Fortinet FortiSwitch - Secure Access Reviews

Neutral

I use it for retail business. We are using the FortiSwitch solution for our voice switches and access points as well.

It has helped us by providing easy management from a single platform through the firewall interface. It's very easy to manage and provides all the insights and vulnerabilities, which saves a lot of time and manpower in managing our network operations.

It's easy to be configured and powerful in terms of performance. I've been using it for a long time, longer than any other fabric I have used. The powerful integration capabilities allow us to manage all devices from a single interface through the firewall.

It's okay for me; I don't have anything specific in mind that needs improvement.

I've been working with Fortinet for more than three years.

The stability has been good overall. I experienced a power issue once due to unstable electricity input, not the fabric. After reinstalling the firmware, it worked fine.

The scalability is based on the type or model you are using. For enterprise solutions, it's extendable easily with options for edge connectivity or stackable devices.

My local support is working fine, and I have my connection with my account manager in the public company of Fortinet.

Positive

I have worked with Draytek, Cisco, Aruba, HP, and Juniper before.

It was straightforward with no complexity. I got used to installing it a long time ago. My approach ensures that I install any new devices in about fifteen minutes.

I'm managing this with a clear strategy and steps, using templates for standard procedures. I oversee installations and ensure everything is finalized in about fifteen minutes.

The update on our business opportunity or business is growing. It's impacted our IT budget by providing better management and stability.

The pricing is considered high due to the currency exchange changes in our region. It has increased by about two hundred percent over the past three years.

I have worked with multiple manufacturers before, such as Draytek, Cisco, Aruba, HP, and Juniper.

I recommend FortiSwitch for its integration, single interface management, and efficiency in managing network environments.

I'd rate the solution nine out of ten.

The primary use case for Fortinet FortiSwitch - Secure Access is for network security. Some of the installations are in remote sites, and the fixed infrastructure, like cameras, needs to be secured. 

Additionally, there are ports for user access where filtering is done by the firewall, not Fortinet.

One of the main features is the integration with FortiGate. Having a single dashboard to manage everything simplifies the process. When you create the interface, the VLAN, and other configurations, they become available across all the switches. This centralization of control is highly beneficial.

Currently, compared to other vendors, there isn't a feature that stands out as needing improvement. However, the introduction of AI integration could be valuable for detecting abnormal traffic directly on the switch.

I have been working with FortiSwitch Secure Access for two to three years.

I don't rate it a ten out of ten since perfection doesn't exist. That said, I would give it a nine out of ten for stability.

The scalability of FortiSwitch Secure Access is easy. You just need to connect another switch or replace the current one, and it integrates well with the existing setup.

I would rate technical support at eight. It's a potential area for improvement, possibly in terms of response time or quality.

Positive

When FortiSwitch is integrated with the firewall, the configuration is very easy. Without integration, it's like any other switch, and you must configure each switch individually.

Currently, I don't have an opinion about the price as I focus on implementation and am not informed about pricing in comparison to other vendors.

I don't know any product that I could currently compare with FortiSwitch. While I have worked with Cisco and Palo Alto firewalls, I haven't experienced their switch integration.

I would rate the overall solution an eight. It's particularly valuable for small companies as it's easy to manage with one equipment handling all configurations. For large companies, it depends on the use case and needed features, but FortiSwitch can still be beneficial in certain scenarios.

It allows for centralized monitoring and management of all connected appliances, helping to minimize potential internet disruptions. This solution includes features such as IPS, antivirus, and vulnerability scanning. Fortinet is not just a firewall. It is an advanced next-generation firewall that offers comprehensive management capabilities. FortiGate manages the FortiSwitch, and policies created on the FortiGate can be applied across all connected devices. This setup ensures that the internet and internal network environments are monitored effectively. Additionally, FortiGate handles antivirus, EDR, and other security measures to ensure customer protection. It also manages VPN connections.

It is managed. You can create the VLANs and all the VLANs from the FortiGate. The FortiGate manages it, so you don't have to do anything. It also functions as NAC, which is very important. You can manage everything from a single interface.

 The Secure Pack fabric is made of security fabric. You can do many things. You can hook all the other components to be monitored. You can create policies and block certain people from accessing the Internet. You can also block specific websites, which is very relevant. The antivirus is embedded securely in the solution. In some cases, you may need to obtain antivirus from a third party.

