Try our new research platform with insights from 80,000+ expert users
Manager and General Attorney with 51-200 employees
Real User
Filtering and alerts help protect our data but the cost is becoming too high

What is our primary use case?

The main use is to protect from outside attack, from any side. Because we work with sensitive data, we have to protect our work. We use it mainly for security, not only for content control.

How has it helped my organization?

We have peace of mind. We do work in a very dangerous environment, the internet, and this device gives us alerts. It gives us the opportunity to know what is going on.

What is most valuable?

The filtering that you can do with the firewall.

What needs improvement?

I would like to be able to do segmentation, for a specific user, with more priveledges. I would also like to see an easier user interface to implement that.

Buyer's Guide
Fortinet FortiGate
August 2025
Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: August 2025.
865,576 professionals have used our research since 2012.

What do I think about the stability of the solution?

Sometimes we found that the traffic to the internet froze, I don't know exactly the reason. The only way to get it to work again was to turn it off and then run it again, a hardware reset. Overall it is a very stable platform but sometimes there is this problem.

What do I think about the scalability of the solution?

The scalability is fine. The problem is the licensing. To do more you have to pay for it. In this market, where you can find a lot of devices to do the same things, to charge for them in the license is very difficult. Also, sometimes Fortinet changes their products, they drop devices from the market very quickly.

How are customer service and support?

We have guys who are certified to work with Fortinet, so right now it's fine with them. We never really have serious problems, something to escalate to Fortinet. Only when there is a very difficult issue with the performance or something like that have we had to go to Fortinet, but it has been great.

Which solution did I use previously and why did I switch?

One of the main reasons we're considering switching from FortiGate is because many companies have a lot of features and you don't have to pay for. If you compare side by side, you find a lot of things that new brands do as well for fewer dollars.

When selecting a vendor the most important factor is the prestige of the vendor. Also the cost, renewing licenses. Our customers are looking for more features for less cost. We have to look at what is going on in the market, who the main players are, who is doing well, and who has a good reputation.

How was the initial setup?

I was not involved in the initial setup of the devices. I only had to check it out and make sure it was working fine. But I saw the guys working with the configuration. Occasionally they had to reference the manual but had to find the answers on Google.

Which other solutions did I evaluate?

Fortinet and Sophos are the main players for this type of solution.

What other advice do I have?

I would rate FortiGate at seven out of 10 because, although they are doing well, the problem is the licensing, the cost is too high, and how they support their own devices needs improvement. They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost. FortiGate is a great product but they have to look out.

My advice would be, look at the time on the market. FortiGate is doing well, but right now they have many competitors that are doing well.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
PeerSpot user
Senior Consultant at Unify Square
Real User
FortiGate security appliances provide UTM security in a single device with a good administrative interface and performance
Pros and Cons
  • "A strong point of FortiGate is that the graphical interface is complete and easy to use, especially if we think there is a list of operations that we are able to perform inside."
  • "With FortiGate, the main complaint that I have heard is about the technical support."

We're discussing a family of UTM (Unified Threat Management) appliances.  FortiGate is a term which includes a wide range of products, starting with small ones dedicated to small offices, and developing into devices which are able to grant security and networking for large companies. The family includes physical devices and virtual machines, which grant network security on different layers using a single point of control. FortiGate is optimized to avoid bottlenecks or delays while the various controls are performed. High availability is also part of the available features with various solutions to avoid single points of failure. 

In the following short list, I will list some interesting points about the FortiGate solution. 

1. Administrative Interface

If you are experienced with network security management, you are aware this activity requires interaction with many different software and hardware solutions from disparate vendors. In the aforementioned scenario, it is normal to have frequent updates to apply on the various products and to watch more than one monitoring tool to keep track of security events. The FortiGate solution includes all the controls you could expect using a patchwork of security products in a single device with a single administrative interface. It is your switch, router, firewall, VPN hub, antivirus, anti-spam, proxy, and endpoint security solution all-in-one. 

If you define a network object or group for firewalling purposes, it will be available to define antivirus rules or internet browsing policies. There are two administrative interfaces:

  • Web-based manager (a graphical interface usable through a web browser);
  • CLI (a command line interface).

