Fortinet FortiGate Reviews

It is a next-generation firewall used to create policies to allow and deny any traffic. I have used Fortinet FortiGate in the finance sector previously, and we are now using it in the manufacturing side.

In my opinion, some of the best features of Fortinet FortiGate include its ability to block specific applications. For example, if I want to block someone from using Facebook videos, I can disable or use its application control features to block access. Facebook has many components such as video features, chat features, and VoIP calling features, and I can block any of these features to be more granular.

SD-WAN is an excellent feature where you can route the traffic to other WAN links without manual interruption. Technically, you cannot put two default routes on any firewall, but SD-WAN is a feature we can use to divert our traffic from one ISP to another. The impact of SD-WAN on the network performance has been significant. Previously, when we didn't have Fortinet FortiGate, we had Cisco routers where we used manual routing, and if one of the primary links was down, we had to do manual routing. With Fortinet FortiGate, it's much easier as we don't have to do anything; it's already configured, and if something happens, our configuration automatically changes the link and diverts the traffic when one of the links is down.

Fortinet FortiGate can be improved by being more stable because when we look for logs or open a case, we always find a bug and then we have to upgrade it. However, since it's a cost-effective solution, we are satisfied.

I have more than 10 years of experience with Fortinet FortiGate.

Fortinet FortiGate is stable, but it has some bugs, so you have to upgrade it. I would not say it has all the capabilities, but it's good for a manufacturing site.

Fortinet FortiGate is pretty scalable.

I would rate Fortinet FortiGate's support at a seven out of ten because whenever I open a case with their support, I have to explain everything and clarify the background. They take some time—at least a day—to see what's happening with the firewall. The agents aren't much experienced in providing solutions, but it's better than Palo Alto's support, which is the worst.

Previously, we had Palo Alto firewalls which were expensive—the contracts were particularly expensive. Fortinet FortiGate is not that expensive and is more affordable when comparing pricing. Nowadays, firms usually look for cheaper models and solutions, so Fortinet FortiGates are good, but for financial sectors, Palo Alto is better.

The main differences between Palo Alto and Fortinet FortiGate are that Palo Alto has more features and functionality compared to Fortinet FortiGate. Palo Alto can be slow, but Fortinet FortiGate is fast. With Palo Alto, we have to commit and it takes five minutes for the configuration to push, which isn't the case with Fortinet FortiGate.

The initial setup of Fortinet FortiGate is straightforward. The upgrade process is also straightforward.

It's cost-effective.

I would rate Fortinet FortiGate a nine out of ten. If you are looking for a cost effective solution and want to avoid the risk, go with the Fortinet FortiGate.

On-premises

I'm using it for web filter and then using it for VPN connection user to site, and I'm using it to make a virtual ID to link a real ID from the server to provider to my servers to publish servers.

I work with Fortinet FortiGate SD WAN. I configure the SD WAN to use two Internet service providers from two different service provider links. When one of them is down, the SD WAN goes down. I have to go to the SD WAN and remove this link from the SD WAN member. I confirmed that with the local provider and it's working. Sometimes, when a member of the SD WAN link is down, the SD WAN is down, and this is not the solution. I made the SD WAN for redundancy, however, when a member of the SD WAN link is down or I finish the quote of the Internet, all the SD WAN stops working and users experience problems.

With the web filter, when I go to post some websites under certain categories and open these categories, I experience some problems. 

Additionally, I face difficulties integrating Fortinet FortiGate with Active Directory. When I set preferences to use Active Directory users, it sometimes works and sometimes does not work. When I integrate Fortinet FortiGate with Active Directory and use this integration to make a web filter policy, the functionality is inconsistent. I have tried restarting the Active Directory domain controller and the firewall, but the problem persists. As a workaround, I use the MAC address of the user to define the settings.

I have been using the solution for about five years.

I haven't configured or experienced any stability issues.

It's safe and secures my network and applications in some sites. However, I have significant problems when implementing web filters, which is a very problematic issue for me.

I often ask for help from the local provider. I haven't found the required efficient help. Currently, I have problems connecting to some banking systems and departmental Texas portals. I have asked for help but haven't found assistance through the site or through the local provider. When trying to open a ticket, they reply with solutions that are not applicable to my situation.

Positive

I didn't have a firewall previously. That said, I did have a VPN gateway.

I haven't configured or used the initial setup.

I didn't choose or have knowledge about the implementation team.

