Fortinet FortiGate Reviews

A use case for Fortinet FortiGate includes connecting nine to ten different sites to the main Fortinet FortiGate firewall and diversifying the traffic with two-way traffic. It functions as a load balancer to balance loads between different sites.

The main benefits of Fortinet FortiGate, especially in India, are its economic value, scalability, and different sizing options. When compared to Cisco or Juniper, upgrading to a higher class involves a substantial cost increase, whereas with Fortinet FortiGate, the next class is only marginally higher.

The best feature of Fortinet FortiGate is SD-WAN. It ensures continuous connectivity by taking over during link failures, preventing any downtime for the company. One of my clients faced many problems with the primary internet provider and requested multi-path functionality. We implemented the SD-WAN facility and added another three-link WAN link, converting the normal port into SD-WAN and assigning weightage. When there is no response from the primary connection after a certain number of milliseconds, it switches to the secondary and then to the tertiary connection. The impact on network performance with the SD-WAN is very good, provided it is sized properly based on throughput. It is necessary to calculate how much data is transferring daily or per minute, then size the firewall accordingly and select a particular model.

The Fortinet FortiGate solution offers ease of use, not requiring highly skilled workers. General users with two or three experienced team members can read the manual and implement the needed configurations.

Hardware-assisted DDoS protection in Fortinet FortiGate is very easy to implement with single-click options, though care must be taken not to burden bandwidth. Certain ACL units should be used, applying rules only to interesting or exposed traffic.

Some features in Fortinet FortiGate need improvement as we discover when calling support that certain actions must be done from the command line. Not all features are available in the web UI. Features such as enabling multiple MPLS circuits can only be accomplished through the command line, so these need to be made available in the web UI.

Fortinet needs to improve customer support and documentation.

I have been working with Fortinet FortiGate for more than 15 years.

Fortinet FortiGate is very stable, but the person procuring the firewall needs to ensure it is sized properly. If the sizing is not proper, it will create many problems.

The scalability of Fortinet FortiGate is very good. It has improved significantly compared to five years ago when it was not as scalable.

When we encounter struggles, they perform actions from the backend, taking control and resolving issues. This becomes a black box for us because we do not know what actions they took.

The initial setup of Fortinet FortiGate is straightforward and easy. HA is the deployment model we always recommend.

While we have not calculated it specifically, we found the ROI to be good, approximately 97% to 98%.

I utilize the Fortinet FortiGate hardware and have never tried the VM version, working only with normal VPN configuration, user configuration, normal routing, and multiple WAN links. While we are using the dynamic segmentation feature, we have not tested it thoroughly enough to analyze its benefits.

People generally go with the recommendations of high-level architects. For core networks, they typically suggest Cisco or Juniper. In India, the market follows whatever the chief architect suggests without quantifying whether it is worth it.

My advice for others considering Fortinet FortiGate implementation is to focus on its ease of use. 

Based on my experience, I would rate this solution an eight out of ten.

We have two deployments of Fortinet FortiGate at different sites. One is the SD-WAN, and the other is the next-generation firewall.

We secure our perimeter using Fortinet FortiGate. We are using it as a gateway device, and we have all the filters, such as the web filter, the intrusion detection and the anti-virus. We mainly use it to filter our traffic. Most importantly, it serves as our gateway device. That is how we are using it at the end of the day.

We wanted to see how Fortinet FortiGate SD-WAN can help us reach out to our branch, and that was the only reason for enabling it. It pretty much works for connectivity to the branch.

It is very user-friendly compared to other products. It integrates with many other technologies out there. It does not matter what technology you have deployed within your network, it can work with that.

We have not had an issue with the Fortinet FortiGate firewall. We recently renewed the licenses for the firewall and FortiNAC, and it has been working well. I have not had any incidents or instances since the last renewal.

Application control and the web filter are the best features of Fortinet FortiGate. 

Traffic control is available, and I have been using Fortinet FortiGate to allocate bandwidth also, so it helps me manage and allocate bandwidth to my applications. On that side, that has worked for me. Most importantly, it helps to filter unwanted traffic.

Its pricing can be better. I cannot think of anything else because it pretty much satisfies our requirements. I am comfortable with this product. 

