Fortinet FortiGate Reviews

Fortinet FortiGate is a perimeter firewall which we are using for protecting our network and for defining policies so that only restricted access is given from outside to serve this purpose.

Fortinet FortiGate serves as our perimeter firewall which we utilize for protecting our network and defining policies to ensure only restricted access is given from outside.

A disadvantage exists when we are collecting the logs, as it sometimes becomes very difficult to interpret the logs that are generated from the firewall. The main challenge is finding out which IP is generating what kind of traffic.

We have been using Fortinet FortiGate for more than 10 years. We started with FGT 60, then moved on to 100, then 300, and currently we are using 501E.

It went smoothly and we have found it very useful because we have a redundant internet lease line. It takes care of all our requirements.

We have been informed by Fortinet FortiGate that it has already reached the end of service. It will be supported until next year, so we might procure a new solution. It cannot be scaled, so we will have to replace the box itself.

We have been using Fortinet FortiGate for quite a long time. As mentioned, we have used the last four series, and we found the product to be very stable. We regularly update it when updates are available, and the support has been good so far.

We are not using any previous solutions.

The system integrator performed the installation and it went smoothly. My team mentioned it is very easy to do the setup. Since it is software-based rather than hardware-based, and our people are very familiar with the software, the implementation proceeded smoothly.

The system integrator performed the installation.

We have received a very good ROI. It has provided significant time savings of almost 20-25%.

The solution is affordable.

My team has indicated that Fortinet FortiGate is more simple and secure compared to alternatives.

I rate Fortinet FortiGate a nine out of ten.

We usually use Fortinet FortiGate for a perimeter firewall, but also for our outbound traffic as well as for the tunnels, with around 40 to 50 tunnels on our firewall.

We are using it in our data center; we have the 2,000 series HA firewalls.

Fortinet FortiGate has positively impacted my organization by allowing us to replace all the firewalls in other locations, as around 90% of our company operates on Fortinet.

We enable the SD-WAN zone to handle multiple ISPs, allowing it to automatically switch over the WAN link if any latency hits the threshold value, eliminating the need for manual failover. The impact of SD-WAN on our network performance provides great stability with zero downtime; it immediately switches over without any delay, not even a fraction of a second.

Fortinet addresses many vulnerabilities with respect to SSL VPN on their devices; quarterly patch upgrades are released, and the Fortinet team is retiring remote VPN services in favor of whole encrypted IPsec remote VPN to enhance security against hackers.

I have found Fortinet FortiGate's user-friendly design to be the most valuable feature so far. Anyone can easily understand how exactly it works, unlike Palo Alto and Check Point which are complex to understand. 

I believe one area that could be improved in Fortinet FortiGate is posturing, specifically for remote VPN users, as there are OS-based limitations I encountered with only Windows; adding domain restrictions for VPN access would make it more competitive and useful.

I have been working with Fortinet FortiGate for almost five years.

Overall, my impression of the stability of Fortinet FortiGate is very good, as I haven't seen any issues in the five years I've been using it, and there is no degradation of services on the firewall. However, I have observed some issues with FortiAPs, which is a different platform.

Based on my experience, Fortinet FortiGate is very scalable. Earlier it was suitable for mid-infra, but now we can use the firewalls for enterprise-level needs.

Whenever I am stuck or need help, Fortinet support is available 24/7, regardless of the time zone I'm in, and they immediately jump in to assist, provided it is licensed.

Positive

Before implementing Fortinet FortiGate, we were using SonicWall and ASA firewalls, which have now been replaced. The reason the previous firewalls were not suitable for our company anymore is that they were not competitive; they lacked UTM features, had limited VPN capabilities, and were outdated, which led us to select Fortinet over Cisco FTD for future needs.

It's not so complex. It's user friendly. I have implemented more than hundred devices from scratch.

As partners with Fortinet, we are end-users of this tool for our customers.

I am not exactly aware of the pricing of Fortinet FortiGate, but I would say it is considerably cheaper compared to other firewalls.

I evaluated other options, particularly Palo Alto. Fortinet FortiGate is user-friendly and as competitive as Palo Alto, Check Point, and FTD. It has the same features as other vendors but at a lower cost.

