Fortinet FortiManager Reviews

Amid a surge in malware threats, including ransomware, heightened awareness about security vulnerabilities has prompted organizations to prioritize robust cybersecurity measures. Fortinet's SD-WAN solutions provide a comprehensive approach to secure and efficient wide-area networking for our customers.

The user interface, along with user-friendly planning features, makes it straightforward to configure desired settings.

Issues arise when customers experience unstable electricity or poor grounding conditions. In such cases, their CPE or other devices on-site may become unreliable, leading to occasional configuration discrepancies. To address this, site visits are necessary, and sometimes manual configuration adjustments are required. In extreme cases, device replacement may be necessary, particularly when inadequate electricity grounding poses a persistent challenge, creating specific conditions for intervention.

Presently, our customers have a limited number of remote sites, numbering in the hundreds, with none exceeding a thousand or more. Fortunately, there haven't been any issues reported with this scale of deployment.

Fortinet's support has proven to be reliable, particularly as we've been engaged with them since the project's initiation. This long-standing collaboration has facilitated effective communication, allowing us to seek advice or receive the correct configurations when encountering issues. Their assistance has been instrumental in problem-solving and troubleshooting. I would rate it eight out of ten.

Positive

Previously, we employed Cisco Catalyst switches, specifically the Catalyst 1100 series. However, during that time, the stability of these switches was not satisfactory, and there were noticeable issues. We transitioned to FortiManager because our customers expressed a preference for enhanced security features in the form of superior Customer Premises Equipment. The local certification standards in Indonesia have played a crucial role in raising awareness among our customers regarding the need for robust security measures.

The initial setup is straightforward.

The installation is very simple, thanks to its use of zero-touch provisioning. With another engineer on hand and static alerts in place, the installation process is hassle-free. Completing the setup typically takes around fifteen minutes.

While I find the pricing somewhat higher compared to other options, it remains acceptable for now. I anticipate a growing demand for SD-WAN security in the future, particularly with Fortinet gaining popularity. I hope that the prices will become more competitive in subsequent releases, as the current pricing is perceived as somewhat elevated.

Overall, I would rate it nine out of ten.

FortiManager is used to facilitate the administration of FortiGate equipment. There are many features to automate processes and make it easier to manage the devices. For example, we can push the same configuration to hundreds or thousands of devices, which helps us maintain a global version of the configuration and status of the devices. We also use scripts and templates to make it even easier.

The ZTP (Zero Touch Provisionning) helps us to reduce the implementation time and TCO of the remote sites.

The main function of FortiManager that makes it valuable to me is automation. I can automate the installation of configurations using different programming languages like Python or HPE, and it's a GUI solution, so it's pretty easy to use, even for basic users. It's also compatible with traditional programming languages, another feature I like about FortiManager.

There are a lot of bugs that need to be fixed, for example, the ZTP. Automating and making it easier to understand devices is necessary, especially in terms of zero-touch provisioning. This mechanism needs more work as there are some bugs and some functions that do not work very well. Today, there are tickets with Fortinet regarding a problem with cluster devices. It means two devices can be configured to work like one device. In general, it is easy to configure manually, but when you want to do it automatically, Forti Manager should help, but today it didn't work.

FortiManager is a good tool, but there is a lack of really advanced documentation. While there are a lot of features available, for example, when working with Fortinet support, it can be challenging to find the right information. I work with Fortinet support every week as we have a partnership in my enterprise. However, for the public, it's not easy to access the kind of documentation we have access to. This level of partnership with Fortinet can be costly to attain for the general public.

Some learning websites and communities are available, but the documentation provided is not as advanced as what we have access to. It's challenging to find confirmation and recommendations for advanced admin settings based on complex configurations. To have access to this kind of information, a partnership or conversation with Fortinet support is required, which can be expensive for most users.
Fortinet need to work on the automation part because they are using now JINJA as programming languge without a real complicator behind to help resolve errors on the code which is very challenging.

