Fortinet FortiGate Reviews

The solution is used as a perimeter firewall, and all traffic is routed through the appliances before accessing the Internet. FortiGate Next Generation Firewall is also used in policy-based routing. The solution has features such as IPS  and web filtering. 

Presently I am carrying out a POC to evaluate where the SD-WAN functionality of the solution can be utilized by our company. 

It's an out-of-the-box solution with impressive ratings. FortiGate Next Generation Firewall has a stateless balance proposition. The updates from the vendor ensure that the product remains up to date in terms of threat intelligence capabilities. 

I personally go through reports on utilizing FortiGate Next Generation Firewall resources, bandwidth and applications that are present in the company's environment. The product has been capable of providing the aforementioned reports for the last 280 days, and such features are highly valuable for reporting purposes. The reports provided by FortiGate Next Generation Firewall also help in analyzing the traffic condition in a network. 

When the SD-WAN is integrated with solutions like Citrix, it can appear complicated, which only tech professionals can implement. The solution should allow more user-friendly integrations or deployment. 

I have been working with FortiGate Next Generation Firewall for five years. 

I would rate the stability an eight out of ten. But recently, we needed to undergo regular patching of the network in our company, but that's probably due to increased hacking activities or attacks. At our company, we are still confident with the solution in spite of the recent breaches. 

The solution is highly scalable. I would rate the scalability a nine out of ten. At our company, we can scale the solution effortlessly for enterprise networks. There are two professional users of FortiGate Next Generation Firewall in our company. The other solutions which are being evaluated in our company are FortiNAC and Fortinet SD-WAN. 

I have received satisfying support for every issue I raised with the team. The support team is responsive and helpful in resolving issues. I would rate the customer support an eight out of ten. 

Previously, Cyberoam was used in our organization. Our company has also used Check Point to deploy a multi-layered firewall solution. Check Point has numerous partners and offers satisfying support, which makes it a formidable competitor of FortiGate Next Generation Firewall. 

There are various local partners of FortiGate Next Generation Firewall who offer effective support for the solution. 

While integrating FortiGate Next Generation Firewall in our company's infrastructure I faced an error while implementing a secure LDAP server. I had to roll back for the aforementioned issue and review the authentication certificates. 

The learning curve of the solution varies depending on the use cases and the different features the user starts interacting with within a specific environment. The initial setup of the FortiGate Next Generation Firewall can be claimed to be straightforward. I would rate the setup a six out of ten. The deployer's CLI understanding will also be a major factor in the deployment process of the solution. 

The solution's initial setup can be completed in a few days, but much more time is required to learn about the environment, evaluate the policies' interference with the services, and implement optimizations based on the insights. In total, the complete deployment takes a few weeks. 

It's an expensive solution. FortiGate Next Generation Firewall costs our company around $12000 per year. There are no additional costs involved with the product. 

I have confidence in the threat detection capabilities of FortiGate Next Generation Firewall. I haven't witnessed any downtime in the solution, even after using it for multiple years. 

An automation API integration is available with FortiGate Next Generation Firewall. For instance, the solution allows integration with CrowdStrike and Darktrace to enhance the threat intelligence capabilities. I would recommend others to use FortiGate Next Generation Firewall.

It's a reliable solution for real-time threat intelligence. In the security industry, FortiGate Next Generation Firewall is a highly praised product and I am able to embed policies for effective operation. I would rate FortiGate Next Generation Firewall an eight out of ten. 

The solution is used to monitor daily network activities. FortiGate Next Generation Firewall acts as a security layer between public and private networks in our organization.

The solution successfully mitigates all types of advanced attacks by putting our company's production servers behind the firewall using a DDoS attack prevention system and WAF. FortiGate Next Generation Firewall handles our organization's internal network security. The solution is used mainly in IT companies, just like our organization. 

The WAF and DDoS attack prevention system are the solution's most valuable features. FortiGate Next Generation Firewall has IBS/IPS systems, which are vital for handling cyberattacks. 

More SD-WAN features can be integrated into the FortiGate Next Generation Firewall. The vendor can make efforts to make the solution more budget-friendly. 