I would rate Fortinet FortiGate a ten out of ten.

We have a couple of use cases for Fortinet FortiGate. We are using it for SASE, the Secure Access Security Edge, to provide VPN services and firewall functionality. We are also using their access points as well as their firewalls and switches.

It is providing consistent security policies across multiple locations.

Fortinet Unified SASE is fantastic in my opinion. We rely heavily on it. It also provides remote access.

The solution provides consistent security policies across multiple locations.

The licensing is a little confusing and a bit too granular for Fortinet FortiGate. I would like to see a more streamlined set of options. 

The hardware is not terribly expensive, but the software license and support can be quite expensive. Some improvements could be made regarding cost considerations and complexity around their licensing.

I have had experience with Fortinet FortiGate for about three years.

Fortinet FortiGate is completely stable and rock solid. From a stability perspective, Fortinet FortiGate just works; you get it set up and it does not fall over. We have had no security-related incidents related to anything with the FortiGates. The advanced features are really good.

We are not that big, however, we have had no scalability issues whatsoever with Fortinet FortiGate. We have a redundant setup for failover, however, it has not had to fail over ever and we have not had a capacity issue. It is highly scalable.

Their support is outstanding for Fortinet FortiGate. You get through to a person. They are very quick to respond and they are extremely knowledgeable and very helpful.

We previously used Palo Alto, and the reason we switched to Fortinet FortiGate for firewalls or SD-WAN edge solutions was reputation. We felt that the product set just fit better and was more flexible.

The initial setup of Fortinet FortiGate was pretty straightforward. It gets a little complex with routing rules and ACLs and VLANs and things of that nature. However, the interface is pretty straightforward. It has a good CLI interface as well. Whenever it was a bit too complicated, we would pick up the phone and get an expert to help us through it.

Return on investment since having this product is hard to quantify as it is a sunk cost and the cost of doing business. Having this functionality in place has shown no negatives, and this solution works effectively. 

We do not have significant cost overhead to maintain it. Once you get it set up, it just works. It is a little expensive, however, you get what you pay for. Whenever we need support to bring on something that we do not understand, they help us. From a net cost overhead, it is cost avoidance from additional headache related to instability or things not working properly. 

The return on investment is more about cost avoidance and stability, resulting in lack of downtime and incidents.

The licensing could be improved as it is a little confusing and too granular for Fortinet FortiGate. I would like to see a more streamlined set of options.

We operate in the Insurtech industry. We have not integrated it with the SD-WAN features yet. 

We do not utilize Fortinet FortiGate's data center solution as we are not big enough for that. 

On a scale of one to ten, I rate Fortinet FortiGate a nine.

Fortinet FortiGate is strong in SMB and mid-market, approaching SD-WAN from a security perspective. Customers have requirements for internet as many are moving away from private connectivity and migrating to Teams, making security a top priority. They've chosen Fortinet FortiGate as it offers both a comprehensive security portfolio, including intrusion detection, deep packet inspection, and VPNs. It provides robust SD-WAN capability, eliminating the need for two vendors. Additionally, they offer a SASE solution for smaller sites where a virtual Fortinet FortiGate can be used instead of a physical one, saving space for retail locations.

These features resonate with small to medium-sized organizations, attracting more people to the Fortinet FortiGate solution since it's security-first while also providing SD-WAN capability. Unlike competitors such as Meraki that limit connections to two, Fortinet FortiGate allows up to 100 connections as their focus is on security rather than SD-WAN.

Fortinet FortiGate SD-WAN capabilities typically require redundancy depending on the carrier. There are two types of redundancy: network redundancy with different carriers, such as Bell and Telus, or Verizon and AT&T, both connecting to the same Fortinet FortiGate box. In traditional setups, when there were two connections, one would be active and the second passive, activating only during failover. This wasn't cost-effective as customers paid for both connections while one remained passive.

In the SD-WAN environment, both connections become active, allowing application-specific routing. For instance, voice traffic can be directed to one connection while data traffic uses the other. Rules can be created specifying alternative routes if the primary connection is unavailable.

