Fortinet FortiGate Reviews

Fortinet FortiGate is our primary security solution for network communication. It enforces segregation between the IT and OT networks. All communication, integrations, and other traffic between IT and OT must pass through the FortiGate, which inspects and controls it.

FortiGate also serves as our VPN concentrator. Both internal users and partners connect their VPNs to FortiGate. We manage the entire VPN process, including access control and security policies.

All web traffic within the organization flows through the FortiGate for inspection and security controls. We leverage FortiGate's UTM capabilities, including web filtering, intrusion prevention, and application control.

While we have several websites running behind FortiGate, they are primarily static content sites with limited business activity. Therefore, we utilize the basic WAF functionality within FortiGate instead of a dedicated WAF device. This approach has proven effective for our needs due to the low volume of transactions and sensitive data on these websites.

FortiGate also manages communication between our internal IT units. With five units in operation, efficient inter-unit communication is critical. FortiGate ensures secure and controlled data exchange between these units.

FortiGate provides us with both visibility and segmentation for our industrial devices. This allows us to achieve good segmentation and also gain a clear view of the assets that reside behind them. Now, if I need to find a specific asset within our industrial environment, I can simply access Fortinet and check the assets listed there. Additionally, FortiGate utilizes sensing technology that identifies the type of each device, further enhancing our overall visibility.

FortiGate helps a lot to reduce the risk of cyberattacks that could disrupt our production.

FortiGate enables centralized management of our organization's network and security operations, providing comprehensive visibility into our environment for proactive threat detection and mitigation.

The effectiveness of our response to a production disruption depends on the affected environment. Some environments have sufficient redundancy to continue operating without the system, while others require immediate intervention. To address this variability, we utilize a strategically deployed FortiGate across all environments. This firewall enforces pre-defined rules to manage traffic and data flow effectively, ensuring that disruptions are minimized and operations continue smoothly.

FortiGate provides us with actionable data, enabling us to make informed decisions. The visibility it grants into the devices operating within our environment empowers us to take timely action and safeguard them.

All our OT traffic traversing to and from our IT environment passes through our Fortinet FortiGate firewall, which helps to reduce our operational expenses.

The security fabric helps reduce our mean time to remediation.

Fortinet has helped us take a more serious approach to cybersecurity. 

The Intrusion Prevention System and the web filtering are both working well. The Deep Packet Inspection is also functioning properly, allowing us to see all network traffic, including encrypted data. I find the DPI to be a valuable and user-friendly feature. Additionally, the logs are clear and easy to understand. Having worked with Cisco and Check Point in the past, I can confidently say that these logs are on par with those of other leading security solutions. They greatly aid in troubleshooting, investigations, and general network monitoring. Overall, I am impressed with this solution's web filtering capabilities and robust IPS functionality. It is both easy to manage and deploy, making it a valuable tool for our network security.

While FortiGate offers a wide range of security features, I sometimes feel that the platform could benefit from more extensive improvements. Given the multitude of functions it provides, I wonder if the developers have enough time to adequately refine each aspect. However, for our specific needs, FortiGate currently performs adequately.

The debugging and troubleshooting has room for improvement.

I would like to see greater integration with third-party solutions. For instance, one example would be integrating Endpoint Protection with FortiGate, such that if an issue arises with Endpoint Protection, an action could be automatically triggered on FortiGate.

I am concerned about Fortinet's ability to help us meet regulatory compliance because its optimal functionality requires deploying all solutions within the mesh as Fortinet products. This raises questions about the compatibility and integration of non-Fortinet technologies within the Fortinet Security Fabric. 

I have been using Fortinet FortiGate for two years.

I would rate the stability of Fortinet FortiGate an eight out of ten. 

I would rate the scalability of Fortinet FortiGate an eight out of ten.

The technical support responds quickly.

Positive

I have worked with Cisco, Check Point, and Palo Alto. I worked with Cisco for ten years and I find Fortinet FortiGate to be a better solution.

The price is fair for what we get with FortiGate.

I would rate Fortinet FortiGate a nine out of ten.

