Fortinet FortiGate Reviews

The solution is used to monitor daily network activities. FortiGate Next Generation Firewall acts as a security layer between public and private networks in our organization.

The solution successfully mitigates all types of advanced attacks by putting our company's production servers behind the firewall using a DDoS attack prevention system and WAF. FortiGate Next Generation Firewall handles our organization's internal network security. The solution is used mainly in IT companies, just like our organization. 

The WAF and DDoS attack prevention system are the solution's most valuable features. FortiGate Next Generation Firewall has IBS/IPS systems, which are vital for handling cyberattacks. 

More SD-WAN features can be integrated into the FortiGate Next Generation Firewall. The vendor can make efforts to make the solution more budget-friendly. 

I have been using FortiGate Next Generation Firewall for seven years. 

I would rate the stability a ten out of ten. 

I would rate the scalability an eight out of ten. For each purpose, there are different products used in our company from the same vendor. For instance, our company has a dedicated subscription plan for log analytics. Fortinet should host bundle pack subscriptions for its products and add-ons. 

There are more than 150 users of the product in our company. Our company is functional on a hybrid model for employees, and thus, there are not more than a hundred users of the solution in the office at any given time.

Due to the aforementioned work setup, our company is exploring more scalable solutions with end-to-end security features, as many employees are working from remote locations. At our company, for end point protection we use Microsoft Defender. 

At our company, we have Fortinet certified experts in-house, so most of the issues are solved without tech support from vendor. But whenever, an issue was escalated to the support team of FortiGate Next Generation Firewall, our company has received a response on time. 

FortiGate Next-Generation Firewall integrates perfectly with our organization's infrastructure. Our organization is using the solution for more than six years without any integration obstacles, even while integrating to Fortinet Access Points. 

The initial setup process is easy for the solution. There are some configurations and policies that will facilitate routing among the varying traffic, dictating what to allow or block. I would rate the initial setup a nine out of ten. The setup duration depends upon the expertise of the deployment engineer, but on average it can be finished within a day. 

Our investment in security through FortiGate Next Generation Firewall is worth it as there are zero complains regarding the effectiveness of it.

It's an expensive solution. At our company, we updated the license every three years. I would rate the pricing a nine out of ten. Presently we are upgrading the hardware in our organization before the next license renewal date. 

In our company, we have used Sophos about six years ago. Compared to other solutions like Sophos, we found FortiGate Next Generation Firewall to be much more expensive for our organization.

But FortiGate Next Generation Firewall has a more robust hardware and stable configuration, so our company prefers the solution over others. But as the license of the the solution is expiring soon in our company, we might explore some other firewall products from Fortinet as well. 

Our company found that in comparison to Microsoft Defender for Endpoint, FortiGate Next Generation Firewall has a limited number of features and requires an ideal Fortinet environment or infrastructure to function. FortiGate Next Generation Firewall should enhance its endpoint capabilities and be less dependent on Fortinet infrastructure. The product should have cloud solution integration capabilities. 

Since implementing FortiGate Next Generation Firewall, we have not experienced any attack or cyber threat on our company's network. With the solution, we have been able to proactively monitor the network and take preventive measures on time. Our company finds the product reliable in mitigating all kinds of threats. 

Our company expects some AI capabilities from Fortinet solutions. I would advise FortiGate Next Generation Firewall to others as a reliable solution. I would also advise other professionals to run tests with the product as per their requirements before adopting it. The solution has excellent security policies. I would overall rate the product a nine out of ten. 

We use FortiGate NGFW to secure our network gateways. These devices, functioning as UTM solutions, were impressive in fending off various threats. FortiGate excelled with its anti-spam, antivirus, and firewall features at the network level. Beyond security, it is seamlessly integrated with networking tools like Zendesk.

The most valuable aspects of FortiGate NGFW are its top-notch reputation in peer reviews, user-friendly interface, and excellent support. It stood out during external penetration tests, proving its effectiveness compared to our previous firewall. The seamless integration with other tools and thorough testing set FortiGate apart. Replacing our old firewall with Fortinet was a game-changer, especially as it helped us improve our performance in subsequent penetration tests.

FortiGate has been solid for us, but I see room to explore its integration with Secure Service Automation for a more comprehensive security view. The initial migration had some challenges, but they were manageable. Now, my focus is on automating responses to alerts, especially during nighttime attacks. I want to investigate how FortiGate can connect with other solutions, like SIEM, to enhance our security measures while offline.

