Fortinet FortiMail Cloud Reviews

The solution is used to filter client emails. I'm a network security manager. 

I like the email encryption feature. 

FortiMail Cloud isn't able to support portals where you're able to assign a different domain level. It lacks domain support. 

I've been using this solution for four years. 

We haven't had any issues with stability.

The solution is scalable because we've been able to integrate other solutions. 

The customer support has been very helpful. 

Positive

The initial setup is straightforward. The deployment took a day but the implementation and testing took about a week. 

I recommend this solution and rate it eight out of 10. 

We primarily use the solution for mail security.

Old and spam profiles and features and also the content profile are the most valuable aspects of the product. We can deeply analyze email for its content. 

The antivirus profile, which has a sandbox on the cloud and on-prem, can help us deeply analyze the attachment for any virus attached. 

It has a session profile, which limits the use of my internal and external users. It has three layers of inspection: the IB access control, the IB policy, and the recipient policy. It's great. 

There are many, many features to use in FortiMail.

The deployment is simple. 

It's a stable product.

The scalability is good. 

Not much can really be improved at this time. That said, they could look at strengthening anti-spam with the newly observed domains.

I've used the solution for one to one and a half years. 

The solution is stable and reliable and the performance is good. There aren't bugs or glitches. 

It's a scalable product.

I'm not sure if we plan to increase usage in the future.

Technical support has been great. 

Positive

It's an easy setup and deployment for the product. You just buy the service and you can access all the things on your side. The deployment itself took only four days.

We handled the implementation with the vendor. 

I don't have any information about the product's exact cost.

I use both the cloud and on-premises versions of the solution.

I'd rate the solution ten out of ten.

The primary use case of this solution is for managing spam and viruses in email. We are also using it to send out mail. All of the mail is sent to FortiMailer.

FortiMail manages the mail and sends the mail to the main system inside of the company.

We have approximately 400 email accounts.

I understand a lot about spamming and antivirus and I have improved and increased my knowledge about the security of the system.

The most valuable features of the solution are the antispam, antivirus, and the rules that you can manage inside the system. There is a lot of configuration that we use, but we don't use it all, maybe less than half, but it was enough to better manage the antispam and antivirus.

They advise us of updates and to back up the service in time. It's nice and we haven't had any problems. 

The initial setup should be simplified. It was very involved and the influence of the setup for the delivery of the mail was quite complicated. 

The setup of the rules can be improved. I think it should be simplified and would be the best improvement in the system. It is quite complicated because there is a lot to use, and there are many different logical systems to understand to determine if there is spam or not, and if you don't use it correctly, you can create even more problems.

Everything that you need is inside and all that you have to do is to compose the rules correctly and to the way that you like. The configuration for FortiMail is very powerful.

I would like to see the interface simplified and make the configuration easier.

I have been using this solution for one year.

The stability is good, we haven't experienced any problems.

We use this solution every day. The company works also in Arabia, and Qatar, so we work Monday to Monday. There is no stop in service.

It was enough for our necessity.

We have two users for administration.

We have not had any contact with support other than from the partner, over a year ago.

Previously, we were using a different solution. Lockers an Italian solution but it did not send as well as FortiMail. We were able to resolve our issues using FortiMail.

We have also used the Sandbox features, but it caused a delay with the delivery of the mail, so we manage only with a few attachments.

We used other solutions but they did not meet our needs. They were not able to control the spam well enough. Their setup was very easy and simple, but they didn't include an antivirus for the email. We had several issues regarding the mail as a result.

The price was similar to FortiMail.

The initial setup for me was complicated because I am just learning.

There were two people to deploy this solution, me and a consultant. It took one week to deploy.

I had the help of a specialist from a partner of Fortinet. Now we manage it on our own with the help of a partner.

The licensing is for three years. In the beginning, we did not pay monthly, it was paid once for three years.

Other than the payment of the service for the consultant, there were no additional fees.

We made other comparisons with other solutions. We chose FortiMail because we could implement it with FortiGate and FortiAnalyzer so that we could use only one brand for security.

You can concentrate on the rules and not on what is inside the system because all is managed from Fortinet. Fortinet has a large network that monitors the system around the world.

If there is a problem somewhere Fortinet can act on it immediately. That is very important.

This solution is good for me. I think the development that I see was enough, but at times it can be too much.

Because it is on the cloud it is automatically managed by Fortinet.

It is a good solution and a good choice.

I would rate this solution a nine out of ten.

We use the product for spam filtering and as a second layer of filtering for Office 365. I use it for encrypting emails and monitoring all emails that have sensitive data and policies are applied there as well. In addition to having it as a user portal for spam emails and quarantined emails, users can manage their spam, their quarantined emails, and whether they want an address on the blacklist or the white list.  