Although we currently don't use any Fortinet devices designed for extreme environments, we are planning to test a few Fortinet switches in such conditions. This initial experiment aims to assess their performance and suitability for our harsh environment. If the switches perform well, we may consider switching our current supplier. While we don't frequently change our OT networks, prioritizing long-term stability has been our main objective, and we've achieved that so far. However, since Fortinet is our network supplier, testing their switches and confirming their reliability is a prudent step for when we need to update our switches.

Potential users should understand their needs before purchasing the solution.

I primarily administrate the solution as a firewall. It's a perimeter solution. We filter content in order to ensure protection. We use it to publish services on-premises.

The GUI is good.

It's a basic firewall and it's a simple configuration. It can be ported very easily to our unit.

All of the licenses are included. We don't need to buy more licenses per pack of users. It is cost-effective. 

We'd like to see what they will do when AI attacks are generated. They will need to ensure their prevention continues to be exceptional. 

The solution isn't missing any features. Maybe they could make some features more accessible, such as a way to translate directions between two networks that share the same subnets.

I've been using the solution for ten years. 

The solution is very stable. It is a robust unit.

It's scalable. You can grow as you need. If you need more, you can use a model to upgrade to the next model. 

We don't have users per se; I provide the service to clients. 

I very rarely contact technical support. If I need to scale, they have very knowledgeable sources and solid workbooks. The resources they offer ensure I always have a solution. 

I've worked with SonicWall and Cisco. Fortinet offers a good license model. It's also very clean in terms of configuration. It offers high performance. It is a bit more expensive compared to SonicWall, however, if you take everything into consideration, the pricing is quite reasonable. 

We have a FortiGate appliance. We are using the 2000F version of FortiGate and running the license for FortiOS. 

First, we design our network, then we update policies. 

Fortinet makes the process very easy. I try to make it more efficient by replicating policies using the GUI. 

How long it takes to deploy depends on the complexity. I have 20 or so subnets and some services and I can manage the deployment in two to three hours. 

It is not difficult to maintain the solution. 

I'm able to handle the deployment myself. 

The licensing model is very good. It's less expensive than Check Point. 

I'm an independent consultant. 

Users have to understand the size of the network. That would dictate the model you need. You also need a qualified technician to configure the unit. 

I'd rate the solution nine out of ten. It's very easy to use.

We use Fortinet FortiGate for the firewall as well as for the VPN. Any of the users outside the organization use the VPN. Any staff members working outside the office headquarters or our office location use the VPN.

The main aspect that I deal with is URL blocking and web access. I don't work with other aspects of this firewall.

It has upscaled our security posture, especially regarding external connectivity, because any access or connection from the company has to go through the Fortinet FortiGate firewall. It's doing a pretty good job. We do not have any complaints there.

Anything that we don't want to allow is not coming in. Anything we want to allow is not being blocked. We always have the granular control where we can block malicious IPs or subnets if needed.

Geofencing allows us to limit the countries from which we allow IP connections. There are many features that I may not even know or haven't explored, but in general, Fortinet FortiGate is doing a pretty good job for us. 

The web controls are what I appreciate about Fortinet FortiGate. We have extensive controls over areas where we could block external-facing IPs, external URLs. We can do geo-fencing with the firewalls, which is a good feature. 

There are too many updates coming for VPN, and the VPN keeps disconnecting frequently, which I find problematic. It does what it's supposed to do, but I practically face reconnection issues with the VPN. 

Regarding the Fortinet FortiGate firewall, I don't have any input. My scope is limited.

I have been using Fortinet FortiGate for around three years.

Fortinet FortiGate is stable. We haven't seen any latency issues related to it, though we do experience latency from ISPs.

I would rate the scalability as eight out of ten based purely on my exposure to security controls relating to URL blocking and website access. 

I haven't had a chance to work with Fortinet FortiGate technical support, but from my colleagues' experience, they say the Fortinet FortiGate people are easy to reach but hard to schedule time with. It's not as easy as having the Fortinet FortiGate engineer on the call and getting other teams involved; it requires careful arrangements to join in with the Fortinet team. I would give their support a neutral score of maybe five.

Neutral

I don't know why we switched to Fortinet FortiGate from Juniper; it's a management decision.

I was not involved in the deployment. I think it's not that difficult; there's no complexity involved as long as we are clear on what we want to do.

