Fortinet FortiOS Reviews

I used FortiOS, the Fortinet firewall operating system, to connect two additional sites. I set up IPSec VPNs to connect all three sites. I also configured firewall rules to block certain countries and websites, such as gambling and social media sites like Facebook. Additionally, I implemented firewall rules to protect our web servers from XSS and SQL Injection attacks. Initially, I configured the VPN using IPsec, but when I couldn't find a suitable client for our workstations and desktops, I switched to SSL VPN. Fortinet provides dedicated FortiClient VPN software, which I used for this setup.

At the beginning of this month, we experienced DDoS and SQL injection attacks. The attack originated from a botnet and seemed to be associated with BroadNet. It was coming from a Fortinet device. I had to contact Spectrum to inform them about the botnet attack and provide them with the specific IP addresses to block. This action likely prevented us from being hacked and protected our web servers that were exposed to the public. This incident highlighted the usefulness of FortiOS's threat intelligence features.

The firewall options in FortiOS allow us to open up access to our vendors for EDI and all its features.

Fortinet could integrate something like a YubiKey for 2FA with their SSL VPN clients. Additionally, Fortinet could support WireGuard for our small office locations.

These small offices have two clients that log into our VPN from their workstations. Since all our sites use FortiGate, it would be great if I could set up WireGuard on the Fortinet device. Instead of using IPSec, having WireGuard support for site-to-site VPNs would be wonderful.

I have been using Fortinet FortiOS since February this year.

They handle the support because it's their device. We don't own it; we lease it from Spectrum. So, I can't speak to that for now. However, when we used to own the FortiGate, every time I called Fortinet for support, I would rate their response time at eight out of ten and their problem-solving ability at nine out of ten.

Once they respond, because it takes me a while to navigate the bureaucracy, I call the 800 number. They ask for various information, tokens, and other details. After I explain the problem, they call me back again. Usually, they assign the issue to an engineer, which also takes time. The engineer then calls me and solves the problem. So, I have to deal with a lot of bureaucracy. 

We had a really old FortiGate there, and when we switched to the newer FortiGate, it was cheaper than the old one.

When we purchase a FortiGate, it comes with FortiOS. Overall, the pricing for the device and related components is better than average. In comparison, FortiGate offers more competitive pricing than Palo Alto and Cisco.

If they could log in, it would be possible only if FortiOS is included. With FortiOS, you can manage all your devices. Let's say you have ten devices and need to manage all of them, including patching FortiOS. FortiCloud helps you with that, and it's nice to have FortiCloud as a bundle with FortiOS. Even if you only have one device, I would still recommend it.

I suggest incorporating AI or machine learning to anticipate threats in the future. For instance, if you configure a new site with your FortiGate, AI could detect any misconfigurations. It would be beneficial for FortiOS, FortiGate, or Fortinet to have an AI feature that alerts you to potential misconfigurations in devices, like an edge router, communicating with others. This AI could also analyze your logs to identify patterns, such as frequent false positives, and recommend reconfiguring the device to minimize unnecessary alerts. 

It's good. In my case, I was the only one dealing with the devices at that time. I would get all kinds of false positives and alerts. Sometimes, if there's a new device, the configuration from the old device to the new device doesn't translate. Maybe on the old device, everything defaults to open, and you must close everything. On the new device, everything might be defaulted to closed, and you have to open up the required ports. So, something like that would be nice, where it's easier to configure and find out if you did something wrong.

Overall, I rate the solution an eight-point five to nine out of ten.

We are using the solution as a firewall. It provides portal access.

Feature-wise, the solution is strong. It has SD-WAN, site-to-site VPN, load balancing, and application-based load balancing. 

It's very user-friendly. 

Compared to other OEMs, due to the SD-WAN and the IPsec VPN, there is no need for the licensing for SD-WAN and the IPsec site-to-site on the remote access VPN.

Chipset wise they're using an ACS chipset dedicated to FortiOS.

The interface and dashboard are good. 

We've been happy with the pricing. 

The initial setup is easy.