The return on investment was good.

The setup cost was good. The Egyptian pound is declining, and upgrading Fortinet FortiGate yearly costs about $2000 USD, which equals one hundred Egyptian pounds. I maintain a business relationship with the vendor and receive support from them.

I considered switching to Sophos. Due to my previous experience with Fortinet FortiGate, I preferred to stay with Fortinet FortiGate.

The solution requires careful attention, and when problems occur, they typically don't repeat once resolved. 

I miss having local provider support here in Egypt. International support is difficult to obtain. Local support is preferable yet has become very expensive due to currency devaluation in Egypt. 

On-premises

Other

The typical use case for the Fortinet FortiGate firewall for my clients is its ease of use. My clients are using Fortinet FortiGate as SD-WAN.

The effectiveness of Fortinet's unified SASE in providing consistent security policies is notable because there is one security profile from either the head office or the branch office, allowing your profile to move seamlessly with you wherever you go. You have end-to-end visibility, and you can look at the analytics. To me, that moves towards SASE.

My clients appreciate it for its features. It is easy to install and manage, and it offers all-around protection, including web filtering, content filtering, IPS, and IDS.

My clients find the next-generation firewall feature of Fortinet FortiGate to be particularly valuable. It provides internet security, network security, cloud security, ZTNA, and SD-WAN security. There is a unified agent for FortiClient. There is centralized management.

Areas of improvement for Fortinet FortiGate include the need for more training and certification, especially when dealing with distributors globally, which presents challenges in product availability and delivery timelines.

There should also be more training and certification.

I have about 10 years of experience with Fortinet FortiGate.

I find Fortinet FortiGate to be a stable solution.

Fortinet FortiGate is a scalable solution, as you can start small, maybe with FortiGate 40F, and then move to FortiGate 60F or FortiGate 80F, depending on your needs.

It depends on who your distributor is. 

Neutral

It is not straightforward, but the implementation is pretty good overall. Every site is different for me. There is no standard site. We have a few different issues here and there, but overall, it's pretty good and straightforward to install. Its integration is not difficult.

It is a matter of learning and understanding the reasons why people need Fortinet FortiGate.

Fortinet FortiGate positively provides my clients' organizations with a high return on investment. There is visibility into network operations, allowing us to identify network issues. It has advanced security features. You can achieve about 200% ROI over three years, while enhancing IT teams' productivity by about 50%. It simplifies security across branches and enhances hybrid and cloud security. There is even a feature where you can predict the application performance.

It's very competitive.

Many users nowadays prefer agentless installations over installing agents on their devices, which presents challenges for endpoint security, especially concerning ZTNA, VPN, and endpoint protection.

I would rate Fortinet FortiGate an eight out of ten.

On-premises

In our organization, FortiGate Next Generation Firewall (NGFW) serves as the main security system for our firewall needs. I have utilized it to manage the firewalls and some other security appliances, such as VPNs. Currently, my usage focuses primarily on firewall management. I set up rules, search for logs, and consult logs when issues arise. This approach covers most of our security management tasks.

One of the most valuable features of FortiGate Next Generation Firewall (NGFW) is the ease of usability it offers. It is quite easy for me to learn to use. Additionally, FortiGate Next Generation Firewall (NGFW) has improved our efficiency in setting up security and provided us with more visibility over some issues and incidents we previously faced.

FortiGate Next Generation Firewall (NGFW) could be improved by including more templates for setting rules or regular jobs. I do not recall if the software includes any AI features.

I have had experience with FortiGate Next Generation Firewall (NGFW) for about five or six years.

When deploying FortiGate Next Generation Firewall (NGFW), it required one week for the initial setup and just two hours for effective deployment. There were no significant issues during this process.

In my experience, there are usually no significant stability issues with FortiGate Next Generation Firewall (NGFW). However, updating the software during issues can be quite convoluted, especially if there is an unexpected attack, such as on a Saturday.

Customer service with Fortinet for FortiGate Next Generation Firewall (NGFW) has been quite good. We experienced a major issue during one of the upgrades, and it took about an hour to reach support and rectify the problem.

Positive

Before using FortiGate Next Generation Firewall (NGFW), we used Cisco for our firewall needs. Cisco presented a lot of usability challenges. Setting up firewalls and rules with Cisco was difficult and required extensive knowledge of their system, which led us to switch to FortiGate Next Generation Firewall (NGFW).

