Fortinet FortiGate Reviews

We use FortiGate as the edge firewall. We integrate it with our APIs over Microsoft Azure. We work in the VOIP industry, and our services are prone to latency. Security is a major concern for us as a U.S. research company, where we frequently test attacks. FortiGate handles these attacks well.

FortiGate has led to a reduction in our security budget. Our management decided to switch to FortiGate because it offers all the necessary features and even improved features within our budget.

I'm looking forward to FortiGate's dashboard features, insights, application oversight, and monitoring, which could help us significantly.

As of now, I haven't identified areas for improvement. However, once the firewall is in production and all traffic is shifted, I might be able to provide more feedback. The configuration part was challenging, especially converting configurations from another OEM to FortiGate.

I have been working on FortiGate devices for around four years. In my previous role, we used FortiGate based on the requirements and budget constraints. Currently, my organization is transitioning to FortiGate in the Azure environment as part of the migration phase.

I rate FortiGate's stability as a nine out of ten, reflecting that there have been no major issues with stability so far.

FortiGate's scalability is rated eight out of ten. We expect network expansion both over the cloud and on-premises, and we believe FortiGate will perform well in this scenario.

We had a single instance requiring FortiGate's technical support, which was effective in solving the problem. I rate their support as eight out of ten.

We used other vendors, like Cisco. FortiGate was chosen due to its cost-effectiveness and its ability to offer improved features within our budget.

The installation process does not take much time, but the migration phase from Cisco to FortiGate is expected to take about ten days.

We have a separate team responsible for deployments over the cloud, while our networks and security team manages migrations and operations of the devices.

There has been a cost reduction in our security budget after implementing FortiGate, attributed to its offering of essential features at a reduced cost compared to previous vendors.

We pay for additional services like perpetual licenses. Despite this, FortiGate is considered a cost-effective solution. I rate the pricing as a five out of ten, reflecting a balance between cost and benefit.

We also use other vendors like Cisco, Netgate, Ubiquiti, and others in our environment.

I recommend this product. In future updates, it would be beneficial to see automation features, such as real-time alerts via phone, which we currently get from other OEMs.

I'd rate the solution eight out of ten.

Private Cloud

Microsoft Azure

We use Fortinet FortiGate as edge protection for the customer site. Right now, we are trying FortiNAC before deploying it for our customer. We link Fortinet FortiGate Firewall to our SIEM solution. We have a cybersecurity department, and we aggregate all the logs of the firewall, the proxy, the PC, virtual machine, and other systems.

The interest of the Fortinet FortiGate appliance is the ability to manage quickly and easily the different functionalities. It's easier to use rather than Palo Alto, for example. AI should be a good improvement. The only difficulty that I have today with the Fortinet FortiGate is that on the Forti appliance, there are many functionalities.

As we are trying FortiNAC right now, there is some improvement needed on the product. For the rest, perhaps having more packages would be beneficial. We do not use FortiManager for our own usage. We have developed some scripts using Ansible and we automate everything.

We have been using the solution for more than 10 years.

The question concerns failures on the appliance or security breaches.

Not all functionalities are scalable.

The access to the support is good. When specific information or professional services support is needed, the professional services are very expensive.

Most of the time we are implementing the UTP service.

The implementation is handled by my team. They are involved in the deployment for the customer and use it day by day. We have three people dedicated to the security part on the Fortinet FortiGate and roughly eight people working on it in the security team.

The cost reduction potential exists but is difficult to quantify.

Fortinet is increasing its value in this area. It's easier to use compared to Palo Alto.

The functionality is acceptable but nothing really impressive. For some customers, we are using Fortinet FortiGate, FortiNAC, FortiAnalyzer. FortiMonitor is used for one customer. For FortiMonitor it's FortiAnalyzer. We don't use FortiAnalyzer on AWS. For both, we need the approval of the head office.

On a scale of 1-10, I would rate this solution between seven and eight.

On-premises

Amazon Web Services (AWS)

The solution is used for protecting offices for outbound traffic.

To be brutally honest, it wasn't my choice of vendor, but it seems to be able to do everything, though its configurations have to be quite specific. This is neither a positive nor a negative aspect, it is simply how the solution functions.