I have been using FortiGate NGFW for a year.

It is quite stable.

FortiGate is scalable, and we currently use it for approximately 300 internal users, with additional offshore teams connecting via VPN. The total user count, including the offshore teams from different countries and continents, is around 400 to 500 people.

We contacted Fortinet's technical support during a firmware upgrade issue. They guided the upgrade process, and their support was capable and helpful. I would rate them as a ten out of ten.

Positive

In comparing FortiGate with other solutions like Cyberoam, I have found Fortinet to excel in various aspects. For instance, its intrusion detection capabilities stand out, providing instant alerts compared to some firewalls that take up to 24 hours. While I can't quantify percentages, Fortinet's performance, especially in areas like responsiveness, has been notably better in my experience.

Setting up FortiGate NGFW was straightforward, with some considerations during the migration process. Migrating from an old firewall required meticulous rule review and manual configuration. Ensuring adherence to best practices and testing in a beta environment were crucial steps. We also coordinated with our ISP to clear the ARP cache for a smooth transition. Despite a minor misconfiguration leading to an issue, we swiftly addressed it over a weekend with minimal impact. Regular backups and failover tests added an extra layer of assurance. A team of three people deployed it. The deployment and migration from the old firewall to FortiGate took approximately one month. To ensure a smooth transition for our 24/7 operations, we invested extra time for thorough testing and rule validation.

The pricing and licensing costs for FortiGate are quite reasonable, especially for an SMB like ours. While solutions like Check Point and Palo Alto are excellent, Fortinet's affordability played a significant role in our decision-making process.

FortiGate for SMBs impressively covers most features, and in my experience with Cisco, Symantec, SonicWall, and others, FortiGate stands out. It has exceeded my expectations. While I haven't explored Check Point due to budget constraints, FortiGate's pricing makes it a top choice. Palo Alto and Check Point are excellent but would likely have been my preference if pricing aligned. Overall, FortiGate has been a standout performer in terms of features and value.

For those starting with FortiGate NGFW, my advice is to thoroughly explore its features. I recently recommended it to a healthcare entity due to its effectiveness and user-friendly interface. The fact that they already had Fortinet in another enterprise speaks volumes about its reliability and performance. Overall, I would rate it as an eight out of ten.

Fortinet’s SaaS offering is the best fit for anybody looking for a cloud-delivered secure web gateway to replace their on-premises solution. It combines with given capabilities, making it a good proposition for customers.

Customers are looking for a Secure Web Gateway solution focusing on securing web browsing. There are additional features like a virtual or cloud firewall. The majority of customers are seeking WAF filtering solutions.

Integrating with the SD-WAN functionality on Fortinet devices makes a compelling story for customers to choose a Fortinet-based solution, which the Fortinet Security Fabric further reinforces.

Fortinet FortiGate SWG should be localised to specific regions to comply with local data privacy regulations because of the data privacy rules in the countries. In the Middle East, data organisation and KFA requirements are stringent.

I have been using Fortinet FortiGate SWG as a global reseller.

I rate the solution’s stability a nine out of ten.

Customers keep on improving their licenses. The solution remains scalable and flexible. On-premises deployments may have some limitations. However, cloud deployments offer a high degree of flexibility.

Our customers fall into enterprise and medium business.

The technical support is very supportive.

Positive

The initial setup is not complex, especially for someone familiar with configuring firewalls.

The deployment is very easy. The hard thing is to configure the policy to decide traffic to allow or block. On top of data privacy, you need to stop data from filtering. It’s not difficult from a deployment perspective but it requires some consideration.

Fortinet provides users with configuration options to implement the security policies they require. The effectiveness of these configurations depends on the expertise of the individual configuring the device.

I rate the initial setup a nine-point five out of ten, where one is difficult and ten is easy.

Customers who opted for the Fortinet FortiGate SWG's cloud-based version have seen a return on investment. However, using it for more than a year is typically recommended to realise the solution's benefits fully.

The solution has a combination of different flavours, which make it an attractive option for customers. The solution includes an SD-WAN, DLP, and a secure web gateway, all integrated into a single platform. It provides economies of scale.
FortiGate SWG is a cost-effective solution well-suited for organisations of all sizes.

