Fortinet FortiToken Reviews

The use case for Fortinet FortiToken involves restrictions on token movement. From two or three months ago, Fortinet has not approved moving FortiToken between devices. Users are not allowed to replace tokens from FortiGate to FortiGate or Authenticator to Authenticator. This situation has caused frustration for both customers and service providers.

I love to work with Fortinet FortiToken because it's easy to configure with any user and with FortiAuthenticator. We uploaded it and use it for any authentication with any user, with integration with any device. With FortiAuthenticator, we integrated it with any server, such as Active Directory, and use the token for VPN and other purposes. In the future, we ask customers to use it with FortiAuthenticator, not just the token, as it provides better integration capabilities. When we buy a specific Fortinet FortiToken, we use it on FortiGate only.

Fortinet FortiToken provides very important security benefits because it is used to manage FortiGate from outside, exclusively with Fortinet FortiToken. Without Fortinet FortiToken, administrators cannot use or add admin privileges or manage it from outside, as this could lead to attacks or malicious activity.

Fortinet FortiToken could be improved with flexibility to move it from device to device. With a license, replacement is not possible because Fortinet removed this option. Any Fortinet FortiToken cannot be removed; if a box expires or loses support, it cannot be removed, and customers must purchase it from scratch. This replacement option was removed two or three months ago, preventing movement between devices.

I have been working with Fortinet FortiToken for three to four years or more.

I would rate stability for Fortinet FortiToken as the best solution. It's very stable with every customer installation I perform. No customers have reported issues with Fortinet FortiToken, and if they need assistance with installation, I help them configure it.

I would rate scalability for Fortinet FortiToken as nine and a half or ten.

We make calls with Fortinet support, and in one year, I may call them two to three times or up to 10 times based on the need because we have experience troubleshooting or researching issues. I am satisfied with their service.

Positive

I do not have experience with competitors of Fortinet FortiToken as all my work is focused on Fortinet or other vendors, but primarily I work on multi-factor authentication with Fortinet only. Customers prefer Fortinet FortiToken because of its pricing, stability, and flexibility, including Fortinet's features such as FortiGate's analysis and FortiManager for configuration updates.

Fortinet FortiToken initial setup is very simple. If firewalls have mail for Fortinet, it works best. Mail customization is available when needed. With a Fortinet account in the firewall, users can upload the license for Fortinet FortiToken and use it for any user by enabling multi-factor authentication.

I use Fortinet FortiToken mobile application on my mobile now, and it functions similarly to OTP, bank OTP, or any software token multi-factor authentication. I have multiple OTP software solutions on my mobile, including Token, OTP Bank, and OTP for various applications.

Regarding multi-factor authentication strategy, Fortinet FortiToken works excellently for time-based one-time passwords. As a partner, I recommend it to customers along with FortiZTNA and ZTNA, using authentication with certificates or user authentication with multi-factor authentication.

I am not totally satisfied with Fortinet FortiToken functionality, but as software, it is the best solution. With hardware, if someone steals it, it becomes unusable. However, with Fortinet FortiToken, if users have email access, they can use it from another mobile device. Fortinet FortiToken software is the optimal solution, similar to other software OTP tokens.

Fortinet FortiToken pricing is very competitive.

As an expert partner in Egypt with professional service and EBSP certificates from Fortinet, I rate Fortinet FortiToken at nine out of ten. The only drawback is the inability to replace the box, which causes customer dissatisfaction. This feature needs to be allowed in the future to address customer concerns.

Overall Rating: 9/10

Fortinet FortiToken is primarily used for VPN access to the internet, which is the main use case for my clients and me.

We currently use Fortinet FortiToken with an on-premises setup. We use Fortinet FortiToken alongside FortiGate. The most important benefit of Fortinet FortiToken is the security it provides for accessing the intranet inside the office, so the cost is relatively acceptable.

Fortinet FortiToken's time-based one-time password is useful for users. It is useful as an OTP and multi-factor authentication tool, and the time-based one-time passwords are valuable in my feedback.

Fortinet FortiToken is not easy to change because after installing it on one person, it can be transferred to another, but we need support and cannot self-manage it. If we could self-manage transfers, it would be better for us.

When a person has resigned from the company and left their mobile device, it is not easy to transfer the token to another phone or another person. We have to ask for support, and this sometimes takes a longer time.

It is complex to transfer one account to another device, and you can only do it with tech support.

I have been working with Fortinet FortiToken for almost five or six years.

I would rate the stability of Fortinet FortiToken as an eight.

I would rate scalability as a ten.

I would rate the technical support from Fortinet as an eight.

Positive

I believe Fortinet already has a better product called FortiEDR, but the price is still more expensive than Fortinet FortiToken, and I am not totally satisfied with the functionality.