The impact on service availability and overall network performance is significant. It provides customers with assurance against single points of failure. However, capacity management remains crucial. If both networks operate at 80% capacity and one fails, the secondary connection would face a 160% load, causing blockages. Ideally, connections should operate at 50-60% capacity to handle full load during failures.

Fortinet FortiGate has been successful and ranks high on the Magic Quadrant since they're innovators with appropriate pricing. They offer a best-in-breed solution for their target market. While they're not focused on large enterprises they excel in the mid-market SMB segment, offering comprehensive solutions from endpoint protection to VPNs and deep packet inspection.

Fortinet FortiGate has started implementing AI, however, it hasn't reached full maturity. Their AI solution doesn't compare to solutions such as Microsoft Copilot and SharePoint, primarily since AI relies on data, and Fortinet FortiGate focuses on perimeter defense and security rather than internal network data.

One notable limitation is the absence of honeypot capabilities, which competitors such as Palo Alto offer. These capabilities entice and trap attackers, allowing analysis of attack vectors. Fortinet FortiGate focuses purely on defense mechanisms without actively gathering intelligence about potential threats. This approach aligns with their mid-market focus, where such advanced threat intelligence features might be less critical than in enterprise environments.

I have architected Fortinet FortiGate over the last 12 months.

Fortinet FortiGate performs at 100% effectiveness when customers have the right skill sets and policies in place, making it a very reliable solution.

Scaling-wise, there have been no problems with Fortinet FortiGate. In the mid-market, which typically handles up to 50 to 100 sites and campus environments, there haven't been any scaling issues.

From an implementation and partner support perspective, Fortinet FortiGate's support deserves a rating of seven out of ten.

Neutral

The setup requires understanding of security and is not plug-and-play, but it isn't complex when implemented by certified Fortinet engineers.

We provide professional services to install Fortinet FortiGate through our Fortinet-certified engineers, who handle installation services for companies.

The return on investment is 100% guaranteed. Similar to car insurance, security investment proves valuable when incidents occur. For small businesses, average losses can reach $300,000 per week, while mid-market companies face potential losses of $500,000 to a million. This makes the annual security investment of approximately $100,000 worthwhile. Furthermore, cyber insurance requirements often necessitate solutions such as Fortinet FortiGate rather than simpler alternatives.

Fortinet FortiGate pricing varies based on hardware specifications, size, and quantity purchased. Many companies access these solutions through managed service providers, who add their management fees to the hardware and license costs. Due to security being a specialized skill set and the various types of attacks (phishing, DDoS, hacks), having Fortinet FortiGate represents just one component of the total security investment.

There's always room for improvement with Fortinet FortiGate, as no vendor achieves perfection. In their market segment, considering their offering and price point, they merit an eight out of ten rating.

I have experience with Fortinet solutions.

I have had experience recently with FortiGate as well.

All the basic and important features needed for perimeter solutions to protect branches and headquarters are valuable with the FortiGate Next Generation Firewall (NGFW).

The FortiGate Next Generation Firewall (NGFW) is deployed in a company that is a carrier of telecommunication services, providing solutions to all kinds of companies around the world, especially in Mexico.

It addresses new and emerging security threats in the telecommunications industry, as we recognize that it is a highly effective solution that provides robust protection. That's the reason it was the main product we used to sell for perimeter security.

We use FortiGate Next Generation Firewall (NGFW) for the access points and their switches.

All the basic and important features needed for perimeter solutions to protect branches and headquarters are valuable with this solution.

The antivirus, malware, anti-malware, anti-spam, IP VPN connections, and firewall rules bring the most value for me and my clients. 

The segmentation capabilities enhance our security posture because they work effectively combined with the switching solutions, allowing us to easily combine switching with the firewall, as we could segregate the VLANs. They were powerful and appropriate for the solution we needed while supporting all the adequate features we required.

I'm not completely sure how Fortinet can improve the FortiGate Next Generation Firewall (NGFW), however, there were situations of availability related to their switching solutions due to box errors. Fixing the bugs in their switching solutions is necessary because I have faced several situations where we lost connectivity because of their firmware.

I have almost 12 years of experience with FortiGate Next Generation Firewall (NGFW).

