since I work in presales. The setup or deployment is quite easy, as you can do a one-touch deployment that automatically connects to the FortiManager cloud when you connect it to a broadband or dynamic IP, allowing you to start the configuration from that point.

We usually sell it for on-premises setups.  It's on the cloud only when the client has virtual machines or their own service. Sometimes they have a service on the cloud like AWS, but it's more difficult to sell now because AWS has an e-commerce option where you can buy FortiGate directly. The only thing you need is someone to manage and configure.

For deployments at one site, it usually requires only one person, and if we are talking about 1 to 50 sites, it still only takes one person because the same template is used for all sites.

In Argentina, we service about 100 locations. There are about 200 companies in Colombia and Brazil. 

We service about 100 locations with Fortinet FortiGate in Argentina, but if we account for all the company's clients, it can be around 2,000 across Colombia and Brazil, since we have clients in all of these countries.

Fortinet prices are around $600 for the small 40F model, and for licenses, the simplest option is about $300 for a year. They sell licenses that can last for 1, 2, 3, or 5 years.

Before using Fortinet, we evaluated other options such as Versa and Meraki, but Meraki is also from Cisco. Fortinet is better than Versa. One of the main differences between them is that we don't have many partners or distributors for Versa here in Argentina, making it difficult to sell something that you cannot pay for locally. It has been easier in the past to handle payments, but Versa doesn't have many providers or distributors in Latin America, making it a less viable option. Fortinet offers more products that are easier to integrate into our clients' networks, such as firewalls and access points, so that was one of the main reasons we didn't use Versa.

My advice to other businesses or people considering using Fortinet FortiGate is that it is the starting product from Fortinet, and when you start using Fortinet FortiGate, you can then move on to the next products they offer, which are numerous. 

We sell the 40F, 60F, 80F, 100F, and 200F models. There are the ones we sell readily from the bottom to the top. Sometimes, we sell bigger ones such as the 300 model.

Overall, I would rate Fortinet FortiGate around a nine out of ten.

On-premises

Fortinet FortiGate is my primary firewall solution for firewall security, site-to-site and remote access VPNs, and SD-WAN. I use it to secure network traffic, manage connectivity between branch offices, enforce security policy, and optimize WAN performance across customer networks. I have not worked extensively with another platform.

My experience with Fortinet FortiGate has been very positive. In addition to firewall security, VPNs, and SD-WAN, I regularly perform firmware upgrades, troubleshoot network issues, implement high availability configuration, and manage security policy. Fortinet FortiGate provides multiple security and networking features within a single platform, which makes it easier to manage and maintain customer environments efficiently.

The best features of Fortinet FortiGate are SD-WAN, VPN capability, high availability, and integrated security features. I particularly appreciate the SD-WAN functionality because it provides intelligent traffic routing and better link utilization.

What stands out most about Fortinet FortiGate's SD-WAN functionality is its ability to intelligently use multiple internet links and automatically steer traffic based on link performance. In one deployment, I configured two ISP links in an SD-WAN setup. When one link experienced high latency or packet loss, traffic was automatically shifted to the healthier link without manual intervention.

The VPN and high availability features of Fortinet FortiGate make it easy to deploy and manage both site-to-site IPsec VPN and remote access VPN. The HA functionality provides redundancy and minimizes downtime during failure or maintenance activity. I also appreciate the integrated security approach where firewalling, VPN, application control, web filtering, and intrusion prevention are available on a single platform, which simplifies management and improves overall security.

Fortinet FortiGate has had a positive impact by improving network security, reliability, and operational efficiency. Features such as SD-WAN and VPNs have helped ensure stability and connectivity across sites, while high availability has reduced downtime during maintenance or unexpected failures. From an administrative perspective, the centralized management and integrated security features have simplified troubleshooting and reduced the time required to manage and secure the network.

We have seen reduced downtime through HA and SD-WAN deployment as traffic automatically switches to the healthy ISP link during outages. Fortinet FortiGate has also improved troubleshooting by providing centralized visibility into network traffic, VPN, and link performance, helping us resolve issues faster and manage the network more efficiently.

Fortinet FortiGate is moving in the right direction with its AI-driven security features. I appreciate how it helps with threat detection, security analysis, and identifying suspicious activity more quickly. From a governance and security perspective, it provides better visibility and helps security teams respond faster to potential threats.