The only issue that I have is with FortiNAC. The firewall is fine, but the FortiNAC interface is a little bit too jumbled or too complicated, not as straightforward as it is on the Fortinet FortiGate firewall and FortiAnalyzer. 

I have not faced any stability issues with Fortinet FortiGate. I would give it an eight out of ten for stability.

Fortinet FortiGate is scalable. I would rate it an eight out of ten for scalability.

I raise my tickets for Fortinet FortiGate, and they are handled well. The support is pretty good. I would rate the support an eight out of ten.

Positive

In this work environment, Fortinet FortiGate was the first one we had as our firewall. We had nothing before it.

I have previously worked with Check Point and Cyberoam. Those are the only two products that I can compare with Fortinet FortiGate.

From my experience, administration is a bit complicated on the Check Point side. Most of the concepts are similar, but configuring Fortinet FortiGate is a little bit easier for me compared to Check Point. Cyberoam was resource intensive, which I have not seen in Fortinet FortiGate.

The initial setup of Fortinet FortiGate was handled by a provider to implement it, but the knowledge transfer was pretty much straightforward. It took about two weeks to deploy Fortinet FortiGate.

We are not a business-oriented organization; our primary aim is to make sure that our assets are protected. We had some issues before having this firewall, and we have not had any incidents ever since we implemented Fortinet FortiGate.

When I look around at other products, such as Sophos, Fortinet FortiGate is 20% to 30% more expensive with our current cost.

The license renewal for Fortinet FortiGate has been a little bit costly. When we are paying, we renew both the warranty and licenses for Fortinet FortiGate. That is what makes the whole thing a bit costly.

We normally purchase and renew those licenses for FortiAnalyzer, FortiNAC, and Fortinet FortiGate firewall at the same time. When I look around, I would say Fortinet FortiGate is on the higher side.

The thing that I have not experienced with it is the web application firewall. I was trying to find out from the partner whether it is something that is licensed separately. When you look at the policies, it looks it is not active.

I would recommend using Fortinet FortiGate because of its usability. I would rate it a nine out of ten.

I use Fortinet FortiGate just for the data center to connect to it. I put Sophos on the internet and FortiGate on the data center.

For application filtration, I really appreciate many features of Fortinet FortiGate because it is more reliable, easy to use, and the reports are easy to read and understand. I have integrated Fortinet FortiGate with the database for reading the reports. I can recommend Fortinet FortiGate for enterprise-level because it has many features and solutions, though I would not recommend it for small companies or individual companies.

To improve Fortinet FortiGate, I think they need to improve the software and make updates more quickly, rather than taking a long time to update the software or firmware.

I have been working with Fortinet FortiGate for approximately four to five years.

I would rate the stability of Fortinet FortiGate a ten out of ten, with ten being the best.

I would rate the scalability of Fortinet FortiGate a ten out of ten, as I think it is reliable and very dependable.

I would rate the technical support from Fortinet between eight and nine; it is a very good vendor, but sometimes there is a delay in getting information from us or maybe a delay for us to contact them.

I am using Fortinet FortiGate and Sophos.

In the beginning of my work with Fortinet FortiGate, the setup was difficult, but after many attempts, I became an expert on how to install and modify every command. For a regular user, I think it is very easy to understand and read the product documentation.

I use Sophos for firewall and Fortinet FortiGate for data center.

I really recommend Fortinet FortiGate. My overall rating for Fortinet FortiGate is 9 out of 10.

The main use cases for the product revolve around perimeter security, and it depends on LAN to WAN traffic, especially in work-from-home scenarios wherein the customer wants to access the local infrastructure remotely. It is also sometimes used in data centers, but many times Palo Alto is used.

Fortinet FortiGate serves as the first line of defense. It is robust and easy to configure, and I haven't seen any breaches happening when configured properly based on best practices. In the Indian market, clients have a lot of trust in this product.

The most useful functions of Fortinet FortiGate are SD-WAN, which is very easy to configure. Its user interface is also very good, making it easy for any engineer to explain configuration changes over the phone without needing to take remote access. Integration of SD-WAN capabilities with Fortinet FortiGate is simple to integrate.