We have it on both cloud and on-premises.

I was not part of the team that implemented it. I don't know how much they invested, but it would be worth the investment.

My overall experience with Fortinet FortiGate rates as eight out of ten. 

I am a network engineer implementing Fortinet FortiGate firewalls. We have implemented this firewall for various government departments, small organizations, and hotels.

Fortinet FortiGate is quite popular in my region, so we are implementing Fortinet FortiGate firewalls. Fortinet FortiGate is the best option on the market when it comes to firewalls. It's straightforward to deploy and has good stability and performance.

In an incident, after a restart, Fortinet FortiGate did not connect to FortiGuard servers. Due to that reason, on the customer end, all websites got blocked. I don't know why this happened. The firewall of a bank in Sri Lanka rebooted yesterday, and after that, FortiGuard servers did not connect properly, blocking all customer environment websites.

I have been working with Fortinet FortiGate for around three years.

I have not faced any other issues with Fortinet FortiGate. The performance for Fortinet FortiGate is good.

The scalability of Fortinet FortiGate is good.

We are able to resolve most issues on our own. We raise a case through a partner portal. If the local distributor cannot resolve it, it's routed to another country. The response time for their technical support is not always good. It also depends on the license that the customer has.

Positive

We are partners with both Sophos and SonicWall. I have implemented Sophos firewall myself, but not SonicWall. Our other engineers handle SonicWall implementations. I implemented Sophos SG and recently migrated from SG to SGS, all the firewalls.

The implementation process for Fortinet FortiGate is straightforward. We don't get much error with FortiGate because it's straightforward. We can implement it easily. Sometimes, when we implement through the portal, there are some errors, but we can manage it.

I have implemented 900D firewall and 400D firewall clusters, and many Fortinet FortiGate firewalls. I have also implemented FortiADC once, following step-by-step guides.

We are a partner of Fortinet.

Some of our customers are using Sophos and SonicWall due to price concerns, as they can't manage the pricing of Fortinet FortiGate.

I mostly recommend Fortinet FortiGate when it fits the customer's budget. I would rate Fortinet FortiGate an eight out of ten.

My customers use Fortinet FortiGate for various purposes. The security services provided by Fortinet FortiGate are quite strong. 

I have had use cases where FortiGate helped to protect the mission-critical data for my customers. 

FortiGate is effective at protecting the data at the edge.

What I appreciate about Fortinet FortiGate is its effectiveness. The feature that I find the most effective is threat prevention. 

The mean time to respond and the remediation process is sped up. FortiGate has also helped to consolidate tools and applications for my customers.

The firewall has indeed helped customers to consolidate tools and applications. Once everything is set and done, maintaining FortiGate can have its challenges.

Fortinet FortiGate brings numerous benefits to my company.

The good things aside, there are improvements needed in the Fortinet FortiGate. My customers requested specific features to be included in the Fortinet FortiGate.

My experience with the Fortinet FortiGate is recent, as I worked with it less than a year ago.

My impression of the stability of FortiGate is that it is quite stable.

When it comes to scalability, I find it scalable.

I have escalated questions to Fortinet's tech support.

Positive

We need to compare different firewalls, including Fortinet FortiGate and Hillstone, and then suggest the better one to our clients.

The initial implementation part is straightforward, but it has some complexities. My implementation strategy involves several steps that I take when deploying it.

I do have hands-on experience working with the products, and I do the POCs and implementation part.

When it comes to the ROI, the return on investment of FortiGate can be a bit hard to estimate, but based on my experience, I find it to be quite favorable. Overall, Fortinet FortiGate has indeed helped to reduce the total cost of ownership for my customers.

My impression of the firewall's ability to provide network and security coverage is positive. 

When it comes to sustainability, my impressions of the firewall are favorable.

The size of the environment with Fortinet FortiGate was significant, including many endpoints and users, and it involved enterprise-level business.

Based on my experience, I would say to someone considering purchasing Fortinet FortiGate's data center firewall is that it's a good choice. I would give Fortinet a solid score.

The majority of use cases have been around UTM. Initially, they were famous for their UTM solution because nobody was offering what Fortinet was offering. 