The initial setup of FortiGate Next Generation Firewall (NGFW) was relatively smooth. It took about one week for the complete setup and two hours for the actual deployment.

The deployment involved two people from my side, and we also had assistance from a vendor during the setup.

In terms of return on investment, FortiGate Next Generation Firewall (NGFW) has been straightforward. It has notably improved our efficiency and visibility.

The pricing of FortiGate Next Generation Firewall (NGFW) is reasonably affordable. It is suitable for mid-level and high-level companies, though it might not be cheap for small companies.

I would recommend FortiGate Next Generation Firewall (NGFW) to others. Despite some issues with upgrades and vulnerabilities, Fortinet quickly addresses concerns. Overall, on a scale of one to ten, I would rate FortiGate Next Generation Firewall (NGFW) as an eight.

I primarily use FortiGate IPS to protect my company from advanced threats like zero-day attacks and other cybersecurity threats.

The most valuable feature is the deep inspection for traffic, which is capable of identifying zero-day attacks. This solution works well on a daily basis, detecting various types of malicious traffic. Integration with FortiFabric enables easy management and scalability across different locations.

There could be improvements in the mathematical algorithms used for behavior analytics of traffic. More advanced AI capabilities would be beneficial in future updates.

I have been using FortiGate IPS for about two years.

The stability of the solution is excellent. I rate it as nine out of ten. There are no issues with stability, and it integrates seamlessly with the main product, which is a firewall.

FortiGate IPS is highly scalable. I can easily integrate it with FortiFabric and manage multiple firewalls and other Fortinet solutions from a single dashboard.

Fortinet support is very responsive. I would rate their support as eight out of ten.

Positive

I also use Cisco for email security. Fortinet was chosen since it is a popular solution for middle-sized companies in my region.

The initial setup took about two to three hours and included setup and configuration.

The implementation involved two engineers. It was handled internally.

I have not calculated ROI specifically, however, the primary goal was to enhance cybersecurity.

There are no extra expenses involved after purchasing the solution. Pricing could be better, however, overall, it is considered a middle-level price for a middle-level company.

I am currently working mostly with Fortinet as well as with Cisco for email security.

I recommend FortiGate IPS for those looking to add an additional layer of security on top of a firewall to combat cyberattacks. I would rate the overall solution as seven out of ten.

Our use case for Fortinet FortiGate is network administration and network security; this is the use for Fortinet FortiGate.

The best features of Fortinet FortiGate are security, configuration facility, and easy configuration. Additionally, we get very good support from the manufacturer. The major impact of Fortinet FortiGate for clients is providing a redundant path from the service locations or servers location to the users that are in another location; this is the best impact.

One area for improvement for Fortinet FortiGate could be the price, as my clients here are small companies, and they might not have the resources or money to always buy a Fortinet FortiGate solution or FortiGate products.

I have been with that platform for about two to three years.

In general, Fortinet FortiGate's stability is very good, but in some cases, there are unusual situations. For example, we have one client with high availability with two Fortinet FortiGates, where one of them has high processor and memory usage while the other one is low, and they work in a passive-active scheme for availability. The strange part is that one Fortinet FortiGate works perfectly, and the other one has high processor and memory consumption.

Most clients are in one location, but two or three clients have SD-WAN characteristics in their implementations.

I would rate their support a nine out of ten. The support is very good, but it's not always easy to find a Spanish speaker, as some clients don't know how to speak English and need support in Spanish.

I integrate SD-WAN features for some clients; specifically, I have three or four clients with SD-WAN integrations, while most of my clients are with one location. I find it easy integrating these capabilities.

Security is very good with Fortinet for my clients; this is one of the best reasons to make a decision to buy a Fortinet solution.

Fortinet FortiGate saves a lot of time in expert hours from an expert engineer because the administration of the Fortinet FortiGate solution is easy, which may lead to fewer hours of an engineer spent on Fortinet FortiGate. It could save approximately 40 hours a month.

I would recommend this solution to others; it's the best solution in the market. The main advice I give to people who consider using Fortinet FortiGate is for security and administration, as we can get complete visibility of the network.

On a scale of 1-10, I rate this solution a 10.

On-premises

Other

For now, I have one running on a corporate network. We make use of the modules that are there such as application filtering, web filtering, IPsec VPN, Network segmentation, advanced threat protection and others.

We extensively use FortiGate's security features to proactively detect and mitigate threat.

