It provides web application security, email getaway security, and wireless security. It ensures secure connectivity downstream and upstream while helping to enforce web access policies, protect against web-based threats, and inspect encrypted web traffic.
I appreciate that it provides granular application control and DNS filtering to protect against sophisticated DNS-based threats, such as DNS tunneling, server identification, and domain development. It helps to secure the networks at the DNA level and ensure proper identification and filtering of DNS traffic.
Its web filtering capabilities could be improved. It utilizes FortiGuard to detect and prevent credential threats, phishing attacks, and botnet attacks, but it still requires certain updates and enhancements in reducing false negatives and filtering features. FortiProxy has an intrusion detection system but lacks an intrusion prevention system, which is typically found in FortiGate. It can detect attacks like SQL injections and algorithm manipulation using signatures, but to prevent such attacks, it needs to cooperate with other tools.
I have been using it for the last three years.
The stability depends on factors such as storage, networking interface, and memory.
I would rate its scalability features seven out of ten.
They offer excellent technical support through their continuous availability. They provide different levels of support and efficiently address customer cases, with a significant level of reliability and dedication. I would rate it seven out of ten.
Neutral
Fortinet FortiProxy stands out in terms of synchronization and providing a single pane of glass solution. When used in conjunction with FortiGate at the network edge, it offers features like single sign-on, and certificate management which are not typically available in other products and solutions. By integrating multiple Fortinet products, FortiPRoxy ensures holistic security and seamless synchronization. Its FortiManager and FortiAnalyzer features provide enhanced administration and comprehensive reporting capabilities.
The initial setup is relatively easy, as it primarily depends on identifying the copiers based on the current network usage and available connectivity downstream. Implementing features such as data loss prevention, intrusion prevention, and application control should be straightforward, depending on the network configuration.
It can be considered expensive, with a limited lifespan and support that eventually requires updating to newer solutions. In terms of private and public cloud deployment, it is more affordable. Compared to competitors in the web security market, it offers good value for the quality of the product. I would rate it six out of ten.
It is a suitable solution for deployment in various corporate institutions, banks, and government organizations due to its advanced features and scalability. It can be used in hybrid cloud environments and as a managed service, catering to different user requirements. I would rate it seven out of ten.
