Fortinet FortiGate Reviews

We are currently using manual router failover that can be configured on the Fortinet security appliance’s second network interface to provide network edge redundancy if the primary managed router fails. If the edge router fails, traffic can be moved to the security appliance with a simple cable swap.

We are looking for a fully redundant solution with automatic failover between both Fortinet Security appliances. I am currently looking at battle card information between Fortinet and Zscaler. I have to do a competitive analysis.

The low cost of ownership was a benefit with all of the features we wanted.    

Preconfigured images have been developed for quick deployment. However, if we need a custom policy or have to include an existing policy then that can be accommodated as well. 

Virtual Domains (VDOMs) are a feature that we found valuable.

We found the Firewall, VPN, Application Control, IPS, Fortiguard Web filtering, anti-botnet, FortiGuard, Anti Spam Wireless LAN controller, WAN optimization, vulnerability assessment, and endpoint control all to be valuable.

Fortinet certifications include NSS Labs for NGFW, firewall, IPS, SSL, antivirus, and antispam.

Fortinet provides a consolidated security platform for the market place and certifications with NSS labs prove their security assurance.

To the best of my knowledge, Fortinet does not have a CASB solution and Fortinet does not have a Zero trust solution. Fortinet claims to do everything Zscaler is capable of and I'm looking for a comparison between the supported features.

Fortinet VPN and DDoS capabilities are great, yet we need to provide a solution that enables CASB and integration to the cloud.

We have been using FortiGate for three years.

Fortinet is very easy to service and set up.

Fortinet is the least expensive solution.

We are comparing the features of Zscaler vs. Fortinet. We are trying to determine what features Zscaler has over Fortinet and vice versa.

Fortinet was initially scoped as 25 rules for small, 50 for medium, and 100 for large. We need to incorporate more rules but there would be additional professional services or staging services. We are looking to incorporate the cloud access with the Fortinet UTM solution.

We use Fortinet FortiGate 100E for a VPN. We also use the solution for word filtering. These are our primary business requirements.

We were not fully operational previously. Our project needs to link two sides through the internet. One of these was in Cairo and the other in another city. 

In Egypt, to make this possible, we built connections for everything between the two sides through the internet using the VPN side-to-side with Fortinet. 

We used FortiGate as the integrating solution between the two locations, i.e. the Fortinet 30E & 100E.

The main feature that Fortinet FortiGate has that is very useful for me, is that I can connect two sides of the network to each other with Fortinet. 

I can make two VPNs run side-to-side. VPN is very simple and so easy with FortiGate.

Fortinet needs more memory to save the log files (like in the 101E, the old product). We need it to save the logs on the hardware and not in the cloud. 

I know this feature is available in FortiCloud, but if we need to log locally, it is not available. Also, the log only records a little time and needs to be longer.

Fortinet FortiGate offers good stability. I have been using it for around two years.

FortiGate is a very scalable tool. They have an app to manage the access points, switches, and other solutions. 

For our project, now we're over a hundred users at the headquarters. The other branch supports about 20 persons.

Fortinet tech support is very helpful. I have not faced any trouble with their technical support. 

The other product I was previously using was ForgeRock but did not have the experience of integrating it with Fortinet FortiGate.

For the Fortinet installation, our initial setup was for word filtering. It was very easy and did not take a lot of time. The deployment took about three days. 

FortiGate is very easy. The entire solution setup processes took about three days. I can make many of the rules for most users as we need it configured easily.

I am the integrator for Fortinet FortiGate solutions at our company.

The licensing price for the Fortinet products is approximately a thousand of dollars per year for the FortiGate 100E and $200 per year for the FortiGate 50E. 

I don't use additional licensing, just the yearly subscription.

We did not evaluate any other options for this purchase.

If anyone asks me for my experience with Fortinet solutions, I would recommend FortiGate, especially if they need to use it for security. 

I would recommend the FortiGate series for integration with any hardware or software product. I am very satisfied with Fortinet. I would rate it a 9 out of 10 overall.

I have deployed several of the following models for customers: 200D, 60E, 60D. This review focuses on the FortiGate 200D.

The first implementation I performed of a FortiGate 200D was to replace a Juniper SSG-140 in a main corporate office.  This implementation provided improved network administration and network performance.

We also received more timely security updates, and it became easier to connect all of the other offices together (via an IPsec VPN mesh).

As additional FortiOS releases have come out, we have obtained more flexibility in device identification and WAN load-balancing, among other things.

• The CLI is robust and powerful, enabling rapid, consistent changes via SSH. 
  