Use Web Filtering to control websites accessible to users and block inappropriate or unproductive sites.

Use Application Control feature to limit the use of risky or bandwidth-intensive applications.

We use the network segmentation feature for isolating and limiting potential threats.

Use SD-WAN to optimize the use of our internet links.

IPS functionality detects and blocks malicious network activity.

The core benefit is that a lot is packed into it. There are many features packed and significant flexibility from Fortinet FortiGate in being able to do numerous things. Even features such as SD-WAN provide granularity that I'm happy about. Generally, every aspect of it being a next-generation firewall provides good value.

In terms of pricing, Fortinet needs to do more to compete effectively. We gained a lot of traction from Fortinet in Nigeria, however, the battle is currently intensifying. Companies such as Palo Alto are making a strong impact. Fortinet was able to gain more attraction than Cisco in Nigeria for the past ten years, however, going forward, I'm not sure that trajectory will be maintained if Fortinet doesn't strategize regarding pricing and partnerships.

Regarding maintaining skilled personnel for Fortinet solutions, if they can address the pricing for certification exams, that would help. Sometimes it's a barrier for people here, especially for companies to train people to get certified. We train people in many other solutions we deploy, however, for Fortinet, though we intend to do that, it would be beneficial if there were more incentives for people pursuing certifications.

I have been using my current solution for almost two and a half years. However, I have been using Fortinet FortiGate for up to seven years now, working with Fortinet.

I am satisfied with the performance.

It is sufficiently scalable for my needs.

Their technical support is very good. I'm happy with the technical support. When tickets are logged, the tracking system is excellent, and the response is fast. During the few times I raised tickets, I was satisfied with the support.

Positive

I have experience with Cisco and a little bit of Sophos. I found Fortinet FortiGate better than Cisco in terms of functionality being packed in one device. 

The scalability for Fortinet FortiGate was unparalleled at that time. I saw Fortinet as a company that had strong strategic plans in terms of maintaining market dominance and having long-term plans to survive in the industry. This industry is very dynamic and Fortinet has been doing the right things to compete effectively.

The initial setup is simple. It's far better than my experience with Cisco.

In-house

The return on investment is satisfactory.

The license doesn't currently cover Secure Access Service Edge. Even though our currency in this part of the world is becoming increasingly weak, the pricing is now expensive for us. I have tried pushing Fortinet FortiGate to some customers, however, sometimes the transactions don't conclude due to pricing issues. Fortinet FortiGate may need to give special consideration for countries where currency has depreciated significantly, such as Nigeria. This will help in the competition.

I have previously worked with Cisco and Sophos and might have considered those before choosing Fortinet.

I'm always an advocate of Fortinet FortiGate. It's natural that it's the first OEM I recommend when it comes to networking and network security infrastructure solutions. 

Fortinet is my number one, especially regarding the Fortinet FortiGate. For virtual appliances and cloud security, Fortinet is still performing well. For endpoint security, other solutions appear more popular, so perhaps Fortinet should focus more on the endpoint security aspect. 

I rate Fortinet FortiGate nine out of ten.

On-premises

Microsoft Azure

We are a systems integrator in Paraguay, and my task is usually to configure Fortinet FortiGate as a perimeter firewall and provide all the security features to our clients.

Some of the best features of Fortinet FortiGate include the next-generation firewall features. Before Fortinet FortiGate, we usually used Juniper, which is very good for routing and switching, but in security, Fortinet FortiGate is far better than Juniper, especially with deep inspection and data leak prevention. We have nearly every financial institution in Paraguay as a client, putting special focus on preventing leaks of credit card numbers.

The field I’m interested in is the courses we provide to our clients. The PDFs available in the learning system are fantastic. The features they implement are exactly what everyone is looking for. To me, Fortinet is very good and useful.

From my perspective, every day is a new opportunity for improvement. I believe that the continual improvement is Fortinet’s best feature. I’m very happy with their ability to consistently improve.

I've been using this solution for about ten years.

Fortinet FortiGate is stable. Based on my experience, whenever we faced an attack, many other brands, including Juniper, often had vulnerabilities. However, Fortinet consistently delivered the best performance and effectively stopped any threats.

Since we are a small country, our clients usually have minimal security requirements due to relatively slow network speeds. The entry-level versions of Fortinet FortiGate are good enough for our top clients.

We work with both enterprise and SMB clients. We are also an Internet provider. We provide the connectivity and the equipment to bring security to the client. We have all kinds of clients.