A strong point of FortiGate is that the graphical interface is complete and easy to use, especially if we think there is a list of operations that we are able to perform inside.

If you have used appliances or firewalls from other vendors, often you have to use not-so-friendly command lines to obtain the exact result you need. With FortiGate, you will use the CLI seldomly and only for the most “exotic” features.

2. UTM, the Fortinet way

Unified Threat Management may be complex to manage, because you work on different protocols, at different layers and with disparate threats to consider. In FortiGate, you can have three great layers:

  • Networking services (switching and routing, both static and dynamic);
  • Network security services (firewalling, secure VPN connection, intrusion detection and endpoint security);
  • Application security services (spam and virus controls, web filtering, application control and data leak prevention).

As long as you pay (and renew as it expires) the “bundle” license, you have all the aforementioned features available, including the updates for signatures and definitions coming to your appliance directly from Fortinet. You do not have to use all the available controls, but you are able to turn them on and off “On Demand”, so you could start with a simple configuration and add control layers when you feel more comfortable.

3. Virtual Domains

One of the available features include the capability of a FortiGate to support many Virtual Domains (VDOMs). VDOMs enable you to grant access to different companies with different administrators on the same physical unit. Each one will be able to keep their specific configuration with no impact on the others. What you are doing is creating “virtual units”, and keeping on a “root domain” which is used to manage the virtual domains. VDOMs add a lot of flexibility to the solutions that you are able to plan using FortiGate.

4. High Availability and Resiliency

There are four different ways to make a FortiGate unit have high availability. You could use a traditional “cluster” design with two or more units: FortiGate Cluster Protocol (FGCP), a solution with an external load balancer: FortiGate Session Life Support Protocol (FGSP), a Layer 3 resiliency solution like Virtual Router Redundancy Protocol (VRRP), or a Layer 2 solution like Fortinet Redundant UTM Protocol (FRUP). Again, we have a great deal of flexibility to design the best solution for our company’s needs.

5. The Dark Side of the Moon

It would not be fair to review a product omitting the negative points. With FortiGate, the main complaint that I have heard is about the technical support. My personal experience is the same as many people who are not happy with this aspect of the service offered by Fortinet. Often, your problem is diverted to local partners. I have to say that I have had mixed results with them. While some partners are professional, many are not skilled enough and I have had costs that are not equivalent to their quality. This is the same issue with other vendors, but that is not an excuse. As long as Fortinet support sends me to a local reseller or partner, from my point of view, they are taking responsibility for their capabilities.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer690582 - PeerSpot reviewer
reviewer690582COO/CTO at a pharma/biotech company with 11-50 employees
Real User

I had my data speed compromise confirmed by my paid support subscription.

See all 18 comments
Buyer's Guide
Fortinet FortiGate
August 2025
Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: August 2025.
865,576 professionals have used our research since 2012.
Consultant
User
Saved a bundle by not needing past appliances from an NGFW, however it needs better performance on bandwidth demands for smaller devices
Pros and Cons
  • "Consolidated our network environment at all locations, but mainly at our datacenter."
  • "One area for improvement is the performance on bandwidth demands for smaller devices, as well as better web filtering."

What is our primary use case?

Firewall/Web Filter management. We have over 30 sites, and it is imperative that one person (myself) can plan, implement, and deploy these devices to our sites and manage them when finished.

How has it helped my organization?

Consolidated our network environment at all locations, but mainly at our datacenter. 

What is most valuable?

The web filtering was the most valuable, because at a school board, we need to make sure the students are not tying up our bandwidth and also to keep the bad guys out.

What needs improvement?

One area for improvement is the performance on bandwidth demands for smaller devices, as well as better web filtering. Each manufacturer has their own way of filtering and each one needs improvement in categories, URL, and/or application filtering.

For how long have I used the solution?

One to three years.

What was our ROI?

We saved a bundle by not needing all the past appliances from an NGFW.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
it_user795288 - PeerSpot reviewer
Pre-sales Engineer at a tech services company with 501-1,000 employees
Real User
Easy to understand licensing requirements
Pros and Cons
  • "It is a one box solution, which covers most of the edge device’s requirements."
  • "​Easy to implement, and it is also reliable.​"
  • "​It needs to improve its ISP load balancing.​"

What is our primary use case?