FortiSwitch offers eight and 24-port models. They don't have a 16-port model, which can be an issue for some clients. If clients don't need twenty-four ports, they must settle for eight ports. Unfortunately, Fortinet doesn't sell a fifteen-port switch. Another issue with Fortinet is that their warranty is not as long-lasting as that of HPE. HPE offers a lifetime warranty, while with Fortinet, the switch is considered end-of-life after three to five years, and you have to replace it. 

I have been using Fortinet FortiSwitch - Secure Access for ten years.

The solution is stable.

I rate the solution’s stability a ten out of ten.

They have many types of switches. You can even buy a type of switch and stack it. You can make two 40-40 switches work together and manage them from the FortiGate.

I rate the solution’s scalability a nine out of ten.

The technical part is good. You create the ticket and call them, and they'll help you. If you have the training, they can even give you a code. If you are certified with them, that is something interesting.

Positive

The initial configuration is not simple. But when you read the documentation and knowledge bases carefully, it is very possible to make a good configuration that meets the specific needs of the end user.

You have to set up the appliances and add the policy before deploying them. FortiGate also manages the asset access points. It provides a single pane of glass, where everything is centralized. The feature allows you to manage everything, including the FortiSwitch, from the FortiGate. It is secure, providing public security. The FortiGate acts as a central dashboard, managing other devices.

Fortinet FortiSwitch Secure Access relies on continual advancements in technology. Each FortiSwitch has a dedicated processor and various components that improve over time. Although I haven't tested the latest model, it seems to have new features. However, the older models I have are reliable, with no complaints. Once configured, they operate smoothly without issues. This contrasts with some HPE models, where ports might occasionally fail, requiring immediate replacement. FortiSwitch continues to perform well, but when it reaches the end of its life, it must be replaced. HPE also updates its products, offering new features when a new model is purchased.

They need to define what they want and have a plan. They need to search for a product that can fit in the short and mid-term. When you invest, the minimum should be for five years.

Overall, I rate the solution a nine-point five out of ten.

Within our company, which operates multiple stores in the area, we recently acquired two firewalls and a large storage facility. To establish our network infrastructure, we require nearly all components, including forty FortiSwitches. Each switch is fully equipped, with the core switches having five hundred ports and the rest featuring forty-eight ports.

FortiSwitch has proven to be most effective in specific network environments or scenarios, particularly those where it complements a Fortinet firewall setup. In such cases, it has demonstrated excellent performance.

The most valuable features for enhancing our organization's security posture include the ability to block any suspicious traffic and to quickly access or isolate any abnormal activity originating from devices connected to the switch or Wi-Fi network.

The integration of FortiSwitch with the Fortinet Security Fabric has significantly improved our network management capabilities. It allows us to easily block and quarantine any suspicious activity.

Since deploying FortiSwitch, I've observed significant improvements in our network's performance and manageability. One standout feature is the ability of FortiSwitch to accurately identify and flag abnormal traffic that doesn't meet predefined standards. For instance, if we require HIPAA compliance within a specific network segment, FortiSwitch conducts audits to ensure compliance. Any non-compliant activity is promptly isolated, preventing further issues from spreading across the network.

One of the most valuable features is the ease of connectivity. With FortiSwitch, you can easily identify who is connected to each port, disable ports as needed, and retrieve configurations from FortiGate when required. Additionally, if one switch goes down, you can seamlessly bring another one online within a matter of minutes. Once recognized by Fortinet and authorized, it automatically receives and applies the necessary configurations, making the setup almost plug-and-play.

Renewing the annual licenses for Secure the Switch FortiSwitch can be cumbersome, especially considering the relatively high cost of Fortinet licenses. While the switch itself functions well, the pricing structure for licensing can be a drawback.

Regarding the major drawbacks of using FortiSwitch in our organization, one drawback I've encountered is related to the changes in their operating system upgrades. While upgrading from version 6.4 to 7.2, FortiSwitch tends to make significant alterations without clear documentation of where features or settings have been relocated. This lack of transparency can make navigating and understanding the updated operating system challenging, causing frustration and inefficiency.