Our security department is responsible for all emails that are quarantined by the system so they are monitored. There is two-way communication — not just one way — and FortiMail is doing all the work. We have to assign some people to control and monitor the operation for FortiMail. Due to the spam traffic, they have to change the scripts and the configuration. It is a two-way configuration and communication between the system and the administrators.  

FortiMail is not just something that you configure once and leave alone, it is a learning configuration. So you can not just use any configuration and think that it should continue to work optimally. Every organization has its own configuration. I have three companies working with FortiMail and every company has a different configuration, a different approach and different ways of controlling security. FortiMail is what their organization needs for security, but they must adapt it in practice. There is no universal solution for all of the companies. It is a very flexible solution.  

I worked with many email monitoring products and really they are all the same except for the engine and what the vendor companies provide to you for the filtering as far as the updates and security trends. But with each type or brand of email filter, you need to enhance your configuration as per your company requirements.  

As far as improvement, I would like to see additional troubleshooting tools. It would be useful to have different types of reporting so that you can monitor how your emails are flowing and not just have to go to the logs and see them one by one. Maybe you want to look separately at the details on your main server, SMTP server or how your head spam controller controls are working. It would be useful to have the reporting tools to do this. Maybe the reporting just needs some improvement.  

Troubleshooting tools are the first concern but I would also like to see some additional notification options in the system. For example, when the system quarantines emails there should be an option to notify administrators that a quarantine has been performed. This way you don't have to go and manually check the server periodically to see if anything is quarantined and needs attention. It should have live spam and live quarantine portal accessibility. It is not really optimal to have it every two or three hours or two hours. With a live portal, you could attend to the issues more efficiently and either release the emails or delete them. Live access is really something that I think would be good.  

We have been using FortiMail for three years.  

This product is stable. I actually do not remember the last time I restarted the server or where I have done restarts because of performance or had the system hang. So it is stable, but you need first to do a good assessment to know which product license you need to use. For example, the first time the consultant we used proposed a level of service that was lower than the specs of the one I have now. I disagreed on that at the time but the consultants said it was the better way to go. So we did what he said and it didn't work. If you do a good assessment in the first place you get to work with a stable product. For me now, the product that I'm using is stable and it was only unstable earlier because the assessment was faulty.  

The parts you need to get for a hardware upgrade are very easy to find and inexpensive. It isn't very complex to install them to upgrade. Just put the parts together and upgrade, if it is better it is worth wait. If it doesn't work and there is trouble, you can easily just return back to the old version.

This solution is definitely scalable. Really for scalability, it is wonderful.  

We have around 500 people using this solution within our company right now. But the actual volume or capacity or load on FortiMail depends on the flow through the email filter and the number of emails you receive per day. My flow is not less than 15 to 18 thousand emails per day. Of course, within that, there is a huge amount of spam and a huge number of files and everything is controlled and passed through FortiMail. We would not have a problem scaling our usage.  

We have been in touch with FortiMail technical support and submitted some tickets to them for issues we had. They are good, they reply fast, and they give you guidance with troubleshooting to try to work out the problem yourself. If it does not work, they can access your system remotely to help you — of course after your permission. In every case we have submitted there is always good communication between them and us and the problems are resolved.  

I used to work with Sophos Email Filter. I used to work with Websense Email Security Gateway. I used to work with Symantec. I also worked with Microsoft Exchange Edge. I have the experience for all of these and mostly the change had to do with changing jobs. But what I have realized lately is that they are all essentially the same. The only difference is the engines you are working with and the vendor company that provides you with updates and security trends. That is the only real difference for all mail filters.  

The initial setup is straightforward. After that, you need to configure some policies and then you are up and running.  

Going forward, and as you gain experience and see the behavior of that product, you can start to enhance the results with new policies. So at first, you might leave everything open and then you will start closing things. You start adding to the white list, you start adding to the blacklist, then you start considering the greylist or start configuring for domains. The product needs someone working with it who knows about email and who has knowledge of flow and the terms. These are the two main things that need to be known by people who are going to administer FortiMail. They need to have an understanding of email communication system knowledge but they do not need to be experts. There are a lot of policies that require that the administrator is familiar with the terminology.  

The time it takes to have a stable deployment is longer than just the setup. You can deploy it initially in a straightforward way without much configuration. But to have it stable, it needs not less than three or four months of attention. That is the amount of time just to have it to the point where you know it is safe and performing at an optimized level. As long as you use the solution you will constantly be making adjustments. For example, for three years now we have been implementing this solution and for the three years, every year we have some improvements to our internal policies and updates to apply from the vendor. So it is an ongoing configuration. But to have it stable, you need not less than three months. It could even be more depending on the size of the company or the volume of usage.  