We most probably use the latest version.

Fortinet has a very strong OS. They have a single OS through which they integrate all the networks and security operations. Our experience has been very good. Fortinet gives us a single fabric for the security and network teams. This unification has helped us a lot in providing Secure SD-WAN and other solutions, such as network switches, wireless controllers, FortiNAC, FortiAuthenticator, etc. They have a single pane of glass for all these from the monitoring and visibility aspect.

The integrated application protection provided by Secure SD-WAN is very good. Fortinet is a security-focused company. The features related to application recognition and how to enhance the performance and security of applications are pretty good.

The customers for whom we deployed FortiGate have become long-term customers of Fortinet. Even when they compare the solution with some of the other vendors, they're more comfortable with going with Fortinet and upgrading and refreshing the hardware and the software. It's a very good product, and the customer satisfaction is pretty good.

It impacts operational efficiency because we can quickly make the changes. For example, Cisco has some limitations in terms of the time it takes for any change to take effect, which impacts the operational efficiency, whereas in the case of Fortinet, they've got a very quick way of doing the changes and reverting them, which eliminates any downtimes because of the configurations. Their method for configuring and applying policies is very simple and easy. Because of that, it's very easy to do complex changes, and in the case of misconfiguration, revert those changes without much of an impact. Overall, Fortinet FortiGate brings a lot of operational improvements because of the strength of FortiOS.

Secure SD-WAN has helped us remediate threats more quickly. Normally, with the WAN solutions or the simple SD-WAN solutions, security is done on the hub side. With the Secure SD-WAN solution, we can apply security at the branch level, so unnecessary or malicious traffic doesn't reach the data centers or the hub site, which helps in improving the overall security posture. Also, we can tighten and apply a single security policy across all the branches or different segments of the WAN, which improves overall security. Fortinet offers different security measures for blocking malicious traffic and having a uniform policy across the entire organization. 

Secure SD-WAN has helped reduce our mean time to detect (MTTD) and mean time to resolve (MTTR). Applying a central security policy at the branch level immediately helps us to detect any malicious traffic and block it there, so the chances of anything reaching the hub or the data center side are less. It improves MTTD and MTTR because it has a very good interface where we can easily respond to all the attacks and manipulate things. Applying security with the help of Secure SD-WAN helps to mitigate attacks from where they are originating, which improves MTTD and MTTR.

Secure SD-WAN has helped reduce help desk tickets. Because of the operational efficiency and security, there are not many issues that impact the number of tickets.

With the help of Secure SD-WAN, we can provide operational efficiency because we can apply policies on an application-level basis. With Secure SD-WAN, we can apply a security policy per application. The central security application structure helps to apply all the measures from one central place and from the cloud. Because it's connected to many intelligence centers, it future-proofs a business and improves it overall. 

Fortinet has a very good solution for Secure SD-WAN. One very good feature is that they have robust and simple FortiOS through which they provide all solutions. That's their strength. There's not much complexity involved with the Secure SD-WAN solution of Fortinet as compared to Cisco's solution, which has a lot of flexibility but complexity also comes with that flexibility.

From a reporting perspective, there's room for improvement. They provide FortiAnalyzer through which one can get some enhancements, but the visibility and reporting still need slight improvement. Recently, a customer had a requirement of getting some reports on their internet usage. Palo Alto has a bit better reporting than the Cisco and Fortinet firewalls, but we cannot get granular details about the user-level security, usage, etc.

Their support also needs improvement.

I've been working with this solution for around ten years.

It's very stable.

For small and mid-level enterprises, it has been a very good solution, and that's why they captured that market. Our experience with it has been very good. It's easy to configure and deploy. In our country, their main market is small and big enterprises, but they are gradually focusing on the performance aspect. It's being used in large enterprises as well as a firewall solution.

It's scalable. There were some performance issues a few years ago, but they've fixed them for better performance, optimization, and high throughput. Performance-wise, it's very good.

Support is one of the areas that they need to look into because as compared to some of the other companies, Fortinet's support is not that responsive. The product is very stable, but their support needs to be improved. I'd rate their support a six out of ten.