They are already making improvements with the integration of AI and machine learning (ML). While I haven't personally used these features yet, I see that the focus is primarily on AI operations that fall under the umbrella of AI and ML. Additionally, they offer FortiManager with a signal dashboard that allows for the monitoring and configuration of multiple FortiGate firewalls, which is quite impressive. Moreover, they now provide a SaaS offering for FortiManager, which I believe is a good development overall.

If they can come up with a feature that allows scalability within the firewall itself, such as 'scale as you grow,' that would be a valuable improvement. Fortinet is already implementing AI and ML, although I haven't used it personally. AI ops are covered under it, and they also have FortiManager, which allows for monitoring and configuring multiple Fortinet FortiGate firewalls through a single dashboard.

I have been working with Fortinet FortiGate for more than 10 years.

When it comes to stability, I would rate Fortinet FortiGate a ten out of ten, as I haven't seen any downtime wherever I proposed it.

I would rate Fortinet FortiGate's scalability as an eight out of ten.

I would rate the support from Fortinet a nine out of ten.

We also work with Palo Alto solutions. Palo Alto has a distinct advantage because it offers some great features that are already available, such as DNS security, which we have a lot of experience with. Palo Alto is unmatched in a data center environment. This is why many people tend to trust Palo Alto firewalls more compared to FortiGate. As for perimeter security, FortiGate excels in that area.

In most small and medium enterprises and SMBs, we usually propose SonicWall, and for enterprises, we work with Palo Alto or Fortinet FortiGate, depending on the requirement. It makes sense to propose the Fortinet FortiGate firewall, especially if the customer is already using the SD-WAN feature.

The initial setup for Fortinet FortiGate is simple.

The only challenge with Fortinet FortiGate is the pricing model.

Currently, we are considering Fortinet FortiGate solely for perimeter security, and for SASE and other approaches, we go with other solutions. I have not used AI and ML FortiGuard services with Fortinet FortiGate yet.

Overall, I would rate Fortinet FortiGate an eight out of ten.

Most of our clients are SMB. We have several support contracts, and as a way to standardize all the products and processes, we ask our clients to switch to Fortinet FortiGate as a firewall, and that's how we standardize our process. Most of our clients we support with a support contract have Fortinet FortiGate as a firewall on-premises.

It's easy to manage. The GUI is very simple, and what is very good is that every product, regardless of size, has the same interface. Most features are in every single product irrespective of the size. 

Their support's response time can be better. In the past six months, they took quite a long time to respond to the support tickets. I don't know if they are overwhelmed with too much activity, but for the last six months, the support has not been very good. Previously, it was very good.

I have dealt with Fortinet FortiGate for four or five years.

I would say that Fortinet FortiGate is stable. We have several appliances installed, but we encountered some trouble with the smaller models on three occasions, which somehow limited the inbound traffic. We had to send one in for a Return Merchandise Authorization (RMA), and Fortinet sent us a new appliance, which resolved the issue. The only downside is that the replacement process takes about two to three weeks. That has been the only problem we've experienced with the smaller model.

The scalability of Fortinet FortiGate is mostly with the bigger appliances. It's not quite flexible once you buy one appliance; to scale up, you have to buy a new appliance, and there's no way to upgrade the appliance. The challenge is that you don't want to oversize the appliance because that is tied to the subscription. The price of the subscription is tied with the size of the appliance, so you have to size it very precisely, considering the future growth of the company.

Their technical support is pretty good. Over the last six months, there has been a delay in response, but previously, it was very good.

Positive

The initial setup for Fortinet FortiGate is pretty straightforward.

My experience with the pricing, setup cost, and licensing for Fortinet FortiGate is quite good. I don't have a public site, such as in Azure, where I can see the pricing. I always have to go through the distributor, and that could take some time to get the real price for each appliance. 

When our client has two internet connections, we do Fortinet FortiGate SD-WAN configuration, and it works very well. I can't determine if there is better performance using SD-WAN, but it's much more stable. We did have some trouble with certain types of traffic that doesn't work well with SD-WAN, and we had to implement rules to stick to one of the connections, but those are exceptions. The traffic is much more fluent, but mostly it makes the connection much more stable.

