Fortinet FortiGate Reviews

We primarily use the solution for security purposes. We use it as a firewall for protection. 

It helps protect our users, and we are able to initiate our own policies. It also provided good visibility and reporting. 

The management is very easy.

It offers very good security features. 

The reporting and monitoring are very good.

We can integrate the solution very well with other Fortigate solutions. 

It's stable and reliable.

The solution can scale. 

Pricing is reasonable. 

We do not need any other features.

We'd like more management across other integrations. It would be ideal if it could centralize the management, and we could therefore manage all solutions under Fortinet instead of managing everything individually.

In some cases, depending on the module and the age, performance could be better.

I've been using the solution for three years. 

The solution is very scalable and reliable. There are no bugs or glitches. 

We have 800 end users, approximately.

The solution is scalable. 

Technical support has been fine. However, we haven't really dealt with them too much. We haven't had any critical issues. 

We also use other Fortinet products, including the NFGW.

We also work with Cisco devices and solutions. 

We have worked with Palo Alto in the past. It has a pretty good performance. 

In the end, we moved to Fortinet as the cost was very good. 

The solution is very simple. The process is easy to understand. It's not complex at all. 

I helped deploy the solution. We had to integrate it with internal and external firewalls. 

We had the full functionality in place within five days. We had five people managing the deployment process. 

I integrated the solution myself without outside help.

The cost of the solution is reasonable. 

I'm an end-user.

I'd rate the solution nine out of ten.

We primarily use the solution for security. I've deployed it for some customers for protection. It is used for firewalls. I have experience with the secure SD-WAN version.

Our customers are happy, and when they are happy, it means they are happy with us. It helps our organization. Many customers are migrating to this solution as it increases efficiency.

The security fabric is excellent. It's great on Fortinet, generally. 

It is easy to deploy.

Our impression of a unified view of NetOps and SecOps is positive. It has a single pane of glass. It's excellent and very effective. We've been quite impressed with the visibility on the devices. We've been happy with it.

The integrated application protection provided by the solution is good. It's worth the investment. However, it does depend on how you apply it. It can help save on costs, depending on the setup. If you have it in a bank environment, each individual bank would have its own devices, and you can optimize everything. You can have some of the connections go direct from one customer to another. You can save a lot of money with a specific setup.

It's helped out operational efficiency. It helps us waste less time. A typical scenario helps us save time. Having a good connection at the head office allows other offices to maintain a good connection as well. It also has normal security features and more to help keep us safe while staying connected. 

We can remediate threats more quickly. We have a single pane of glass that helps simplify the protection and visibility. We can monitor other components, even Macs or data centers. We can address items automatically, no matter where they are located. Visibility really helps. 

It is helped us to reduce the mean time to detect. It can reduce the time to locate and detect effectively. It is remarkably shorter when using Fortinet. It's also reduced the time it takes to resolve problems. 

The solution has helped us reduce Help Desk tickets. 

We have been able to future-proof businesses with branches. We don't have branches in our office. However, we have seen benefits ourselves in terms such as load balancing, et cetera. A fiber connection helps ensure backups are seamless. We can run a backup at less cost, and knowing that we have a backup help with peace of mind. Accessing a secure network ensures this. 

I haven't had a single issue since using Fortinet. 

I've been using the solution since 2018.

The solution is very stable. 

It is a scalable product.

Technical support is always top-notch. I always get good support.

Positive

The initial setup was pretty easy. It was not difficult. 

Everything I did was in one day. If I have to do some fine-tuning, that takes a little bit longer. Typically, one day is enough to deploy. 

The pricing is moderate. You get good value for money. Of course, any solution could be less expensive. For a company like ours, we'd always like to pay less. 

We are partners with Fortinet. We also use the solution ourselves.

Assessing the secure SD-WAN with its interoperability with other systems is hard to say. I've not deployed it with other OEMS as of yet. We haven't consolidated any tools or applications as of yet.

I'd rate the solution nine out of ten overall.

I'd recommend the solution to others.  

We use Fortinet FortiGate for VPN. We connect the branches together for the HQ. That's why we are using the VPN, and we publish some of the websites in the HQ, and the users can access that website from outside with the two-factor authenticator and a token key. We are using FortiGate to control the connection between the branches. But, for the software, we are using this to collect the data to extract reports.