Neutral

We used Cisco and Juniper. We switched to FortiGate because it offers a lot of features at a very good price point. Unlike some of the other vendors, you don't have many license restrictions. For large and medium enterprises, they provide a wireless controller, authenticator, and mail features. There are so many features integrated within FortiOS, whereas, with many vendors, you have to work with different products. It's very helpful for small organizations with tighter budgets. There's also the ease of configuration that helps to bring things online as quickly as possible as compared to some of the other solutions that have a learning curve and that take some time.

I mostly work on the pre-sales side. I discuss all the features, and then I work with the deployment team. They do the installation.

Its installation is easy. Normally, we get the scope and have the high-level design. After that, we go to the low-level design where we manage all the configuration templates. We have discussions with the customer and finalize all the policies that need to be applied at the site. We segment sites by size, traffic, application usage, etc. We apply the policies on a group basis, and then we apply the configurations on the controllers or the sites.

In our area, people are mostly interested in on-prem setup instead of cloud because not many controllers are located within the country, so the traffic has to be traversed outside the country. For banks and financial sectors, on-prem is more suitable, but small organizations can have it on the cloud.

We implement it ourselves. For small projects, one or two people are good enough because we majorly find all the things at the LLD stage. We have a team that works on the LLD and configurations, and then we've got an on-field team that takes those configurations and applies the changes. Normally, if the implementation isn't distributed across the country, not many resources are required. Two or three resources are good enough, but if it's distributed across different regions, then a larger team is required. Once we have the templates, things are posted automatically, so not much to be done at the sites. We just have to do connectivity and configure the policies. As compared to other deployments, we require much less staff for the deployment tasks.

It requires maintenance, but generally, the product is very stable and doesn't require much maintenance. Normally, there aren't many changes. If there are any issues, we definitely need to monitor and check. Most of the issues aren't related to the solution itself if you have implemented it in the right manner, so planning needs to be done in the right manner.

There's definitely an ROI. Having a centralized way of managing and applying policies across the entire organization always helps. The time to manage, operate, and resolve issues is much lower. When you have a central place to manage and do the changes, you get efficiency and time savings.

A year or two years back, its price was competitive and reasonable. That was one of the reasons that people easily switched to Fortinet. Over the last two years, the prices have increased drastically. However, the prices of others have also increased. An advantage is there from the price point but not as much as it was previously.

It's a very good product. It has all the features required for operations. We strongly recommend using Fortinet for your edge or data center security or for your SD-WAN. FortiGate is doing very well. Fortinet has been capturing the security market, and now they're capturing the market for SD-WAN as well. They're a leader in Gartner's Quadrant. Their FortiMail and FortiWeb solutions are also very good. They provide all these solutions, and we have deployed all these solutions in the market. They're working perfectly, and customers have minor complaints about them.

Currently, no SD-WAN solution is interoperable with other vendors. Every SD-WAN vendor has its own solution. There's no standardization, so there isn't much interoperability. For example, we need a controller and branch-level software or hardware. Hardware is agnostic for some vendors, but normally, vendors also have their hardware. There are a few vendors that provide hardware-agnostic SD-WAN solutions, but Fortinet has its own hardware on which the complete SD-WAN solution runs.

Overall, I'd rate Fortinet FortiGate an eight out of ten.

We are using Fortinet FortiGate to block or deny malware and to administrate the network to control the traffic inside and outside.

It has significantly contributed to the effective control and monitoring of the network infrastructure. We could see its benefits immediately after the implementation.

It is complemented by other equipment, such as the Fortinet switch, and it is integrated with other tools that help to prevent cyberattacks, including a web filter, IPS, and application control. 

The user interface of the Fortinet FortiGate management console could be more intuitive and user-friendly, and the log analysis and reporting features could be enhanced to provide more flexibility and customizable insights.

I have had experience with Fortinet FortiGate for one year so far.

Fortinet FortiGate is very stable. I would rate its stability a ten out of ten.

It is scalable. I would rate the scalability of Fortinet FortiGate a ten out of ten.

We are a medium-sized organization.

I would rate Fortinet's customer service as very good. They are good because they provide solutions to problems that we encounter and help us make new changes or meet requirements, and they have the ability to work with us to make the changes that we want.