Regarding next-generation firewalls, I would give the FortiGate Next Generation Firewall (NGFW) a rating of ten out of ten for stability.

The scalability of the FortiGate Next Generation Firewall (NGFW) is quite good; it is easy to make it scalable.

I would place the scalability between nine and ten on a scale of one to ten.

I would rate Fortinet's support a ten out of ten. They are excellent and very available whenever we needed their help.

Positive

We used to struggle with Cisco because it didn't have most of the features that Fortinet has, and when comparing with Palo Alto or Check Point, the prices are higher, which is important for solutions needed by mid-sized companies.

Their deployment team is substantial, consisting of between 100 and 150 people.

Most clients realize the benefits from deployment immediately. They look for internet availability and the security needed for their endpoints.

Fortinet has good prices compared to other vendors; there were cheaper options, and when we compared Cisco, Fortinet's prices were lower.

I don't remember how I bought the FortiGate Next Generation Firewall (NGFW), so I can't say if it was purchased through AWS Marketplace.

The FortiGate Next Generation Firewall (NGFW) helps with the economic aspect because it effectively protects what we needed with the companies in designing the products and solutions.

I'm not familiar with how the FortiGate Next Generation Firewall (NGFW) utilizes artificial intelligence or if it has AI-driven features to improve threat detection and response, so I cannot detail its existence or help.

I would recommend FortiGate Next Generation Firewall (NGFW) to others. It is a very good product. In my position, I sold approximately 1,000 units.

On a scale of one to ten, I rate this solution a ten.

I integrate service with Fortinet FortiGate. I integrate service, and some manage service, so the customer already has the firewall and we manage them, or we sell the hardware. But mostly for hardware, there are a lot of sellers, so mostly we do the services.

If the customer wants Fortinet FortiGate, I give Fortinet FortiGate. If the customer wants Sophos, I give Sophos. Both have a different market and different customer profile.

Whatever the customer asks, we provide. I'm running Fortinet FortiGate now because a customer wants that in my data center.

I find Fortinet FortiGate valuable due to Fortinet's ASIC, as I have known Fortinet FortiGate since a long time ago, from the first time they ran. They use ASIC. While Sophos also has a special hardware solution such as Xstream, they have all different purposes and different advantages, so I can utilize both. It depends on the customer.

I don't have any problem with Fortinet Unified SASE. Mostly in Indonesia, in our market, customers buy the brand without knowing the full capability of it. So actually with Fortinet FortiGate, you also have to implement FortiManager, FortiAnalyzer and for hardware control, FortiNAC and so on. But because it's so modular, sometimes customers mistakenly just buy the firewall. The firewall doesn't work right. That's a problem. I understand that this product design philosophy of Fortinet FortiGate is meant to serve very big corporations which have established SOC teams. They put segmentation of who is the manager and who is the analyzer. That's why they put the separate server for that. But because the brand is so famous, even small customers want to buy it.

I think Fortinet FortiGate could learn from its competitors that there's nothing to change. Perhaps they could just launch a lightweight version of the SIEM and SOAR tool, which is cloud-based. This would be for small organizations who cannot afford to build the full scale SOC facility and team.

I have been working with Fortinet FortiGate for maybe five or six years, or maybe longer than that. It could be 10 years as well.

I have been working with Fortinet FortiGate for quite a long time, but I am not a partner yet. Last year I took partnership with Sophos, so we do both.

I don't have experience integrating SD-WAN capabilities with Fortinet FortiGate yet, as we had a case but the project didn't go. SD-WAN is not mostly firewall. Yesterday, I just had a discussion with a new customer that wants to buy ZTNA and NAC.

I think the pricing of Fortinet FortiGate is affordable to some small customers, but they can only afford the firewall without the other components. Mostly firewall, so it's just selling products, not selling a security system.