  The device identification is very flexible, facilitating the creation of rules to regulate all sorts of devices that might spring up on a network, especially via WiFi.
• The IPsec tunnels are very easily created, and quite interoperable with devices from other vendors.
• WAN load-balancing has improved, but needs some refinement.
  
  You can set up a different DDNS config for each WAN link.
  
  It is great to be able largely use the same OS features across the family of devices.

WAN load-balancing could be a lot better at detecting when a link is poor or inconsistent, and not just flat out dead. There are lots of options for routing traffic over a specific path when you have WAN load-balancing enabled, but they are not as clear and consistent as they could be, and most can only be set at the CLI.

Some configuration elements cannot be easily altered once created.  For instance, there is no way to rename an interface (say, for a VPN tunnel), unless you create an entirely new one and perform a little gymnastics to switch from one to the other. Or, you export the config, rename the elements in question, then re-import the entire config.

Creating a meshed VPN connection (Office A with two WAN links connecting to Office B with two WAN links) requires a massive bundle of four IPsec interfaces, with two policies. It would be nice to have a cleaner, simpler config for that functionality, something not very uncommon today.

I have found that if you have a console cable in the device when you reboot it for a disk check, it will boot to the device firmware. This will not happen for a regular reboot.

If you have more than a very basic environment, you quickly have to escalate past the first level of support. The initial level is so-so.  The next level up has been stellar for me, and quick to figure out issues and resolve them.

I've only experienced stability issues a few times.  One was with the v5.4.0 and .1 releases. Also, there was an issue during the v5.2.x series where there was an SSD issue that was fixed with later firmware. Overall, the devices have been very stable.

No. Scalability is good, and performance increases are great as you move to higher products.

Customer support is okay. They are fairly responsive for level three and higher (one and two) issues, but if your issue is a little complex, you will want to ask them to escalate to a second level tech. They don't always read all the info you provide in the first pass, but overall, they are helpful.

I previously favored NetScreen/Juniper SSG solutions, but Juniper stopped supporting the SSG line, and FortiGate provides more value and performance for the dollar.

I've also tested the Sophos solutions, but found them not compelling enough to switch from the FortiGate devices.

The devices are very easy to setup, even if you need to configure VPNs. You could have an HA config up and running within 60-90 minutes, with the latest firmware installed, and a couple of policies and tunnels.

If you do not regularly work with enterprise-class firewalls, you might need to add an hour to the above scenario, but the provided wizards make it pretty easy to address the basic functions.

In-house deployment all the time.

In almost every case, I've experienced (or had customers experience) an ROI within 12 months, based on better performance for the same price or increased functionality for the same (or less) price.

Licensing and setup costs are generally pretty clear with Fortinet. If you go with centralized management or their Log Analyzer tool, these carry some additional pricing that you need to look at.

Check out the price matrix, and go with a value-added reseller that understands how to help you size out the equipment. Remember to always look at the performance with the assumption that you will have many of the unified threat management (UTM) features on, not off.

Yes, I tested and evaluated solutions from pfSense, Sophos, and Palo Alto.

I highly recommend, and often try to deploy Fortinet solutions for my office network and for my customers. They run for a long time, they are supported for many OS updates, and they are pretty solid.

Don't upgrade the OS right away when it is released, if a major new version has come out.  v5.0 was problematic early, but v5.2 was great. v5.4 was a problem child, but v5.6 had only a minor issue. v6.0 was surprisingly smooth and had only a minor issue. I could have avoided most of these problems if I waited an additional month or so before updating, but I updated because I need to advise customers on what they should be doing.

I've had to interact with support a lot, and overall they've been good (with the caveat mentioned earlier).

We use this product to provide network security functions to our customers.

This solution has a unique range of features that are not available with any other product.

We also appreciate that this solution is easy to maintain and manage.

We would like to see an improvement in the consistency of the product's performance levels.

We have been using this solution for around five years.

The stability of this solution has been good, in our experience.

We have found this solution to be easily scalable.

The technical support for this product is very good; they always respond to us quickly when we raise issues.

Positive

We switched to this solution because it offered the best range of features in its category.

The initial setup of this solution is very straightforward, and deployment only takes between 30 minutes to an hour.

I would rate this product a 10 out of 10, and I would recommend it to any business that is in the market for a security solution.

Our company's technical team handles the reselling part of the tool. I haven't heard of any problems related to the product.

My company's clients use the solution. The tool is not majorly used to monitor the network traffic or intrusion, so it is purely for protecting the network.

The tool is expensive for small businesses, making it an area where the tool can improve the product by making it available at a cheaper rate.

