Fortinet FortiGate Reviews

We are using Fortinet FortiGate as a firewall.

Fortinet FortiGate has been invaluable. It has helped save costs due to its various features, reliable performance, very good UI, low latency, and stability.

The Threat Intel engine in Fortinet FortiGate is highly rated for its effectiveness in threat prevention. It has a good UI and overall integration, including FortiGate Manager for controlling all firewalls from a single place.

The anti-malware engine could use an upgrade. It should automatically classify and sandbox malicious packets with more granular controls, including providing details like TV numbers.

Initially, we faced some issues with updates due to network factors needing to be white-listed in the proxy. These problems have since been resolved, and we are not facing any issues now.

While I don't have a clear picture of scalability, we scale up in different regions based on the number of users and the amount of load. This is typically handled by architecture teams.

Customer support is very responsive, addressing queries in a timely manner. I would rate the customer support ten out of ten.

Positive

We have also used Palo Alto Firewalls and Fortinet FortiGate. Fortinet FortiGate has a better UI and overall integration, including FortiGate Manager for single-place control over all firewalls.

The initial setup was straightforward and easy, thanks to the support provided. I would rate the ease of setup ten out of ten.

We had the help of the end-of-support team for the setup, which made the process quite straightforward and easy.

The price is reasonable for our company. The finance team handles the specifics regarding the license costs.

We evaluated Palo Alto NG Firewalls before settling on Fortinet FortiGate.

My main use case for this product is a firewall.

I appreciate the ease of use, ease of setup, and the different abilities it has. I have been very pleased with it over SonicWall. The interface of Fortinet FortiGate is a lot easier to use and more robust, plus their VPN option is much better; SonicWall is ridiculously slow. I have been very happy with the effectiveness of the unified SASE for providing consistent security policies across multiple locations. It has positively impacted my organization by freeing me up regarding administration; I spend a lot less time on administration. It probably saves me about 30 to 45 minutes a week.

They could continuously focus their improvements on network perimeter security, as that's what they're best at.

I have had four years of experience with Fortinet FortiGate, going on four, possibly five. I cannot remember if we switched over to them in 2020 or 2021, but I think it was 2020.

Fortinet FortiGate is very stable. I don't have any issues with Fortinet FortiGate freezing up or needing frequent restarts. The firmware updates are automatic, and I have just been really happy.

While we're a single office with a single server, I can say that it can definitely be scaled up.

I had a little help from Fortinet FortiGate support, but other than that, it was just me deploying it. I would rate their support a 10; they're fantastic. Their knowledge makes them fantastic; if they had to research something and get back to me, it was very quick, and usually I get an answer right away.

The unit itself is probably comparable in price, maybe a little more expensive than SonicWall; however, the yearly maintenance is quite a bit more, but it is more robust and worth it.

For a firewall, the initial setup was pretty straightforward for us.

I had a little help from Fortinet FortiGate support, but other than that, it was just me deploying it.

I believe all use cases could work for this solution. For us, Fortinet FortiGate is deployed on-premises. We purchased Fortinet FortiGate through a Fortinet reseller. Their knowledge makes them fantastic; if they had to research something and get back to me, it was very quick, and usually I get an answer right away.

I would rate Fortinet FortiGate an 8 or a 9 overall; everything always has room for improvement, but I'm pretty pleased with it.

Fortinet FortiGate is used just to manage our network because our network is managed by another company. I work in a small to medium-sized industry.

Fortinet FortiGate is used to prevent security failures. Since implementing the solution, we have seen improvements in security and in the distribution of our network.

In my opinion, Fortinet FortiGate could be improved by making the appliance smaller than what we have here, as it is pretty big.

We have been using Fortinet FortiGate for three or four years.

Fortinet FortiGate is better for large enterprise networking compared to MikroTik because we have about 100 people using our network, and we have had few problems compared to the time we were using MikroTik, which didn't work for us as well as the Fortinet FortiGate 200D does.

We never have any issue or problem that hasn't been solved in two or three hours. The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with. Fortinet FortiGate does not require a lot of maintenance.

Positive

We have been using Fortinet FortiGate for three or four years, and before that, we used MikroTik. We switched to Fortinet FortiGate because the company that provides service for us started to work with Fortinet FortiGate as a partner, and they showed it to us. We liked it, and we started to use the Fortinet FortiGate solution.

The initial setup for Fortinet FortiGate was pretty easy, and they completed it in one hour and a half.

Two people worked to support us on Fortinet FortiGate. One of their job roles was manager, and I don't know the other role.