There aren't any features missing at this time. 

For monitoring purposes, we don't have any option to monitor the ISP link. If the ISP link goes down, then there is no monitoring tool or in-built monitoring tool. We can use a third-party application, like Zoho or PRTG. However, we would like something in-built. 

They need to improve the solution at the application level. 

I've been using the solution for five years. 

Sometimes it is unstable. However, they'll easily fix the issue. We get upgrades and updates. If there is even any vulnerability or malware, we'll get it fixed immediately. They give good responses to the customers.

While there are bugs, sometimes the development team is on top of it and fixes everything fast. They'll send a patch in the next update.

We work with more than 100 customers. 

Technical support is helpful and responsive. 

Positive

I worked on FortiGate and Palo Alto.

The solution is very simple, very straightforward. It's not complex a all. 

How long it takes to deploy depends on the client's requirements. 

For a mid-level customer, we can deploy within an hour. We can complete everything and have it up and running, and the users get internet access. If they need more rules, they need more things, then it could take time, depending on the configuration.

The cost of the solution has been fine. 

You do have to pay for a license. I'm not sure of the exact cost. I'm more of a technical person.

We're a customer and end-user.

We have the solution deployed on the cloud and on-premises. 

I've deployed the 600F model a couple of times.

New users need to do some homework, and then we proceed with the configuration. Security-wise, they need to make the customized port. 

I'd rate the solution eight out of ten. 

Our company is a partner and we install the solution for our customers as a firewall for remote VPN use. 

We also use the solution to protect our own company that includes more than 1,000 users. 

The solution constantly adds features that are useful and user-friendly such as the ability to tweak firewalls through the CLI. 

The solution's graphic interface could be a bit more responsive and include notations when changes are made

I have been using the solution for seven years. 

The solution is stable. In seven years of use, I've only encountered two or three occasions where a bug affected the firewall's behavior. 

I rate stability an eight out of ten. 

The solution is very scalable and it is quite easy to add users. 

I rate scalability a ten out of ten. 

Technical support has issues with knowledge base at the first tier. It sometimes takes hours of explanation before support fully understands and can troubleshoot or escalate problems. 

Response time could also be improved. 

I rate support a six out of ten. 

Neutral

Our company has always used the solution and is not interested in other products. 

The initial setup is easy, it only requires one engineer, and the main interface is self-explanatory. 

Users who are familiar with the solution can always dig further in the CLI to change the properties. 

We deploy the solution for our company and our customers. 

One engineer spends about two days configuring, testing, and deploying. 

The solution is easy to configure and has good performance. 

Anytime I have thought of a possible feature I'd like added to the solution, it seems the developers are on the same page and it is available within a few months. 

I rate the solution a nine out of ten. 

Our company is a partner with Fortinet and uses the VDOM to deploy and service virtual firewalls for our customers. 

The solution provides good firewall and antivirus protection via IPX and its security profile.

The solution needs improvement with DDoS protection. 

I have been using the solution for nine years. 

The solution is stable and I rate it an eight out of ten. 

The solution is scalable and I rate it an eight out of ten.

The technical support is excellent. 

Positive

The initial setup was not very easy but the solution does integrate without much complexity. 

Our internal team of two engineers deploys the solution in about three days. 

The licensing costs are paid by our customers on a monthly basis and include maintenance and technical support provided by three of our engineers. 

The solution is quite affordable and I rate the cost a four out of ten. 

The solution is a leader in security according to the Gartner Report and I recommend its use. 

I rate the solution an eight out of ten. 

The best aspects of the solution are the wire signature and VPN, secure VPN encryption, and bulk packet monitoring.

It is a stable product. 

The product is scalable and easily expands. 

Setting up the solution is easy.

We like the technical support on offer. 

It should be controlled in the local environment as well. Its gateway security is more powerful. However, it should also manage the local DSCP network, so the policies, local LAN policies, and other stuff should be there.

I've been using the solution for the last two years.

The stability is good. 

It's running in many places and in different organizations. There's a huge market.

 I found the solution to be scalable. 

