Fortinet FortiOS Reviews

We use it for our corporate network's protection.

The user experience is great. The graphical user interface is also good.

There are some issues with the performance. We also had some issues while updating the firmware.  

The download options can be better. While downloading VPN clients, it is a little bit difficult to get different versions. You need to log on and search.

Their support can be better. 

I have been using this solution for about three years.

It is stable.

It is scalable.

We have had both good and bad experiences with them. Their support could be better.

I never set it up from the beginning. I joined in the middle of this project.

It is not cheap; it is also not expensive. It is somewhere in the middle.

They had already decided on Fortinet when I joined the project.

I would recommend this solution. I would rate it an eight out of 10.

We are using Fortinet FortiOS for our core network next-generation firewall.

The most valuable features are the ease of use, and the overall simplicity, everyone can use it with a small introduction.

I have been using Fortinet FortiOS for approximately 10 years.

Fortinet FortiOS is highly stable.

The solution is scalable.

We have approximately five administrators that are using the solution in my organization.

The technical support is good. However, during the holidays they can get a little slow to respond.

The installation is straightforward and simple to deploy.

I can do the implementation myself.

The solution could have a better licensing model. It's a bit more expensive than other solutions. The annual subscription is very pricy in Fortinet. The cost could be reduced.

I would recommend this solution to others.

I rate Fortinet FortiOS  a nine out of ten.

We use this solution as a gateway, a firewall for the office.

More Stability on VPN and SSL Deep Packet Inspection (Compare to Sonicwall)

It is very robust.

Many things are missing from the interface that necessitates using the CLI, so it needs to be improved. When I migrated to FortiGate, there many things that I wanted to do, but couldn't.

With FortiOS, you can use the router in two modes. The first mode is the profile mode, which is the starter mode that most use, but you have another mode that is a policy mode and is required before creating your firewall rule. The problem is that when you switch from one mode to the other, all of your firewall rules will be gone. This means that you have to decide if you want to use the policy mode firewall or a profile mode firewall.

With policy mode, you can have granular control on the application on the firewall rule because the firewall rule works with the source destination protocol. With the application, you have multiple rules, one by one. As an example, you can have one for Skype or one for OneDrive, etc. On the source, you can add a group, and add people to the group, and they can have access to Skype and OneDrive along with others added.

You can granularly control applications on the firewall rule with the policy mode, but you don't have access to the proxy mode rules. There are also issues with the antivirus, IPS, and you are forced to switch back to the profile mode where you have less granular control on the application.

I have problems with the IPS stability and the antivirus in Policy Based Mode. If the file is bigger, then the antivirus doesn't check it.

In policy Based Mode, There are many issues. (Firmware =< 6.4)

I have been using this solution for one year.

We are using the latest version, either 6.4 or 6.5.

This solution is very stable. It is more stable than SonicWall. The biggest difference is the stability on the VPN site to site, and on the DPI SSL for the HTTPS communication.

If you wanted to expand the firewall to another office you would have to use the FortiManager, which I have not used yet.

I have built five routers, one by one.

SonicWall is the same where you have the GMS that can be used to move the rule to the other firewall.

Technical support is not always good.

I can only compare it with SonicWall, and it is missing many advanced features that SonicWall has. SonicWall has multiple advanced features on the DNS, Antivirus, etc...  and a lot of options that don't exist in Fortinet.

With SonicWall, I never had to use the CLI but have had to with Fortinet. They are missing many things on the interface.

FortiGate is like a teenager, where SonicWall is the adult firewall. However, it is more robust than SonicWall, particularly on the VPN site to site and SLL Inspection.

When you build a VPN from site to site, you have to make sure the tunnel you select has the same option on both sides to make it work, but you have to also make sure that the routing exists, the mapping exists, and the firewall role exists. 

If one of them is not there, even if you create a site-to-site VPN with the other side and everything, there is no error, the VPN will not go up. 

On SonicWall, it's different. You build a tunnel, you put the same encryption, the same password on both tunnels, and you click up and it's up. If it's not working, it's because you didn't create yet the firewall rule, you work on the VPN, you click, then connect, and it's up.

Then if it's still not working, you create a firewall rule and it's up, or if you forgot the net rule, etc. You do that step-by-step, and it's working, but unfortunately if one of them has a mistake, even if you have no error on the site-to-site VPN setup, it's not going up.

With SonicWall, you can do it step by step and have it working, but with Fortinet, you have to do it all at the same time with no errors.

I work on the configuration and not really involved in the pricing. It was already in place when the company decided to switch back to Fortinet. 

I concentrate more on security.

I know Fortinet and SonicWall, and If I had to consider other solutions or if I have to redo it again, I would take a closer look with Palo Alto first.

With Palo Alto, the cost is more, but when I switch from SonicWall to Fortinet FortiOS, I lost a lot in the features. I would check to see if Palo Alto has what was lost in terms of features.

The stability is good. I would rate Fortinet FortOS an eight out of ten.

The primary use case is for integrated cybersecurity.  