I use this product on AWS. FortiGate's VM GUI is slightly different than the hardware devices.

How has it helped my organization?

It is a one box solution, which covers most of the edge device’s requirements.

What is most valuable?

I have found FortiGuard Services to be valuable.

What needs improvement?

It needs to improve its ISP load balancing.

For how long have I used the solution?

Three to five years.

What do I think about the stability of the solution?

No issues.

What do I think about the scalability of the solution?

No issues.

How are customer service and technical support?

I would rate technical support as a seven out of 10.

Which solution did I use previously and why did I switch?

We had a previous solution, but switch because FortiGate is a one box solution.

How was the initial setup?

Initial setup was not complex.

What's my experience with pricing, setup cost, and licensing?

Easy to understand licensing requirements.

Which other solutions did I evaluate?

  • Palo Alto Networks
  • Cisco ASA

What other advice do I have?

Easy to implement, and it is also reliable.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
it_user805185 - PeerSpot reviewer
CEO with 11-50 employees
Real User
Controls the user's activities and maximizes my bandwidth use overall
Pros and Cons
  • "The FortiGate controls the user's activities and maximizes my bandwidth use overall."
  • "Reporting is limited to providing an external appliance for improving the reporting capabilities of the FortiAnalyzer. It does not offer a central management and is also sold separably as an appliance."

What is our primary use case?

The company has integrated the LDAP with the UTM to control user traffic in senses and have a high availability for Active/Passive to assure uptime in case of physical failure. Our company is cloud driven and downtime becomes critical.

How has it helped my organization?

The FortiGate controls the user's activities and maximizes my bandwidth use overall. If the employer BYOD, we can accommodate it the need by having an isolated networked exclusively for that equipment which does not comply with the internal policies.

What is most valuable?

The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors.

What needs improvement?

Reporting is limited to providing an external appliance for improving the reporting capabilities of the FortiAnalyzer. It does not offer a central management and is also sold separably as an appliance.

For how long have I used the solution?

Three to five years.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
it_user545559 - PeerSpot reviewer
Owner at a tech services company
Real User
I am able to save hours of planning and implementation time because the documentation is so helpful
Pros and Cons
  • "Their reliability and their policy of pre-shipping replacements when a unit has failed."

    What is most valuable?

    1. The prompt and knowledgeable support behind them. 
    2. Their reliability and their policy of pre-shipping replacements when a unit has failed.
    3. The simplicity and clarity of their user interface and documentation.
    4. Their 'cookbooks' that walk you through the most common installation scenarios.

    How has it helped my organization?

    I am a one-man show, so there is not much that can be done to improve the way that I function. However, these products provide best-in-class security at reasonable prices. 

    One of the most helpful features is their VPN, the client could not be any simpler to set up and use.

    What needs improvement?

    I can't think of too much which they can improve upon. I just have not come across any situation where they have fallen short of expectations.

    For how long have I used the solution?

    I am a consultant who supports these units for my clients who use them. I have had over 10 years of experience with Fortinet products.

    What do I think about the stability of the solution?

    The products are extremely stable. I have only had one instance where a unit did not function as expected, and Fortinet replaced the unit, despite the fact that it was still operational.

    What do I think about the scalability of the solution?

    Scalability is the one area where there is room for some improvement. Currently, customers need to purchase more powerful units as their network traffic and requirements grow. Fortinet will occasionally offer trade-in credits in such situations, but this is not always the case. Their product line allows customers to scale from SoHo through enterprise-level requirements, which is what I like about them so much.

    How are customer service and technical support?

    Their tech support is outstanding.

    Which solution did I use previously and why did I switch?

    I have sold and supported other solutions in the past. Fortinet is not always the least-cost solution available, but from a value standpoint, I find them hard to beat.

    How was the initial setup?

    Initial setup complexity will vary with the complexity of the installation. It is relatively straightforward and simple to set up basic configurations. More complex requirements entail reading through a lot of documentation in order to complete the firewall configuration because of the myriad of features and options that are available in their O/S. The 'cookbooks' are a big help in these instances.

    What's my experience with pricing, setup cost, and licensing?