I have experience with Fortinet FortiGate IPS. My company operates as a reseller. Sometimes, we purchase products to help our company's clients who need to renew the licenses of certain solutions.

My company never had any complaints about the tool in terms of performance or stability.

My company's clients are usually small businesses, so they don't spend too much time on security and protection, meaning they use the tool to meet their bare minimum needs.

Though I have never contacted the solution's technical support, I feel that the tool offers good support since I have never heard any complaints about the product's technical team from my company's team members.

I rate the technical support an eight out of ten.

Positive

I think that my company has been using Fortinet FortiGate IPS for at least four to five years. My company has not been using the rest of the products in the market, so it is not possible for me to compare Fortinet FortiGate IPS with other solutions. So far, my company has been happy with Fortinet FortiGate IPS.

The product's initial setup phase was pretty easy because my company is familiar with the product.

The solution is deployed on an on-premises model.

The solution can be deployed in an hour.

The tool is a bit pricey for small businesses, but it is still bearable in terms of cost.

Fortinet FortiGate IPS is used alone, so there is no need for any integrations.

The tool is not majorly used to monitor traffic or intrusions, so it doesn't provide much visibility in such areas. I am not sure whether Fortinet FortiGate IPS can be used easily for monitoring, considering that our company has many firewall tools over different networks. I am not sure whether it is possible to use the tool to log in or sign in individually.

I rate the overall tool an eight out of ten.

We use it as a security solution.

Fortinet FortiGate SWG's content is its most valuable feature.

Fortinet's licensing is high compared to other products.

I have been using Fortinet FortiGate SWG for ten years.

The product is stable, and I rate the solution's stability a nine out of ten.

A few private and government companies use Fortinet FortiGate SWGs. It is popular among enterprise customers.

The customer service team is helpful. They have good technicians.

The initial setup is easy.

Fortinet FortiGate SWG can be expensive for some customers. We recently had a project for a customer where we could not protect the cost, so we had to look elsewhere.

I recommend this solution. Fortinet FortiGate SWG is better than the market alternatives. It's easy to install and manage, and I rate the solution an eight out of ten.

We use FortiGate Next Generation Firewall mainly for network security.

The solution's application control is very powerful. Another valuable feature is the integration between the firewall and the switches we have. The FortiSwitch extended security fabric is one of the things that we like about the solution.

The solution's stability should be improved because it is extremely unstable.

I have been working with FortiGate Next Generation Firewall (NGFW) for eight years.

FortiGate Next Generation Firewall is a very scalable solution. Approximately 32 customers are working with the solution.

The solution's technical support team needs more improvement. The technical support team has a slow response and needs more experienced support agents to interact with the customers.

The solution's initial setup is easy and straightforward.

Since it's a security solution, it needs considerable time to deploy. We need to analyze the network, the customer requirements, and the policies we need to add, which can take a couple of days.

For any security solution, there is no straightforward deployment process. It depends on the survey on the customer side and what we are doing for the customer. One security engineer is required for the deployment and maintenance of the solution.

Since FortiGate Next Generation Firewall is a slightly expensive solution, the use case determines the ROI. However, since it's quite expensive for general usage, it has a lower ROI.

FortiGate Next Generation Firewall is an expensive solution with a yearly subscription. There are no extra costs in addition to the standard licensing fees.

The solution has a lot of features that we like. We don't need additional features because they compromise the solution's stability when they add more features. As a security gateway, we need to be much more stable than adding more features.

FortiGate Next Generation Firewall comes in two versions, namely, the hardware version and the cloud version. For the on-premises version, hardware is to be implemented on-site; for the cloud, it's a cloud security solution. So it depends on which version your customer is using. The licensing is very different for the on-prem and the cloud solution.

When it comes to complex solutions, I highly recommend FortiGate Next Generation Firewall.

Customers looking for SD-WAN and good application control should go for FortiGate Next Generation Firewall. Customers looking for high stability should avoid the solution.

Overall, I rate FortiGate Next Generation Firewall an eight out of ten.

FortiGate Next Generation Firewall can be described as the most complete solution.

When considering the policy of the vendors, they do not offer much of a discount policy, making the licensing model an area that needs improvement.

I have experience with FortiGate Next Generation Firewall for many years. My company is a reseller of the solution.

It is a stable product.

I recommend FortiGate Next Generation Firewall for small, medium, and enterprise-sized companies.

It is a scalable solution since Fortinet offers many other products.

My customers are satisfied with the technical support provided by Fortinet.

In my opinion, the pricing of the product is reasonable.

FortiGate Next Generation Firewall is a good product.

I rate the overall product between eight to ten out of ten.