Fortinet FortiGate Reviews

Our organization utilizes Fortinet FortiGate for SD-WAN. All business units within our organization connect to the SD-WAN, which is constructed using Fortinet devices.

The primary reason we implemented Fortinet FortiGate was to enhance connectivity. Our previous reliance on MPLS resulted in low bandwidth and high costs. By transitioning to SD-WAN devices and leveraging common ISP connections, we have achieved two significant goals: substantial cost savings and increased flexibility in configuring device communications across our various plants.

FortiGate offers us the capability to provide visibility into and segmentation of our industrial devices. We are currently implementing this for the LAN, and we are migrating firewalls to Fortinet FortiGate devices. In this process, we are separating the operational network from the IT network.

Knowing that some of Fortinet's devices can be used in harsh environments that's nice to have. But that's something that is not needed right now just because we are only using them in very few places. These devices are specifically used to prevent intrusions in harsh environments. 

These devices help to control network traffic with OT-specific protocols. The LAN firewalls we have implemented are purchased with the functionality of network-specific modules to enable the management of network traffic with OT-specific protocols.

The approved offerings help us achieve our budgetary goals. We are adapting the budget to align with the devices provided by Fortinet. We are doing this because we can utilize Fortinet. Therefore, all of our budgets should take this into account as well.

The decision to utilize Fortinet stems from its ability to integrate with our preferred vendors. We have plans to implement both ClearPass and Nozomi as part of our OT cybersecurity strategy, both of which offer API-based interfaces for connecting to FortiGate devices. This interoperability is crucial for our organization.

The combination of FortiGate and FortiManager provides a comprehensive overview of all the firewalls we manage. It is very convenient to have everything centralized in one place.

FortiGate has helped reduce the risk of cyberattacks that could disrupt our production, which is one of our primary goals.

We were not affected by any cybersecurity attacks that would have impacted our production operations. However, we have a comprehensive plan in place to address such incidents. FortiManager enables us to block essential protocols and implement security measures across all business units if we detect a security breach in one area. This centralized approach ensures that the security measures we implement are consistently applied throughout the organization.

FortiGate has aided in centralizing the management of our network and security operations. The impact of this on the operational efficiency of our industrial network depends on how we organize it. Centralized management has significantly simplified management tasks. However, we require a dedicated team capable of addressing the diverse needs of different plants and business units, implementing necessary changes, and resolving any issues that arise. A single point of contact facilitates this process. In this regard, we have not only improved operational efficiency but also consolidated our management structure, reducing the need for multiple teams scattered across different countries.

FortiGate provides us with actionable data that helps us make informed decisions about the appropriate actions to take. Additionally, we utilize FortiAnalyzer to analyze the type of traffic we are experiencing, potential issues, and other relevant information. Furthermore, we monitor CPU memory, bandwidth, and other metrics associated with various IP connections using Fortinet devices. This monitoring is conducted across multiple firewalls. By employing these tools, we can ensure that any changes we make are the correct ones and are made for the right reasons.

The implementation of Fortinet's Security Fabric has significantly enhanced the security of our industrial control system. Previous solutions were unable to effectively manage the diverse protocols employed in this environment, resulting in operational and technological limitations. However, with the introduction of the new security fabric, we are now able to address these challenges and achieve a more robust security posture.

The Fortinet Security Fabric helps us reduce our mean time to remediation. With all its tools and centralized management, it's much easier to identify and resolve issues, leading to improved overall security posture.

Fortinet helped mature our approach to cybersecurity for protecting our industrial equipment.

The flexibility and ease of configuration are the most valuable features.

Overall, we are satisfied with the product. However, we encounter occasional capacity issues. The FortiAnalyzer, being a hardware appliance, has limited expansion capabilities. As our organization has grown, we've outpaced the FortiAnalyzer's performance. The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware. This is an area that could be improved. If we anticipate reaching the size of six countries within the next five years, investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware. The ability to scale the FortiAnalyzer in tandem with our growth would be a significant improvement.