I have been using FortiGate Next Generation Firewall for seven years. 

I would rate the stability a ten out of ten. 

I would rate the scalability an eight out of ten. For each purpose, there are different products used in our company from the same vendor. For instance, our company has a dedicated subscription plan for log analytics. Fortinet should host bundle pack subscriptions for its products and add-ons. 

There are more than 150 users of the product in our company. Our company is functional on a hybrid model for employees, and thus, there are not more than a hundred users of the solution in the office at any given time.

Due to the aforementioned work setup, our company is exploring more scalable solutions with end-to-end security features, as many employees are working from remote locations. At our company, for end point protection we use Microsoft Defender. 

At our company, we have Fortinet certified experts in-house, so most of the issues are solved without tech support from vendor. But whenever, an issue was escalated to the support team of FortiGate Next Generation Firewall, our company has received a response on time. 

FortiGate Next-Generation Firewall integrates perfectly with our organization's infrastructure. Our organization is using the solution for more than six years without any integration obstacles, even while integrating to Fortinet Access Points. 

The initial setup process is easy for the solution. There are some configurations and policies that will facilitate routing among the varying traffic, dictating what to allow or block. I would rate the initial setup a nine out of ten. The setup duration depends upon the expertise of the deployment engineer, but on average it can be finished within a day. 

Our investment in security through FortiGate Next Generation Firewall is worth it as there are zero complains regarding the effectiveness of it.

It's an expensive solution. At our company, we updated the license every three years. I would rate the pricing a nine out of ten. Presently we are upgrading the hardware in our organization before the next license renewal date. 

In our company, we have used Sophos about six years ago. Compared to other solutions like Sophos, we found FortiGate Next Generation Firewall to be much more expensive for our organization.

But FortiGate Next Generation Firewall has a more robust hardware and stable configuration, so our company prefers the solution over others. But as the license of the the solution is expiring soon in our company, we might explore some other firewall products from Fortinet as well. 

Our company found that in comparison to Microsoft Defender for Endpoint, FortiGate Next Generation Firewall has a limited number of features and requires an ideal Fortinet environment or infrastructure to function. FortiGate Next Generation Firewall should enhance its endpoint capabilities and be less dependent on Fortinet infrastructure. The product should have cloud solution integration capabilities. 

Since implementing FortiGate Next Generation Firewall, we have not experienced any attack or cyber threat on our company's network. With the solution, we have been able to proactively monitor the network and take preventive measures on time. Our company finds the product reliable in mitigating all kinds of threats. 

Our company expects some AI capabilities from Fortinet solutions. I would advise FortiGate Next Generation Firewall to others as a reliable solution. I would also advise other professionals to run tests with the product as per their requirements before adopting it. The solution has excellent security policies. I would overall rate the product a nine out of ten. 

We use FortiGate NGFW to secure our network gateways. These devices, functioning as UTM solutions, were impressive in fending off various threats. FortiGate excelled with its anti-spam, antivirus, and firewall features at the network level. Beyond security, it is seamlessly integrated with networking tools like Zendesk.

The most valuable aspects of FortiGate NGFW are its top-notch reputation in peer reviews, user-friendly interface, and excellent support. It stood out during external penetration tests, proving its effectiveness compared to our previous firewall. The seamless integration with other tools and thorough testing set FortiGate apart. Replacing our old firewall with Fortinet was a game-changer, especially as it helped us improve our performance in subsequent penetration tests.

FortiGate has been solid for us, but I see room to explore its integration with Secure Service Automation for a more comprehensive security view. The initial migration had some challenges, but they were manageable. Now, my focus is on automating responses to alerts, especially during nighttime attacks. I want to investigate how FortiGate can connect with other solutions, like SIEM, to enhance our security measures while offline.

I have been using FortiGate NGFW for a year.

It is quite stable.

FortiGate is scalable, and we currently use it for approximately 300 internal users, with additional offshore teams connecting via VPN. The total user count, including the offshore teams from different countries and continents, is around 400 to 500 people.