Fortinet FortiGate is a strong solution overall, but I believe the reporting and analysis features could be improved to provide more detailed insights without relying on additional products. Additionally, some advanced configurations can have a learning curve for a new administrator. Simplifying certain workflows and enhancing troubleshooting visibility would make the platform even more user-friendly.

More detailed reporting often requires additional products such as FortiAnalyzer. The documentation for some advanced features could be more straightforward, especially for new users. While support is generally good, faster resolution for complex technical issues would be beneficial. Overall, these are minor improvements and the platform remains reliable and easy to manage.

Recently, I used Fortinet FortiGate to implement SD-WAN for a customer with two ISP links. I configured SD-WAN load balancing, created firewall policy, and monitored link performance to ensure stable internet connectivity. This helped improve network availability and automatically distribute traffic across both links, reducing downtime and providing a better user experience.

Fortinet FortiGate is stable in my experience, providing very much faster troubleshooting.

Fortinet FortiGate is highly scalable. I have worked with different Fortinet FortiGate models across various customer environments.

I have worked with Fortinet FortiGate support on a few troubleshooting and upgrade-related cases. My experience has generally been positive and the support team is knowledgeable and helpful.

I have seen a positive return on investment, mainly through time saving and improved operational efficiency. Features such as centralized management, SD-WAN, and integrated security have reduced the time spent on troubleshooting and network management.

My advice would be to clearly understand your network and security requirements before deploying Fortinet FortiGate's integrated features such as SD-WAN, VPN, and security profiles. Start with best practice configuration, keep the firmware up to date, and invest time in learning the platform. I would rate this product an 8 out of 10.

On-premises

Fortinet FortiGate serves as our perimeter network firewall for our internal needs, and we also use SD-WAN to combine several internet service providers. I have experience with integration of SD-WAN capabilities, and I can explain my feedback on this.

The impact of SD-WAN on my network performance is clear, and if we speak about Fortinet Unified SASE, it is effective for me. My experience with this unified agent brings some examples to mind.

There are some areas for improvement in Fortinet FortiGate, including some small challenges I have faced.

I have been using Fortinet FortiGate for about two years.

I do not work with Fortinet FortiGate Data Center solution, and in general, Fortinet FortiGate is stable. I never see any crashes or downtime; it performs fine overall, but I wonder if it is also scalable or if there may be some limitations, possibly regarding cost to scale.

I never see any crashes or downtime; it performs fine overall, but I wonder if it is also scalable or if there may be some limitations, possibly regarding cost to scale.

I would give technical support from Fortinet nine points as well, noting that only the licensing model could be a bit improved, and all the rest is fine.

Positive

In terms of pricing, the solution is a bit expensive, but I think it was a better option than Checkpoint, which is why I replaced it.

Since implementing Fortinet FortiGate, I have not seen significant changes in ROI, but what I can share about deployment is that Fortinet FortiGate is easy to deploy.

I deploy the solution on the cloud.

Since implementing Fortinet FortiGate, I have not seen significant changes in ROI.

In terms of pricing, the solution is a bit expensive, but I think it was a better option than Checkpoint, which is why I replaced it.

In terms of pricing, the solution is a bit expensive, but I think it was a better option than Checkpoint, which is why I replaced it.

I am working with Fortinet FortiGate as a customer. I purchased the product from Fortinet directly, and if we speak about integration of SD-WAN with Fortinet FortiSASE, it has a positive impact on application performance in my case. For SD-WAN, I am not using it, so I would rate my overall experience with Fortinet FortiGate as nine out of ten points. I don't want to see new features included or new integrations for now.

Public Cloud

Other

We are using Fortinet FortiGate for the SD-WAN solution between our branches. We also started using Fortinet's access points, wireless solution, and full fabric with switching. We are using many products from Fortinet.

We don't use Fortinet FortiGate for data center solutions; we just use Fortinet FortiGate for perimeter firewalls and wireless and switching.

The main benefits that Fortinet FortiGate provides is the security of the network.

Fortinet FortiGate has many functions, and it is one of the best next-generation firewalls with an affordable cost than other vendors. 

Fortinet FortiGate is useful for network performance, and it helps to optimize the links between branches and the applications that are used from the data center to other branches. 

The integration between SD-WAN and FortiGate is easy. It accommodates our needs.

They can add automation for monitoring and policy optimization on the firewall. I think using AI to do some optimization on the policies would be beneficial, such as providing alerts about policies that haven't been used for a long time or identifying overlapping policies.