In my opinion, Fortinet FortiGate doesn't need to be improved. It's because it has a different market. I had a case maybe five or six years ago. There was a tender of SD-WAN implementation for 10,000 mini marts. A company that has 10,000 outlets of mini marts needs security. In the data center at their headquarters, they need a very big firewall, up to 500 Gbps. But in the outlet, which is a small store or mini mart, they need a very small firewall that's capable to do SD-WAN, authentication, security, VPN and so on. Fortinet FortiGate has it all. Fortinet FortiGate is suitable for that kind of organization. They have a special SOC, so they buy FortiManager, FortiAnalyzer and so on. I rate this review an 8.

I am working as a presales engineer or system engineer, designing solutions for other clients.

The clients use this solution for their data centers and perimeter security.

The main reason customers prefer Fortinet FortiGate is that it's security-centric, allowing them to implement security features such as a next-generation firewall and translate this to the WAN or SD-WAN architectures, or as a base if they want to grow in more security features or other verticals such as ZTNA and SASE. It's a little baseline for the rest of the verticals or features that can be exploited.

Fortinet FortiGate compares favorably to others in terms of the technology. Second, it's about the relationship they build with their customers. I'm in Colombia, and I can say they have an excellent sales and engineering team that provides a great experience for their clients. They are very attentive and engaged. This company has a rich history; they grow alongside their clients. They take the time to show clients all the benefits and features of the technology they offer. It’s a much more personal experience for everyone involved.

Fortinet Unified SASE is strong for providing consistent security policies across multiple locations. Working with Fortinet in the SASE aspect has been easy. Customers appreciate the features we can offer with Fortinet SASE and ZTNA solutions. They particularly appreciate how they can integrate everything with the baseline of Fortinet FortiGate, and how they can easily apply all the features they need to secure access to different applications from a single console. Some clients use the Fortinet FortiGate data center solution for their data centers as a hub and the perimeter security service.

My experience integrating SD-WAN capabilities with Fortinet FortiGate is in the middle ground. Fortinet FortiGate, as a security-centric fabric, can implement an SD-WAN solution. It can be somewhat manual in some cases, but using other tools that Fortinet has, such as FortiManager, makes implementing an SD-WAN network easier with less effort.

The implementation depends more on the engineer's skill when integrating SD-WAN with Fortinet FortiGate. If you don't have extensive skills in implementing Fortinet FortiGate, it can be difficult, but with more experience, it becomes easier.

In the presales team, I have been working with Fortinet FortiGate for about five years, and as a customer, I worked with it for about two years between 2016 and 2018.

Fortinet FortiGate is very stable and secure for customers.

It's easy with Fortinet FortiGate as they have a very good solution for scalability. If we need to grow in branches or licenses, we can easily do it. The most important aspect of growing this solution is their strong enterprise-level account managers, who always help customers find the best solution and an easy path to grow their architecture with Fortinet.

I would rate their customer service around eight because not everything is perfect, but they have very good customer experience and relationship management.

Positive

It depends on the size of the company or the solution they want to implement with Fortinet FortiGate. Most companies could have another vendor or baseline products, so we need to depend on the scenario.

It is very straightforward to set up initially. The duration depends on the size of the company and the solution they want to implement. They might already have another vendor or a different baseline of products, which makes things more complex.

As for deployment models, we typically offer both on-premises and cloud options. We have been working with AWS, and it has been a very positive experience. They provide readily available machines, and everything is easy to find in the marketplace.

I believe it's a fair price for the kind of technology they offer their customers. Sometimes, I think they could apply more discounts to engage customers further. This approach would be beneficial, as it helps us expand the solutions available to clients. As for discounts, they do engage clients with them, particularly in strategic business situations, such as with large accounts in sectors like banking and big retail.

When comparing Fortinet to other vendors, Fortinet generally tends to offer better discounts. However, this does not imply that their solutions are of lower quality; rather, they demonstrate expertise in meeting customer needs.

Some users utilize AI and machine learning enhanced features, such as the FortiGuard services, though not all do as the AI features are relatively new. However, we have successfully positioned some features, particularly in areas such as AI. For example, the threat detection capabilities and the AI assistant available in the FortiAnalyzer service are noteworthy. Fortinet offers a license that can be utilized for AI features, especially in FortiManager. Users appreciate this feature because it helps them achieve better network configuration. If they encounter any issues within the network, they can easily leverage AI to find solutions to those problems.