I would rate Fortinet FortiGate an eight out of ten.

We use Fortinet FortiGate to help protect and secure mission-critical data. There are policies and rules that we apply, and there is an intrusion prevention system that notifies if there are critical vulnerabilities on some clients.

I assess the security services provided by Fortinet FortiGate, such as URL filtering and DNS filtering, as quite good; they are quite effective. Fortinet FortiGate is rather sustainable; it's a good, stable product that gets faster and uses less power with new versions. 

It helps us remediate threats more quickly because we have specialists who can work with it rather effectively. When there is an alert on the Fortinet FortiGate, they work together with our FortiAnalyzer and can quickly remediate the incidents.

They should do a better job in testing when they put out a new release because when a new software version is released, it is not always stable or does not always have all the previous features working correctly. They should do more testing or launch a new version later when they have tested it more thoroughly. 

They already did a good job in their GUI, but they can make more features available in the GUI that are still only accessible through the command line.

My proper experience is only two or three years, but in the company, they have been using it for over 10 years.

In terms of network and security convergence, they are there, but we are not currently using them because in the office itself, we have other brands of switches and access points. It's now not quite stable in the demo lab environment; we are now on the latest version, but in the production environment, we are not. Production is always on a lower version.

It is scalable.

I would give Fortinet's technical support an eight out of 10; they are responsive and helpful.

Positive

I previously used Sophos before Fortinet FortiGate.

If you first implement Fortinet FortiGate to get it up and running, it takes just a couple of minutes, but to get all the policies configured correctly, it takes a couple of days.

For my company, Exclusive Networks, the whole company had three or four engineers involved.

We have seen a return on investment from using Fortinet FortiGate for integration with the SOC team. The automation part is giving us a cost benefit and speed; we can react faster.

The price-to-performance ratio from using Fortinet FortiGate is very good; I would give it a nine out of 10. It has helped save on costs due to reduced power consumption.

Performance is the reason I switched from Sophos to Fortinet FortiGate. It has good value for money, ease of use, and a higher security level, with better security solutions. It's more expensive, but it offers a really good total cost of ownership and is still considerably cheaper than Palo Alto.

I would suggest to anyone considering purchasing Fortinet FortiGate's data center firewall to get training to understand very thoroughly how FortiOS works, and if you have several Fortinet FortiGates, to go for a FortiManager with the necessary training. 

The users who work with Fortinet FortiGate are only the IT people, around three or four. Locally, we have around 60 end-users for Fortinet FortiGate. The biggest lesson would be that Fortinet FortiGate provides a high level of security at a good total cost of ownership. 

I would give Fortinet FortiGate an overall rating of nine.

For FortiGate Next Generation Firewall (NGFW), I use it primarily to connect with other companies through IPsec VPN. Any other security measures are on AWS itself, not on FortiGate. I'm someone who's familiar with FortiGate from previous jobs, so I use that, but it's how we're using it right now.

The IPsec feature of FortiGate Next Generation Firewall (NGFW) is valuable to our company because we need to connect quickly VPN connections with other companies in our networks, and there are many connections in some cases. We need to keep it as secure as possible, maybe one-way connections or particular ports. FortiGate is the best option, at least that I'm familiar with, that can answer all of that in one product that is mostly easy to use.

In our case, the deployment options of FortiGate Next Generation Firewall (NGFW) are not scalable, but in terms of connectivity to other companies, that's exactly what we needed, and that's exactly what it does perfectly, what is needed.

The most valuable feature for our company using FortiGate Next Generation Firewall (NGFW) is the IPsec feature, but actually FortiGate is known for good UTM products such as application filter and web filtering. We don't use it here, but in previous companies I used it on a daily basis.

One of the benefits I've realized from using FortiGate Next Generation Firewall (NGFW) is that it's secure and allows functions such as VPN. You can control Wi-Fi and other things from within, if you have FortiNet devices. It's an easy to use product, yet it allows you all that is needed, or at least all that you can do. Whenever there is a security breach, FortiGate is known to patch it very quickly from what I've seen.

Since FortiGate Next Generation Firewall (NGFW) was implemented, there was a thought in the company about using the VPN that AWS itself provides, but it's far from being as good as FortiGate.