My advice for people thinking about using Fortinet FortiGate is that you have to try to understand your necessities first. Make a comparison with other players in the market and have a good company to manage the equipment if you don't have the competence to do it yourself, preferably a third company that does this for you. 

I would rate Fortinet FortiGate an eight out of ten.

The main use cases for Fortinet FortiGate usually include security to filter traffic to inside the network, load balancing and QoS for the user side, as well as Zero Trust Network Access, allowing users outside and inside the network fabric to connect to our application that is under the firewall.

The most useful features in Fortinet FortiGate are the security features, where we can analyze what kind of traffic is inside our network, and we also utilize ZTNA for limiting and managing our network access. 

The issue with Fortinet FortiGate is the many security CVEs around; I have read there are probably multiple critical CVEs above 9.0 in Fortinet FortiGate products. There appear to be fewer issues with other brands such as Palo Alto or Check Point, but especially with Fortinet FortiGate, there are many vulnerabilities that can be found. The way we manage this is by applying updates whenever new ones are available, but the high critical CVEs generate concern, as we buy security products for our safety and when we find that attackers can easily breach them, it makes us question the safety of the product itself. 

I hope we can deploy the product in an active-active configuration since we currently have two units in an active and passive setup. There are limitations when trying to install it with active-active, but we hope to run it that way.

I have been working with the Fortinet FortiGate firewall for two years.

Stability wise, Fortinet FortiGate is quite good; we rarely have issues with stability, and compared to the previous solution we had, which was much worse, Fortinet FortiGate has had no issues so far.

Fortinet FortiGate is not very scalable. We use the appliance, and once we are out of capacity, we have to buy a new one, as there is no way through scalability. I would rate scalability as a seven out of ten.

I rarely use customer support, but there are a few cases where I tried to reach out before, and it was handled and closed properly, so I had no issues. I would rate the support as nine, based on my experience.

The previous solution we used was Sophos. Sophos had stability problems.

The setup is not complex. It's quite straightforward.

The return on investment after implementing Fortinet FortiGate has been quite okay, allowing us to get the value of what we paid for.

The benefit is more like we are buying insurance. All of the security products may be optional, but having them helps us feel safer and assures us that our network is protected from attackers.

It's affordable. We usually pay about 10K USD annually for the license on a yearly basis.

We have experience with integrating SD-WAN capabilities in Fortinet FortiGate. It is only useful if we have multiple internet operators; if we use a one-to-one connection, there are no benefits. Some of our sites do have multiple internet access, allowing us to use SD-WAN to manage the connection, making it easier to treat it as a single connection while SD-WAN helps manage and load balance between those two.

We do not use Fortinet Unified SASE now, but we are considering implementing it. In the data center, we actually have another solution, but Fortinet FortiGate is used only for our customer-facing side.

My advice to those planning to use Fortinet FortiGate is to check for updates often. We had several issues before due to the firmware we used, but after upgrading to the 7.4 firmware, a lot of issues were resolved just by applying the update regularly. Actually, compared to other firewalls, it is on the very affordable side.

I would rate Fortinet FortiGate an eight out of ten.

We are using it for security purposes. We have deployed it across multiple locations where we are already using it.

The security features are valuable, particularly the ransomware attack protection features. Fortinet FortiGate provides excellent security against ransomware attacks.

It contains every feature that is required. The things we require are already sorted out, so there isn't any scope for improvement as far as our requirements go. However, its price can be better.

We have been using it for more than one and a half months.

It's stable. I would rate it an eight out of ten for stability.

It's scalable. I would rate it a nine out of ten for scalability.

I am handling all the operations. We have multiple staff members at multiple locations.

Coming from a technical background, there hasn't been any requirement to speak with customer care representatives. The manual provided covers everything comprehensively.

Neutral

I have experience with Sophos, Fortinet FortiGate, and SonicWall.

We purchased it through our vendor. Our company doesn't prefer to make purchases through online shopping platforms such as Amazon and Flipkart.

We have seen a return on investment of more than 20%.

It is somewhat expensive compared to other solutions such as Sophos.

I would recommend it to others. I would rate Fortinet FortiGate a nine out of ten. There isn't a need to compare it with anyone else because Fortinet FortiGate is at the top of the market.

The use case for Fortinet FortiGate primarily refers to firewall functionality. 

The best features of Fortinet FortiGate include the simple user interface. The GUI is in English with intuitive navigation. It is very easy to find solutions, meaning it is simple to locate what we need and which settings we need to modify through the GUI.

We have integrated FortiGate SD-WAN. It's working pretty well.

Areas that have room for improvement in Fortinet FortiGate include support and GUI enhancement. While the GUI is already simple, further improvements would greatly benefit them.