We contacted Fortinet's technical support during a firmware upgrade issue. They guided the upgrade process, and their support was capable and helpful. I would rate them as a ten out of ten.

Positive

In comparing FortiGate with other solutions like Cyberoam, I have found Fortinet to excel in various aspects. For instance, its intrusion detection capabilities stand out, providing instant alerts compared to some firewalls that take up to 24 hours. While I can't quantify percentages, Fortinet's performance, especially in areas like responsiveness, has been notably better in my experience.

Setting up FortiGate NGFW was straightforward, with some considerations during the migration process. Migrating from an old firewall required meticulous rule review and manual configuration. Ensuring adherence to best practices and testing in a beta environment were crucial steps. We also coordinated with our ISP to clear the ARP cache for a smooth transition. Despite a minor misconfiguration leading to an issue, we swiftly addressed it over a weekend with minimal impact. Regular backups and failover tests added an extra layer of assurance. A team of three people deployed it. The deployment and migration from the old firewall to FortiGate took approximately one month. To ensure a smooth transition for our 24/7 operations, we invested extra time for thorough testing and rule validation.

The pricing and licensing costs for FortiGate are quite reasonable, especially for an SMB like ours. While solutions like Check Point and Palo Alto are excellent, Fortinet's affordability played a significant role in our decision-making process.

FortiGate for SMBs impressively covers most features, and in my experience with Cisco, Symantec, SonicWall, and others, FortiGate stands out. It has exceeded my expectations. While I haven't explored Check Point due to budget constraints, FortiGate's pricing makes it a top choice. Palo Alto and Check Point are excellent but would likely have been my preference if pricing aligned. Overall, FortiGate has been a standout performer in terms of features and value.

For those starting with FortiGate NGFW, my advice is to thoroughly explore its features. I recently recommended it to a healthcare entity due to its effectiveness and user-friendly interface. The fact that they already had Fortinet in another enterprise speaks volumes about its reliability and performance. Overall, I would rate it as an eight out of ten.

Fortinet’s SaaS offering is the best fit for anybody looking for a cloud-delivered secure web gateway to replace their on-premises solution. It combines with given capabilities, making it a good proposition for customers.

Customers are looking for a Secure Web Gateway solution focusing on securing web browsing. There are additional features like a virtual or cloud firewall. The majority of customers are seeking WAF filtering solutions.

Integrating with the SD-WAN functionality on Fortinet devices makes a compelling story for customers to choose a Fortinet-based solution, which the Fortinet Security Fabric further reinforces.

Fortinet FortiGate SWG should be localised to specific regions to comply with local data privacy regulations because of the data privacy rules in the countries. In the Middle East, data organisation and KFA requirements are stringent.

I have been using Fortinet FortiGate SWG as a global reseller.

I rate the solution’s stability a nine out of ten.

Customers keep on improving their licenses. The solution remains scalable and flexible. On-premises deployments may have some limitations. However, cloud deployments offer a high degree of flexibility.

Our customers fall into enterprise and medium business.

The technical support is very supportive.

Positive

The initial setup is not complex, especially for someone familiar with configuring firewalls.

The deployment is very easy. The hard thing is to configure the policy to decide traffic to allow or block. On top of data privacy, you need to stop data from filtering. It’s not difficult from a deployment perspective but it requires some consideration.

Fortinet provides users with configuration options to implement the security policies they require. The effectiveness of these configurations depends on the expertise of the individual configuring the device.

I rate the initial setup a nine-point five out of ten, where one is difficult and ten is easy.

Customers who opted for the Fortinet FortiGate SWG's cloud-based version have seen a return on investment. However, using it for more than a year is typically recommended to realise the solution's benefits fully.

The solution has a combination of different flavours, which make it an attractive option for customers. The solution includes an SD-WAN, DLP, and a secure web gateway, all integrated into a single platform. It provides economies of scale.
FortiGate SWG is a cost-effective solution well-suited for organisations of all sizes.

I would recommend it to all my customers looking for SD-WAN and a secure web gateway for their SD-WAN deployment.

Overall, I rate the solution a nine out of ten.

