Fortinet FortiManager pros and cons

Within the management of some features on FortiManager, specifically the management of user objects used for VPN service, FortiManager is quite weak.

There are a lot of bugs that need to be fixed, for example, the ZTP.

This solution needs more experienced technical support staff. There's nothing special about it compared to other vendors.

The information extraction through command lines was could improve to some extent. Although there were some command lines available, there were not enough options. For instance, I needed to obtain the management IP address of my two Fortigates, but the Fortinet FortiManager did not provide me with the IP address on the LAN interface. I attempted to find this information through the command line but was unsuccessful. I also searched for articles on the internet, but could not find a solution. This is an aspect that could be improved or potentially there is a method to access this information that I have yet to discover.

I prefer configuring rules and the VPN on the standalone device, not on the manager.

When we have a specific configuration pushed it does take some time to be deployed on the actual firewall.

The dashboard could use some improvement.

Fortinet FortiManager could improve them by adding more portfolio components.

When I started, it was a bit difficult, however, now it's okay. It can be a bit complex for basic users.

There may be a communication issue. However, other items may be the culprit, such as network connectivity. It depends on the customer's network.