Fortinet FortiNAC Reviews

We installed Fortinet FortiNAC in a large company in a VM environment. They have a lot of end-users and complex user account needs. For example, some of the VIPs and different guests all need different access permissions and some of them are connected through the Active Directory credentials which we have to have a portal page for them to gain access. 

Another layer of complexity is different users are receiving accounts from many departments. For example, the customer's IT department gives them access and they send the credentials to the guest by email. The IT department can limit their account in different ways, such as only allowing the account access for a period of time.

Fortinet FortiNAC has good user account customization. 

We can change the logo for the portals to meet the customer's needs. The portal default language is English but it supports all languages, such as Turkish. The portal can be optimized very easily. 

Device profiling is a good feature, we can block devices, such as iOS or Android.

Endpoint compliance is a great feature that allows us to restrict and quarantine devices. For example, if a device is not using the latest version of an operating system or antivirus program we can detect it and prohibit their access. If certain conditions are met with the customer's policies, we can let them have access. Otherwise, our endpoints compliance rules block or quarantine their devices on the network.

Integration is hard in Fortinet FortiNAC, but they are evolving and getting better. For example, with Cisco, Aruba, Huawei, and Extreme devices, Fortinet FortiNAC is working properly, but some other devices have problems.

I have been using Fortinet FortiNAC for a couple of months.

The solution is stable.

Fortinet FortiNAC can extend your existing network. For example, if you have to put another switch, access point, or another networking device to complete the site we can with one or two clicks add these devices and the same rules and policies. It is highly scalable and can extend your infrastructure.

We currently have two customers using Fortinet FortiNAC

The installation is not straightforward, it can be hard.  The documentation should be better in explaining to process in more detail. The installation requires too much experience and knowledge about network infrastructure. It's not easy, you have to be an expert.

The difficulty level of the installation and time depends on many factors. For example, one of our customer's installations was simple because they only had to block one site and only had one hardware vendor, such as Cisco. 

Our second installation was more difficult because the customer had many different hardware vendors, such as Cisco, Huawei, Aruba, and Extreme as part of their infrastructure. This requires configuring different settings on every device, it can be complicated. This can take a lot of time.

We do the implementation and the amount of staff needed depends on the size of the infrastructure and hardware vendors involved. If it is a smaller environment with a single vendor then the process could take two to three days.

If the customer size is very large and they are using the different sites and cities, and many different network infrastructures, the implementation would take time and you would have to manage everything well. When you have a complex network, it can take approximately15 days to implement. The number of vendors they're working with can increase the implementation time duration. If companies only have one vendor, it's easy, but two or three different vendor integration is a little bit harder and takes time. 

Customer's needs are very important, because some customers, only want that 1x configuration. However, other customers want 1x configuration, custom portal pages, and many endpoint compliance rules. The more features the more time it will take.

The price of the license required is based on how many users are going to be using the solution. If you want more users you can upgrade your license.

I have evaluated other NAC solutions.

I would recommend Fortinet FortiNAC to others because we did evaluate other NAC solutions and this solution is very good compared to the others. The best benefit of Fortinet FortiNAC is the stability and it can work with other vendors. Some NAC products only work with their products and do not support other vendors.

The major benefit I have found is that this solution can work with other products. A customer typically has more than one vendor, such as access points, printers, and other network products. A lot of the other vendors only are working with their products. It's very important for me that Fortinet FortiNAC can work with the other vendors properly and can integrate easily. When I check the Fortinet website, it shows every vendor's details with an explanation about the integration of the Fortinet FortiNAC. For example, you can find out how to integrate the Fortinet FortiNAC with the Cisco wireless controller. I can find the documents, turn to the pages and find all the information I need. I can find it very easily.

I rate Fortinet FortiNAC a nine out of ten.

We use Fortinet FortiNAC for network access and identity protection.

The product's most valuable feature is its ability to protect devices connected to network service.

The product could be more user-friendly in terms of GUI than HPE. The configuration needs improvement as well.

We have been using Fortinet FortiNAC for two years.

It is a stable platform. I rate its stability a ten out of ten.

I rate the product’s scalability an eight out of ten. We have 100 users for it.

The product’s technical support services are good. Although sometimes, they respond slowly.

Neutral

I rate Fortinet FortiNAC’s initial setup process a seven out of ten. It takes two days to complete. The deployment process involves configuring the network access policies within the Azure environment.

It is a reasonable product.

It is a good product considering network security. It supports multiple devices and is easy to use. I can repair the box quickly in case of some failure. I rate it an eight out of ten.