I like FortiManager.

Improvements depend on your specific needs. Currently, it meets my requirements. Whenever I need something, Fortinet improves and updates the software for me.

I have been working with Fortinet FortiGate for about ten years.

Fortinet FortiGate is a stable solution.

On a scale from one to five, I would give its stability a five.

Fortinet FortiGate is scalable. If you are familiar with it, you can work from anywhere and do whatever you want. It is very easy to scale. We have about 500 users in our organization. It is not only engineering and not IT because we publish many websites from HQ to other branches. End-users use the Fortinet username and password to log in with two-factor authentication and the token.

Technical support is good.

On a scale from one to five, I would give technical support a five.

Positive

The initial setup was very easy. We had two third-party members and four of my team members implement this solution. It took us five to six days to install and deploy both the software and hardware. For the software alone, it took us about two days to implement. You need two people to manage and maintain this solution.

We had a third-party company help us with this implementation. They came and did the first setup, and after that, I followed the technical support from Fortinet.

Licensing costs are acceptable. I think it's cheaper than Cisco. We pay for the license on a yearly basis.

On a scale from one to ten, I would give Fortinet FortiGate a ten.

We use FortiGate for security. Some clients use the whole Fortinet solution, including FortiSwitch, FortiAP, and FortiExtender, but FortiGate is my bread and butter.

We have a hybrid deployment. A lot of it is onsite, and we have data center collocations. Some customers do collocations with us, but others request connectivity to Azure or another cloud services provider. Fortinet has plugins for Azure, AWS, or Google that make it easy to configure VPNs out of the data center or off-site. 

Typically, we stick with Azure because their support is better, but we do have a handful of customers that choose AWS. We have the solution deployed across Canada. One of our biggest customers is a retail company with many little stores under their umbrella. We cover everything from British Columbia to a couple of sites in Newfoundland. I estimate that we have around 1,200 users.

We need to allow a set of websites or block another set. FortiGate gives us the ability to do it based on URL domain. It's so much easier because you input the domain microsoft.com instead of adding the specific URL. Other firewalls can't do that the way FortiGate does. It helps us with compliance and security.

FortiGate's web and URL filtering are unlike any other firewall I've used. The functionality of URL filtering in those solutions is problematic because everything is encrypted, and firewalls can't break that encryption protocol. 

Fortinet has an SSL proxy, so the encryption is done before the packet ever leaves the FortiGate. The URL filter is definitely one of the most helpful features.

My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint.

I've been using Fortinet solutions for about four or five years now.

I think FortiGate is going to be around forever. If I don't see their stock price double in the next two years, I'm going to be surprised. I think it's a very underrated solution. 

Scaling up only requires adding a router. Once you have your network in place and a basic template, you buy another router and add it to the mix. It's incredibly easy to add and configure devices. 

I rate Fortinet support 10 out of 10. The support gets better as you get more certifications. I'm trying to get my certification to see how much better it can be. With an NSE 7 certification, you can contact Tier 3 support directly. I'm already getting my cases resolved in 24 to 48 hours using Tier 1 and 2 support.

We used Juniper firewalls in the past. The two solutions are similar in terms of features, but Fortinet blew it out of the water with regards to pricing and user-friendliness.

The main difference is CLI versus GUI. You have to know what you're doing on a Juniper because it's all command-line based, but Fortinet is 99 percent GUI-based. You log in to Fortinet and check off what you want to allow or block. 

Our biggest Fortinet solution was 500 plus retail sites. This customer chose the whole nine yards, including FortiGate, FortiSwitch, FortiAPs, and the FortiExtender, which is the LTE router. 

I made the templates for the configuration for our bottom tiers because they were the ones rolling them out. I made a standard template config and wrote notes specifying necessary changes for each site. 

The primary difficulty was trying to understand our customer's requirements and concerns because they were with an old provider. The provider had a lot of things on-site that weren't necessary. Deploying the Fortinet solution itself wasn't hard. 

Getting there was hard because we had to sit down with the customer and their tech team to determine what was needed because they had old Cisco routers. That took about three weeks and required a lot of on-site visits, but it wasn't hard to deploy the solution once we got an understanding of the requirements was not hard.