The operational logic is not as straightforward as a Sophos XGS device. When creating rules in the Sophos firewall, they are more intuitive than in the Fortinet FortiGate IPS device. The Fortinet FortiGate IPS device is more complicated.

The solution needs to be simplified.

I have been using Fortinet FortiGate IPS for six months.

The initial setups are acceptable, though I have not been the one implementing them.

The solution is stable.

It is crucial to size your hardware correctly to avoid problems.

The solution serves about five users.

The support package being an additional extra, even with an enterprise package purchase, is pathetic.

Though I haven't had direct experience with support, the fact that it doesn't come by default, which is very misleading compared to other brands, warrants a rating of two out of ten.

Negative

A basic setup can be accomplished in a few hours, but significant customization is required to achieve the desired configuration.

I view it from the perspective that making an investment in the product prevents potentially larger costs when something goes wrong.

The solution is more affordable compared to alternatives.

The solution is suitable for small-medium customers, provided they have the ability to set it up.

The implementation has been successful so far.

On a scale of 1-10, I rate Fortinet FortiGate IPS a seven.

On-premises

Other

Mostly firewalls.

The best features of Fortinet FortiGate include everything about networking, such as routing and VPNs. Fortinet FortiGate is specifically user-friendly with an easy guide. It is easy to follow and learn about and work with. It has resources available all over the internet with an extensive database. It is very popular, so every community discusses Fortinet FortiGate. Every problem has been solved at some point.

Without a license, it becomes difficult to implement static DNS. The FortiDDNS.com functionality is particularly challenging to access without a license.

I have been working with Fortinet FortiGate for approximately a year and a half.

Fortinet FortiGate is quite stable. The main problem occurs when customers do not update their Fortinet FortiGate properly and regularly. Most issues stem from firewalls not being updated. I have not encountered any problems with Fortinet FortiGate devices.

I have not opened many cases due to lack of need. When we do open cases, we receive fast and friendly replies. The support has been good, though I have not experienced significant issues to fully evaluate this aspect.

I have worked with other firewalls including Palo Alto, specifically their Prisma Access SASE solution. I have also briefly worked with Cisco systems.

I am not in that field, but it is quite expensive, especially for personal or home use.

We recommend it primarily because we have more knowledge in the Fortinet FortiGate field. Customers ultimately choose what they prefer. We work better with Fortinet FortiGate due to our extensive experience with it.

I have not used FortiGuard extensively as it is not in my field. The only SASE solution I have used is Prisma Access from Palo Alto, not the Fortinet FortiGate SASE. The interface is very user-friendly and easy to use, though knowledge of networking aspects, VPNs, and protocols is necessary. Fortinet FortiGate offers great compatibility with other Fortinet FortiGate functions such as IDS, antivirus, and sandbox features.

All problems we have encountered have had straightforward solutions. Throughout my year and a half working with Fortinet FortiGate, I have not found myself needing additional features.

I rate this solution 8 out of 10.

On-premises

Other

I handle solutions architecture for security and systems design. I have customers who use Fortinet FortiGate. 

All the features of Fortinet FortiGate are good. When customers have issues, it's very easy to talk them through the interface, and when they've got any support issues and they want to figure them out themselves, it's very easy for them to contact the FortiGate support. All the knowledge bases have various information and knowledge articles to assist them in getting solutions as quickly as possible.

We use SASE, and it's a great product; I wish FortiGate had come out with it sooner because it helps significantly.

Fortinet FortiGate stands out due to its functionality and longevity. It's stable once you've completed the setup.

In Fortinet FortiGate, they've already improved many areas and built in new features. When considering what can be improved in Fortinet FortiGate, more competitive pricing is needed more than anything else. Fortinet FortiGate is a very good product, but when we look at the South African market, they just need to relook at the pricing because it's a bit pricey for some of the local government organizations.

I've been using Fortinet FortiGate for the last 15 years.

The stability of Fortinet FortiGate rates as a nine out of ten.

It is scalable. I would rate it a nine out of ten for scalability.

Our clients range from across the board.

It's easy for customers to get assistance with the product.

I would rate their support a nine out of ten. I don't have any problems with the vendors.