I have been using this solution for six years.

The device itself is very stable, but it's not the main number when it comes to using FortiManager to manage other devices. However, when it connects to other devices for the gate or to manage them, some functions don't work. There are some problems, but it's only around 3-5%, while 95% of the time, there are no problems interacting with other devices.

It handles stability very well.

FortiManager's ability to scale is good as it's a virtual machine. You can raise the capacity as you go, and there is no limit for hardware. The basic ones support a lot of devices and offer a good defense. However, you need to raise the level of licensing every time to support more devices. So, in terms of scalability, it's really good.

The level of support for P2 and P1 is wonderful. However, for levels 3 and 4, they have to work on their computer capacity and numbers. I've worked with them many times, and sometimes I have a good engineer but not a good understanding of the program.

By default, when we open a ticket, we only have access to P3 and P4. If we need P2 or P1, we have to ask for it, but not every single ticket requires P2 or P1 priority.

I have had both good and bad experiences with technical support.

Neutral

FortiManager is definitely better than Cisco, and it's easier to use and more stable. I remember finding FortiManager to be much more flexible and stable.

Meraki works very well but is cloud-based and lacks some administrative tasks and functions. FortiManager is better than Meraki for managing devices.

The initial setup is quite simple. Initially, I combined CentOS with other products, which took about five hours. However, It's not complicated at all. Moreover, I train some of our clients on how to use it, and they find it easy to understand. I can easily explain the technical aspects of the initial setup, like scripting, etc.

Fortinet FortiManager can be deployed both cloud-based and on-premise. There are various platforms available for on-premise deployment, such as hardware devices or VMs, that can be started on Hyper-V, NSR, or NSF. Additionally, it can be deployed on cloud-based platforms like Azure, Google Cloud, or Amazon AWS.

Overall, I would rate the solution a seven out of ten.

We have over 300 Fortigate sites and we use this solution to manage everything under one interface. 

The scripts are very useful. We can push the TCL and CLI scripts to Fortigate.

The automation is great between Ansible and Fortimanager.

We can integrate the solution with other solutions.

There is one central template that we can use across sites. 

The setup is very simple. 

We can use the solution as a VM. 

We've faced an issue when we need to move devices. Templates need to be recreated instead of having the policies, et cetera, cut and pasted over. Everything should just move over when we need to move devices instead of recreating everything from scratch. 

For the IPSEC tunnels, Fortimanager doesn't have all of the features that are available on Fortigate. 

I've been using the solution for three or four years. 

The stability is very good. We haven't dealt with any issues so far. It's reliable. 

The scalability is okay. There are some restrictions. However, it is pretty good. I'd rate the solution eight out of ten. 

We have three accounts using the product. They range in size.

We have an internal team that can handle tickets. We're limited in opening tickets directly with Fortinet.

In the past, however, I have opened many tickets with Fortinet in the past and found them to be very helpful and responsive. They were good at solving issues. 

We have worked with Palo Alto and Cisco. The way of working with the firewalls is a bit different in Palo Alto's Panorama. With Panorama, we can add policies and prioritize them to override firewall policies (and vice versa). It's very flexible.

The initial setup is very simple. We can create it using a VM. 

Our company has its own physical infrastructure, and we place the virtual infrastructure within that. 

I don't deal with the pricing of the solution.

In general, I would rate the product seven out of ten. It offers good features, however, Palo Alto offers better options.

I utilize Fortinet FortiManager to push commands with scripts. I made different scripts for different use cases.

I appreciate the ability to connect via SSH through Fortinet FortiManager to the FortiGates I manage. This feature allows me to gather information about the interfaces without having to physically connect to the device. This is a convenient aspect that I find valuable.

I have started utilizing the group features, which enable me to manage and update the devices in a structured and organized manner. For example, when installing new firmware or updates of FortiOS, I can divide the devices into different groups and update each group individually. This is a feature I began using around a year ago and has proven to be very useful.