I have been working with Fortinet FortiGate for at least six to seven years.

I would rate the stability of Fortinet FortiGate as eight out of ten.

I would rate the scalability of Fortinet FortiGate as eight out of ten.

I would rate technical support from Fortinet as seven out of ten. While there are no issues, there is improvement needed for fast response and clear response from Fortinet's technical support.

Positive

The initial setup for Fortinet FortiGate is very simple.

Palo Alto is the main competitor in the market. Fortinet FortiGate provides a simple solution. It is less expensive than Palo Alto and meets our requirements. 

We do the exercise from designing and planning with Fortinet FortiGate, and then we purchase through a partner.

My overall rating for Fortinet FortiGate is eight out of ten.

On-premises

My use cases for Fortinet FortiGate mostly involve perimeter-based security and fire-walling.

I find that Fortinet FortiGate is pretty easy to use and integrated, offering many features in one box at a decent price compared to other enterprise vendors. When I first used it as a one-for-one replacement, the functionality was basically the same, but the ease of use compared to the old solution increased, so I definitely saw benefits immediately.

Fortinet FortiGate could improve by enhancing FortiManager, which is the centralized management system. It has many inconsistencies and errors with respect to pushing policies, especially when we have a large network team that needs to push different rules. Improving the consistency and allowing proper stability with many users managing hundreds of firewalls would be beneficial. Regarding cloud deployment in public cloud, it is less flexible and scalable, and customers need to provide and take care of resiliency, scalability, and redundancy. This could be a future improvement for Fortinet FortiGate to better adhere to cloud philosophies.

I have been using Fortinet FortiGate for approximately 10 years.

The stability and performance of Fortinet FortiGate have been good, as it has been running at the company for quite a few years since we first implemented it.

Regarding scalability, we have hundreds of physical appliances deployed, which are running adequately. However, in cloud deployment such as public cloud, it is less flexible and scalable. Customers need to provide and take care of resiliency, scalability, and redundancy, which could be a future improvement for Fortinet FortiGate to better adhere to cloud philosophies.

I have contacted technical support regarding FortiSwitch integration issues with Fortinet FortiGate. They are good at responding, though I don't need to call support often. For myself, the experience has been good. On a scale from 1 to 10, I would give Fortinet FortiGate's support an eight. I did have some minor issues with the person I talked to, but overall, they were able to resolve the issue.

Positive

I have used alternatives to Fortinet FortiGate.

For someone with a network background deploying Fortinet FortiGate for the first time, the switch is very easy and the UI is easy to navigate. However, their CLI is very difficult to learn, though changes and configurations in the UI are very understandable.

For the deployment of Fortinet FortiGate, it depends on the project, but for smaller or even bigger deployments, one person can easily handle it, excluding data center rack installation.

Fortinet FortiGate requires maintenance, including updates and firmware updates to fix bugs and security vulnerabilities. Overall, it runs fine, but it has security vulnerabilities with respect to some features that may have affected its reputation. Keeping up to date is a normal part of having any product vendor, and their upgrade process has been smooth.

I don't necessarily know directly about their pricing, but Fortinet tends to be lower than Cisco based on the separate projects I've been involved with. In general, Fortinet FortiGate has very competitive pricing.

Cisco Firepower is one alternative to Fortinet FortiGate. Comparing both, ease of use is a major difference. Cisco Firepower's ease of use is very poor, with many bugs and issues that made it non-functional - some things break and pushing policies is very slow.

Previously, I was a customer of Fortinet, but now I am also a reseller partner. I rate Fortinet FortiGate 8 out of 10.

We have configured it in our data center.

The best feature of Fortinet FortiGate is the IPS or IDS implementation. I appreciate most the agility or the flexibility to create hashes to block incoming threats, and I can integrate with third-party threat intelligence with our FortiGate.

SD-WAN is another beneficial feature of Fortinet FortiGate. It offers flexibility in terms of adding multiple network connectivity and building your own network. It's the replacement for traditional VPN solutions. With SD-WAN, I can connect my remote office quickly and add additional or multiple network connectivity to provide redundancy on my network. This is the simple part of that.

The effectiveness of Fortinet unified SASE in providing consistent security policies across multiple locations is very good. In FortiSASE, they have integration with FortiGate. As a network security individual in a company, you can provide a single view of policy, monitor them, audit them, or in one screen, you can see the activity of your users, the behavior of your users, and in contrast, you can see the possibility of tracing the users whenever they have some threats.