If the company that has 100 users and they don't have that much email traffic, then one month could be more than enough to have the system working well. But you if have the same volume per user and one thousand employees, you will work on the first configuration for not less than three months to have it fully operational.  

We require two people for maintenance and administration. Two is more than enough to manage the system. We use one administrative person and one system engineer. So only two people, and really not more in almost any situation. Of course, I have staff that can do the administrative parts for IT hardware and for supporting infrastructure. But to do the main tasks of configuration, monitoring, and deployment on an ongoing basis, there really is only a need for two people maximum.  

I did the implementation by myself. The build was done by the supplier who provided us with the solution. But configuring the email flow, determining and applying policies and the controls are all done by me.  

Licensing is on a yearly basis. FortiCare and FortiMail licenses are for the 24/7 support and the email monitoring service. It comes to around 4000 dollars per year. You pay only for those things that you license and there is no additional costs for technical support or warranty. It is all included with the license purchase. If you want to open a case with them, you can open a case. I don't have an SLA (Service Level Agreement) with a local supplier, so the contract for support is all handled by us directly with the vendor. But if we reached a stage with an issue where we really needed serious help with a problem that was not solved remotely, we contact our suppliers here in Lebanon and they have professional people who can come and help us.  

We used to have Sophos, we used to have Websense, we used to have Symantec, and we used to have Microsoft Exchange Edge. These are from my personal experience, not from the company I'm working with. But in a way drawing from past experience is evaluation.  

Unfortunately, we don't have Exchange here, so we not going to be able to benefit from the Exchange Edge. Here, in this company, we worked with three products: Websense by Forcepoint, Sophos Email Filter and then FortiMail. The throwback with Sophos is that it had a huge problem with spam. It was not able to handle and identify all the spam. We had many problems with that. Websense at that time we were using it was a good solution, but it required a lot of administration time. Every day you had to take around two hours just to filter emails. I didn't have the option to take that kind of time with administration.  

We moved from Websense to Sophos to save the administration time. FortiMail was not an option at that time because it was not as good as it is now. Sophos was good for us at first. But as email security technology improved, they were left behind. They didn't work on their development and we had a lot of problems with their support. At one point, we were left for one whole week without an email filtering solution because the Sophos support did not call us or get back to us on an issue we were having. I don't know why that was. In response to their failure to return our call, I went directly to FortiMail. Within a couple of days, we had the systems up and running. We got a three-month free subscription just to work with all the configuration stuff and after that, we had a yearly license renewal.  

Overall, I recommend this solution to other people. But in addition, I recommend a few additional steps before just accepting a recommendation.  

First, they should do a POC (proof of concept). Taking the time to do this is one of the main reasons that will motivate you either to choose a product or not based on actually evaluating if the solution can do what you need it to do.  

Next, evaluate the reputation. By this, I don't mean to look at what people are saying who are using the product in discussion forums but to take a look at the market itself. You want to see what the company's future is so that you know that you will invest in a product with a future. You want to look at the ratings on professional sites that are dedicated to evaluating email filter products. You also want to do some pretty extensive testing on-premises over more than just in a week. You want to do all of this before choosing a product.  

Maybe for me, FortiMail was one of the products that really provided what I needed in my business. Maybe other companies, FortiMail could be too much for them or more than they need. So they need to consider less robust solutions. They might go for Exchange Edge instead, for example. Exchange Edge is one product that also has very good spam filters. Because we didn't have Exchange, it wasn't on my list of solutions to consider. For our situation, FortiMail was a reliable solution that made the most sense.  

Virtual Image is one product I did not mention but it is also one of the most reliable solutions. It is more business-oriented. It can work out very nicely in some situations because it is deployed as a virtual machine so you do not have to worry about adding or maintaining other hardware as an email server. It is a good virtual email filter that does not require a lot of resources like the Fortinet solution.  

So that is my advice. Do a POC. Do a market study and technical study on the internet. If you want you can take another step and find a company using the same product as the one you are considering and ask them their opinion. But those are the keys for choosing the right email filter.  

Of course, I recommend Fortinet because I use it and it works well for me. 

On a scale from one to ten where one is the worst and ten is the best, I would rate this product as 8.59. But let's say eight. There is room for improvement.

We use this solution to block spoofing.

We are MSPs and we provide services to many companies that are running FortiMail.

The most valuable features are filtering and sandboxing.

It is slightly difficult to configure FortiMail in the cloud with Exchange on-premise, especially the quarantine mailbox access for end-users.