Moreover, I have begun utilizing customized fields, which has added an extra level of convenience to my work. These fields have proven to be quite useful, and I would recommend them to others.

The information extraction through command lines was could improve to some extent. Although there were some command lines available, there were not enough options. For instance, I needed to obtain the management IP address of my two Fortigates, but the Fortinet FortiManager did not provide me with the IP address on the LAN interface. I attempted to find this information through the command line but was unsuccessful. I also searched for articles on the internet, but could not find a solution. This is an aspect that could be improved or potentially there is a method to access this information that I have yet to discover.

I have been using Fortinet FortiManager for approximately three years.

Since I have been using the solution I have not experienced any problems with the stability.

We did not run into any problems with the scalability.

I reach out to the technical support team through a ticket. I was attempting to perform a rather complicated task, which involved pushing the FortiOS onto a FortiGate 30 E device without actually installing it. I had found information online that this was possible, but I encountered issues while trying to do so with two FortiGates.

I was successful in pushing the FortiOS onto the device, but both devices stopped functioning after that. I then asked the technical support team if this was a supported process, to which they responded that while it is possible, it would depend on the model being used. Based on my understanding, it is possible but with some limitations, especially with older models of the Fortinet solutions. This was the nature of my interaction with the technical support team.

Evaluating my experience with the support was decent but not textbook. During the evaluation process, I was asked for a substantial amount of information, some of which I felt was not pertinent. Nevertheless, I obliged and provided all the information requested. The main objective of the evaluation was to gather data from the devices and assess their performance. After the analysis was completed, the evaluators came back with their findings and advised that my current approach with the version or model being utilized within the organization was not recommended.

I rate Fortinet FortiManager a nine out of ten.

We primarily use the solution for management tasks. We have Fortigate firewalls across the globe and need this product to manage everything. 

It's able to manage multiple devices, which is quite useful. 

The analytics are quite useful. 

It is easy to set up the solution. 

The solution is stable.

Technical support is good.

It can scale. 

The pricing is reasonable. 

Pricing-wise, it could always be less, even though it is less expensive than Palo Alto.

I've been using the solution for three and a half years. 

It is quite stable. I'd rate it nine out of ten. It is reliable. The performance is good. There are no bugs or glitches. It doesn't crash or freeze. 

It is very scalable. I'd rate it nine out of ten in terms of scalability. They are very flexible. 

We have less than 20 people on the solution. 

Technical support is helpful. They are responsive. 

Positive

We are also familiar with Cisco, Palo Alto, and Juniper as well. 

We moved from Palo Alto to Fortinet based on the cost savings we would achieve. 

The solution has an easy setup.

I'd rate it nine out of ten. It's not complex. 

We have a large setup. Getting everything working took us a couple of months. 

The solution is pretty reasonable in terms of price. I'd rate the affordability around seven or eight out of ten. 

We are customers and end users.

I'd rate the solution nine out of ten. 

We are using the latest version of the solution.

We have a large setup for managing multiple Fortigates, et cetera. You get what you pay for, and it gives us all of the features and functionality we need. If a company has basic requirements, it might be better off with a PfSense.

I'd recommend the solution to others. For the number of features you get, the pricing is pretty great.

We primarily use the solution for management purposes. It makes management very convenient. We use it for managing Fortinet firewalls in our network.

The ease of use is great. 

It makes management very easy.

The solution is stable.

It likely is scalable. However, I have not attempted to expand the offering.

The presence of Fortinet in our region (Nigeria) needs to be stronger. They need to have a local footprint and local support. 

I cannot recall any missing features.

The pricing could always be lower. 

I've been using the solution for three years. 

The solution is stable. I'd rate the stability eight out of ten. We haven't had issues. There are no bugs or glitches. 