We trained the customers to manage and maintain the solution themselves. The only maintenance we do is emailing them monthly when we get notifications from Fortinet about router upgrades. You can configure it and then forget it. 

We are the integrator/consultant for the solution. We are the one in between the client and the internet service provider.

FortiGate firewalls pay for themselves. We bought our first FortiGate when they came out with the 50Fs and thought we would never see the return on investment. However, they paid for themselves because we rent them out, and customers loved them so much that we just retired our Juniper and Cisco solutions.

Fortinet's pricing is more straightforward than other solutions. If Fortinet doesn't stick out when you're searching for a solution, you are a glutton for punishment. You only need to know two things when purchasing a Fortinet solution: your total bandwidth and bandwidth at the site. You need to estimate the future bandwidth with other solutions if your customer plans to upgrade.

You have to consider whether you'll need to resell your licenses or wait until they expire and get new ones. You need to worry about out-of-pocket costs with other solutions, but you could pay for a higher-tier Fortinet license. You don't need to worry about it for 10 years and still be under budget.

Fortinet encourages people to buy their base product and then add what they need. That mentality goes a lot farther in the game because it affords people security. That's how they got into the market and became so competitive.

We evaluated Meraki, Dell's old SD-WAN, and Cisco's Viptela. Price and flexibility were the main factors. Viptela, Juniper, and others make it so hard to pick a solution. You have to be highly specific about what you want, including the amount of bandwidth and encryption level at every site. You have to pick a different router per site, depending on your functionality and requirements.

I rate FortiGate 10 out of 10. It's a tremendous little firewall. It takes care of all your security concerns.  When people say, "I need to make my organization more secure," the first thing that comes to mind is Fortinet. Everyone is talking about Cisco, Juniper, Palo Alto, and Check Point but overlooking Fortinet, which is a relatively new player in the game. 

Fortinet's next-generation firewall is more affordable and user-friendly. They also have an extensive knowledge base online. Good luck finding that community support on a Palo Alto, Cisco, or Juniper website without paying.

It is our primary router here in the office with all the firewall policies.

The solution has many valuable features. I like all of them.

Its stability is great. On a previous job, we set probably up to 100 FortiGates, and during the three years they were set up none of them failed.

It's a very scalable solution.

The pricing is great and very reasonable. 

The initial setup is simple. 

We use a yearly subscription for a unified protection model. I like the features that it gives me. It is actually a built-in proxy server and it allows me to use great protection and so on. In terms of application control, the built-in anti-virus is okay. One of the things that I like the most is it has a built-in SD-WAN solution - its price is included in the hardware. I don't need to buy anything else to use SD-WAN. This is the feature that I like, in Fortinet, probably the most. All other vendors sell SD-WAN as a separate solution and you must buy a separate controller which has to be installed somewhere, on-premise or on the cloud, and it costs money. Fortigate does not.

I can't think of an area of the product that needs improvement. Even the cost is okay. I have no real complaints. 

It would be good if they had fewer updates. Almost every update has bots that are either critical or something small yet valuable. Whenever I try to do an update, I always fear that something will break.

I've used the solution for a few years. I used it on a previous project and I use it now as well.

The stability has been excellent. It's very reliable and the performance is great. They have not failed in three years. There are no bugs or glitches. It doesn't crash or freeze. 

The scalability of the product is great. If a company needs to expand it, it can do so.

Up to 100 people use it right now, and likely we will increase usage so that it covers 150 to 200 users. 

If our other branch offices open in other cities or other countries, I will buy another firewall for them as well.

I've contacted technical support in the past.

For example, I tried to update my firewall to 7.0.4 and there was a block with the DHCP server. Some devices did not acquire an IP address. Really, it was something about FortiGate. I asked Fortinet for technical support and I created a ticket, and the next day they replied to me they agree that this was a bug that they would work on. As far as I can see now, there is already an option of 7.0.5. While I didn't test it myself, in the changelog I can see that this bug is fixed.

So far, we have been satisfied as they have answered us by the next day typically.

I did not previously use a different solution.

It's an easy setup. Everything is very straightforward and simple to understand. It's not complex, not difficult. A company won't have any issues with the process.