    Pricing and licensing have to be taken in context with value. Fortinet is usually not the least expensive alternative when considering an upfront investment, but if you take into account the support costs over several years, they are often as cost-effective as the 'cheaper' solutions.

    Which other solutions did I evaluate?

    In this particular instance, Fortinet was evaluated against an equivalent solution sourced from D-Link. I also evaluated a solution from Xirrus (now Riverbed) which promised better signal strength. However, when I ran the various WiFi planning tools from each supplier, the coverage differences did not merit the more expensive Xirrus solution.

    What other advice do I have?

    Anyone evaluating this product should consult the documentation available and plan out their solution before making a decision. From personal experience, I find that I am able to save hours of planning and implementation time because Fortinet's documentation is so helpful.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    PeerSpot user
    Engineering Manager at a tech consulting company with 1-10 employees
    Real User
    Great product with too many features at the right price
    Pros and Cons
    • "UTM/NGFW features and FortiCloud for logs and backups are awesome."
    • "MTBF: Hardware failure is more common when compared to SonicWall or Cisco ASA."

    How has it helped my organization?

    Simplifies administration and upgrades overall security.

    What is most valuable?

    UTM/NGFW features and FortiCloud for logs and backups are awesome.

    What needs improvement?

    MTBF: Hardware failure is more common when compared to SonicWall or Cisco ASA.

    What do I think about the stability of the solution?

    No.

    What do I think about the scalability of the solution?

    No.

    How is customer service and technical support?

    Great support. It's quite good in Mexico.

    How was the initial setup?

    Straightforward.

    What other advice do I have?

    Great product with too many features at the right price.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    reviewer690582 - PeerSpot reviewer
    reviewer690582COO/CTO at a pharma/biotech company with 11-50 employees
    Real User

    I have used Fortigates for 6 years. Like you, similar experiences augmented by an additional support subscription due to my early learning curves. What I did not realize was the speed compromises with all the security apps active - if I have a Verizon FiOS true Gig subscription, my speed was tapered down to 100 Mbps or less. That is a 90% reduction. With 6 users multiplied by cell phones accessing the same WiFi, you can imagine the data speeds we were actually working with.

    So, I picked WatchGuard, the T70 specifically. The data speeds with everything turned on remains near the subscription (1 Gig) and I have the same types of protections as the Fortigate. It is too early to report the reliability and other specs since this has changed only in the last week, but the specs tell me a lot that helped me to understand what I missed on my first go-around with Fortigate. Don't get me wrong, I had zero issues over the last 6 years to Fortigate's credit. However, that speed compromise doesn't work for me. Perhaps I missed something, but my support knows the product and there were no adjustments available, other than turning certain features off. I couldn't afford that security risk, not these days.

    PeerSpot user
    CEO & Sr. Information Security Consultant at a tech services company with 1-10 employees
    Consultant
    The solution improved the security posture and overall management's TCO
    Pros and Cons
    • "One of the valuable features is a standardized OS."
    • "It claims it does DLP, but the degree and level of controls are very basic."

    How has it helped my organization?

    The solution improved the security posture and overall management's TCO.

    What is most valuable?

    One of the valuable features is a standardized OS.

    What needs improvement?

    It claims it does DLP, but the degree and level of controls are very basic. We recommend that our clients supplement it with other products.

    What do I think about the stability of the solution?

    There were no issues with stability.

    What do I think about the scalability of the solution?

    There were no issues with scalability.

    How are customer service and technical support?

    Customer Service:

    Customer service is excellent.

    Technical Support:

    Technical support is excellent.

    Which solution did I use previously and why did I switch?

    We did not use a previous solution.

    What about the implementation team?

    We implemented in-house.

    What's my experience with pricing, setup cost, and licensing?

    Work through partners for the best pricing.

    Which other solutions did I evaluate?

    We evaluated Palo Alto, Check Point, and Cisco.

    What other advice do I have?

    I highly recommend Fortinet as a leader in integrated suite information security capabilities.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    Buyer's Guide
    Download our free Fortinet FortiGate Report and get advice and tips from experienced pros sharing their opinions.
    Updated: August 2025
    Buyer's Guide
    Download our free Fortinet FortiGate Report and get advice and tips from experienced pros sharing their opinions.