I have been working with Fortinet FortiGate for one year in this organization.

I would rate the stability of Fortinet FortiGate as eight out of ten, as it has proven to be reliable.

Fortinet FortiGate is scalable. We primarily deal with small and medium businesses, and for our clients in this segment, it works effectively.

The technical support that Fortinet provides is not satisfactory. When we call Fortinet technical support, it takes too much time to connect with them. The process is complicated, requiring us to hold for many minutes, and when we visit clients, we are not satisfied with their technical support.

Neutral

We work with five firewall vendors, including Fortinet, Cisco, Palo Alto, SonicWall, and Sophos. We have specialists for their products.

We first recommend Fortinet FortiGate or Palo Alto. If a customer cannot afford Palo Alto, we recommend Fortinet FortiGate. If they cannot afford Fortinet FortiGate, we recommend Sophos or SonicWall.

When comparing security policies, Palo Alto is superior to Fortinet FortiGate, but Fortinet FortiGate is adequate. For businesses with higher requirements, we recommend Palo Alto due to its advanced security features, while for small and medium businesses, we suggest firewalls based on their specific requirements.

Deployment of Fortinet FortiGate is straightforward. If the customer requires, we can configure it from our end and deploy it directly.

Our clients are small and medium-sized businesses. They can't afford the cloud. They take the device and install it on-premises.

Fortinet FortiGate is cost-efficient. Palo Alto is expensive, but Fortinet FortiGate is not.

I would recommend Fortinet FortiGate because the GUI is understandable for English speakers, and the configuration is straightforward. 

I would rate Fortinet FortiGate an eight out of ten.

Our organization utilizes Fortinet FortiGate for SD-WAN. All business units within our organization connect to the SD-WAN, which is constructed using Fortinet devices.

The primary reason we implemented Fortinet FortiGate was to enhance connectivity. Our previous reliance on MPLS resulted in low bandwidth and high costs. By transitioning to SD-WAN devices and leveraging common ISP connections, we have achieved two significant goals: substantial cost savings and increased flexibility in configuring device communications across our various plants.

FortiGate offers us the capability to provide visibility into and segmentation of our industrial devices. We are currently implementing this for the LAN, and we are migrating firewalls to Fortinet FortiGate devices. In this process, we are separating the operational network from the IT network.

Knowing that some of Fortinet's devices can be used in harsh environments that's nice to have. But that's something that is not needed right now just because we are only using them in very few places. These devices are specifically used to prevent intrusions in harsh environments. 

These devices help to control network traffic with OT-specific protocols. The LAN firewalls we have implemented are purchased with the functionality of network-specific modules to enable the management of network traffic with OT-specific protocols.

The approved offerings help us achieve our budgetary goals. We are adapting the budget to align with the devices provided by Fortinet. We are doing this because we can utilize Fortinet. Therefore, all of our budgets should take this into account as well.

The decision to utilize Fortinet stems from its ability to integrate with our preferred vendors. We have plans to implement both ClearPass and Nozomi as part of our OT cybersecurity strategy, both of which offer API-based interfaces for connecting to FortiGate devices. This interoperability is crucial for our organization.

The combination of FortiGate and FortiManager provides a comprehensive overview of all the firewalls we manage. It is very convenient to have everything centralized in one place.

FortiGate has helped reduce the risk of cyberattacks that could disrupt our production, which is one of our primary goals.

We were not affected by any cybersecurity attacks that would have impacted our production operations. However, we have a comprehensive plan in place to address such incidents. FortiManager enables us to block essential protocols and implement security measures across all business units if we detect a security breach in one area. This centralized approach ensures that the security measures we implement are consistently applied throughout the organization.

FortiGate has aided in centralizing the management of our network and security operations. The impact of this on the operational efficiency of our industrial network depends on how we organize it. Centralized management has significantly simplified management tasks. However, we require a dedicated team capable of addressing the diverse needs of different plants and business units, implementing necessary changes, and resolving any issues that arise. A single point of contact facilitates this process. In this regard, we have not only improved operational efficiency but also consolidated our management structure, reducing the need for multiple teams scattered across different countries.

FortiGate provides us with actionable data that helps us make informed decisions about the appropriate actions to take. Additionally, we utilize FortiAnalyzer to analyze the type of traffic we are experiencing, potential issues, and other relevant information. Furthermore, we monitor CPU memory, bandwidth, and other metrics associated with various IP connections using Fortinet devices. This monitoring is conducted across multiple firewalls. By employing these tools, we can ensure that any changes we make are the correct ones and are made for the right reasons.