I have been working with it for two years.

In terms of stability, I would rate it a solid ten out of ten. It's generally straightforward unless a breach occurs.

The scalability it provides is excellent, capable of handling large networks effectively. However, there are challenges related to scalability in terms of pricing. We deployed FortiSwitch in South America, where the minimum workforce at one location is approximately five thousand employees. Additionally, at another client's site, there are approximately three thousand employees. Moreover, there's a company locally with a workforce ranging from small to medium to large, totaling around five hundred employees, where FortiSwitch has proven effective.

The technical support provided is exceptional and dependable. I would rate it ten out of ten.

Positive

The initial setup was straightforward. I would rate it nine out of ten.

The deployment process typically takes around twenty-five minutes, although this timeframe may vary depending on the client's specific requirements. This is because creating policies within FortiSwitch involves several steps, including setting up Secure profiles and addresses, creating policies, and then applying the Secure profiles to these policies. Additionally, some fine-tuning may be necessary to ensure that the policies interact effectively and function as intended. We did it in-house, and one person was enough for everything. 

Maintaining the system is straightforward, although it comes at a significant cost. The main console for managing FortiSwitch, a fully managed service, is priced at approximately ninety thousand dollars per unit.

The pricing is quite high.

Overall, I would rate it eight out of ten.

We use the FortiSwitch with our Fortinet firewalls. We configured a VPN to enable secure remote access.

It also has a feature for managing policies and controlling traffic flow into and out of the network.

Access Point feature is very good. It's easy to manage and reliable.

It tracks very well.

I would rate the the ease of management and scalability within our network architecture an eight out of ten, with ten being best. 

I've had some initial configuration issues, particularly with storage, that I haven't encountered with Cisco switches.

In my experience, the response after configuration changes can be slow.

In future releases, I would like to see more integration capabilities. 

More integration would be helpful, especially since we sometimes have devices from other companies. Improved interoperability would be very beneficial.

My company has been using it for three years now. 

It is a stable product. 

It is a scalable product. We have over 60 end users using this solution. 

Other branches have fewer users, like 15 to 20. But at the head office, a lot of web traffic passes through it.

I have used Cisco. I find Fortinet much easier to manage compared to Cisco switches.  

Moreover, we needed to transition to newer technologies and equipment as part of a broader diversification strategy. So, we switched to what they were using.

For me, it's easy to deploy. Maybe because I sometimes struggle with Cisco devices and their commands, which seem a bit more complex compared to Fortinet.

I had assistance from a consulting firm for the deployment. An expert helped, so it went smoothly.

There was a team of four people. 

Compared to using Cisco with a dedicated ISP, I believe using Fortinet with a VPN connection has been more cost-effective.

We have to renew and pay for the licenses. 

Overall, I would rate the solution a seven out of ten. The software versions can be volatile, so storage for configuration might be an issue depending on usage.

I mostly use it as distribution or access switches for branch offices.

It's mainly just a distribution switch. I just needed one, whether it's part of the Fortinet suite or not.

What I actually use in this deployment are Forti APs (Fortinet Access Points). So, I can see all my office infrastructure from a single console,  which is handy.

One FortiGate, one FortiSwitch, and five access points, everything under good control. It's really nice to see it all together like this.

The integration report benefits our organization with regard to its security ecosystem. 

FortiSwitch is designed to work seamlessly with FortiGate. While it can operate independently, its true potential lies in integration with FortiGate.

I would rate the ease of management a seven out of ten, with ten being excellent. 

It offers strong integration with FortiGate solutions. We can manage them both from a single FortiGate console.

So, if you're already using FortiGate, it might unlock some features. But if you're not using FortiGate, then a different vendor might be more cost-effective.

It is always nice when something is cheaper. 

I have been using it for two years. 

It is a stable product for me. It has been operating for a few months, and everything is good for now. 

There are around 50 end users using this solution. Currently, our office isn't expanding, so I don't anticipate a rise in user count. 

However, if that changes and wired connections become necessary for workstations (everyone uses wireless now), FortiSwitch would be my main choice for scaling the solution.

I used Cisco and Ubiquiti switches but chose FortiSwitch and haven't regretted it.

The complexity of the initial setup depends on your needs. Simple cases with GUI are easy, but precise configurations might require CLI and are better suited for physical switches.