Positive

It's mostly on prem. I'm going to do data center solutions and cloud deployment.

It's very easy to do the implementations. Even training the customers on how to do their own rules and whitelists is very easy. On average, it takes me about two and a half hours with all the customization for the clients.

Fortinet FortiGate does not require any maintenance. Once it's done, the only times we do maintenance is if the customer wants something or there are updates.

I've shown them how it works with FortiSIEM, so now I can get them to actually do inspections on their infrastructures every six months, do penetration testing, and see that their environments are secure.

When you look at certain sectors of the market, the pricing is a little high. 

We are implementing FortiGate's data center solution now because I'm starting to let local government sites work through one data center. 

With FortiGate SD-WAN, the impact has been very little on the network performance because we've done certain things at night and certain things during the day, so the impact on the network is very low. In my organization, there are about three Fortinet specialists focusing on FortiGate.

I'd recommend Fortinet FortiGate to other users. Overall, I'd give Fortinet FortiGate an eight out of ten, with pricing being the main factor preventing a higher score.

On-premises

It is a next-generation firewall used to create policies to allow and deny any traffic. I have used Fortinet FortiGate in the finance sector previously, and we are now using it in the manufacturing side.

In my opinion, some of the best features of Fortinet FortiGate include its ability to block specific applications. For example, if I want to block someone from using Facebook videos, I can disable or use its application control features to block access. Facebook has many components such as video features, chat features, and VoIP calling features, and I can block any of these features to be more granular.

SD-WAN is an excellent feature where you can route the traffic to other WAN links without manual interruption. Technically, you cannot put two default routes on any firewall, but SD-WAN is a feature we can use to divert our traffic from one ISP to another. The impact of SD-WAN on the network performance has been significant. Previously, when we didn't have Fortinet FortiGate, we had Cisco routers where we used manual routing, and if one of the primary links was down, we had to do manual routing. With Fortinet FortiGate, it's much easier as we don't have to do anything; it's already configured, and if something happens, our configuration automatically changes the link and diverts the traffic when one of the links is down.

Fortinet FortiGate can be improved by being more stable because when we look for logs or open a case, we always find a bug and then we have to upgrade it. However, since it's a cost-effective solution, we are satisfied.

I have more than 10 years of experience with Fortinet FortiGate.

Fortinet FortiGate is stable, but it has some bugs, so you have to upgrade it. I would not say it has all the capabilities, but it's good for a manufacturing site.

Fortinet FortiGate is pretty scalable.

I would rate Fortinet FortiGate's support at a seven out of ten because whenever I open a case with their support, I have to explain everything and clarify the background. They take some time—at least a day—to see what's happening with the firewall. The agents aren't much experienced in providing solutions, but it's better than Palo Alto's support, which is the worst.

Previously, we had Palo Alto firewalls which were expensive—the contracts were particularly expensive. Fortinet FortiGate is not that expensive and is more affordable when comparing pricing. Nowadays, firms usually look for cheaper models and solutions, so Fortinet FortiGates are good, but for financial sectors, Palo Alto is better.

The main differences between Palo Alto and Fortinet FortiGate are that Palo Alto has more features and functionality compared to Fortinet FortiGate. Palo Alto can be slow, but Fortinet FortiGate is fast. With Palo Alto, we have to commit and it takes five minutes for the configuration to push, which isn't the case with Fortinet FortiGate.

The initial setup of Fortinet FortiGate is straightforward. The upgrade process is also straightforward.

It's cost-effective.

I would rate Fortinet FortiGate a nine out of ten. If you are looking for a cost effective solution and want to avoid the risk, go with the Fortinet FortiGate.

On-premises

I used Fortinet FortiGate to protect some perimeters, and I used it a lot for detection, filtering, domain control, and security functions and features. 

I worked for a company that used Fortinet FortiGate to provide services to many customers across various industries and through different environments. Some companies ranged from five to 50 to 100 users, and others were double that size, and even more.

We improved a lot of our users' security, including malware from outbound internet. It reduced downtime and helped detect and block malicious actions. The realization of benefits was immediate.

The most valuable features of Fortinet FortiGate are that it's simple to implement all necessary settings, and it's quite fast. 