The setup is quite acceptable. My team can technically manage it, so I think the setup process is still easy to perform for Fortinet FortiToken.

I cannot directly state what the main competitor for Fortinet FortiToken is. There is another option, but we are satisfied with Fortinet FortiToken.

We use Fortinet and their products. I understand your points about Fortinet FortiToken. It is easy to integrate Fortinet FortiToken with solutions such as FortiGate, FortiAuthenticator, or FortiCloud. The integration is relatively straightforward and easy.

Fortinet FortiToken is easier to use than Fortinet FortiToken as a separate piece of equipment or separate tool. The Fortinet FortiToken mobile application makes it easier to receive tokens on my smartphone.

We tested the VPN option and another one combined with FortiClient, the antivirus, and web filtering, which are the most useful features in Fortinet FortiToken. Fortinet has another product that is more complete, but I think the price is not compatible for small businesses such as ours.

I can recommend Fortinet FortiToken to other users, and I am totally satisfied with it. My company is a reseller of Fortinet, and my clients purchase the product directly from me rather than through the AWS Marketplace or other platforms. I mainly work within the Fortinet environment, and for this environment, Fortinet FortiToken would be the best choice. Overall, I would rate this product an eight.

I use Fortinet FortiToken for authentication and multi-factor authentication (MFA).

I utilize Fortinet FortiToken's ability to integrate seamlessly with Fortinet platforms such as Fortinet FortiGate, and it is integrated into FortiGate firewall and used with FortiCloud.

The best features of Fortinet FortiToken, compared to other competitor OEMs, are better as they have their own product, and we have one extra layer of security.

Fortinet FortiToken has impacted my organization positively by providing enhanced security through an additional security layer.

In my opinion, Fortinet FortiToken can be improved based on specific requirements. We will suggest solutions based on customer requirements and price availability.

I have worked with Fortinet FortiToken for the past 2 to 3 years.

The stability of this solution is consistently stable.

Regarding Fortinet FortiToken's scalability, we can purchase licenses according to our needs. If I require 5 licenses, I can purchase the minimum quantity, and when I need to extend, I can purchase additional licenses.

The initial setup of this solution is not complex and is easy to implement.

I have seen investment returns from this solution, though it is primarily utilized by higher-level enterprise companies.

I have heard about Fortinet FortiAuthenticator but do not have experience with it.

I work with FortiAP, FortiSwitch, and FortiTokens apart from other Fortinet solutions.

I am an implementer of Fortinet solutions with some development experience.

Regarding the FortiToken mobile application, when used for authentication, it generates a code after login. Users must enter this code, and only after the code matches can they access the system.

I purchased Fortinet FortiToken through the AWS Marketplace.

I would rate technical support from Fortinet as 10 out of 10.

I rate Fortinet FortiToken 9 out of 10 overall.

I mostly use FortiToken for administrative purposes, focusing on authentication and parallel authentication. It provides authentication for admin users through Forti Tokens. As part of our security measures, I use Forti Tokens for authentication.

The main use case of FortiToken is that it is a hardware-based solution, providing secure two-factor authentication for administrators. Once the hardware is given to administrators, it facilitates OTP generation, enhancing security for firewalls and other software within FortiGate systems. 

Additionally, FortiToken is integrated with FortiClient solution for users working from home, providing an additional layer of security by sending OTPs for authentication.

One suggestion is to develop a more user-friendly solution that is cost-effective so that a hardware-based solution can be provided to all users using VPN services or any configuration service requiring confidentiality. This would allow for broader distribution among a larger number of system admins and software engineers, which is currently not feasible with the existing hardware-only approach.

I have been working with FortiToken for more than four years.

I rate the stability of FortiToken as eight out of ten.

Currently, I rate scalability as eight out of ten. There is a need to scale more effectively to accommodate a larger number of users and bulk users.

I rate technical support for FortiToken as good.

Positive

The initial setup of FortiToken is simple and user-friendly. Everything can be done from UI-based access, allowing for easy registration and usage without any problem.

The pricing for FortiToken is not low; I regard it as medium-priced.

There is no direct competitor I have observed for FortiToken. Similar technology has not been observed in other products like Palo Alto. I have heard some references to Sophos, but there is no confirmed information.

Overall, I rate the FortiToken solution as nine out of ten. 

I would definitely recommend it due to its effectiveness in enhancing security.

I am working with Fortinet FortiToken for two-factor authentication in combination with Active Directory, VPN users, and application users. It is used as a software-based token solution that provides added security. 

I employ FortiToken for various zones, including business-to-business, aggregation, and Internet zones, as well as for deploying multiple firewalls and the web application firewall (WAF) solution.

FortiToken is a cost-effective solution compared to other solutions, such as Cisco. It is very user-friendly and easily integrates with various firewalls, making it convenient to use within diverse environments. 