I would recommend it to all my customers looking for SD-WAN and a secure web gateway for their SD-WAN deployment.

Overall, I rate the solution a nine out of ten.

We use it to secure our environment, ensuring no vulnerabilities or potential risks in our network configuration. Our goal is to enhance cybersecurity measures, safeguard our network, and ensure the integrity of our systems against potential threats and intrusions.

I am content with its user interface and functionalities.

There is a potential for enhanced protection. It is essential to leverage its capabilities more professionally to achieve an even higher level of security. I believe that if the cost were lower, it would be highly beneficial. While the gateway serves as a primary solution for the entire network, attention should also be given to endpoint devices.

I have been using it for approximately five years.

It is incredibly reliable. I would rate it eight out of ten.

It provides excellent scalability abilities and I would rate it eight out of ten. There are around fifty individuals actively using it.

They provide exceptional support. I would rate it eight out of ten.

Positive

When comparing Fortinet to Cisco, Fortinet stands out as a more user-friendly and practical solution. It seems especially well-suited for smaller network environments, making it the preferred choice for our small work network. The switch was prompted by the wealth of features Fortinet offers, coupled with its ease of management and deployment. The diverse interfaces and comprehensive reporting, including statistics and other relevant information, further contribute to its appeal.

The initial setup was straightforward.

The deployment duration is variable and relies on the development level and installation complexity. Initially, it may take only a few hours. However, to enhance security and stability, the process might extend to a few days or even a week. For a simple network, a single individual should be sufficient to manage it effectively.

While slightly more affordable than competitors, it remains relatively expensive due to its inclusive subscription. It operates on a subscription basis. You pay solely for this subscription, without any additional custom costs for support or other services. The subscription encompasses support, updates, and all associated features.

Overall, I would rate it nine out of ten.

Fortinet FortiGate SWG is a robust and secure product compared to Sophos. It has a valuable SD-WAN feature and provides good performance. Along with that, it has efficient bandwidth and policy management features as well.

They could provide bandwidth concentrators and traffic filtering features. They should make the product user-friendly and enhance the security features.

We have been using Fortinet FortiGate SWG for ten years. At present, we use the latest version.

I rate the product's stability an eight out of ten.

I rate the product's scalability an eight out of ten. It is suitable for small to large enterprises.

I rate the product's initial setup process a seven out of ten. It takes a few hours or a few days to complete.

I rate the product's pricing a seven out of ten. Its one-year license cost is competitive with three and five-year licenses offered by other products.

I recommend the product to others and rate it a nine out of ten.

I’ve worked with network and security information since 1999. My use cases for FortiGate are in the telecom environment. In my experience, we have used Fortinet to connect sites. I’m working with an SMB in São Paulo, and we work with small equipment. I have a project to define a model from the end products, and to do that I’m working with a local network to deploy our services. After defining this product, I wire the product through my team so they can make configurations. Sometimes, I work directly with configuration, with third level support.

FortiGate’s connectivity and the SD-WAN is perfect. Likewise, the WiFi ports from Fortinet are very strong.

FortiGate's connectivity for small businesses is not as strong as it can be. If Fortinet includes more information and marketing to small businesses, their presence will be improved.

I have 15 years of experience with Fortinet.

The solution is very stable and doesn’t have any problems.

They are very good and they are quick at solving problems. I have had no problems with them.

Positive

I work with a distributor in Brazil, and their people have a lot of experience with the technology and they are good to work with.

The cost depends on the equipment required. The cost is okay.

Compared with Sophos, for example, Fortinet is similar but simpler to access and the licenses are easier and start using the solution. Sophos’ technology is very similar, but Fortinet has a stronger name and better technology for our technicians.

In Brazil, there is no doubt that Fortinet is the leader when it comes to security solutions. Fortinet works better in a scenario with more of one presented from the same customer. There are many options from other brands for the same customer. When users need one solution to stay securely connected to many sites, Fortinet works well. 40% of all purchases are Fortinet, while another 30% are Sophos and another 30% are Cisco.

I rate FortiGate NGFW a nine out of ten.

In my company, we use the product for the help it provides us in terms of SD-WAN, site-to-site VPN, RADIUS authentication, web filtering, application control, SSL inspection, and remote access.

The most valuable features of the solution are SD-WAN and site-to-site VPN.