We use it in more than one location. We have more than four or five people using it at each location. 

Technical support's good. When we register a ticket, they are always prompt in their response. There are two types of support. It's paid or unpaid support, depending on the service we are using.

Positive

We've also used SonicWall. 

The initial setup is straightforward. It's not complex, You should know where it exists in the OS. Then you can work with it easily. Otherwise, the complexity is something you have to contend with for a new user.

We have witnessed an ROI. 

You need to repurchase a license every year or two. Costs are negotiable and sometimes they offer promotional prices. A yearly subscription might be around $20,000 to $30,000.

We're a customer and end-user.

We would recommend the solution.

Fortinet is a good product. However, other products are good as well. It really depends on the customer experience.

I'd rate the solution seven out of ten due to the cost of quality of services, and due to the fact that we know other firewalls are more powerful than Fortinet. That said, Fortinet is very economical and gives us an appropriate solution based on what we require.

The most important feature of Fortinet FortiOS is the IPS.

Fortinet FortiOS need to manage its memory and CPU utilization better. It peaks at times, which sometimes can be challenging.

In a feature release, if Fortinet FortiOS could have better cloud functionality would be a benefit.

I have been using Fortinet FortiOS for approximately seven years.

The stability of Fortinet FortiOS is good.

Fortinet FortiOS is scalable.

I rate the support from Fortinet FortiOS a five out of five.

Positive

The initial setup of Fortinet FortiOS is simple.

We evaluated Checkpoint and Cisco before choosing Fortinet FortiOS.

The manageability suit is better in Fortinet in terms of device manageability and  OS upgrades. It has the capability of terminating a leased line, RF, and a USB dongle. When we evaluated Fortinet FortiOS, back in 2015, Cisco and Checkpoint did not have a 4G termination feature. Today if my MPLS goes down, the lease line goes down, I can connect a 4G dongle. In Cisco, you need to have a SIM  embedded in a device and you need to open the device, put it on, and then you need to connect it and extend the cable. It is very complex. In Fortinet it is easy.

I rate Fortinet FortiOS a nine out of ten.

Fortinet is used for security. FortiOS is the operating system. FortiAnalyzer, for example, can be used on it and it is used for log management, et cetera.

The solution is very easy to use. It's a solution that has a powerful CLI and a very powerful graphical user interface.

The solution scales well.

In terms of stability, the solution is reliable.

It's not too hard to implement the solution.

Technical support is helpful and responsive. 

The pricing of the product is too high. They should work to lower it.

I've been using this solution for three years. It's been a while. 

The solution is stable. There are no bugs or glitches. It doesn't crash or freeze. The performance is reliable 

We have found the product to be scalable. It's not a problem if you want to expand it.

There are 1,000 users on the solution at this time. 

While there may be plans to increase usage in the future, I'm not sure if that's the case just yet. 

The technical support on offer has always been quite good. We are satisfied with the level of service they provide.

Previously, we were mainly using Cisco firewalls and products.

We enlisted some assistance with the implementation process. The setup was pretty easy. It wasn't overly difficult.

We have three people who are able to maintain the solution. They include me and two team members who are both engineers.

We used an integrator to help us deploy the solution.

The solution is fairly expensive. The cost is around $40,000.

It would be ideal if they offered more licensing options.

We were presented with some other solutions such as Palo Alto and Check Point. We prefer Fortinet due to the features on offer.

I'm an end-user and customer. 

We are using a few versions of the solution, some with 6.2, which is not the most updated version, and some others with almost legacy versions such as 5.6.

I would advise users to not stick with the last version if a new release comes out.

I would rate the solution at a nine out of ten. We have been largely pleased with its capabilities. 

We use it for end-point gateway protection and also use the FortiOS for external user connection and server VPN. We love that clear synchronization as it's almost invisible with the fabric for the guests, externally to connect. The zero-choice engine that they use is pretty good. It is perfect for setting up one-to-one channels for different services that have to pass through the firewall. So it does that seamlessly.