FortiToken also enhances the security posture with AAA solutions, TechX, and ADR servers. It is easy to deploy as a Pocha service with Fortinet and is well-suited for enterprise solutions, having found significant use in financial sectors.

FortiToken should provide enhanced SMS services for those users who do not have smartphones. The SMS service currently has limitations, such as requiring frequent account renewals, which could be improved.

I have used FortiToken for the last six months.

FortiToken is stable, but there are some restrictions when it comes to supporting two-factor authentication in multi-factor environments. Despite this, it is generally a stable solution.

FortiToken is scalable and accommodates the needs for updates effectively. It is a good solution for scaling up in Fortinet Fabric solutions.

The technical support from Fortinet is very good. Their resolution time is timely, and they provide solutions efficiently. They are rated a nine for their support.

Positive

I do not use Microsoft solutions, though they are a competitor in this area.

The initial setup of FortiToken is very user-friendly and can be integrated easily on the first attempt.

Pricing for Fortinet is competitive and very project-oriented. Discounts are often provided to close deals, making it a cost-effective solution.

Microsoft is considered a competitor offering two-factor authentication solutions.

Overall, I rate FortiToken as an eight out of ten. 

It is a good, stable, and scalable product. I recommend it to other users for its multi-sector security requirements.

We integrate the solution as multi factor authentication for all our security devices and VPN to protect administrative access to them. We are using the solution in the IT sector.

The solution's most valuable feature is that it provides push notifications for any authentication and allows us to accept the connection from the mobile even without entering the OTP. Fortinet FortiToken has a lot of RADIUS functionality.

The Fortinet FortiToken server doesn't have centralized integration with other Fortinet tools and third-party tools. We also have FortiManager, but FortiToken doesn't integrate with FortiManager. It would be good if we could have centralized monitoring enabled from FortiToken to FortiManager. In a single view, we can get a better view of authentication, such as who the users are and how many authentications have failed.

I have been using Fortinet FortiToken for more than three years.

With Fortinet FortiToken, user tokens sometimes get out of sync, and we have to manually resync the user's token. This is an administrative process, and Fortinet needs to work on it.

I rate the solution’s stability a seven out of ten.

Fortinet FortiToken is a scalable solution. It has the option of clustering, where we can add two or more clusters or servers with the same cluster. The solution supports a large number of users. More than 500 users are using the solution in our organization.

I rate the solution’s scalability an eight out of ten.

The technical support team generally responds well to users.

Positive

The solution's initial setup is easy and not very difficult.

On a scale from one to ten, where one is difficult and ten is easy, I rate the solution's initial setup an eight out of ten.

The solution's deployment is very fast, and we can start using it in just two to three days.

The tool prevents brute force attacks and unauthorized access to resources. We have a lot of services that are accessible on the Internet. The solution prevents authorized access to all these services. We used to see login attempts earlier, but we haven't faced those issues after implementing Fortinet FortiToken.

The solution’s pricing is moderate and reasonable.

The solution's RADIUS functionality helps assign the administrative profile directly to the authenticating devices. We also use the solution as a centralized authentication tool for other network devices. It pushes the RADIUS attributes to the server. If a user named John is a read-only admin, it pushes that profile directly to the administrator. I don't have to create a user profile on each device. That is done centrally by FortiAuthenticator.

Fortinet FortiToken has a good and simple mobile application that doesn't have many options. Fortinet FortiToken is a good tool that allows us to integrate with many RADIUS-based one-time authentication services. It also helps us prevent brute force and forced login attempts.

Overall, I rate the solution an eight out of ten.

The primary use cases of Fortinet FortiToken for my customers typically involve adding multi-factor authentication (MFA) for remote access. This is often required for remote workers or external providers. For instance, in industrial environments where external companies provide services, this solution helps manage secure access. Another common use case includes providing an external captive portal and self-registration.

The most valuable feature of the solution is its mobile application. It is particularly beneficial as it eliminates the need for hardware management. Users do not have to worry about managing or replacing physical tokens, which can be advantageous if the token is lost or damaged.

I would like to see the product improvements in dynamic VLAN pooling. Specifically, when users are assigned different VLANs based on their SSID, ensuring no unintended lateral traffic between users would enhance security and efficiency.

Sometimes, SMS messages do not reach recipients correctly due to country-specific limits on SMS character length. 

I rate the stability a seven. 

The platform easily scales from a few users to thousands by adjusting the licensing and configuration. I rate the scalability an eight. 

The support team is generally responsive and helpful, but resolution times can vary.

The initial setup requires understanding the platform's approach, licensing, and the correct version selection based on the customer's context.

Although the platform is relatively expensive, it offers significant value. I rate the pricing a nine out of ten. 

The critical feature for ensuring secure access is the solution's comprehensive functionality, which secures the user identity of those attempting to connect. The integration of all features collectively ensures high security.