I would rate Fortinet's customer service or technical support as an eight out of ten. We have many skilled technicians for Fortinet FortiGate configurations. We only require support for a very advanced feature. People representing Fortinet here in Paraguay are very friendly and work well with us.

The initial setup of Fortinet FortiGate was easy. The setup is easy because most companies don't have complex requirements and just need a basic firewall to shield against external threats and filter internal connections, making the basic configuration good enough until they ask for advanced features.

I cannot say definitively about the return on investment with Fortinet FortiGate because I have always been in the technical field, but most of our clients are very happy since threats were stopped, generating confidence in the Fortinet brand among our clients.

I do not consider it an expensive solution. It's not cheap, but it's not expensive, especially compared to Cisco, which is the de facto standard here in Paraguay. Cisco suppliers often set high prices, allowing us to enter the security field easily, thanks to our pricing.

Another team handled the SD-WAN capabilities with Fortinet FortiGate. I know that FortiGate can do that. From my knowledge, it is for the balance between two ISPs, but I don't know about performance tests.

I would rate Fortinet FortiGate an eight out of ten.

On-premises

I am using Fortinet FortiGate as a firewall and for IDS. We also use FortiSIEM.

The firewall is pretty good if you understand how to use it. It performs at a very high level, and we are loving it. The SASE and ZTNA features are quite good as well. 

It does extensive work for our organization. It provided additional policies we were not aware of and gave us an overview and knowledge about those policies. I have had a good experience. It's not difficult to manage. The software is good.

It is particularly effective when it comes to integration, as it can be integrated with many other vendors.

Since everyone is talking about AI, they should consider having AI embedded or working with developers in terms of AI to improve Fortinet FortiGate. 

The issue lies with features available in GUI versus CLI during configuration. When using GUI, I want to accomplish everything there, but sometimes it requires using CLI to ensure proper configuration.

It has been almost two to three years.

It has its ups and downs but they are minor things. One can work around them with proper knowledge of the system. We never had many incidents with it. I have had a good experience.

The scalability is quite good.

I am very satisfied with their technical support. They are very supportive, though sometimes they can be a bit busy.

I have not used any other solutions. The deciding factors were the price, technology, effectiveness of the solution, and the skill that we had for it.

It was easy to deploy. It took us a week to deploy it.

It is very effective and provides value for money. After a month, we could see from our reporting when the system was up and running that it was very effective.

I would rate Fortinet FortiGate a seven out of ten.

On-premises

We are using it for the data center firewall and perimeter firewall facing the Internet, which are my main use cases for Fortinet FortiGate.

The combined license for the network, the next-generation firewall, and the integration with SD-WAN for all branches are what I consider to be the best features. It's effective for multi-branch customers. 

SD-WAN has had a positive impact by reducing the operational costs in terms of headcount and management. It has had an impact on the network performance. It reduced the operational, Internet connection, and MPLS costs. With a combined solution, there is no need to put a specific firewall to secure the connection. It's like a single box.

Performance on the box and technical support are areas where Fortinet FortiGate can be improved. In their datasheet, they put the throughput as huge, but once you enable all the features of the box, the performance is impacted dramatically. In reality, it will be 20% to 30% of what they have mentioned in the datasheet.

I have worked with FortiGate from a design perspective for almost ten years.

It's a stable solution.

It's scalable. They are providing a good number of ports; there's no need to put a switch to connect to the appliance itself.

I would rate technical support from Fortinet a five out of ten. To escalate the case severity from three to one, you need to have the account manager engaged to accelerate and get the technical people involved. It's not like other competitors who have premium support 24/7.

Neutral

We used to perform the same function by placing a router and a firewall to secure the connection. It required multiple vendors and multiple boxes, which was a huge engagement from the operational perspective and investment-wise. Now, a small firewall with SD-WAN features can handle the entire situation, including connection with the branch, encryption, and security.

It's user-friendly deployment because they have an enhanced dashboard to manage and implement, not requiring the CLI or command line interface, which needs deep study. They have a GUI that is user-friendly and attractive.

We are system integrators, and our delivery team implements the project for deployment.

Reducing the operation cost and reducing the internet connection and MPLS cost has been my evaluation of changes in return on investment after implementing Fortinet solutions for SD-WAN and hybrid workforce.

I would rate Fortinet FortiGate a seven out of ten overall.

On-premises