The deployment might take up to one week. I don't remember exactly. I continued to add some features, however, in the instant deployment, when it came here I had another router here, it wasn't too long of a process. Later, I asked my bosses to buy a firewall and when it arrived, on a Friday in the evening, I installed it and everything was fine. It was very fast.

I handle the deployment and maintenance myself. We do not need a big team to manage everything. It's pretty low-maintenance. 

I handled the implementation myself. I did not need a consultant or an integrator.

The pricing is very fair for a firewall. There's nothing to complain about in terms of licensing.

The price model is fair. I have to pay only for the features that only Fortinet gives me. Things like routing are free. Other vendors like Cisco, make me pay for things that should be free.

I would recommend the solution to others.

Fortinet has an education platform that is named trainingfortinet.com and many courses are on there. All the video lessons are free. Users can view them to learn about the features that Fortinet has. It's an excellent resource.

I would rate the solution at a nine out of ten.

It does a lot for you for intrusion protection and as an antivirus. The threat management bundle is worth the money. You don't need another company to monitor your web traffic for you. You can do everything yourself on the firewall. You restrict your own black list for people on the firewall. You don't need to pay some other company for another product to do that for you. The firewall can do that for you. So, it's an easy-to-use product for people to be independent. They don't need to rely on other vendors to do what the firewall can do. They can do everything.

The GUI is good. I'm really happy with the ease of use of the firewall. Fortinet's support is also great.  

I don't really have anything negative to say as far as Fortinet firewalls are concerned. If anything, they can support a user a little bit better. They can stop being so time-sensitive about how much time the support call has taken, and they can help you do it yourself.

I've had different models of Fortinet since 2009. They all are physical appliances. I had 300As, and now I'm on 300Ds. I've got a remote site with a different model, which probably is 60F. They are great little firewalls, and for bigger size places, they have 300 models.

I don't have virtual appliances. I don't have a virtual infrastructure. I have an older virtual environment with Hyper-V, and the servers are not up-to-date. It was a money thing. So, it was better to go with the appliance itself.

I'm happy with what they got. It is a great product. Sometimes, you're going to get a lemon—the way it initially happened with FortiAuthenticator 300F—but that doesn't happen very often.

If there is a problem, the next business day, they send it and get the replacement, and they help me configure it.

In terms of its users, everybody uses the firewall because they're going out. That's our egress point. So, there are about 20 users for that. We have a dozen IPsec tunnels with which we connect to different companies. So, security is a big part of it. I also have a remote location with about 10 users who use a different firewall.

We probably won't be increasing its usage. Now that I got Authenticator, it nicely compliments the Fortinet firewall. The size of the company isn't going to grow any more than what it is. So, we're good.

Their support is great, but it also depends on who you get for support. From the support perspective, they can help you do it yourself, which is always more beneficial to both parties. They can stop being so time-sensitive about the call duration and let a user help himself a little bit more.

It takes time to study this stuff, and I don't always have time to do it. So, I'm looking for a quick answer because I get interrupted all the time during work. I don't always have the time to study something and figure it out. So, I have to call them, but I don't always get somebody who really knows what they are doing. They don't know deep enough to help you. They're troubleshooting with you, and that's the difference between Level 1 and Level 2 support.

When I first got here in this job in 2007, they had Cisco ASA Firewall, but it was too cryptic. You had to enter all these CLI commands for a configuration. It also didn't do everything that Fortinet could do. It was very limited, and it wasn't easy to use. I know what I want to do, and I don't have to learn a special language in order to do it. I just want to be able to use some basic programming code that they have put into the firewall and use the GUI interface with it to actually visualize what I am looking at. Some of the Cisco products are not visual enough. That was one of the reasons I stayed away from it. Cisco is also very high-priced. They price themselves out of business a lot of times for equipment, but Fortinet is just great.

I've also used SonicWall before. It was okay, but it is better for bigger places. I was looking for a midrange-size firewall for a couple of hundred users, and I felt Fortinet was the right fit.

Its deployment and maintenance are easy. 

I pretty much used the support from Fortinet to do it. They're good about their support. I did it myself by being a nuisance to Fortinet. I kept calling them to ask questions. They had to remote on to it and see you do something you don't know how to do.