I rate it an eight out of ten. 

I am using FortiToken for logging into the Fortinet hardware. I have four FortiGate hardware units. I am connected through a simulator on FortiToken.

The solution is unique in catering to Fortinet, making it very useful and secure. That is what I appreciate about it. It offers very good performance.

I do not have any notes for improvement.

I am using Microsoft Authenticator, and I encounter a lot of troubleshooting and issues with it. I have never seen these issues with FortiToken.

I have never contacted them. It is working very well, so I never think about how I can communicate with technical support.

Neutral

I am using Microsoft Authenticator, and I have encountered a lot of troubleshooting and issues regarding it. I have never seen these issues with FortiToken.

The setup is the most applicable I have ever seen. It is easy to comply with. I just scan the QR code, and it is working. This is very useful and very easy.

Pricing is normal, neither high nor low, since it is not a free application like Microsoft Authenticator, which makes it very stable and convenient.

I rate the product a ten out of ten.

We're using a third-party tool for second-level authentication. So, basically, we integrated our Office 365 to Active Directory for additional service, and our users need to provide the SSH people to log in. So we wanted to use that ticket, which is not scalable. So that's why it should be what we basically use FortiToken for now is to ensure that administrators who log into the box have to provide additional proof at the DCB app.

I love the push-button authentication on FortiToken Mobile. It's also great that the soft token automatically reloads the OTP at intervals, so I always have a fresh code to enter. 

I also appreciate that you need to specify the token to gain access to the box, even from the command line. So I love it also because of the fact that people can no longer log in to my box without knowing who the users are. At least, anytime we log in to the admin, which has the tool enabled on my account. So it helps me to basically keep track of who and who are trying to access my box.

I would like to see if FortiToken can integrate with Office 365 mail to support the same two-factor authentication experience that I have with ESET. With ESET, when a user logs in, they are easily directed to the ESET authentication page, where they are prompted to enter their OTP after supplying their username and password. I understand from support that FortiToken cannot do this with email integration. That's why I opted for ESET. 

In future releases,  it would be great to see Fortinet add this support in the future.

I have been using this solution for quite some while. We use the mobile version. 

It is a stable product. 

We easily move from the prem to the cloud and vice versa. So, it is a scalable solution. We have around three end users using this solution. 

The setup is straightforward. I had a problem setting up FortiToken on ESET for Active Directory users because most of my users are integrated into Active Directory. There was a problem setting up FortiToken on the accounts that are not locally stored on the FortiGate, but I was able to fix the issue with the help of support. Overall, I'm happy with the setup process.

The deployment was straightforward. If you're using Fortinet cloud or FortiToken phone mobile, once you enable that on the account, it sends you a link to download the application for the clients of FortiToken. It's something that can be done in less than a minute really.

I only had to use support when I couldn't get my users on the ED to install and set up a two-step authentication (2SA) on the account. That's because the way it was set up was it was looking for a particular filter, which was not on the ETA back on. The support was able to identify the feature to use, and I was able to resolve that. Otherwise, it's something you can do within thirty minutes or less than that.

Two admins are enough for the maintenance of the solution.

For the two licenses, I have a return on investment.

We have not added in for the commercial. What I used for my test was the two licenses that come with the FortiGate. At the point where I wanted to ask for commercial support, it didn't support what I needed it for. So that's why I didn't confirm my price with anything because I didn't need that at that point.

I only have the two free licenses, except maybe when I increase the number of local users I have that need to be able to use VPN and all that, then I would have to pay for those licenses. But for now, because the third-party tool I have supports both my VPN and my email, so I really don't need to use FortiToken now.

Overall, I would rate the solution a nine out of ten. For someone who just needs basic availability for users, I would recommend what they could use for that.

We use the solution for two-factor authentication. If anybody we have set up on FortiAuthenticator needs two-factor authentication to log in, we use FortiToken.

Fortinet FortiToken’s licenses are perpetual. We do not have to pay monthly for multi-factor authentications like Duo or Okta. We can buy them once we pay for the license, and it's good for however long Fortinet wants to allow it to be good for. We can really save a lot of money buying a perpetual license versus paying monthly for a service like that. The solution is pretty solid. I never had to contact the technical support team.

We can only use the tool with the FortiToken Mobile app. If we could use it with other authenticator apps, it would definitely be an improvement.

I have been using the solution for about four years.

I rate the product’s stability a nine out of ten.

The tool is very scalable. We can just buy more tokens. It is very easy to scale. I rate the scalability a nine out of ten.

The initial deployment was straightforward.

I see an ROI on the product.

The solution’s price is good. I really like the price.

If someone doesn’t already have a method in place for two-factor authentication and if they use other Fortinet products, I would recommend the product to them. Overall, I rate the tool a nine out of ten.