I have used Fortinet FortiNAC in medium-sized banks, offices, campuses, and distribution networks for control.

The most valuable features of Fortinet FortiNAC are access control, automation, artificial intelligence, analysis, and security, and it is a unified solution. You can combine a lot of features within the solution.

The automation in Fortinet FortiNAC could improve.

I have been using Fortinet FortiNAC for approximately five years.

Fortinet FortiNAC has been good.

The scalability we receive from Fortinet FortiNAC is enough for us.

We have not had any complaints about the technical support from Fortinet FortiNAC.

The initial setup of Fortinet FortiNAC is usually complicated, and you have to understand the installation well.

For the projects that we do the Fortinet FortiNAC is affordable.

I would recommend this solution to others, it is very good. They are a world leader in security and they have the best combination of network access.

I rate Fortinet FortiNAC a nine out of ten.

We use the solution for VPN. I'm a product manager and we are customers of Fortinet. 

I like that it's easy to connect to a VPN without having any hassles and that you can get fast access to the information you need as a result. The solution is very easy to configure. 

We have some stability issues with the solution, the network drops out too often. We started using AWS and the line drops out less frequently than when we use Fortinet. 

I've been using this solution for four years. 

The initial setup is straightforward. The company provided all the information we needed to implement FortiNAC and that made deployment very easy. 

I rate this solution seven out of 10. 

We are a solution provider and this is one of the products that we implement for our clients.

The most valuable features are the ease of deployment and ease of use.

The reporting is good.

This solution could be more agile.

The technical support is in need of improvement.

I have between six and eight months of experience with FortiNAC.

FortiNAC is a stable solution.

This is a scalable solution and most of our customers are enterprise-level organizations. The majority and financial institutions and government bodies.

I feel that technical support can be improved.

The complexity of the installation and the length of time for deployment depends on the client's requirements, as well as their level of involvement. 

The pricing is similar to that of other solutions.

My advice for anybody who is considering this product is to first do a proof of concept. Everybody has different requirements and it is best to ensure that FortiNAC meets your needs before implementing it.

I would rate this solution a seven out of ten.

We are a solution provider and this is one of the products that we implement for our clients.

My role is security and I deal with products to protect data centers. FortiNAC makes up part of the security solution in a data center.

The most valuable features are usability and security.

The response and resolution time for technical support issues need to be improved. Support overall needs to be a little faster.

I have two years of experience with FortiNAC.

FortiNAC is a stable product.

Scalability depends on licensing. Our customers vary in size from small and medium-sized businesses to enterprise-level organizations.

The technical support is in need of improvement because sometimes it takes too long to resolve issues.

I have worked with other similar solutions including Cisco ISE. I find that many of the SMBs and Enterprise-level customers choose Cisco instead.

The installation is pretty simple. The length of time for deployment depends on the planning and what is in the environment. It will normally take about a day.

I would rate this solution a seven out of ten.

We are a solution provider and this is one of the products that we implement for our customers. It is used as part of the network security and protects our clients.

This solution is very easy to implement and use.

The interface is user-friendly.

The most valuable feature for us is the support for iOS and iPhones.

The problem with Fortinet is that if you want to be 100% secure then you have to buy other products. It should support better integration with third-party solutions.

The reporting capability needs to be improved.

We have been using FortiNAC for about three years.

FortiNAC is a stable solution.

It is a scalable solution, although the scalability also depends on the other products that it is integrated with. Our customers are medium-sized and enterprise-level organizations. Our clients have about 500 users.

This solution is so stable that we have not had any problems and never needed to contact technical support.

I am also working with Cisco ISE. It is very complicated compared to FortiNAC.

It is very easy and straightforward to implement.

Three of our engineers were involved in the deployment. One of them focuses on security and the others take care of networking.

The licensing fees are a little bit high.

I try to push the use of this product because sometimes, the complicated solutions like Cisco ISE sometimes make the customers feel annoyed.

My advice to anybody who is considering this solution is that if the budget allows it, the entire security solution should be made up of Fortinet products. They integrate well and it will be better overall. A complete and secure solution will include products like FortiSandbox and FortiAnalyzer as well.

I would rate this solution an eight out of ten.

I was certified in FortiNAC (Part of Fortinet-NSE6) last year and I've personally implemented FortiNAC in three organizations. We work as a team with people who have expertise in different areas and Vendors and have exposure to different infrastructures.