The VDOM (Virtual DOM) is a virtualized firewall that has some opportunities for flexibility that are an advantage in certain configurations. The other valuable part is that this flexibility makes it easy to integrate with Cisco products.  

The product really has everything that we need as far as features for this type of solution and our use case. It works fine for us. One thing that can be improved is the pricing model. It is currently subscription-based and I think they should probably try to change that.  

We have been using FortiO since around 2016. So we have been using it for four years.  

We had some issues with the stability of FortiOS, but I do not think it was because of Fortinet. It was because of how the integrator handled the configurations. The partner that implemented it originally did not do it optimally. We ended up having to change the partner in order to have it done correctly.  

So far we are satisfied with the technical support. We have not had a lot of need to use them.  

We had been using Check Point and we still use it. In fact, we have been working with Check Point more than Fortinet. I may be a bit biased toward Check Point because I already have more implementation support for it than FortiOS.  

The difference between the price of the products is also obvious. Pricing is more flexible with Check Point than with Fortinet. Fortinet ends up being more expensive because of the pricing scheme.  

The pros and cons of them are not so much different. If it were my choice and we were going to change what we use or choose between the two, then we would move back to using Check Point exclusively. 

I think that the setup was a bit complex because we have a complex network. Because of that, we had to do some interoperability testing first and that made the initial setup take longer than it would in another, simpler environment.  

The initial setup is one other area that could be simplified.  

We used a partner for the implementation. We ended up having to replace them with a different partner because of installation issues. The second partner was able to fix the issues.  

The costs for the maintenance and subscription for Fortinet FortiOS software alone is actually half of the cost of the hardware. For example, if your hardware costs were about $40,000, your yearly subscription to FortiOS is about $20,000. That is kind of the drawback to using Fortinet. By comparison, that $60,000 is already three years of maintenance or support with Check Point for the same scale setup. It is a significant cost difference.  

I would probably recommend Check Point to most users considering FortiO if they do not have any ACI (Application Centric Infrastructure) implementation or a Cisco ACI. If you could do a workaround on the ACI, then I would probably still recommend Check Point. But if you do not know how to make that type of adjustment or can not and you do not have any partners that need to access your systems, then it is better you go for Fortinet.  

We primarily use the solution as a firewall. It's protecting customers from the internet to have access to servers behind the firewall.

We co-locate customers' servers at our company, and we also give them firewall protection. Mostly, people that co-locate a server don't have any firewall so they ask for the service through us.

The solution is very user friendly. 

The product is very easy to configure, compared to other firewalls that I've worked with.

Fortinet needs to make this solution even more robust. Sometimes when we get a DDoS attack, the cannot withstand it. We can run out of sessions very easily. That said, I suppose if you want more a robust system, then you could purchase higher-end solutions, which are more expensive. Still, I would like to see more protection from even in the low-end version.

The pricing needs to be improved. It's quite pricey.

In terms of the CLI, if they could make it more intuitive, and more user friendly, it would make the solution better. I like to work on CLI instead of through the GUI. If you are used to it then you wouldn't mind the way it works right now. However, for those that don't, there's just a sizeable learning curve.

I have been dealing with the solution for three and a half or four years.

The solution doesn't really scale. If you want a bigger box, you need to scrap the box you have and trade up to get the larger capacity. You can't just "add" to it per se on existing solutions you've bought. It's hardware, so it doesn't scale well.

We're not looking to increase our usage right now. COVID-19 really slowed us down in a lot of ways.

We have a local supplier that helps us a lot every time we need to open a ticket. So far we haven't had that many issues. The few ones that we have had, we didn't have any problems with opening up tickets and getting support.

The solution is not complex at all. I'd say it's very easy. There's a learning curve, however, once you're used to the device, it's very easy to set up a firewall. It's fairly straightforward.

The solution is too expensive. If they could push down their prices, that would be great. However, I'm not in charge of purchasing. I wouldn't know about the exact costs.

We're just customers. We don't have a business relationship with Fortigate.

I'd rate the solution eight out of ten.

We primarily use the solution for our firewalls. 

Basically we're providing security distribution for our client. One of the solutions we utilize are firewalls. It helps secure the environment and monitor traffic.

There are a lot of features that we like within the solution. The resources or performance of the firewall is very good. However, the real selling point is the fact that the solution offers so many features, it gives our clients a lot of extras that they can work with. There's a lot on offer.

Right now, it's very trendy to integrate everything into the cloud. This solution would be more effective if they did more integration in that regard.

I've been using the solution since 2016. It's been a few years now.

The solution is very stable, however, in rare instances where there happens to be a bug or glitch, the good thing about them is that they release fixes whenever there's a bug on the OS. Users will need to upgrade their OS if this is the case in order to get the fix. It's great that they deal with the bugs head-on and put out fixes efficiently.

The solution is quite scalable. It's one of its selling features. Although, I believe that most competitors would also scale just as well.

Support is very fast and reliable, but it absolutely depends on the ticket, or what it is comprised of or how hard the errors or problems are. Easy questions are dealt with quite quickly, but harder issues might take at least an hour or so before a user would get a reply. 