Their web interface to manage it is excellent, even compared with other providers. 

With Fortinet FortiGate, we improved security significantly. It blocks a lot of malware from the internet and even between our hosts in different networks, thus enhancing our security and reducing any downtime by blocking problems that could stop operations.

One of the most important areas for improvement for Fortinet FortiGate is the limited resources for tests. I was limited to a few interfaces for one month, and it would be great if Fortinet could improve these features in their test versions.

I used Fortinet FortiGate for three years in total.

I would rate the support with Fortinet FortiGate a ten out of ten. 

We had a few problems, and whenever we needed support, they attended to us in a few hours or days based on the severity level, resolving the problems with minimal impact on the environment.

Positive

They were using SonicWall and pfSense before switching to Fortinet FortiGate.

Fortinet FortiGate is more user-friendly when it comes to the interface and setting every feature you need, and keeping it working as expected to protect the network, while SonicWall is too advanced and very laggy and confusing to use. SonicWall does not do anything better than Fortinet FortiGate.

The initial setup for clients was very straightforward, easy to implement, and required few steps to keep it working with Fortinet FortiGate. It takes about one day, around ten hours of work for small companies and normal offices to deploy Fortinet FortiGate. That said, it might take longer for bigger networks. However, it's not too much time compared to other companies or providers.

It required around two or three people who understand the network to deploy Fortinet FortiGate, along with one or two more for setting devices or any changes and tests to ensure everything is working as expected. The total was somewhere around five people or slightly less, depending on your knowledge about the existing network.

I cannot calculate the exact return on investment from Fortinet FortiGate. We evaluate it based on the impact of downtime when we have problems in the environment, however, the ROI is less than a year. 

Fortinet FortiGate helps save time and improve efficiency by aggregating logs that help us understand what's happening, thus improving our detection time and reducing operational errors. We reduced our time by approximately 30% with Fortinet FortiGate.

Fortinet FortiGate's pricing is comparable to others.

I am currently working for another company and not using Fortinet FortiGate. The last time I used Fortinet FortiGate was on March 25th, just a few months ago. 

I work as a technical user in cybersecurity monitoring. My current company is a partner, however, I don't have any relation with sales. 

On a scale of one to ten, I rate Fortinet FortiGate a ten.

The typical use case for the Fortinet FortiGate firewall for my clients is its ease of use. My clients are using Fortinet FortiGate as SD-WAN.

The effectiveness of Fortinet's unified SASE in providing consistent security policies is notable because there is one security profile from either the head office or the branch office, allowing your profile to move seamlessly with you wherever you go. You have end-to-end visibility, and you can look at the analytics. To me, that moves towards SASE.

My clients appreciate it for its features. It is easy to install and manage, and it offers all-around protection, including web filtering, content filtering, IPS, and IDS.

My clients find the next-generation firewall feature of Fortinet FortiGate to be particularly valuable. It provides internet security, network security, cloud security, ZTNA, and SD-WAN security. There is a unified agent for FortiClient. There is centralized management.

Areas of improvement for Fortinet FortiGate include the need for more training and certification, especially when dealing with distributors globally, which presents challenges in product availability and delivery timelines.

There should also be more training and certification.

I have about 10 years of experience with Fortinet FortiGate.

I find Fortinet FortiGate to be a stable solution.

Fortinet FortiGate is a scalable solution, as you can start small, maybe with FortiGate 40F, and then move to FortiGate 60F or FortiGate 80F, depending on your needs.

It depends on who your distributor is. 

Neutral

It is not straightforward, but the implementation is pretty good overall. Every site is different for me. There is no standard site. We have a few different issues here and there, but overall, it's pretty good and straightforward to install. Its integration is not difficult.

It is a matter of learning and understanding the reasons why people need Fortinet FortiGate.

Fortinet FortiGate positively provides my clients' organizations with a high return on investment. There is visibility into network operations, allowing us to identify network issues. It has advanced security features. You can achieve about 200% ROI over three years, while enhancing IT teams' productivity by about 50%. It simplifies security across branches and enhances hybrid and cloud security. There is even a feature where you can predict the application performance.

It's very competitive.