I have been using Fortinet FortiGate for over three years.

FortiGate is now stable. We experienced some difficulties in the beginning, possibly due to some bugs we encountered. However, for approximately the past six months, we have been closely monitoring various ratings for FortiOS versions. As a result, we are currently running only on mature versions. Since then, we have observed that the device is significantly more stable than before.

The scalability for the FortiManger and the devices themselves is a nine out of ten but for the FortiAnalyzer it is a six out of ten.

On the few occasions that we have needed to use technical support, we have found them to be responsive.

We used different solutions such as Cisco, Watchguard and Sophos in different countries, and one of the reasons we switched to FortiGate was to standardize what we used in all the countries.

The FortiManager is one of the biggest advantages they have. From a single management point, we can manage all the devices connected to the support manager. This is something I haven't seen before. So, in that sense, I would say that the most important difference between FortiGate and other vendors is the FortiManager.

Due to the extensive network, the deployment spanned several months; however, on a site-by-site basis, each deployment was completed within a few hours. We had a minimum of two people per country involved in the deployment with 1-2 people from Central IT.

It was a mixed team vendor - in-house. The vendor expertise was really good and I would rate it on a 9 out of 10.

FortiGate's pricing falls within the mid-range when compared to other leading firewall solutions. While it's more expensive than Sophos, it's more affordable than Palo Alto.

I would rate Fortinet FortiGate eight out of ten.

We have FortiGate deployed across multiple locations with 120 firewalls.

I suggest testing FortiGate. For organizations looking for an affordable solution, with good management and initial management, Fortinet FortiGate is the right choice.

On-premises

FortiGate is a hardware firewall that we deploy for our customers. I work on the system integration team and install whichever solution the clients choose. We also provide support, including maintenance and service. The customers contact us if they have any problems. 

The firewalls are deployed on-premise, but you can also implement FortiCloud, which can integrate with public or private cloud platforms. If you have five or six locations in various countries, FortiCloud can provide centralized security support for those offices.

FortiGate is on the cheaper end, and it offers good value. 

Palo Alto has a feature called WildFire Analysis that is unavailable in FortiGate. WildFire is better than a sandbox because it can address zero-day threats and vulnerabilities. It can immediately identify zero-day threats from the cloud. 

Fortinet uses a separate solution called FortiSandbox. It needs to download signatures to identify malware, which takes significantly longer. WildFire is a cloud-based platform that collects threat information from users worldwide. 

I have used FortiGate for eight months, but I have worked with Fortinet products, including FortiManager, for three years. 

I rate FortiGate nine out of 10 for stability. 

I rate FortiGate nine out of 10 for scalability. Fortinet sells models that can accommodate more people. You can choose a cheaper model if you only have 20-30 users, but you will need to spend more money for a FortiGate solution that covers 5,000. 

I rate Fortinet support eight out of 10. Sometimes, the Level 1 support can't fix the issue, so it needs to be escalated, and we can't get help until the next day. Otherwise, it's okay. Their frontline support can fix most basic issues, but we may need to wait a day or two for special problems. 

Positive

I also deploy Check Point and Palo Alto hardware for my clients. Check Point has been in the Indian market longer. Palo Alto came into the picture about three or four years ago. 

In my opinion, Palo Alto is the better solution. It has WildFire Analysis, and you can configure virtual routers within the system, but Fortinet is less expensive. We deploy Check Point for our larger customers. It's more appropriate for multinational companies with 10,000 employees or more. 

Deploying FortiGate is straightforward. You have to check with the customers to see if their offices use other devices. Next, you must do the basic configuration and connect all the networks available at the customer's site individually. 

The SD-WAN setup is the most time-consuming task because you need to configure the address and service objects. After that, you implement basic policies and connect the office network with Fortinet. Deployment only requires one person. 

FortiGate is on the cheaper end. The price varies depending on the model of appliance you're using. It's affordable for a university or a small business. A firewall typically has a license for three years that includes installation and support, but maintenance is separate. 