FortiSwitch is good for simple deployments with FortiGate in branch offices.

But for larger networks, solutions like Cisco will be more useful.

We deployed it ourselves. For the deployment, connect it with Ethernet cables to a FortiGate, access the FortiGate console, connect the switch, and configure it there. Easy for basic setups, but complex authentication like 802.1x can be tricky. It is possible but a bit complex. 

It keeps the network alive. That's the main benefit.

The price is fair compared to competitors like Aruba. Licensing is easy: FortiCare and that's it. For Layer 3 models, an additional license is needed. But in our deployment, FortiGate handles routing and works well.

Overall, I would rate the solution a seven out of ten. If you use FortiGate and have a small/medium deployment, FortiSwitch is a must-consider. 

The platform's most beneficial features for network management are its network access control with 802.1X and its integration into the secure fabric.

One of the main challenges was integrating FortiSwitch with FortiGate, as the switches are managed through FortiGate rather than independently.

I have been using Fortinet FortiSwitch - Secure Access for approximately two years.

I rate the overall stability as a nine. We have experienced very few issues, with only one notable problem occurring after an update.

We have three customers using FortiSwitch, each working with around 500 to 1,000 employees. 

It scales easily, but its scalability may not be as extensive as other solutions. I rate its scalability as a seven.

The technical support services at levels one and two could be more helpful, but tier three support is good.

We also work with Extreme Networks, Cisco, Juniper, and API Enterprise.

The installation process was relatively easy but more complex than other switch access products we have used. Some concepts were handled differently than those in our usual products. It took about two weeks for approximately 15 appliances.

For setup and configuration, three people were involved: two engineers and one operator. We follow the recommended software update path and have maintenance windows approximately six times a year, depending on the firmware update schedule.

Operational costs are lower than solutions like Cisco, and deploying new hardware is straightforward. However, smaller setups may find it less cost-effective due to fixed licensing requirements.

The product pricing seems to be mid-range. The licensing structure is not uniform and can be difficult to understand. 

I rate the pricing around five or six out of ten.

The solution has enhanced network security by integrating access control more seamlessly, reducing overhead, and simplifying the network environment by removing the need for interfaces with other vendors.

Its security features are valuable in the health sector in a campus network with numerous components.

I rate it an eight out of ten.

We are using FortiSwitch as a gateway for our FortiGate firewalls. 

We needed a large PoE switch to connect to the firewall. FortiSwitch is robust and cheaper than Cisco switches. 

We haven't had any problems with FortiSwitch. 

We have used FortiSwitch for three years.

I wouldn't say that FortiSwitch is stable because we've had situations when we lost ports, and I don't know what IP address to switch to or which environment has the lost ports. A storm knocked out the power to the devices, and every attempt to troubleshoot the in-line power didn't work. I think this also happens with Cisco switches. 

FortiSwitch is scalable. You add switches to scale it up. It isn't difficult. 

I rate Fortinet support 10 out of 10. Their support is excellent and inexpensive. They respond immediately. 

Positive

Like most switches, FortiSwitch is plug-and-play. You don't need to do much configuration. You only need to connect it and put in an IP address. It doesn't take long, and one person can do the job alone. FortiSwitch requires periodic firmware updates. It can be a little difficult because the switches aren't connected to the internet, so you cannot upgrade the firmware remotely. You need to go to the site and do it manually because it's a closed network. 

We pay for a one-time cost for the hardware, but there isn't a license. We only pay for configuration and support. We need to periodically buy new switches and upgrade them. 

It's feasible to use FortiGate with Cisco switches, but it was simpler to buy everything from Fortinet. Cisco and Fortinet switches are both good, but FortiSwitch is cheaper. The Cisco hardware isn't too expensive, but we have to pay for ongoing support. For example, the switch might be 2,000 pounds, but you need to pay an additional 600 pounds for support. Cisco support is excellent but expensive. We end up paying a lot for things we don't need. 

I rate Fortinet FortiSwitch Secure Access six out of 10. I recommend different solutions depending on the use case. If a customer is using FortiGate firewalls, I would suggest FortiSwitch.