We use it to secure our environment, ensuring no vulnerabilities or potential risks in our network configuration. Our goal is to enhance cybersecurity measures, safeguard our network, and ensure the integrity of our systems against potential threats and intrusions.

I am content with its user interface and functionalities.

There is a potential for enhanced protection. It is essential to leverage its capabilities more professionally to achieve an even higher level of security. I believe that if the cost were lower, it would be highly beneficial. While the gateway serves as a primary solution for the entire network, attention should also be given to endpoint devices.

I have been using it for approximately five years.

It is incredibly reliable. I would rate it eight out of ten.

It provides excellent scalability abilities and I would rate it eight out of ten. There are around fifty individuals actively using it.

They provide exceptional support. I would rate it eight out of ten.

Positive

When comparing Fortinet to Cisco, Fortinet stands out as a more user-friendly and practical solution. It seems especially well-suited for smaller network environments, making it the preferred choice for our small work network. The switch was prompted by the wealth of features Fortinet offers, coupled with its ease of management and deployment. The diverse interfaces and comprehensive reporting, including statistics and other relevant information, further contribute to its appeal.

The initial setup was straightforward.

The deployment duration is variable and relies on the development level and installation complexity. Initially, it may take only a few hours. However, to enhance security and stability, the process might extend to a few days or even a week. For a simple network, a single individual should be sufficient to manage it effectively.

While slightly more affordable than competitors, it remains relatively expensive due to its inclusive subscription. It operates on a subscription basis. You pay solely for this subscription, without any additional custom costs for support or other services. The subscription encompasses support, updates, and all associated features.

Overall, I would rate it nine out of ten.

We use the solution to secure our entire data, limiting user traffic from within the system, which needs to be assessed to be secure. That is the main motive behind choosing the solution.

Suppose I don't want to pay for the users. We would have done some whitelisting and content filtering on the FortiGate web gate. Based on the policies, any user traffic is filtered through the secure gateway.

It's a flexible solution.

What happens in FortiGate is that a lot of bugs come on a system-by-system basis, like when Fortinet launches new firmware in FortiGate. Most software launches with known or unknown bugs. When we go for upgradation, even after running a bug scoping exam, we don't know whether the BIOS for which we are upgrading would affect the end user. We don't know how the FortiGate firmware will behave in your environment. Whatever the known bug, FortiGate lists it in their documents, but you never know how the problem will impact your environment. That's a major disadvantage of FortiGate because, somewhere, it's very unstable.

Another issue is how deduplication services don't work reliably after enabling deduplication on Fortinet. When they launch any new firmware in the future, they have to ensure firmware functions.

I've worked with Fortinet FortiGate SWG for more than ten years now.

I rate the solution's stability a seven out of ten.

I rate the solution's scalability a seven out of ten. We have around 700 users on the platform.

If any issues arise, we have to log a ticket with Fortinet. By default, they log all the tickets in P3 or P4 priorities. For P1 or P2, they ask to call us on their phone numbers and lines. Whenever we try to call on the phone for any P1 or P2 issues, the next time, the number gets busy, or the email is unavailable. That's why

I feel the support is not up to the mark, and they must work on it.

Neutral

I rate the solution's initial setup a seven out of ten. The deployment time depends on the scenario, such as your infrastructure size. To deploy the solution on a cloud, you have to buy it from the marketplace and deploy it on the cloud. But after that, you have to do a lot of configurations. That depends on the size of the operation.

One person is more than enough to implement the smaller version of the solution. But if the organization is bigger, with more than 500 or 600 users, we would need three to four people.

Fortinet is priced low.

We are exploring Netskope and evaluating it for the future.

I recommend Fortinet FortiGate SWG because it is flexible and cost-effective. I rate it an eight out of ten.

Our customers use these devices as security devices, and we sell these devices to our customers. We also use it ourselves. We have the entire lab, and we use some of the functions in our local network.

It protects our customers' networks from viruses and threats.

The firewall, IPS, and VPN functions are the most valuable features. The antivirus functions are also good.

It works very well. It has a lot of different functionalities. Its cost is also fine for our customers.

In some cases, its initial setup could be hard for customers.