The process can be improved in terms of explaining exactly how the installation should be done step-by-step on AWS, because there are network considerations such as security groups. From what I could find, I didn't do extensive research, but it didn't seem obvious enough in that case.

I do not utilize the intrusion prevention and web filtering features of FortiGate Next Generation Firewall (NGFW).

The ability of FortiGate Next Generation Firewall (NGFW) to inspect SSL encrypted traffic is not applicable in the current position, but in previous companies, it was really seamless whenever we used it. It just worked seamlessly.

I don't recall if we use a centralized management console for FortiGate Next Generation Firewall (NGFW) in maintaining oversight across distributed networks.

In my opinion, FortiGate Next Generation Firewall (NGFW) could be better by having specific models for home usage. I'd wish to have a FortiGate in my home, but the licensing isn't something that I want to purchase for home usage.

I have been using FortiGate Next Generation Firewall (NGFW) almost since day one at this company, which I have been with for three years and something.

I experienced the stability and availability of FortiGate Next Generation Firewall (NGFW) more in the previous company. In terms of stability, mostly it is okay; however, in some cases, there are features, especially the UI, that tend to have issues. In some cases, you need to restart it, but mostly, it's working flawlessly, especially if you have an HA environment, high availability.

In our case, the deployment options of FortiGate Next Generation Firewall (NGFW) are not scalable, but in terms of connectivity to other companies, that's exactly what we needed, and that's exactly what it does perfectly, what is needed.

I'm certain that what it allows us in terms of connections to other companies is a straightforward solution that you don't have to use something else. It's easy to configure a new connection, and it works in a few minutes if everything works fine.

In this company, I may have worked with FortiGate Next Generation Firewall (NGFW) support one time, but in my previous company, I actually worked with them extensively. We had multiple FortiGate devices across multiple offices around the world, and we needed to switch them from one account to another sometimes. So I encountered FortiGate support quite frequently.

I would evaluate the level of support for FortiGate Next Generation Firewall (NGFW) somewhere between seven and eight. My experience might be outdated because lately, I haven't had much experience with that. In some cases, you need to come prepared because the people there work by the book and ask for particular things. If you don't have them, you cannot proceed, but if you know what they need, after some time, it's pretty easy to get support or whatever you need.

Neutral

I don't have enough information on other products that I can tell the pros and cons of FortiGate Next Generation Firewall (NGFW) versus its competitors.

The setup was already done, but from what I read, we considered putting it in another environment that we have, yet we didn't because we didn't actually need the environment at all.

I don't know if my company has seen return on the investment from FortiGate Next Generation Firewall (NGFW), but I'm certain that what it allows us in terms of connections to other companies is a straightforward solution that you don't have to use something else. It's easy to configure a new connection, and it works in a few minutes if everything works fine.

Pricing isn't something applicable for me regarding FortiGate Next Generation Firewall (NGFW) because it was already set up once I came to this company.

Since FortiGate Next Generation Firewall (NGFW) was implemented, there was a thought that crossed in the company about using the VPN that AWS itself provides, but it's far from being as good as FortiGate.

I would rate FortiGate Next Generation Firewall (NGFW) as a solution a 10 out of 10. I do love FortiGate.

I give it a 10 because, in my experience, FortiGate Next Generation Firewall (NGFW) is a product that allows you to do many things very easily. If you don't appreciate something about the way it works, you have enough playground to change it to suit your needs.

For someone considering FortiGate Next Generation Firewall (NGFW) for their company, there was a demo online version that they have on their website that is easy to access. You can play with it and see almost all the features in action. That's an easy thing to actually test. Obviously, you cannot connect it to your network and see things live in your case, but it is still a good example of how things work.

Fortinet FortiGate is mainly used for next-generation firewall features.

Most of our customers primarily use FortiGate as a general-purpose firewall and for remote work. During COVID, they needed to enable the SSL VPN licenses, which was a straightforward process, and they benefited greatly from that. However, apart from this, I don’t see a significant differentiator between FortiGate and other firewalls.

Most of our implementations are standalone. We have a few integrations as well with Active Directory and other things. It is pretty straightforward, and we have not had any issues.