Whenever I perform a firmware upgrade or any upgrade on a VM, there are instances where the routing gets lost in the configuration itself on the running VM. 

They have recently acquired a CNAP solution which should be integrated into FortiGate boxes natively for protection at any application layer. Since Fortinet FortiGate has Layer 7 protection, they should integrate that as soon as they can for threat detection and network detection. At the moment, if you don't integrate any third-party solution with a simple Fortinet FortiGate box, the box would not function as expected for superb protection. Compared to others, Palo Alto has more integration. 

I'm waiting for Fortinet FortiGate to be more mature in terms of integrating AI. They already have AI automation in the configuration, but that's just the configuration. They need to address AI in threat intelligence and how they integrate with threat intelligence sources to protect customers using their Fortinet FortiGate boxes or Fortinet FortiGate VM instances.

I have been working with Fortinet FortiGate for more than six years.

Whenever I perform a firmware upgrade or any upgrade on a VM FortiGate, there are instances where the routing gets lost in the configuration itself on the running VM. Whenever we do any upgrade or patch, we ensure we have a latest backup, and then validate every single configuration whenever we finish the upgrade or deploy the patch. This ensures there are no concerns in terms of connectivity or services that get impacted after the upgrade.

This is not a criticism of FortiGate; it reflects my experience deploying several FortiGate instances across different public clouds such as AWS, OCI, Azure, and GCP. My main concern with FortiGate in OCI is its lack of support for features like auto-scaling. When you need additional CPU or bandwidth, it doesn't automatically provision those resources. Currently, in OCI, if you want to scale your FortiGate deployment, you have to shut down the instance and rebuild the virtual machine to accommodate increased capacity. For instance, when you purchase a VM instance, it may come with only four CPUs and a limited bandwidth of four Mbps. In scenarios where you need to scale up quickly, this can be a significant drawback compared to what can be achieved with Azure, AWS, and GCP.

However, I've deployed FortiGate on physical appliances in data centers in the past without any issues, as long as proper planning is done regarding the capacity of your firewall requirements. For example, if you need ten gigabits per second throughput, you should change the module and connect a ten-gig interface to the switch. The key lies in anticipating your design from the ground up, taking into account the growth in the number of users and the increase in the services you provide to your customers. This is my primary concern.

Their support is very good. They respond quickly through their hotline number with an active subscription.

I would rate the support from Fortinet FortiGate as a nine out of ten. Sometimes if I don't escalate to our account manager, it will take the next business day for the interaction.

Positive

I previously used Cisco ASA firewall but didn't find it to be as straightforward as Fortinet FortiGate. 

The initial setup for Fortinet FortiGate is very straightforward. As long as you have the foundation of networking and understand the east-west and north-south firewall terminology, it's quick and easy. 

The deployment would take a maximum of 30 minutes for edge layer protection and end-user protection. After that, you can enrich or enhance the policy, IPS, IDS tweaking, the built-in DDoS or UDP flooding integration.

I performed the deployment of Fortinet FortiGate myself, and it was very easy.

I appreciate how Fortinet FortiGate, particularly in Saudi Arabia, is not as expensive compared to other competitors. The investment value is good, and technically, the value invested is worthwhile. It's a very useful tool to mitigate and protect your enterprise. I cannot speak to the financial analysis as I'm not involved in finance.

It is cheaper and more competitive compared to other options. For example, when comparing Palo Alto products to others, Palo Alto tends to be more expensive. If you compare Cisco's platform, including Cisco Meraki, with Fortinet products, you'll notice that Cisco's offerings are generally higher priced than Fortinet's firewall solutions.

Before working with Fortinet FortiGate, I evaluated other firewalls such as the open-source firewall pfSense. pfSense is suitable only for small startup companies that need more financial consideration. However, in the long run, it's difficult to maintain and support without a subscription. 

I also evaluated Sophos UTM, which was acquired by Sophos from Vyatta Networks, which began as open source but was later locked down for commercial purposes.

The biggest benefit of Fortinet FortiGate among other firewalls is the community. Many adopters and companies globally are already using FortiGates. Everyone in the community is sharing, and their support is very good.

I can recommend Fortinet FortiGate. It's a very stable next-generation firewall where the majority of the firewall features and services are in one box.

My total rating for Fortinet FortiGate is nine out of ten because there are still some missing pieces that need to be integrated with the box itself.