The implementation of Fortinet's Security Fabric has significantly enhanced the security of our industrial control system. Previous solutions were unable to effectively manage the diverse protocols employed in this environment, resulting in operational and technological limitations. However, with the introduction of the new security fabric, we are now able to address these challenges and achieve a more robust security posture.

The Fortinet Security Fabric helps us reduce our mean time to remediation. With all its tools and centralized management, it's much easier to identify and resolve issues, leading to improved overall security posture.

Fortinet helped mature our approach to cybersecurity for protecting our industrial equipment.

The flexibility and ease of configuration are the most valuable features.

Overall, we are satisfied with the product. However, we encounter occasional capacity issues. The FortiAnalyzer, being a hardware appliance, has limited expansion capabilities. As our organization has grown, we've outpaced the FortiAnalyzer's performance. The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware. This is an area that could be improved. If we anticipate reaching the size of six countries within the next five years, investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware. The ability to scale the FortiAnalyzer in tandem with our growth would be a significant improvement.

I have been using Fortinet FortiGate for over three years.

FortiGate is now stable. We experienced some difficulties in the beginning, possibly due to some bugs we encountered. However, for approximately the past six months, we have been closely monitoring various ratings for FortiOS versions. As a result, we are currently running only on mature versions. Since then, we have observed that the device is significantly more stable than before.

The scalability for the FortiManger and the devices themselves is a nine out of ten but for the FortiAnalyzer it is a six out of ten.

On the few occasions that we have needed to use technical support, we have found them to be responsive.

Positive

We used different solutions such as Cisco, Watchguard and Sophos in different countries, and one of the reasons we switched to FortiGate was to standardize what we used in all the countries.

The FortiManager is one of the biggest advantages they have. From a single management point, we can manage all the devices connected to the support manager. This is something I haven't seen before. So, in that sense, I would say that the most important difference between FortiGate and other vendors is the FortiManager.

Due to the extensive network, the deployment spanned several months; however, on a site-by-site basis, each deployment was completed within a few hours. We had a minimum of two people per country involved in the deployment with 1-2 people from Central IT.

It was a mixed team vendor - in-house. The vendor expertise was really good and I would rate it on a 9 out of 10.

FortiGate's pricing falls within the mid-range when compared to other leading firewall solutions. While it's more expensive than Sophos, it's more affordable than Palo Alto.

I would rate Fortinet FortiGate eight out of ten.

We have FortiGate deployed across multiple locations with 120 firewalls.

I suggest testing FortiGate. For organizations looking for an affordable solution, with good management and initial management, Fortinet FortiGate is the right choice.

We are using Fortinet FortiGate for enterprises. We are a partner of Fortinet.

Its features are very good for the price. Their support is also very good. A lot of expertise is available in the market in terms of engineers. 

The best features of Fortinet FortiGate are its simplicity, ease of installation, and ease of functionality. It is very easy to learn and implement, and everything is clear. The deployment of Fortinet FortiGate is very straightforward. 

I would like to see improvements in Fortinet FortiGate regarding the active-active scenario. The active-active scenario is supported but not recommended, whereas other vendors are implementing active-active without issues. Perhaps in the future, we could effectively use both firewalls to increase the throughput. If there are two boxes, they both should be able to work.

Other than that, I don't have anything. I'm very happy with the features.

I have been working with Fortinet FortiGate regularly for a few months only, though I have previously encountered one or two installations.

Fortinet FortiGate is very stable.

There are multiple options available for small, mid-sized, and large-scale deployments.

My experience with the technical support for Fortinet FortiGate is very good. I only had one bad experience. I would rate them a nine out of ten.

Positive

It is very straightforward to deploy.

In terms of maintenance, many features are automated, including antivirus updates that happen regularly without intervention. Simply connecting the firewall to the internet enables automatic downloads of everything.

It was recently implemented, so it is too early for that assessment.

It is very cost-effective. You get features similar to other firewalls, such as Palo Alto, but at a lower price.

I have not worked extensively with Palo Alto, but from various comparisons, Fortinet FortiGate is understood to be a cost-effective version of Palo Alto. While Palo Alto has more features, Fortinet FortiGate offers similar functionality.

Currently, we are not using SD-WAN, but we will implement it as it is a very impressive built-in feature. We will implement it for one of our customers in the near future.

Fortinet FortiGate is a very good next-generation firewall. It is not very expensive and offers plenty of models to suit various needs. The licensing options are extensive. The day-zero protection is very good. FortiCloud is also excellent. The geo-protection is effective and serves its purpose. 

I would rate Fortinet FortiGate a nine out of ten.