The main value comes from the simplicity of the product in terms of configuring and managing. 

Their user interface could be improved from a configuration perspective.

I have personally used it for about five years, but the organization has been using Fortinet FortiGate for the organization and customers for about 10 years.

Stability is excellent. We have not had issues from the product itself.

We have deployed Fortinet FortiGate from 50 user locations to 100-200 user locations. We have not had any issues with any of those models.

I would rate their support an eight out of ten. There's always room for improvement. 

Positive

We are a small system integrator and an authorized partner for Fortinet FortiGate, Cisco, Cisco Meraki, Palo Alto, Sophos, and Check Point. We cater to the SMB and upper SMB market and some enterprise customers. Most customers do not require fully fledged integrated solutions.

In Sri Lanka, there is about 40% market penetration for Fortinet. They have partnerships with two telcos, so most corporates with MPLS links who wanted to move out with the operator are offered managed SD-WAN solutions using Fortinet FortiGate.

We have Cisco customers as well, including local customers and global customers whom we support using Cisco firewalls. Comparing Cisco and Fortinet firewalls is challenging. You cannot compare a Ferrari with a normal Nissan sedan from a product and feature perspective. The SMB market segment and the upper SMB market segment are very price-conscious. Cisco does not offer firewalls that are competitively priced for this market segment, especially compared to Fortinet's offerings. They only recently released the 200 series, which can compete with the FortiGate 50 models that we sell.

Fortinet FortiGate is pretty straightforward compared to Cisco.

It is mostly on-prem. One or two clients are using it on the cloud.

Our customers get their ROIs on the price points that we sell in this market.

For the market and the segment that we cater to, the FortiGate pricing structure is sufficient.

I would rate Fortinet FortiGate a nine out of ten.

My typical use case for Fortinet FortiGate involves it being one of the best solutions for next-generation firewall. In terms of simplified control and in-built SD-WAN solution, there are no licenses for VPN. From a commercial perspective, it is beneficial. Technically, it has successfully stopped attacks, which is the reason the customer was using Fortinet FortiGate.

The dynamic segmentation feature in Fortinet FortiGate has an in-built switch and wireless access point controller. Fortinet FortiGate has a feature called VDOMs, virtual domains, where you can create multiple virtual firewalls within a single hardware, which is one of the fantastic features.

In terms of effectiveness, Fortinet Unified SASE covers all three use cases: Secure Internet Access, Secure Private Access, and Secure SaaS access. For any security implementation, networking is essential, and Fortinet FortiGate provisions that through FortiGate's SD-WAN. The integration with FortiSASE and Fortinet Forti-SD-WAN is very simple and straightforward.

In terms of improvement for Fortinet FortiGate, I don't find any needed improvements regarding hardware because it is very good. The operating system has most of the features. 

At this moment, I'm not finding any other improvements in this case. They are advanced in this segment. Fortinet FortiGate has in-built automation features and cyber risk assessment.

One suggestion might be to increase the storage size in the hardware for local reporting.

I have nine years of experience working with Fortinet FortiGate.

Fortinet FortiGate is a very stable solution.

In terms of scalability, Fortinet FortiGate provides more throughput compared to other OEMs, so the value for money is very high. If it is a VM, it can be scalable. In terms of hardware, it's all about scalability, throughput, and managing the number of sessions based on the hardware sizing. If the team sizing the firewall does it properly, then the solution is easily scalable.

I would evaluate customer support from Fortinet FortiGate as seven or eight out of ten. The reason I do not give 10 out of 10 for customer support is that while they follow the SLA and there is no issue with that, for them it might be P3, but for us, it might be P1 or P2 case. Remote assistance requirement should support them.

After implementing Fortinet solutions, I evaluate the return on investment as providing more throughput performance. The performance is very high in terms of packet inspection and handling the traffic. It is one of the best solutions in that case. The total cost of ownership will be low because there is no extra additional license for SD-WAN, VPN, or the VDOM feature. Considering all those things, it is a very cost-effective solution.