In version 7.2.0, the product offers built-in automation to its users. Earlier, there was no automation offered for the product. Nowadays, the product sends automatic emails to users as a part of its offering to let the users know whenever there is a need for automatic backup when the ISP goes down and the interface status. The automation can be further improved.

Fortinet's support team consists of a huge networking team, because of which there is a delay in response at times. Fortinet's support team needs to improve their time management skills.

I have been using Fortinet FortiGate SWG for five years and six months. My company has a partnership with Fortinet.

It is a scalable solution since the product offers a FortiGuard server that detects vulnerabilities and ensures such detection of vulnerabilities also involves FortiGate.

My company currently works with basic and mid-level sized businesses.

Whenever our company's customers face any issue with the product, we offer our own support team. Fortinet also has its own support team. If required, our company lodges complaints and the issues faced by our customers with Fortinet. Fortinet's support team initiates the replacement if there is a hardware issue with the product. The solution's technical support is good. I rate the technical support an eight out of ten.

Positive

The product is easy to install since we only need to follow the user manual, documents, and articles provided by Fortinet to install the product.

The solution is deployed on-premises.

Just getting the product up and running can take up to forty-five minutes to an hour. The full setup process is carried out based on the requirements of our company's customers, and it can be done in half an hour to forty-five minutes if it is only for basic internet.

In our company, we need around ten engineers for the maintenance and deployment of the solution. The maintenance of the solution is easy since we keep getting constant updates which we can easily use to update the product.

I am unaware of pricing since I am a part of the networking team. My company's sales team manages pricing.

My company basically provides Fortinet FortiGate SWG to our customers. If our company's customers are looking at Palo Alto products, we have another team in our company to provide them with the same. I am an engineer for Fortinet products and can provide support only for Fortinet. There are different sets of engineers managing Palo Alto products.

In Fortinet, you only need one license for all the products. In Palo Alto, for Palo Alto Secure Remote Access, you need to buy a separate license, while there is a need to buy a separate license for Palo Alto SD-WAN. I feel Fortinet products are better since they come in a bundle. With Fortinet, customers don't need to buy different licenses. One can get all the features by installing a single bundled license offered by Fortinet, allowing one to use SD-WAN, site-to-site VPN, remote access web filtering, SSL inspection, and application control.

I rate the overall solution a nine out of ten.

The use cases of the solution depend on what the customer wants from the tool. If a customer is looking for a core firewall, I provide them with FortiGate Next Generation Firewall (NGFW). Suppose a customer is looking for a tool from a patch connectivity perspective with multiple branches and wants those branches to be connected to the data center. In that case, we can suggest FortiGate Next Generation Firewall's features to them.

Routing and reporting are two areas where the product has an added advantage compared to any other product.

Vulnerabilities owing to viruses in the OS need to be reduced in FortiGate Next Generation Firewall from an improvement perspective.

Some vulnerabilities get added to the system every two months, which may be code execution or backend and backdoor issues.

In the future, the product should be able to tackle vulnerabilities. Research and development to increase the product's security capabilities is needed.

I have been using FortiGate Next Generation Firewall for a year now. My company has a partnership with Fortinet.

From a stability perspective considering OS and if the vulnerabilities are present, I rate the stability a seven out of ten since it creates a lot of issues in general.

We suggest FortiGate Next Generation Firewall to small and medium businesses.

When it comes to enterprise-level businesses, and considering the need for two-layer security, consider a perimeter firewall, while I can suggest FortiGate only at a level of a core firewall. Suppose an enterprise customer has multiple branches and more branch networks. In that case, they need SD-WAN connectivity with security, for which I suggest they go for FortiGate's SD-WAN feature.

In general, it will not be enough for enterprise companies to have only Next Generation Firewall alone.

I am not familiar with the technical support team because my support team works with them. The solution's technical support is good. We do not face many issues when dealing with the solution's technical support team.

Previously, we were using Check Point in our company.

Compared to Check Point, FortiGate Next Generation Firewall needs to look at how to improve the way it deals with the vulnerabilities which are not there at Check Point and the security effectiveness provided by Check Point.

It is easy to use and implement since anyone can do its configuration part, but there is some requirement for someone with proper technical skills to implement it properly. I can implement anything in any way, but that doesn't mean I can implement any product properly. The implementation requires certain technical expertise.

The implementation of the solution can take two days.

One person is required for the implementation phase.

The solution's pricing is competitive.