I'm not too sure how scalable the solution is. My understanding is that it would be. However, I haven't tested its capabilities in that way.

I'd rate the scalability seven out of ten. 

We would like to have more local presence in the future. However, we can get support when we need it. 

Neutral

We previously used Check Point. However, it was hard to manage Check Point devices. We moved over to Fortinet. 

The initial setup was quite simple to set up. We bought professional services with the product, and that made it very easy.

I do not recall the deployment taking too long. It's pretty fast.

We had a Fortinet engineer assist with the setup. That service came with the professional services we bought.

We'd like the pricing to be a bit lower.

We did not really look at other options. We did do a POC with Fortinet before purchasing it.

I'm an end-user. 

We are using the latest version of the solution. 

I'd recommend the solution to other users. 

I would rate the product eight out of ten. 

I primarily use FortiManager to manage FortiGate firewalls. I started working with Fortinet in 2016, managing configurations to be pushed from FortiManager to firewalls and centralizing configurations to minimize errors.

It has simplified our work by allowing centralized configurations and minimizing errors, providing visibility into configurations, and scheduling configuration deployments.

FortiManager helps automate configuration deployment, allowing us to plan and schedule configurations. It works with proper encrypted protocols, ensuring security. FortiManager's documentation and diagrams are user-friendly, making it easy to understand the configuration process.

FortiManager needs to handle different firewall versions more efficiently. If FortiGate devices have different versions, managing them is challenging. There's also a need to upgrade firewalls or change chassis to adapt to FortiManager's version requirements.

I have used the solution since 2016, which totals approximately nine years of experience.

FortiGate is very stable. Currently, Fortinet's configuration and operation are stable, and I rarely experience problems.

FortiManager is scalable, but after several years, it may become limited due to versioning issues. This requires chassis updates to support newer versions.

In the past, I worked with Alcatel Lucent and had partnerships involving FortiGate.

It is easy to set up on-premises or on a virtual machine. Be cautious about versions to avoid compatibility problems.

The return on investment is high. It saves time, money, and resources, providing visibility into configurations.

FortiGate offers the same features as Palo Alto yet at a more reasonable price. The ROI justifies the investment.

I have experience with FortiAnalyzer and other components but have not explored other firewall solutions like Palo Alto.

I rate the overall solution eight out of ten. 

One should be cautious about hardware and version compatibility. FortiManager is an efficient and cost-effective firewall management solution.

I use this solution to manage my VDOMs and FortiGate policies.

It's very easy to install, and it's easy to discover and communicate with your device. 

We can manage VDOM, backup and restore configurations, and FortiGate. We have ten FortiGate firewalls.

It requires a lot of resources. This is the main challenge.

I've been using this solution for more than ten years.

It's stable. I didn't have any issues with its stability or availability. It's good.

It's scalable. I'd rate it a nine out of ten in terms of scalability.

Fortinet's support is very good. Sometimes, Fortinet's support is better than Cisco's support. They are more talented. I'd rate their support a nine out of ten.

Positive

We had Panorama from Palo Alto. We switched because most of our devices are from Fortinet. FortiManager is also easy to install and set up.

It's very easy to install. This is the main reason why we are using it. It's easy to set up and manage. The only thing I am not happy with is the sizing of the RAM and hardware. The implementation took about two months because we have a big network.

It was implemented in-house. We have a team of three engineers dedicated to installation and maintenance.

If you compare Fortinet and Palo Alto, Fortinet is cheaper, but if you compare Cisco and Fortinet, sometimes Cisco is cheaper because Cisco gives us more discounts because of the size. Cisco isn't cheap, but sometimes, we get a big discount from them. 

Its licensing is monthly. I'd rate it a seven out of ten in terms of pricing.

I'd recommend having a demo of FortiManager before deciding on it. I had a demo to understand how this device will match my profile and my requirements. The demo answered all my questions. 

Overall, I'd rate Fortinet FortiManager a nine out of ten.