My advice to others looking into Fortinet FortiGate is that they can consider the return on investment or total cost of ownership. Fortinet FortiGate is definitely a good solution, not less than a better solution. It's very good compared to Palo Alto or Check Point. Those using the Fortinet FortiGate firewall should start using the features part of the solution, either it can be a WAF solution or a security rating or automation features. They can directly integrate with the cloud firewall. Operation technology is doing very well because there are many features where the network and security administrators should start enabling and making use of it. On a scale of one to ten, I would rate this solution nine or ten.

Fortinet FortiGate is among the best firewall solutions, having a significant market share in Egypt. Fortinet FortiGate has a very simple configuration, is easy to set up, and includes SD-WAN features at no additional cost. I recommend Fortinet FortiGate to act as an internet or perimeter firewall.

Features such as URL filtering, intrusion detection, and threat prevention make it suitable as a perimeter firewall. It also includes free SD-WAN features. It is recommended when any customer has more than one site, as it can act as an SD-WAN solution without any extra licenses, with SD-WAN being a built-in feature. It is a very easy solution.

From my experience, I see that the datasheets of the Fortinet FortiGate portfolio need to be more accurate because correct sizing is essential. The datasheets should provide clear information when deploying features. 

When comparing Fortinet to all other vendors, I believe most features are available in Fortinet. I'm not sure if the DNS security license is available in Fortinet; if not, it is important to add Fortinet DNS security and sandboxing licenses. I know Fortinet has a separate sandbox solution, but I am unsure about sandbox features in the firewall. In contrast, Palo Alto has a DNS security license, email security, and WildFire license that serves as a sandbox solution.

I have been working with Fortinet FortiGate for around eight years.

I find Fortinet FortiGate to be very stable.

The scalability of Fortinet FortiGate depends on the project. If the project meets accurate sizing, it can be scalable, but if the presales engineer does not accurately size it, Fortinet FortiGate can have limited resources to scale. It depends on the project.

I evaluate Fortinet's technical support as a seven out of ten. They aren't the best support, but when we need assistance with any features or field activities, we can utilize the internal support team of the vendor located in our country.

Neutral

I believe it is cost-effective. With Fortinet FortiGate, we can pay once for every renewal period, and there are no CAPEX expenses because Fortinet FortiGate is easy to configure, easy to manage, and familiar to most engineers. 

It is not the cheapest one, but its price is very competitive.

When comparing Fortinet FortiGate to Palo Alto or other firewalls I've worked with, Fortinet is more stable, easy to configure, easy to manage, and is competitive in price. 

Fortinet offers multiple product sizes suitable for various enterprises, including small, medium, and enterprise customers. Compared to Palo Alto, Fortinet offers a free SD-WAN feature while Palo Alto requires an SD-WAN license with more costs and several licenses. However, Palo Alto does offer more advanced features than Fortinet. A notable difference is that when the Fortinet FortiGate license expires, the box still works until the customer renews the license, while with Palo Alto, the box stops entirely and the customer must renew the license to continue functioning.

My experience in integrating SD-WAN capabilities with Fortinet FortiGate in the network shows that the integration is very simple and has a straightforward configuration.

The Fortinet SD-WAN solution consists of multiple products. To create or set up a full SD-WAN solution, it needs two products from Fortinet: FortiGate and FortiManager, which is a centralized management solution, and FortiAnalyzer, which is a log management solution. SD-WAN connects more than one site. It centralizes management and logs. Fortinet FortiGate with SD-WAN does not require any extra license, but to have the full SD-WAN solution, it is required to have FortiManager and FortiAnalyzer for several reasons. Fortinet products can be VM or hardware.

I have worked with the hardware-assisted DDoS protection in the Fortinet FortiGate, and I think it's good.

I recommend the Fortinet FortiGate when acting as a perimeter firewall, and some customers use it in the data center. I recommend another vendor in the data center, but our customers are very satisfied with Fortinet FortiGate when acting as a data center firewall.

I have limited experience with the AI and machine learning enhanced FortiGuard services, but I know that Fortinet is leading this trend. 

Fortinet FortiGate provides SD-WAN and SASE solutions to secure any type of user and any type of traffic. It has many features, including a secure web gateway and secure service edge, helping users access the internet and applications, whether inside or outside.

I would rate Fortinet FortiGate an eight out of ten.