We sell a lot of solutions in the educational sector. School boards, universities, colleges, and community colleges are good customers for the Fortinet solution overall and Fortinet switching.

I'm usually working with clients who have between 500 to 1,500 users. That's the average commercial enterprise count. About 50 to 60 customers use the product end to end or in some capacity. We've had significant growth in Fortinet business annually. It seems to go up by 10 to 15 clients every year.

It's easier to deploy and operate in the education space than other solutions. With Cisco, you probably need a full-time employee or two in those environments to manage daily once it's deployed. Fortinet requires maybe a third or a half a person.

I like that everything flows back to FortiGate, which is the controller, management console, and firewall. There's one central point for the entire network, so the security, switching, wireless, etc., flows back to the FortiGate. The ease of management is what customers like. They don't need separate solutions like Cisco.

While Fortinet is good for school boards and mid-sized businesses, enterprise-class networks require a zero-trust solution. If you're building a zero-trust network with end-to-end security, that's where Fortinet falls behind Cisco, HPE, and Aruba. 

I have been using FortiSwitch for seven years.

FortiSwitch is stable. 

The scalability is strong because everything resides in FortiGate, so the switching and wireless itself is all fine. You can scale the network to twice the size it is today with no problem. However, you need to upgrade the FortiGate back end. It's not like the current FortiGate will allow you to do all those extra switches and wireless access points without an upgrade on the back end. 

Fortinet support is decent. It's behind Cisco's TAC, which is the industry leader. Customers don't need as much support as they would with Cisco because Cisco's stuff is a little more complex, so you have to open more cases. When they open the cases, they normally get a resolution, but the support isn't on the same level of technical ability as Cisco's.

When they switched to Fortinet, they did so for a couple of reasons, the main one being operational simplicity. Most of the customers have fewer people available to support their networks. 

They can't have something complex because they don't have enough people, and there's turnover, too. They need something simpler so a new person can come in and easily pick it up. Fortinet is by no means simple, but it's easier to manage than Cisco and Aruba. Fortinet is 30 to 40 percent cheaper than Cisco or Aruba, and that's a significant issue in IT budgets today.

Setting up FortiSwitch is pretty straightforward. The complex part is correctly configuring FortiGate. You might want to get a professional to help you or a partner. After that, deploying the switching and the wireless access layer is rinse and repeat. Customers can do that once they have the methodology.

The deployment time depends on the number of campuses or remote sites. A $500,000 contract would probably involve 10 to 15 days of service. The customer can deploy parts of it. You have someone like us come in to deploy FortiGate and the core switching and do the rest on your own. 

The average customer may need some professional help with the initial installation. As you buy more equipment over the next three or four years, you shouldn't need any professional assistance. If the people who were there during the initial install are still around, they should be able to deploy it and integrate it into the network without any help.

Fortinet costs 30 to 40 percent less than Cisco, HPE, and Aruba while the company has made great strides in technical ability. A lot of customers look at the Gartner quadrant and say, Fortinet's less expensive, but it's down in the left corner of the quadrant. It's nowhere near Cisco and Aruba, so you're getting what you pay for." That used to be the case four or five years ago because it wasn't on the same level.

Fortinet's come up a lot, so they're closing in on the leaders. They're not there yet, but they've made progress. So now customers are saying, "Okay, it's getting closer. Although it's not there, it's close enough that we can justify 30 to 40 percent less, and it can accommodate our network well enough."  

However, a large enterprise like a bank or commercial manufacturer isn't going to adopt that because the gaps still exist in the technology. There's still a limit on the markets they can penetrate. 

There isn't much cost because it's not a subscription-based model. The software's embedded. It's not like Cisco and Aruba, where you have a subscription in addition to a piece of hardware. You're paying for two components with those manufacturers. Fortinet doesn't work that way. The only added cost is FortiCare support.

I rate Fortinet FortiSwitch Secure Access eight out of 10. It's a strong product that's easy to manage. Everything runs through FortiGate, so you've got to have FortiGate within your network. You can do it without it, but I wouldn't recommend it. 

The FortiGate is the piece that allows the switching, wireless, and firewall to perform the best. I wouldn't buy switching from Fortinet on its own and put it in. I certainly wouldn't put it in a hybrid network where you've got a mix of another manufacturer and Fortinet.