I have 10 to 12 years of experience with these devices.

Their devices are quite stable. We have not had any problems with the operating systems or maintenance of subscriptions. It is a robust device.

In most cases, they work very fast. It also depends on the device they are supporting. In the case of FortiGate, we do not have any complaints, but when we had to buy the FortiADC solution for one of our customers, we faced quite a few difficulties with technical support. I do not know why, but it could be that some devices are supported by different teams in Fortinet. We had difficulties with FortiADC, but we have not had any problems with FortiGate. I would rate their support for FortiGate a nine out of ten.

Positive

We worked with Cisco and Check Point firewalls. We worked with Cisco ASA for a long time. We worked with it for about five years, and we were happy with it, but it was old-fashioned. We went to Fortinet and started working with this company. 

FortiGate has good security functions and high-level technical documentation. Their documentation is very easy to understand. 

FortiGate's performance is also better than Cisco ASA. It has 10 VDOMs. It is a great function because you can add virtual functions for different groups in your network. It is quite useful.

It is deployed on-premises. Our customers prefer to deploy not only Fortinet devices but all security devices on-premises. They rarely use cloud licenses. Some customers only buy it from us, and for some customers, we also set it up.

Its setup is easy for us, but not every company wants to use our service for setting it up because of the cost. They prefer to install it themselves. In some cases, it could be hard for them.

In terms of the implementation strategy, we first try to understand what problem a customer wants to solve by using FortiGate. We collect a lot of information about a customer's network, such as protocols and devices being used. We try to prepare this device in our local lab. We preload the device and send it to the customer, and then we finalize the installation in the customer's building.

We have very technical staff, and we do not have difficulties with installations. We have had situations where customers do not have much experience with it, and then we recommend them to go for certain features such as IPS, antivirus, etc. 

The deployment duration depends on the size of the environment, but generally, it does not take more than one or two months. 

Generally, two to three people are required for the deployment.

For maintenance, our customers have technical staff. They regularly check and ensure that all the functions are working. We are glad to help them if they need any help.

We have seen an ROI. We have bought a lot of these devices, and we have had a good experience with them. It has saved us a lot of money.

It is quite affordable for our customers. There is a separate cost for IPS, antivirus, web filtering, and other features. They have a great choice of licenses. You can go for the license that you want, which is quite useful.

You have to buy a support license for FortiCare. In most cases, people buy the UTM bundle that comes with IPS, web filtering, and FortiCare. 

They are on the right path. They have improved a lot over the past 10 years. Fortinet is one of the leaders in security devices along with Cisco, Palo Alto, and Check Point.

I would rate Fortinet FortiGate a nine out of ten. It is stable. It has quite a lot of features, such as IPS, VPN, etc. It is affordable for our customers. It is a good choice.

We implemented Fortinet FortiGate SD-WAN for a small company that had two internet service providers. The goal was to configure the two links to operate independently, ensuring that they don't share the load. This way, when one link reaches a certain threshold, we can seamlessly switch to the other without any issues. 

We have FortiManager, which enables us to have a unified view for monitoring and managing our devices centrally, as well as dispatching policies.

The solution enables us to consolidate tools and applications and manage them all through FortiManager. You can configure your SD-WAN from Forti Manager, which gives you management functionality. 

The interoperability of the solutions is good because it allows for compatibility with brands other than Fortinet, and we don't encounter issues with it.

FortiGate SD-WAN facilitated a smooth transition for our customers between their two internet service providers, ensuring uninterrupted connectivity without any downtime.

The solution has helped us remediate threats more quickly by enabling real-time monitoring of both links, providing complete visibility into our end links. You can monitor both links on one platform. It's just one single pane of glass where you watch in real-time what is happening. It's easy to manage that way. It helps you to easily remediate issues. 

As long as our policies are granular we are able to use the solution to reduce our MTTD. 

The solution has helped to reduce our MTTR from what used to be five minutes down to 45 seconds.

The solution has helped to reduce the number of help desk tickets because it is now extremely rare for both links to be down simultaneously.