We mostly focus on Fortinet products for our firewalls. We don't really use a different solution and haven't used something else in the past. I'm familiar with Sophos firewalls but have not deployed any just yet.

While Sophos is more expensive than Fortinet, from what I have seen, their functionality is basically the same. The difference between the two appears to be simply in the architecture of each solution. They are quite similar, but the user interface is a bit different.

I'm quite comfortable with the solution, so for me the process of installing the solution is quite straightforward. I would say it's very straightforward, and it's easy to learn, especially because they offer a very good GUI. It's not as easy to set up as, for example, FortiGate, which is an application on FortiOS. FortiOS is just a bit more complex.

The deployment time varies. It largely depends on the number of security policies that demand attention. It's most likely one day or so, so it's not too long. However, it can vary. You only need one person to deploy the product.

We implement the solution for our clients. We handle the deployment for them ourselves using our in-house team. Typically I'll be the one to deploy it for the clients directly, and then I'll hand everything over to after-sales support.

I'm not sure of the pricing, but my understanding, after looking into Sophos, is that Fortinet is less expensive than Sophos.

We're using version 6.2 of the solution right now, however, the latest version available is 6.4.

I'm part of the security team at our organization. We're business partners with Fortinet.

I would advise other companies to choose a firewall brand that they can they afford. Cost is an important aspect. It needs to work well within an organization's budget. It doesn't make sense to look at products that are out of an organization's price range, so make sure you are looking at options that are affordable. 

The second thing to consider is the solution's functionality. If that particular brand or particular product has the functionality required, and they are able to implement it on their network or in their infrastructure, that's a good sign. 

The third consideration should be support. It's important for a company to understand how fast and how reliable the support is. That's very important after the sale.

I'd rate the solution eight out of ten.

Our primary use case for this solution is for deploying network security systems for SMBs or mid-range corporations.

We use the SSL VPN web portal and we actually find it very useful because we don't need to bother with installing additional client-side software.

The most valuable part of the application is the graphic user interface of the application where you can see specifically what's going on in the system at a glance and quickly assess the system. The GUI is very good.

One thing that should be improved in future versions is an issue we have observed and had problems with a few times. When we try to reinstall a backup for FortiOS, you need to do a factory reset manually or you lose access to a device. I have experienced this situation a few times and it seems like something that should not be required and they should resolve.

I think the product is a pretty stable solution. I did have some cases with the webserver where the appliance actually crashed. Later I research about the issue and I found out that it was actually a bug in the latest version. I imagine that because they know they will issue a fix if they have not already.

I recommend this product to my clients partly because of the scalability. Scaling is never really a problem though it may cost more if the client requires additional licensing or hardware.

I don't often have to contact support. When I do I usually just get help from the online community. I really don't contact their support directly.

I go about initial setup by just implementing the configuration using CLI (Command Line Interface) to propagate the components. I think the initial setup is straightforward.

We are the consultants and we do the installations.

I think the cost of the product categorizes FortiOS because it is a bit more expensive than small businesses will usually want to spend. It is not really practical for SMB or for small businesses. It is mostly for mid-range or higher SMBs because of the pricing. It is not expensive compared to some products, but a small business may not justify the cost. The cost ends up being dependent on the solution you choose and if you want individual or package licensing.

As consultants, we provide different customers with different solutions based on what they need. So, there is no specific product that we evaluate as there are always several options. Mainly I use Fortinet or Sophos solutions to recommend to my customers. We will use on-premises or cloud depending on the needs and how it fits for the client. For Fortinet FortiOS we usually use it in on-premises installations.

I do recommend this product to clients for use but it depends on their case needs. For example, in the AAA (Authentication Authorization and Accounting) some of the accounting and some of the VPN tunneling features are removed from Fortinet FortiOS due to some security configurations. In some projects, we need those features for the client and when that is the case, I cannot recommend that the client use the FortiOS solution.

It would be a better product if there were a logging feature. You need to have FortiAnalyzer in your installation to have logging management capabilities. It will be a better solution if some logging and history capabilities were integrated without requiring an additional product installation.

On a scale from one to ten, where one is the worst and 10 is the best, I would rate Fortinet FortiOS a seven. It is a good product but there are a few problems.

We primarily use the solution for protecting our virtual infrastructure.

The solution needs to adjust its pricing model. With the way they are structured, everything is very disparate and sold separately, and, depending on the solution, it can get quite pricey.

The solution could be more intuitive. Especially when customers have access to it, it's not as simple and straightforward as some of the other devices I've taken a look at.

The solution seems very stable once you have everything up and running. 

The solution is extremely scalable.

Technical support is good. I would rate them nine out of ten.

The initial setup is pretty straightforward.

It wasn't technical people doing that deployment for the proof of concept, so it took about a day. We also hadn't set up all the features and capabilities. 

We pay $100,000. That covers the cost of the hardware that we run the VN's on. That also includes any SGNA costs for the internal support tech.

We use the private cloud deployment model.

I would rate the solution nine out of ten.