Positive

We previously used Sophos for web filtering. We now use Fortinet FortiGate for web filtering as well. We switched from Sophos to Fortinet FortiGate because we chose to adopt a Fortinet ecosystem to achieve better centralized control. We wanted to streamline security management while integrating firewalls, switches, endpoint protections, and wireless. 

We used Sophos only for web filtering control applications, but when we switched to Fortinet FortiGate, we achieved better integration with other devices in the security management.

I was involved with the initial setup and deployment of Fortinet FortiGate. It was of medium complexity. It was easy because the tools we were integrating were well-documented, but somewhat difficult due to the learning curve and the need to adapt our legacy system to the new environment.

It took four technical people to deploy Fortinet FortiGate. 

Only two people maintain it; for implementation, we used four people, but to maintain it, it is just two. 

It doesn't require a lot of maintenance. The job roles of those who maintain it include making changes, adjusting web filter configurations, and switching ports. The people who maintain it are network administrators.

I would advise people considering using Fortinet FortiGate to carefully plan the network structure and train the team; Fortinet is powerful, but its full potential comes with understanding the platform. I would recommend starting small, documenting everything, and using its centralized tools to stay secure and efficient.

Overall, I would rate Fortinet FortiGate a ten out of ten.

I see several benefits of using Fortinet FortiGate. When it comes to deploying the solution, it is easy. It allows customers to quickly get up to speed with their day-to-day tasks, minimizing mundane requests. Additionally, the support regarding upgrades and hardware failures has been above par.

Fortinet FortiGate helps to remediate threats more quickly. 

Fortinet FortiGate helps to reduce the mean time to respond when it is properly integrated with proper tools. For example, with email and other automation capabilities, it has reduced to under an hour for me. 

Fortinet FortiGate helps to consolidate tools and applications by offering web control, email protection, routing, firewalling, and extending to switching and wireless on the same management platform.

Fortinet FortiGate is good for helping you secure and protect mission-critical data. It is also good for protecting your edge.

When it comes to security, Fortinet is excellent in terms of how updates are done when there is an incident globally or there's a new variant of any IOCs. It is quite up-to-date.

I find application control, logging and reporting, and ease of use valuable. I find the ease of configuring specific policies to be the most valuable feature of the Fortinet FortiGate firewall.

The solution could be improved by addressing limited local reporting. It requires obtaining the FortiAnalyzer for proper visibility because you can't do much from a reporting perspective with just the firewall alone.

In terms of convergence, it is a good solution, but it can be better. FortiGate has the capability to support their switching and wireless platforms. They are quite excellent on their wireless side, but I found a couple of gaps in terms of how FortiGate integrates with their own switching platform. There are some gaps there.

My experience of working with Fortinet FortiGate is approximately 10 years.

It caters to all with different units, such as from five users to a model that supports telcos or huge enterprises. Depending on the size of your organization, you end up getting the correct fit of the model, and they have the same capabilities. The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.

Their support is quite effective. I would rate technical support from Fortinet a nine out of ten.

Positive

I've had a chance to do a couple of deployments on the cloud. I've done deployments on private and public clouds. I've deployed it on-prem as an edge firewall or as a data center firewall. 

In terms of maintenance, like all firewalls, there is an aspect of upgrading based on new features and getting the latest updates from the signatures and IPS uploads that come along with it. That happens effectively in an automated way. Software upgrades are catered to during the support window.

The FortiGate firewall has helped to reduce the total cost of ownership.

It provides value for money and is quite competitive compared to other vendors, allowing you to achieve the proper ROI from investments.

The pricing or licensing of Fortinet FortiGate is quite effective as it offers different bundles that aggregate most required features, while also allowing clients the option to select specific components alone.

The typical use case for Fortinet FortiGate as a firewall is because of the commercial aspects. It is competitive from a pricing perspective. There is ease of use compared to other vendors and effective vendor support for any issues.

Anyone considering purchasing FortiGate's data center firewall should go for it because data centers require stability and proper performance, which the platform provides. I would recommend getting the latest unit for a longer shelf life as clients often buy nearly end-of-sale products, limiting their usability.

Overall, I would rate this solution a nine out of ten.