I rate Fortinet FortiGate eight out of 10. FortiGate is a solid solution, but Palo Alto is the best. I recommend Palo Alto to customers who can afford it. The second best is Check Point. When considering which firewall solution to use, you should look at your budget and the number of users. 

Public Cloud

We are using Fortinet FortiGate SWG for web filtering, application control, and IDPS. Additionally, we utilize it for VPN and the main features of a firewall.

Web filtering is very good, as well as IDPS. SD-WAN is a perfect feature. Additionally, the VPN is stable and very good. These features have proven effective in protecting our network, handling large volumes of traffic smoothly without any issues.

More improvement in AI would be a good edge. We would like the VPN to act as a web filtering solution because users outside the company don't have web filtering. It supports web filtering with an additional license.

We have been working with Fortinet FortiGate SWG for more than nine years.

We did not face any challenges during the installation. The process was very smooth.

Fortinet FortiGate SWG works well, handling the whole traffic smoothly with no problems. We have not faced any issues with stability.

The solution is very scalable.

We haven't needed to work directly with Fortinet support recently. Seven years ago, the experience was not good, warranting a rating of five based on that past experience.

Neutral

The initial setup took just a few hours, as it was completed on the same day.

The implementation involved two engineers.

There are financial benefits as Fortinet's products are considered good value for money due to their robust features, despite being priced higher than competitors.

Fortinet products are very expensive compared to competitors like Sophos and SonicWall. From a pricing perspective, I would rate them a six.

Fortinet FortiGate SWG is a leader regarding Gartner. It has a friendly user interface and is very secure compared to others with many features. I recommend it to other companies because of these advantages. I would rate the product a nine. The overall product rating is nine.

Hybrid Cloud

Microsoft Azure

We use Fortinet FortiGate IPS to enhance our network security. It is especially necessary to secure the edge of the company.

The whole IPS suite is valuable, especially with the updates from FortiGuard. It provides real-time updates, offering a good vision on any changes. For example, if the rating of a certain website changes, we can investigate potential malicious content with FortiAnalyzer.

The pricing of Fortinet FortiGate IPS could always be improved.

I have been using Fortinet FortiGate IPS for two and a half years.

The deployment of Fortinet FortiGate IPS was moderate in complexity. It took approximately two hours to deploy, depending on one’s knowledge, and it was carried out by four or five engineers in the company.

Stability is generally good, but if you include FortiOS underlying in the FortiGate, there are often some patches to do and some loopholes. I would rate the stability as eight out of ten.

The scalability of Fortinet FortiGate IPS is good, and I would rate it nine out of ten.

The technical support from Fortinet is rather good, and I would rate it nine out of ten.

Positive

I worked a little bit with WatchGuard, but I do not know a lot about it. I am only here for two years and do not have experience with other vendors.

The initial setup of Fortinet FortiGate IPS took about two hours and was of moderate complexity.

The implementation of Fortinet FortiGate IPS was carried out by my team internally with four or five engineers involved.

I rate the pricing with an eight out of ten. They could always improve the pricing.

No, we are not considering any alternatives for Fortinet FortiGate IPS. We are quite happy with the product.

I would recommend Fortinet FortiGate IPS as it is a core component of cybersecurity for our company. Having a FortiGate without IPS services doesn't make sense for us. I would rate the overall solution nine out of ten.

On-premises

The main use cases for Fortinet FortiGate are for small, medium to large enterprises, and they also have products for SOHO (small office/home office). That is where they stand out.

The main benefits that Fortinet FortiGate brings to the table include the ease of configuration, stability of the product, and excellent support. When a customer is using Fortinet FortiGate, they will not look at any other products for expansion or upgrades. In terms of price and performance, it gives a very good, balanced product.

One of Fortinet FortiGate's best features is in terms of the configuration; it is one of the easiest to configure. It is very easy and based on ASICs. In terms of performance under scalability and stability, I would rate it amongst the best. I have not come across a product that I have had to replace or generate an R&D for to date.