Overall, I would rate Fortinet FortiGate a nine out of ten because while not everything is perfect, they're really doing their best and demonstrating it through their technology.

Majorly, I use Fortinet FortiGate for establishing SD-WAN in different remote locations. I also use it for segmenting wireless from LAN and implementing basic policy routing for departments. The next-gen features on Fortinet FortiGate permit proxy access, where URLs can be specified for specific users or departments to access.

Fortinet FortiGate has several valuable features. The configuration and policy setup are easy to implement. There are embedded features in Fortinet FortiGate, including DLP features, WAF presence in the firewall, and proxy capabilities. It has security profiles that can be set for various functions. In terms of security, it is particularly strong.

SD-WAN offers better reach, good reachability, and enhanced performance for network optimization. People implement SD-WAN today because of reachability and network optimization capabilities.

Fortinet FortiGate is effective in protecting against malicious access. It has a robust security architecture, which is something I truly like about FortiGate.

The SD-WAN integration is very simple. I appreciate the simplicity of the FortiGate system. It's one of the things I like most about it. With FortiAI, it's very easy to input your queries, and the system helps you set it up. If you prefer to do it manually, there is excellent documentation and step-by-step guides available to assist you. For me, the experience has been seamless and straightforward.

I cannot think of many improvements needed for Fortinet FortiGate. However, the pricing compared to competitors is quite high, though you get value for what you pay with Fortinet FortiGate.

With FortiSIEM, I have experienced some challenges. It has been suspended and is not available for utilization now. They should work on improving FortiSIEM.

I have worked with both virtual appliances and physical devices, primarily with hardware devices, for over five years. The models I have used include 60, 100, and 201 series.

Fortinet FortiGate is one of the best firewalls available. There are no crashes or performance issues. It is very stable and reliable.

The solution is scalable.

I have worked with Sophos and Check Point firewalls. Fortinet FortiGate leads compared to other solutions. Based on customer requests, we provide different options. I recommend people should consider Fortinet or Sophos, depending on their needs. Fortinet FortiGate performs well against other firewalls in the market.

The hardware is easy to set up. I have only had issues with the activation of the evaluation license. 

There has definitely been a return on investment with Fortinet FortiGate.

The pricing depends on the capacity required. There are 100 series, 200 series, and 500 series options. The prices are moderate and reasonable for each series.

For organizations using Fortinet FortiGate, it is important to utilize the security profiles properly. Make sure anti-spoofing is set up and networks are well-segmented on the Fortinet. Ensure proxy configuration is based on URL access stability.

I would rate this solution a nine out of ten.

I am focused on data center solutions, specifically implementing the FortiGate, FortiAnalyzer, and FortiProxy systems. 

Fortinet FortiGate offers several valuable features, particularly as an interface-based solution. Its design makes it easy to understand both incoming and outgoing network traffic through its interface. The log detection system is user-friendly and effective, allowing for straightforward monitoring of network activity. Additionally, the support for 802.1X and other solutions enhances its functionality. The Unified Threat Management (UTM) feature is particularly effective and beneficial for organizations. One of the best aspects of FortiGate is its adaptability within various environments.

Fortinet FortiGate is a good solution for SD-WAN in network enterprises, with LAN or two ISP solutions that can be separated, making it good for lab parallel network segregation. My experience integrating the SD-WAN capabilities includes having two ISP solutions. One is Airtel with a speed of 1 Mbps, while the other is Vodafone, which offers speeds of 60 Mbps and 40 Mbps. These traffic levels are manageable when using SD-WAN for effective traffic management. Essentially, the integrated SD-WAN on the FortiGate device is suitable for handling traffic management with these ISP solutions.

The security policies in Fortinet FortiGate are very attractive, including application, web filtering, and anti-virus, with very effective web filtering in this organization for behavioral analysis by users. 

The solution has improved my organization significantly, with impactful capabilities such as sandboxing and cloud solutions, such as XDR, MDR, and EDR.

I believe there is room for improvement in machine learning and AI in Fortinet FortiGate. I would like to see more automation regarding AI and machine learning in Fortinet FortiGate.

I have five-year experience with the Fortinet FortiGate firewall.