SD-WAN, regardless of the OEM being used, is a beneficial technology that is increasingly adopted by businesses due to its positive impact on business security. It allows us to maintain uninterrupted operations without concerns about past issues.

Fortinet FortiGate is user-friendly.

The support we receive when we need to upgrade is not satisfactory and has room for improvement.

I have been using Fortinet FortiGate for two years.

The solution is stable and we have not had any issues.

The solution is highly scalable.

The technical support is good, but they take a long time to respond and resolve the issues.

Neutral

I have also used Cisco, whose systems are robust and rarely experience downtime. However, with Fortinet, their licensing is highly competitive in terms of pricing. Cisco is primarily geared towards enterprise-level companies, but the learning curve for Cisco is higher compared to Fortinet.

Fortinet's price is very competitive compared to when you look at other brands of equal functionality. The hardware and licensing are compared to the others. It's also simple to use. 

The initial setup is straightforward. I did the deployment and didn't have any issues with it. It took one day to complete. 

The solution provides value and, therefore, offers a return on investment.

The price is highly competitive when compared to other brands that offer similar functionality. Fortinet FortiGate is more affordable both in terms of hardware and licensing, in comparison to its competitors.

I give Fortinet FortiGate a seven out of ten.

I recommend FortiGate SD-WAN because it is easy to implement and simple to use.

The solution is primarily used as a border firewall as well as for internal LAN segregation, internal IPv4 policy management, a VPN for end users, and IPSec tunnels.

Before we implemented this solution, we had only one firewall and old Linux IP tables with no graphical user interface. 

There is no one feature that stands out as most valuable compared to another. All features are correct and no extra items are needed.

The price of licensing could be better. The security of the FortiOS needs improvement, and features are available only in CLI. They could be available also in GUI.

Features like forward traffic capture or NAC in the VPN should take into consideration both Linux devices and Apple devices.

I've used the solution for more than ten years. 

The scalability is okay.

Technical support is not helpful. 

Neutral

We previously worked with Check Point, Palo Alto, Cisco, Watchguard, and PFsense. 

The setup is easy. Support is not helpful.

We handled the initial setup in-house.

The solution is very expensive. 

The price of licensing is too high.

We did not previously evaluate other options before choosing this solution. 

Other Fortinet products are not the best, and Fortinet should take care as this will influence brand reputation.

We use Fortinet FortiGate to prevent intruder connections to our internal network.

Fortinet FortiGate's unified view around network operations and security operations is good.

The solution is easy to integrate and configure with our ERP and other applications. I am satisfied with the integrated application protection provided by Fortinet FortiGate.

The Fortinet FortiGate 60E Series resolved the bottleneck problem and CPU usage that was previously experienced with the 60D Series. Now, our employees can check their emails without encountering any bottleneck issues, and the CPU usage remains stable at around 50 percent.

We are satisfied with the ability to remediate threats more quickly.

We are pleased with the amount of time saved in detecting our mean time.

The signature database and zero-day detection are Fortinet FortiGate's most valuable features.

The Fortinet FortiGate 60D Series poses a problem by causing a bottleneck when several users access their emails simultaneously, as the device consistently consumes 90 percent of the CPU resources.

The reporting could be improved. Currently, without the additional reporting module, we only have access to basic reporting. However, reporting is crucial for network security, and it should be included as a standard feature.

The price and technical support have room for improvement.

I have been using Fortinet FortiGate for three years.

The local vendor support needs improvement.

Neutral

Previously, I have utilized few other brands of NG Firewalls, which offer certain advantages. However, when comparing their price and performance to that of Fortinet FortiGate, Fortinet proves to be a strong competitor.

The time required for a basic deployment is roughly three weeks, whereas a full deployment involving customizations and optimization of rules and policies may take up to two and a half months.

We experienced a return on our investment, however, when it comes to security, it is challenging to determine a precise value.

The price is high compared to some of the other solutions.

I give Fortinet FortiGate an eight out of ten.

We saw time to value within the first month of using Fortinet FortiGate.

We deployed Fortinet FortiGate in one location and the maintenance was mostly handled by internally and sometimes a third party.