There has not been any impact in terms of performance for customers because Fortinet FortiGate is dependent on the architecture, which is totally different. They have security processors, network processors, and they work on a different architecture compared to other products. To be very frank, we have not had any performance issues when deploying SD-WAN and a next-generation firewall together.

Regarding improvements for Fortinet FortiGate, there is always room for improvement in any product. In information technology, things fade away quickly, and new technologies come in. It is how quickly each of these companies adapts to that and brings in more value to the customer.

I have been working with Fortinet FortiGate for over fifteen years.

For scaling Fortinet FortiGate, I am not sure about scaling down as we have not had any instances, but scaling up has presented no challenges.

I would rate the Fortinet FortiGate technical support as extremely good so far. I have not had any issues, and I would rate it the same as Cisco.

Positive

One pro for the Fortinet FortiGate compared to Palo Alto, Cisco products, and WatchGuard is that the architecture is different because they use specific processors to handle different types of traffic, both security traffic and routing traffic. They keep enhancing the processors as they improve the capabilities of the product. As for cons, I do not see anything at this point in time.

The initial setup for Fortinet FortiGate is extremely simple. It takes about five minutes to get it up and running. It is that easy. Nothing beyond that.

The deployment process for Fortinet FortiGate is generally very simple. We give the prerequisites to the customer in terms of a number of man links they want to connect and what the LAN subnet and number of subnets are. These initial details are gathered from the customer. Once the appliances are in place, we begin with the contribution to the content management interface. Most of the time, we start with the LAN configuration and the LAN network configuration. Then we move to firewall policies based on the organization's requirements, licensing the product on the cloud, and subscription licenses. In some cases, we configure VPNs and site-to-site VPNs. That is about it, and there are certain features that need to be enabled, which we will enable.

One thing I would definitely state about Fortinet FortiGate is that, in terms of performance, if compared with a product of the same price point, Fortinet FortiGate will outperform it. This way, the customer has a better ROI because they do not have to look at changing it or looking at an upgrade frequently.

I find the pricing setup cost and licensing for Fortinet FortiGate reasonable.

I work with Fortinet FortiGate SD-WAN extensively. My experience in integrating SD-WAN capabilities with Fortinet FortiGate in the network is that it is very easy.

I would rate Fortinet FortiGate as a highly mature product. I have been working with them for quite a long time and have multiple implementations across India. I have not come across any instance where I had to replace the product.

My advice for others looking into implementing Fortinet FortiGate is to plan the capacity properly and right-size the product for the specific customer, which is most important. When choosing the wrong model, some run into issues where it is not supporting that procedure, the system going under load, and similar issues. It is primarily important to spend more time on the design and finalize what is required in terms of the appliances.

On a scale of one to ten, I rate this solution 10 out of 10.

The SD-WAN feature of Fortinet FortiGate has been most impactful in maintaining our network's integrity.

Fortinet FortiGate's threat detection capabilities are good for our use because it's an internal firewall; however, we haven't enabled some of the features that are there. We've enabled IPS and antivirus generally.

They could improve the response time and quality of support.

I'm not sure what additional features they need to have in the future to make it better. For the purpose that we use it, it is doing the job, but I haven't explored some of the features.

I have been using Fortinet FortiGate for seven years.

I haven't had any issues with the stability or performance of the actual firewall. It has been fine with no bugs.

We didn't have to think about upgrading or anything; it does what we bought it for. If it wasn't for the end of support and the end of sale, we would not think about changing it. We are considering similar products for upgrading, maybe newer or bigger hardware.

The product is scalable. Currently, 120 people are using Fortinet FortiGate in my company.

I would rate their technical support about six out of ten; I'm not fully satisfied. They could improve the response time and quality of support.

Neutral

Fortinet FortiGate has delivered financial and operational ROI to my organization. It took about two to three years to realize ROI with Fortinet FortiGate.

At the time we bought them, I was satisfied with their pricing; I don't know how the new pricing will be.

