Fortinet FortiOS pros and cons

Their classification inside of that database of the various threats is typically very, very good.

It is more robust than SonicWall, particularly on the VPN from site to site.

The VDOM (Virtual DOM) is a virtualized firewall that has some opportunities for flexibility that are an advantage in certain configurations.

The interface is good.

I am satisfied with Fortinet FortiOS. It's a cool product and has a lot of UTM features. It has application control, web filtering, antivirus, IPS/IDS, DNS filtering, and many things in that firewall. It also has a web application firewall WAF feature. On the feature side, it's a good firewall.

The classification of the websites is helpful.

The technical support on offer has always been quite good.

Has a very simple OS and a good price point.

I personally think the site-to-site VPN is the most useful feature. A lot of firewalls have that, but to me, that's one of the features that's essential.

Compared to other firewalls, the segmentation is much easier in FortiGate.

You can enable and disable certain modules in it. However, with disabling, nobody can really tell us if that module is disabled.

I can only compare it with SonicWall, and it is missing many advanced features that SonicWall has.

The pricing model makes this product far more expensive than similar solutions.

The implementation could be simplified.

There are some features for FortiGate using FortiOS that can only be enabled via a command line. These aren't very advanced features they have been part of FortiOS for quite some time but they still aren't accessible from the graphical user interface. It makes it a little bit harder than it should be for us to manage the solution. That's my main concern with the user interface. Another concern we have is some elements for the user interface, if they're not properly configured, it could lead to hardware and performance degradation.

It would be better if AWS instances were available. If I want to upgrade from T2.small to T2.medium, it should be available rather than having a big instance and paying a lot of money for that. The issue is that we had deployed in AWS Cloud, and we were using a very small instance. Recently we wanted to move in-house and deploy it on the big instance because it was struggling with the RAM. If we use T2.small, we cannot upgrade it to the T2.medium. It has predefined instances in the marketplace with a lot of cost differences. If I can increase the RAM, I have to choose the T3.large instance. If I'm paying $270 for the small instance, I have to pay more than double the cost for T3.large. It is about $850, and this is not good. So, it would be better if it was cheaper. I think both AWS and Fortinet should think about that. They should provide it on lower instances as well. If I want to upgrade it from T2.small to T2.medium, it should be available, but it's a problem.

There is no flexibility.

The pricing of the product is too high.

Lacks flexibility for different scenario configurations.

FortiOS doesn't work well with all browsers. I think they need to do a better job of making it compatible with the various browsers that are out there.

Their first-level support is often poorly trained.