It was probably about $2,500 per firewall. It was all included. It included support, services, threat management software, and 24/7 FortiCare on it. Cisco products are more expensive.

Fortinet has got great firewalls. They do everything. They do FortiTokens for two-factor. They do the IPsec VPNs, SSL VPNs. They have a great GUI for you to know, but you still got to know the CLI commands. 

I would rate it a 10 out of 10. It does its job, and it is easy to use. The support is great.

We are currently using Fortinet FortiGate firewall instead of Cisco.

The best features of Fortinet FortiGate include good functionality, though the licensing cost is a bit higher. Their response time and throughput are very good advantages.

Some websites or proxies are not embedded in the correct category, and we need to update the Fortinet FortiGate database because numerous websites are appearing every day. Some websites are embedded in the wrong category which we can block, resulting in everything being blocked, so this database needs improvement.

The licensing cost should be more affordable than it is currently. The SD-WAN of Fortinet FortiGate needs improvement; when we create a group address, sometimes the rule doesn't work properly.

Regarding the Fortinet FortiGate database issues, some websites or categories that should be classified as proxy are in different categories. When we open that category due to some other website that needs to be accessed, some proxies are also opened. The FortiGate web filter categories need to improve their database for better control.

I joined the current company two and a half years ago, and we have been using Fortinet FortiGate for about three or four years.

I have only required technical support from Fortinet FortiGate once or twice in two and a half years, and I have had a good experience with them. Their technical team is very knowledgeable. Their response time is very good; whenever we open a case, they respond promptly.

One issue I encountered was with FortiToken, which we configured on the admin profile. While managing four firewalls, I discovered that FortiToken was not enabling due to an issue on one firewall. I opened a case, but it has not been resolved yet. Despite this, my overall experience with them has been very good.

Neutral

In my previous company, we were using Sophos, which had better licensing costs compared to Fortinet FortiGate.

We are not using enhanced SD-WAN Cisco SD-WAN; we are just using the SD-WAN for load balancing.

We are using Ubiquiti for wireless. One drawback about UniFi is that it lacks BeamFlexing, which is available in Ruckus, and the AP radius or Wi-Fi signals are not as strong as Ruckus. However, UniFi is still a good option, though not as robust as Ruckus.

Fortinet FortiGate is quite expensive, but according to the Gartner report, it ranks second or third. My experience with Fortinet FortiGate firewall has been quite good.

I would rate Fortinet FortiGate 9 out of 10 overall.

We use the solution for desk security.

The integration primarily occurs within the ONDAP server. We focus on integration with the log server, mainly the logs. There's integration with third-party software for log collection. Integration with FortiManager and FortiAnalyzer within the FortiGate family shouldn't pose any issues.

Many protocols are not proprietary, except for H.A. It's easy to integrate.

Fortinet also supports different types of VPNs, with SSL VPN being one of the most commonly utilized options.

The solution's pricing could be improved.

I have been using Fortinet FortiGate SWG for 5 years.

You'll likely get the correct answer if you reach out to the right person or ask the right question. Sometimes, the engineer doesn't articulate their question correctly, and the answer received may not be relevant.

Positive

The initial setup is easy. It depends on the project. Complex projects are typically based on the implementation, which takes less than a week. The high-level and the low-level are correctly designed, and the stakeholders agree upon the features. FortiGate is a security and VPN device, so the implementation is pretty straightforward. The SD-WAN is pretty easy, and the routing features are solid because the firewall that we are using also acts as a router facing the Internet. You also use an IP site for that. If it's appropriately configured, the customer is pretty happy there.

The renewable is lower because the market doesn’t accept it publicly.

It's easy to use. The interface and other reports are all user-friendly. The software is a bit expensive to renew.

The FortiGate product range is diverse and suitable for different types of enterprises. It is more geared towards meeting the needs of larger enterprises. In the financial services industry in Malaysia, it's often paired with Palo Alto. Most of the projects follow a similar pattern. It's all in one box. You can use it for switching, routing, firewall, VPN - everything you need can be integrated into the FortiGate. Essentially, it's only one device for smaller setups. FortiGate has a very good range, from small businesses to even larger ones.

Overall, I rate the solution an eight out of ten.