We have to pay additionally for maintenance or support; it is not all included.

I would rate Fortinet FortiGate a seven out of ten.

On-premises

I used it as an IT provider, and our main firewall was the Fortinet series FortiGate. Currently, I am just a user on the end user side of the fence.

The Fortinet gear is really easy to use, intuitive, and pretty powerful. It has been great because we haven't had to change it out very much. The operational return on investment has been great as we don't have to keep replacing it.

I really liked the interface because it was extremely user-friendly. Unlike Cisco, where you didn't need to be certified to use the interface effectively. The consistency across all models has also been beneficial as it simplifies learning and usage. They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.

I just don't like giving products ten out of ten. There's always something new that can be added or fixed.

I have been working with the Fortinet FortiGate overall since 2006, which is quite a few years now.

We haven't had to change it out very much. It has been stable and reliable for us.

I would rate its scalability as a nine out of ten. They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.

Customer support is quite good. We purchased the 24/7 support, and they usually respond within an hour, even in the middle of the night.

I haven't switched from FortiGate. We still use the Fortinet solution as our firewall.

The initial setup is very straightforward and easy, with wizards helping to configure the device efficiently.

The ROI has been very good because it's operationally efficient, and we haven't needed to replace the equipment frequently.

I would definitely recommend it to other businesses with similar security needs. For smaller businesses with just a couple of computers, the standard ISP-supplied modems are fine.

I'd rate the solution nine out of ten.

On-premises

Fortinet FortiGate offers a new official solution for SASE. This solution is more cost-effective for my organisation than the hardware. It doesn’t require renewals every year or every three years. With FortiGate, you get a firewall as a cloud service and optimal protection.

Fortinet FortiGate meets all the security demands of my industry. It covers endpoint security, including web interface, DNS security, and ELP. I'm currently using the latest version. The features that have most improved our network security are Web Control, filtering, application control, IDS, IPS policies, and Deep SSL inspection.

The intrusion prevention system (IPS) in FortiGate is highly effective. It detects and prevents intrusions, maintaining security efficiently. It works seamlessly with my environment and Google Analytics, providing robust protection.

The firmware updates are sometimes not stable. The stability issues can vary, sometimes happening once a month or quarterly. New firmware updates can occasionally introduce bugs, causing some policies to fail. We then have to raise a ticket, and Fortinet usually provides a fix within a few days.

I have been using Fortinet FortiGate for the past three to five years.

For overall stability, I'd rate FortiGate an eight. It is stable, but there are sometimes issues with the software, so there's room for improvement.

There are no scalability issues with Fortinet FortiGate. I haven't needed to scale it yet, but I have a relationship with the vendor, and they have a program to scale their hardware if required.

They also offer many solutions free of cost with the hardware, including advanced solutions. We have four branches of our organization, and they use these effectively.

The support team is very effective.

Positive

I previously used Cisco for my environment, specifically Cisco ISE for access control, but I have shifted to Fortinet products due to their cost-effectiveness.

The deployment process of Fortinet FortiGate was very straightforward. The installation took about twenty minutes, and fully configuring it with security features took about an hour. It was pretty fast, so I didn't need to spend days preparing and configuring.

I am involved in the maintenance of FortiGate, and I have five engineers with me. Three are on-site, handling different boxes, and two are remote.

I've noticed benefits in terms of performance and timing with Fortinet FortiGate. Its implementation and deployment are quick, and migration from other vendors to Fortinet is smooth and easy. Typically, we only have about fifteen minutes of downtime during the transition and gradually implement the policies.

For the price, I'd rate it a ten because it's very cost-effective.

I chose Fortinet FortiGate because it is effortless to use compared to other vendors. Their customer support is excellent, with quick responses and qualified attack engineers. They provide relevant documentation and immediate engineer assistance if needed.

Regarding AI capabilities, the product promises threat intelligence based on AI and machine learning, which I plan to explore. FortiGate integrates smoothly with other solutions.

I'd rate FortiGate a nine out of ten.