Fortinet FortiGate Reviews

I have deployed FortiGate with multiple organizations such as universities, government institutions, healthcare, and ISP providers. I have worked with FortiGate models 30-500 series and I have deployed the 3200D model for one of the broadband service providers located in India, Namely Sikka Broadband. 

I have installed the FortiGate 500 and 400D to replace a Sophos firewall in a main corporate office. This implementation provided improved network performance.

This solution made it easier to connect all of the branches together via an IPsec VPN and remote users with SSL VPN.

The most valuable feature is the VDOM, which allows the customer to have multiple firewalls in a single campus.

Using the FortiGate security solution provides comprehensive visibility and advanced layer 7 security, including threat protection, intrusion prevention, web filtering, and application control. They face a major complexity hurdle managing these point products with no integration and lack of visibility.

Thie solution provides a high-performance inspection of clear-text and encrypted traffic.

The FortiOS Operating system is robust, and the WAN load-balancing very much transparent.

Improvement is needed in the Web Filter quotas to restrict users with allocated quotas.

It would be an improvement to add a feature for active users to change/reset their own passwords.

Fortinet renewal prices for all models are too high, so they should offer discounts for customers on renewal. 

We use this solution for our company firewall.

This solution has many good features. The security features are about the best that I've seen anywhere.

I really like the fact that I am able to generate FortiCloud reports.

FortiWAN was supposed to help in doing intersite linking, but we've realized that most of the ISPs use BGP. FortiWAN supports OSPF but does not support the BGP protocol. This is a problem for us because without BGP they are not doing anything, and we've had to pack them up. I would like to see the BGP protocol supported on FortiWAN.

Technical support for this solution can be improved.

The stability is very good.

The scalability of this solution is fantastic.

I've been in contact with technical support a few times and it is good. It might be better, but as far as I'm concerned, it's good.

The challenge for the initial setup was at the ISP level. We have the Fortinet firewall running, but between the various sites, we wanted to implement FortiWAN. It didn't work because of the BGP issue.

The pricing for this solution is good.

This is a product that I recommend.

I would rate this solution a nine out of ten.

We use this solution for securing and controlling our company, as well as to improve VPN services.

This solution has helped us by controlling our incoming and outgoing traffic. It blocks the vulnerabilities that can negatively impact us.

The most valuable feature is the SD-WAN because I can manage many lines and load balance them all.

I would like to have logs, monitoring, and reporting for a month without extra fees.

We use this solution for edge protection in SOHO and K-12 environments.

FortiOS has a very good, intuitive GUI.

This solution has solid UTM features combined with a nice GUI.

The Web-filter in this solution is not very good. Perhaps because Fortinet does not want to compete with its own dedicated solution.

Our primary use for this solution is as an SMB boundary firewall, and we now use their Security Fabric.

This is a quality product with ok support, and it is better than the competition we've tried.

Security Fabric makes VLANs a breeze. It impresses customers, as well as saves them money over the long run when comparing apples to apples.

FortiOS is not simple. Too many people think it should be simple to use, but the complexity of the product makes that impossible.

The support for this solution is ok.

We primarily use this solution for our firewall, Application Control, QoS, IPSec, and SSL VPN.

This solution has a very friendly GUI and CLI as compared to other vendors.

The features that we have found most valuable are the SSL VPN and the user Portal.

This product could be improved with active directory integration and better handling in IPsec and GRE Tunnels. There are not enough recent online materials to assist in integration with Cisco for VPN, GRE, and IPSec.

Our experience with this solution is that it is stable and reliable.

We found the user interface to be better than what is found in other products.

Our primary use case for this solution is the provision of services to our customers, the end users.

This solution has improved our organization a lot. We have been able to offer several services to customers in a single box.

The firewall is a valuable feature because it offers more security for end customers. The HA function is fantastic, as the link switching time is almost imperceptible. It also offers dedicated IP, all in one box.

I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity.

My impression of the stability is very good. It is very difficult to have to replace the equipment due to lack of resources.

I found this product to be good for scalability. It offers several features, among them I can mention Application Control, Antispam, QoS and others.

I found the technical support team to be careful and committed to delivering what we needed.

Prior to using the FortiGate solution, I used the MikroTik RB1100AHx2e. I found that the FortiGate 60D offered more security.

The setup was straightforward and easy, and the equipment has a good command line interface.

We were given all the support that we needed for implementation. The vendors were fantastic.

The return is inevitable when you have equipment that offers stability and quality in services.

Before choosing a piece of equipment you have to take into account the cost-benefit offered by each one. Sometimes it is not worth paying a very cheap price to have a minimum level of security.

Our evaluation of the MikroTik RB1100AHx2e revealed that it lacks antivirus software and has no lock for botnet control centers.

There is a VOIP feature that by default is enabled on the Fortigate 60D. This greatly increases the CPU usage, which causes bad behavior in the equipment. This feature should be disabled and if necessary, the user can re-enable it.

The FortiGate 60D is a fantastic piece of equipment.

We use Fortinet FortiGate mainly for web filtering and site-to-site VPN connectivity. We establish filters based on the type of application for filtering purposes.

With Fortinet FortiGate I can do over forty enlaces. We give all of the log-based runtime support to every user and the web traffic coming in. Also, we can enlace all of the security projects from our two servers with the other forty enlaces.

The most important features with FortiGate are the web filter and application controls. We can control our internet usage and use the web filter for application purposes. All branch FortiGate devices are integrated with FortiAnalyzer and easy to download and monitor the logs from all other locations. It's easy to change the configurations using CMD-SSH. FSSO is also another good feature. 

It is mainly our own application of FortiGate that we need to improve. If you compare FortiGate to any other products, all of the other products have more signatures. I couldn't find that many signatures available in the application.

Some features of Fortinet FortiGate are actually fee enabled that are inconvenient for deploying in production. Other issues relate to isolation with Cisco products and your server.

Fortinet should make it so that we are not able to use analytics from Cisco at the same time that FortiGate is installed. We are not able to do real-time network monitoring.

For the next release, FortiGate should be improved to support these issues. For the setup, you need to prepare a lot for that before engaging the deployment. 

I learned a lot about FortiGate from books. That should be important in preparation. Fortinet should implement these changes, then we would be able to do more.

Stability is good. The only issue is that in the VPN, I have seen many times that there is no stability in the VPN configuration and VPN connectivity. That is our only issue.

If we implement Fortinet to Fortinet connections, then the solution works fine and there are no issues. If we connect with any other vendor like Cisco, Palo Alto, or these kinds of devices, I can see sometimes that the connectivity issue is there.

From IIS, the I/O packet works and connectivity is ideal. Connectivity is fine, but the title clock unnecessarily comes in and sometimes it doesn't reach the destination.

We use Fortinet FortiGate in twenty to twenty-five locations at the time, although we are basically focused on healthcare industry requirements.

For the deployment and maintenance, we have two people we are using right now. Regarding maintenance and deployment, we employ experts in network and security support. 

We don't have any plans to increase usage of Fortinet FortiGate. We only use it in 25 locations.

We have evaluated Fortinet FortiGate's technical support and it is good.

The initial setup is straightforward. The normal VLAN interface configuration with the LAN configuration is fine. There is no problem with that. 

Our deployment took a maximum of half an hour to forty-five minutes. It only took this much time for the entire configuration including the LAN and policy configuration.

We did not use an integrator or consultant. Our security engineers completed the configuration.

In terms of rating, Fortinet FortiGate will come in with an eight out of ten. We are satisfied with the product overall.