I have been using Fortinet FortiMail Cloud for two years.

We are using the latest version. It's cloud-based and managed by Fortinet.

It's a stable solution, we have never had any downtime or any complaints from the client.

It's scalable. We haven't had any concerns, but we are MSPs.

We are a small to mid-sized company. Our clients have over 200 users.

I have used technical support occasionally. 

At times, the FortiMail support can be slow with a response. It could be that they don't have enough staff trained in FortiMail.

This is an area that could be improved.

We work with many clients who require different products. We recommend solutions for clients who do not have anything in place to protect themselves. 

We still use other solutions for other clients. For example, we have a client who uses the Barracuda email filtering system.

The initial setup was very easy.

The initial setup was completed by the FortiMail technicians. We provided them with the information and they built the virtual system for us in the cloud.

Recommendations are dependant on what type of implementation is being used. As an example, will it be on-premise or is it going to be Office 365?

With Office 365, I would recommend using this solution. It would be no problem and everything will be taken care of. 

With the on-premises version, they need to pay more attention to the communication, or the accessing quarantine mailbox per user. This is a complex area, and it's where I had a week of troubleshooting.

Because of the issue that I had with the on-premises version, I would rate it an eight out of ten, but when dealing with Office 365, I would rate a nine out of ten.

I work for an IT Technical company and I sell this solution to other companies.

The most valuable features are the low price and its ability to integrate with other Fortinet products. Fortinet has the concept of a security fabric that includes FortiMail and FortiGate, and everything works well together. Some solutions, such as FortiMail, have both hardware and software for the machine. Customers with more money buy the hardware.

The downside of this solution is that it is difficult to implement policies on FortiMail.

As an example, if a customer manages FortiMail using a different SCL, it is difficult to implement in the customer's box and FortiMail.

I have been using this solution for six or seven years.

This solution is stable.

This solution is scalable, we have no issues with the scalability of this solution.

The technical support is good. You are not directed to several other levels or engineers like other solutions. You are contacted and speak to an engineer in the language you prefer, but it's preferential available in English.

They are quick to respond and to resolve your issues.

I have experience with Cisco hardware solutions.

The initial setup is complex because there are government restrictions on the use of the cloud here in Ukraine. Data cannot be sent to another country if it belongs to a government organization.

It is very simple to deploy and you need one or two engineers to maintain this solution.

If you have an experienced engineer it takes one day to deploy.

It's a low budget solution. You only have to purchase one license for multiple participants. With Cisco, you purchase one license for ten users.

I would recommend this solution and others based on my customer's needs.

I would rate FortiMail a seven out of ten.

FortiMail Cloud is part of our network security and DLP solution. We primarily use it for email protection, including antispam.

The most valuable features are the antispam and URL analysis. 

FortiMail Cloud is very fast.

Networking should be simplified.

We have been using Fortinet FortiMail Cloud for about two years.

This solution has great scalability.

I have been in contact with technical support through the support portal. The support was fast and they took an interest in each of the problems they received. Overall, I am satisfied with it.

I don't think that Fortinet is complex at all. It requires setting up the domains and the users, but it is not complex.

I installed this solution on my own, and I discussed it with my colleague.

We did not put serious thought into solutions by other vendors because after looking at Fortinet, we found that it was quite simple, good, and full of features.

My advice to anybody who is implementing this solution is to first ask what you want from your network and from your resources. Decide what it is what you want to achieve and then design your solution.

I would rate this solution a nine out of ten.

We use this solution for email security.

We have both on-premises and cloud versions.

The encryption features are most valuable to us.

I've not been able to use more than two domains in the back end. I like to view logs for the different domains. If I add any other domain I'm not able to get a proper cPanel for that domain. I am talking about login factors. I'm not able to see logs for different domains in a different Window. Basically, it's an issue in the login process.

We have not had any issue with the device. It's very stable.

We have not yet tested the scalability, because it is a bit rigid. We wanted that, though. We do not know the scalability very well yet. 

We have around 200 users in our company. They are managers.

We require only three people to be there for deployment, two engineers and one user.

I can rate their technical support as nine out of ten.

I used Check Point which has a feature for email security. I switched because Check Point didn't have a separate solution for email, it was just bundled together with their firewall.

The initial setup was straightforward. It took less than a week to deploy this solution.

We bought through a distributor who helped us deploy the solution.

It should cost around $60,000. We bought it as a bundle, so everything comes together in the license. That is standard.

We also evaluated IronPort from Cisco. There's an email security solution from Cisco.

From my experience, this tool is able to protect the network. I would definitely recommend this solution.

I would rate it as nine out of ten.