The most valuable features of Fortinet FortiOS are its constant updates and definitions. The new definitions and the content information coming out to the threat labs keeps you updated on your signatures so that you know what's happening out there. And also doing well, for my system, we have, like, what is called, active scans.

It's constantly accessing Sophos into your gateway, even Sophos that you authorized.

I want to see a better integration or a better integration with the endpoint protection or with EDR with the security life cycle. I want to see if that enhances a bit more so I have granular datasets and the user level through to the gateway because that's where most of our threats come from. It's from user activities on the Internet and passes into your files over that gateway. That's where most of our threats would appear and where our exposure to vulnerabilities lies.

So if we can tighten that up, we can harden our infrastructure much better.

I have been using the solution for quite some time.

The customer support team is good and responsive.

We did the initial setup ourselves, so it was easy. The learning curve was that great once you have any experience with any firewall or any experience with any security appliance, you can pull around it. We did get some help from our providers. But that was basic.

The EMS setup was all in-house. Our service provider assisted with the firewall setup. The implementations were very smooth. And the transition of our current from our current security device to that when we did it a couple of years ago, it's seamless.

The pricing is competitive for the medium and high markets but for the small markets it can be expensive.

You have to see what works best for your environment. Each environment is different depending on the applications and different services you are running in that environment. Suppose it's a full Windows environment versus a mixture if you have a hybrid environment. It all depends on the type of environment you're running and finding the right tools that meet your domain.

But for the regular Windows environment, it's perfect.

I rate it eight out of ten.

We are using it for security purposes. 

The security on offer is good.

It's quite stable.

The scalability has been great.

We found the initial setup to be straightforward. 

Technical support has been good overall. 

The UI could be a bit better. The coming generation will not be from the Sierra, and therefore they have a chance to make it much better and more user-friendly. Right now, we have to contend with CLI. We'd like it to be easier. We need the features to be in a UI.

I've been using the solution for more than five years. 

The solution has proven to be stable and reliable. The performance is good. There are no bugs or glitches. It doesn't crash or freeze. 

We find the solution to be quite scalable. If you need to expand it, you can do so.

We have more than 5,000 people on the solution right now. 

Technical support has been good in general. They are helpful and responsive. I have no complaints in regard to their level of service. 

Positive

It offers a pretty simple and straightforward setup. I'd rate it four out of five in terms of ease of implementation. It's not something that's too complex or difficult. 

I don't have many details surrounding the licensing. It's not an aspect I directly deal with. My understanding is the solution is moderately priced.

We are Fortinet partners. 

If a company is looking for a local security enhancement, we tend to recommend or select this kind of solution.

I'd rate the product nine out of ten overall. 

Our primary use case for this solution is for firewalls and the efficient fulfillment of orders. Additionally, with Fortinet FortiOS, you get other features like inbuilt SD-WAN, where the customers are ready to deploy once they move into the SD-WAN features. So there are several additional features within the OS and integration with third-party software, other vendors and third-party solutions. So the integrability, adaptability, and value addition of the OS play a significant role.

We have found the inbuilt SD-WAN most valuable. For example, with FortiGates, we refer to it as being SD-WAN-ready because the customer has to buy it in the box, and the OS supports it by building a connection between two units. Also, regarding the OS integrability with other third parties, for example, with Ciga Group, you can deploy a unit in Sri Lanka, and the customer may have another unit in a different geography. Within Fortinet FortiOS and other competitive products, it's integrative, so it's used for data flexibility.

The solution is good but could be improved by supporting an allocation of quota base management regarding user data.

We have been using this solution for three years.

I rate customer service and support a ten out of ten.

The initial setup is straightforward, and it is very customer friendly. Fortinet FortiOS quickly provides many complex solutions when we deploy a simple firewall. So it's named one of the most customer-friendly OSs in the industry in Sri Lanka and globally. Therefore, customizability allows you to deploy the boxes and register a serial number. Eight people on our technical team are involved in deployment. I rate the initial setup process as nine out of ten.

I cannot comment on licensing costs as a different department handles that.

I rate this solution a nine out of ten.