It is very stable. I would rate the stability of Fortinet FortiGate a ten out of ten.

Its scalability is very good. It's easily scalable.

We have about 15,000 users.

Their customer support is very good. I would rate the technical support for Fortinet FortiGate a ten out of ten.

Positive

The deployment of Fortinet FortiGate is easy.

The solution requires maintenance, and upgrades are very easy and impactful, providing seamless upgrade processes without critical issues.

I estimate that Fortinet FortiGate has saved us around 20% in terms of time, money, and resources.

The pricing of Fortinet FortiGate is average, not cheap or overly expensive compared to other firewall solutions in the market. It's effective and affordable for customers.

When comparing Fortinet FortiGate to other solutions like Palo Alto or Check Point, I find that Fortinet is much easier to implement. My colleagues often struggle to understand other solutions, but Fortinet is more adoptable, which is beneficial for training purposes. The training resources available at training.fortinet.com are quite helpful. I believe Fortinet stands out in terms of effective training and the quality of knowledge provided. Their documentation is particularly impactful, making the learning process more efficient. Overall, Fortinet offers a very effective and knowledgeable training experience compared to other vendors.

I would rate Fortinet FortiGate a ten out of ten.

A use case for Fortinet FortiGate includes connecting nine to ten different sites to the main Fortinet FortiGate firewall and diversifying the traffic with two-way traffic. It functions as a load balancer to balance loads between different sites.

The main benefits of Fortinet FortiGate, especially in India, are its economic value, scalability, and different sizing options. When compared to Cisco or Juniper, upgrading to a higher class involves a substantial cost increase, whereas with Fortinet FortiGate, the next class is only marginally higher.

The best feature of Fortinet FortiGate is SD-WAN. It ensures continuous connectivity by taking over during link failures, preventing any downtime for the company. One of my clients faced many problems with the primary internet provider and requested multi-path functionality. We implemented the SD-WAN facility and added another three-link WAN link, converting the normal port into SD-WAN and assigning weightage. When there is no response from the primary connection after a certain number of milliseconds, it switches to the secondary and then to the tertiary connection. The impact on network performance with the SD-WAN is very good, provided it is sized properly based on throughput. It is necessary to calculate how much data is transferring daily or per minute, then size the firewall accordingly and select a particular model.

The Fortinet FortiGate solution offers ease of use, not requiring highly skilled workers. General users with two or three experienced team members can read the manual and implement the needed configurations.

Hardware-assisted DDoS protection in Fortinet FortiGate is very easy to implement with single-click options, though care must be taken not to burden bandwidth. Certain ACL units should be used, applying rules only to interesting or exposed traffic.

Some features in Fortinet FortiGate need improvement as we discover when calling support that certain actions must be done from the command line. Not all features are available in the web UI. Features such as enabling multiple MPLS circuits can only be accomplished through the command line, so these need to be made available in the web UI.

Fortinet needs to improve customer support and documentation.

I have been working with Fortinet FortiGate for more than 15 years.

Fortinet FortiGate is very stable, but the person procuring the firewall needs to ensure it is sized properly. If the sizing is not proper, it will create many problems.

The scalability of Fortinet FortiGate is very good. It has improved significantly compared to five years ago when it was not as scalable.

When we encounter struggles, they perform actions from the backend, taking control and resolving issues. This becomes a black box for us because we do not know what actions they took.

Neutral

The initial setup of Fortinet FortiGate is straightforward and easy. HA is the deployment model we always recommend.

While we have not calculated it specifically, we found the ROI to be good, approximately 97% to 98%.

I utilize the Fortinet FortiGate hardware and have never tried the VM version, working only with normal VPN configuration, user configuration, normal routing, and multiple WAN links. While we are using the dynamic segmentation feature, we have not tested it thoroughly enough to analyze its benefits.

People generally go with the recommendations of high-level architects. For core networks, they typically suggest Cisco or Juniper. In India, the market follows whatever the chief architect suggests without quantifying whether it is worth it.

My advice for others considering Fortinet FortiGate implementation is to focus on its ease of use. 

Based on my experience, I would rate this solution an eight out of ten.