The usefulness of the product is an aspect that depends on the customers using the tool. We cannot even compare two products and say one is good for the customer and the other is bad. If a customer asks me to be an architect for their data center, I would say that for a perimeter firewall, they need to go for Check Point. Coming to a core firewall, if a customer says that they need two layers of security and two different vendors, it should be Check Point on the perimeter level. At the core level, a customer can go for Fortinet. Certain customers prefer the SD-WAN feature from Fortinet if they have branch firewalls and want an SD-WAN feature too. FortiGate has an added advantage because they have an SD-WAN feature with security that we can provide to their branch devices.

I don't have any suggestions for those planning to use the solution since we are pretty new to the solution, and we need to devote time to be able to comment on the solution.

I rate the overall product an eight out of ten.

We implemented Fortinet FortiGate SD-WAN for a small company that had two internet service providers. The goal was to configure the two links to operate independently, ensuring that they don't share the load. This way, when one link reaches a certain threshold, we can seamlessly switch to the other without any issues. 

We have FortiManager, which enables us to have a unified view for monitoring and managing our devices centrally, as well as dispatching policies.

The solution enables us to consolidate tools and applications and manage them all through FortiManager. You can configure your SD-WAN from Forti Manager, which gives you management functionality. 

The interoperability of the solutions is good because it allows for compatibility with brands other than Fortinet, and we don't encounter issues with it.

FortiGate SD-WAN facilitated a smooth transition for our customers between their two internet service providers, ensuring uninterrupted connectivity without any downtime.

The solution has helped us remediate threats more quickly by enabling real-time monitoring of both links, providing complete visibility into our end links. You can monitor both links on one platform. It's just one single pane of glass where you watch in real-time what is happening. It's easy to manage that way. It helps you to easily remediate issues. 

As long as our policies are granular we are able to use the solution to reduce our MTTD. 

The solution has helped to reduce our MTTR from what used to be five minutes down to 45 seconds.

The solution has helped to reduce the number of help desk tickets because it is now extremely rare for both links to be down simultaneously.

SD-WAN, regardless of the OEM being used, is a beneficial technology that is increasingly adopted by businesses due to its positive impact on business security. It allows us to maintain uninterrupted operations without concerns about past issues.

Fortinet FortiGate is user-friendly.

The support we receive when we need to upgrade is not satisfactory and has room for improvement.

I have been using Fortinet FortiGate for two years.

The solution is stable and we have not had any issues.

The solution is highly scalable.

The technical support is good, but they take a long time to respond and resolve the issues.

Neutral

I have also used Cisco, whose systems are robust and rarely experience downtime. However, with Fortinet, their licensing is highly competitive in terms of pricing. Cisco is primarily geared towards enterprise-level companies, but the learning curve for Cisco is higher compared to Fortinet.

Fortinet's price is very competitive compared to when you look at other brands of equal functionality. The hardware and licensing are compared to the others. It's also simple to use. 

The initial setup is straightforward. I did the deployment and didn't have any issues with it. It took one day to complete. 

The solution provides value and, therefore, offers a return on investment.

The price is highly competitive when compared to other brands that offer similar functionality. Fortinet FortiGate is more affordable both in terms of hardware and licensing, in comparison to its competitors.

I give Fortinet FortiGate a seven out of ten.

I recommend FortiGate SD-WAN because it is easy to implement and simple to use.

The solution is primarily used as a border firewall as well as for internal LAN segregation, internal IPv4 policy management, a VPN for end users, and IPSec tunnels.

Before we implemented this solution, we had only one firewall and old Linux IP tables with no graphical user interface. 

There is no one feature that stands out as most valuable compared to another. All features are correct and no extra items are needed.

The price of licensing could be better. The security of the FortiOS needs improvement, and features are available only in CLI. They could be available also in GUI.

Features like forward traffic capture or NAC in the VPN should take into consideration both Linux devices and Apple devices.

I've used the solution for more than ten years. 

The scalability is okay.

Technical support is not helpful. 

Neutral

We previously worked with Check Point, Palo Alto, Cisco, Watchguard, and PFsense. 

The setup is easy. Support is not helpful.

We handled the initial setup in-house.

The solution is very expensive. 

The price of licensing is too high.

We did not previously evaluate other options before choosing this solution. 

Other Fortinet products are not the best, and Fortinet should take care as this will influence brand reputation.