FortiNAC scans your network to discover every user, application, and device (IOT), With up to 18 different techniques, it can then profile each element based on observed characteristics and responses for granular visibility - We then apply state-based control(eth0 VLAN switching) and Policy based control rules for access control and response.

Anyone (Domain users, Contractors, guests, etc) wanting to connect to the network has to be accessed by the NAC. Users come in at different times and some may be working from branches or home through a VPN and they will be authenticated in the same way with different privileges on the Network.

So it has to run 24/7. It's authenticating users all the time. We are gold partners with FortiNac. 

There are quite a number of things that are valuable about this solution. Having dealt with Cisco ISE, I realize that FortiNAC is different in a way that gives you granular visibility of the entire network infrastructure related to IOT devices (Who, What, When, Which information). It's helpful that you can know what's going on from your phone, your tablet, and from home. The solution provides containment, reporting and security event-alarm mapping and saves log and carries out further analysis for cyber thefts. It really is a good solution.

I've realized that one of the issues is the need to use agents. For instance, if a domain user has to authenticate on the network via FSSO or Certificate management he has to have a persistent agent.

The admin UI is not that good. It could be better matched and more friendly to use and it cannot work as a RADIUS server. You have to have a RADIUS server which means bringing in a FortiAuthenticator to build it.

The other thing would probably be the visibility granular. For example, when I have a user at a particular branch, I can't tell what SSIDs they are connected to. I only have the IP addresses so if the wireless controller is integrated with FortiNAc, you're going to realize that you won't be able to know whether a particular person is connected, that an AP is connected to a particular SSID, is connected to. . .  etc. It only gives you the IP addresses, Host names, etc. That has to be improved and am sure it will be in the next build version. 

Additional features, would be an agentless link and adopters - online, offline adopters - it picks the IP's, the host names, the layer 3 information, layer 2 information, what's connected. And also to give different privileges, best rule privileges to users. 

VLAN Interswitching (state based controls) could be quicker when doing the process flow from different sorts of authentication. When it comes to guests or contractors, you don't want to use a dissolvable agents. It dissolves in the process of downloading, but it takes longer and that could be improved.

I've been using the solution for a year and a half. 

FortiNAC is Pretty stable. We initially had a couple of troubleshooting issues in the deployments but we worked them out and it's fine now and has pretty good Visibility across the Network for every device, application and user, extend Control of the Network to third-party products and automated responsiveness.

You won't find so many NAC solutions like it. I mean it's granular, you will see a lot that you need to ask. It will give you all the controls you need and it has event alarm mapping, - I mean "you can't control what you can't see"

It is very scalable, you can have as many features and access points as you want. as you have. It depends on the licenses, but you can have as many IoT devices (Switches, routers, Firewals, WLC, etc) as you want and as many features as you want. You can have visibility to all the ports of the switches on the NAC, you can easily see  Who, What, When, Which information then control and respond

Technical support is good. You create a ticket and within that ticket you explain what challenges you're facing. They assign you an engineer who'll help solve the issue. It's pretty easy and straight forward and they're always there to help. 

Initial setup is pretty easy. If you're doing a VM setup, you do the registration on the Fortinet portal, and then you set the IP addresses. I think it's pretty good when you're implementing it the first time, it's very easy but when you get to tests, which are the UAT's, you're most likely to have a few issues that you need to be aware of.

Deployment time depends on the kind of customer. For example, the current implementation I'm doing has an assessing vendor. 90% of the network is wireless and 10% is cabled in network. They have more than 80 access features, more than 80 routers, and two wireless controllers. They have a number of databases and different firewalls - to use that fountain it slows things down. You're also dealing with Domain users, contractors and Guests in different locations. Obviously this will take more time than a project with less infrastructure devices. It really depends on the nature of the infrastructure.

There is a base license level which pretty much gives you topologies and groupings automation/control, etc. When it comes to policies, it's only going to give you user host profiling and network access. If you're looking for endpoint compliance, integrations, Incidence response and reporting, then you have to go for an Plus or PRO license.

You need to think about what you need as a company. There are so many government institutions, so many corporate institutions in the world that want to protect their networks. People have different privileges within a network, an instructor cannot have the same privileges as a normal user and the guest. We have guests coming onto our network, contractors coming to work at different times on the network, the main users who are working in different departments and who shouldn't have access to some platforms. When it comes to authentication you need to make sure you're protected from all kinds of threats. You have different products, Vendors and divices that all need to be controlled. If something goes off you need to know where and why. 

I would rate this product a eight out of 10. It's still evolving.