Many users nowadays prefer agentless installations over installing agents on their devices, which presents challenges for endpoint security, especially concerning ZTNA, VPN, and endpoint protection.

I would rate Fortinet FortiGate an eight out of ten.

On-premises

In our organization, FortiGate Next Generation Firewall (NGFW) serves as the main security system for our firewall needs. I have utilized it to manage the firewalls and some other security appliances, such as VPNs. Currently, my usage focuses primarily on firewall management. I set up rules, search for logs, and consult logs when issues arise. This approach covers most of our security management tasks.

One of the most valuable features of FortiGate Next Generation Firewall (NGFW) is the ease of usability it offers. It is quite easy for me to learn to use. Additionally, FortiGate Next Generation Firewall (NGFW) has improved our efficiency in setting up security and provided us with more visibility over some issues and incidents we previously faced.

FortiGate Next Generation Firewall (NGFW) could be improved by including more templates for setting rules or regular jobs. I do not recall if the software includes any AI features.

I have had experience with FortiGate Next Generation Firewall (NGFW) for about five or six years.

When deploying FortiGate Next Generation Firewall (NGFW), it required one week for the initial setup and just two hours for effective deployment. There were no significant issues during this process.

In my experience, there are usually no significant stability issues with FortiGate Next Generation Firewall (NGFW). However, updating the software during issues can be quite convoluted, especially if there is an unexpected attack, such as on a Saturday.

Customer service with Fortinet for FortiGate Next Generation Firewall (NGFW) has been quite good. We experienced a major issue during one of the upgrades, and it took about an hour to reach support and rectify the problem.

Positive

Before using FortiGate Next Generation Firewall (NGFW), we used Cisco for our firewall needs. Cisco presented a lot of usability challenges. Setting up firewalls and rules with Cisco was difficult and required extensive knowledge of their system, which led us to switch to FortiGate Next Generation Firewall (NGFW).

The initial setup of FortiGate Next Generation Firewall (NGFW) was relatively smooth. It took about one week for the complete setup and two hours for the actual deployment.

The deployment involved two people from my side, and we also had assistance from a vendor during the setup.

In terms of return on investment, FortiGate Next Generation Firewall (NGFW) has been straightforward. It has notably improved our efficiency and visibility.

The pricing of FortiGate Next Generation Firewall (NGFW) is reasonably affordable. It is suitable for mid-level and high-level companies, though it might not be cheap for small companies.

I would recommend FortiGate Next Generation Firewall (NGFW) to others. Despite some issues with upgrades and vulnerabilities, Fortinet quickly addresses concerns. Overall, on a scale of one to ten, I would rate FortiGate Next Generation Firewall (NGFW) as an eight.

I primarily use FortiGate IPS to protect my company from advanced threats like zero-day attacks and other cybersecurity threats.

The most valuable feature is the deep inspection for traffic, which is capable of identifying zero-day attacks. This solution works well on a daily basis, detecting various types of malicious traffic. Integration with FortiFabric enables easy management and scalability across different locations.

There could be improvements in the mathematical algorithms used for behavior analytics of traffic. More advanced AI capabilities would be beneficial in future updates.

I have been using FortiGate IPS for about two years.

The stability of the solution is excellent. I rate it as nine out of ten. There are no issues with stability, and it integrates seamlessly with the main product, which is a firewall.

FortiGate IPS is highly scalable. I can easily integrate it with FortiFabric and manage multiple firewalls and other Fortinet solutions from a single dashboard.

Fortinet support is very responsive. I would rate their support as eight out of ten.

Positive

I also use Cisco for email security. Fortinet was chosen since it is a popular solution for middle-sized companies in my region.

The initial setup took about two to three hours and included setup and configuration.

The implementation involved two engineers. It was handled internally.

I have not calculated ROI specifically, however, the primary goal was to enhance cybersecurity.

There are no extra expenses involved after purchasing the solution. Pricing could be better, however, overall, it is considered a middle-level price for a middle-level company.

I am currently working mostly with Fortinet as well as with Cisco for email security.

I recommend FortiGate IPS for those looking to add an additional layer of security on top of a firewall to combat cyberattacks. I would rate the overall solution as seven out of ten.