Fortinet FortiGate Reviews

We primarily use the solution for security.

The security on offer is very good.

It's very simple to use.

They have a very good technical center.

It's, overall, a very good product.

The solution is stable.

The initial setup is straightforward.

The scalability could be better.

I've used the solution for three years. 

It's a stable solution. The reliability is good. There are no bugs or glitches. It doesn't crash or freeze.

The product can be scalable. However, it could be better. You are limited by the hardware.

We have more than 100 clients using this solution.

I've dealt with support in the past. I've also dealt with Palo Alto support. I find them to be very good. 

We also used Check Point and Palo Alto. Fortinet, however, scores very high against security threats, when you compare the three.

The initial setup is great. It's not complex or difficult. It's pretty simple, pretty straightforward. 

We installed it within a day with no issues. It doesn't take much time. 

We have five to six technicians that can handle deployment and maintenance responsibilities. We are all engineers that are managed centrally.

You do need to purchase a license in order to use the product.

I'd recommend the solution to other companies that want to try it out.

I'd rate it at an eight out of ten. We don't have any real challenges with it at the moment. 

I like its interface. It is a simple solution. As compared to Sophos, its interface is easier. It is easy to create a policy, and you can easily understand it. 

The integration with Active Directory is one of the good features. Most of the customers are now looking for the Single Sign-on feature. So, being able to integrate Active Directory with the firewall is useful. It is also easy.

Its reporting and pricing need improvement.

I have been using this solution for five years.

Its stability is good. It has 90% stability.

Its scalability is good.

It is more expensive than Sophos. Fortinet is overall more expensive than Sophos. The small range of Fortinet, such as 60F and 80F, is more expensive than the small range of Sophos. Sophos is cheaper. In addition, if you jump from 80F Series to 100F Series, the price doubles.

I would rate it a nine out of 10.

Most organizations use the Fortinet firewall as perimeter security at the gateway level.

FortiGate has threat protection, antivirus, and even SSL encryption and decryption. So FortiGate is primarily used for security purposes. And a few customers also use this firewall for web filtering and application control. So these are the two features for which people use FortiGate.

FortiGate is primarily a gateway,  but customers also use web filter threat protection and application control. And some people use it as a special VPN for remote access. I recently deployed one virtual firewall where they're only using the FortiGate firewall for VPN. I can't say one feature is the most valuable because it's a bundle solution. So no one uses FortiGate for just one single feature. 

Currently, FortiGate is providing SSL VPN. But they're missing some features that are available in Palo Alto's SSL VPN. Palo Alto provides a compliance check along with the VPN, and they have a very broad checklist. So Palo Alto's global protection can scan and check multiple things, and we can choose what access users can have based on compliance with policies. So I think this is one area where FortiGate can improve. Also, multi-factor authentication isn't native to FortiGate. If you want to incorporate multi-factor authentication, you have to add a secondary or third-party solution. 

I've been using FortiGate for around five years.

Before version 6.0, FortiGate's firewall performed well enough, but lately, they've introduced so many features. After that, its stability has been somewhat lacking. This is because they're constantly updating their firmware. So it was pretty stable, but nowadays, it's not that stable.

I haven't worked on the scalability side because most of the time, the pre-sales tools are relatively bigger devices. So right now, I haven't faced any issues with scalability. They have some larger devices for the data center. So if we talk about their hardware, I think they're capable of handling around 10,000 to 15,000 people on a single device. But if you go with the virtual environment, I don't think there is a problem. Fortinet has a single OS that we can deploy on whatever hardware capacity we want to configure over there or through virtualization.

Fortinet support is good. They resolve tickets relatively fast. So we've had no issues with that. And I don't know about other regions, but in my region, the salespeople working with Fortinet are strong. They're aggressively working on the sales part. So in the Pune region and the rest of Maharashtra, they're winning more contracts, and people are using FortiGate Firewall.

The management console is pretty simple, so anyone who understands networking can initially deploy the solution. But you need some good hands-on experience for advanced configuration. The amount of time required to deploy depends upon the project and also the organization. So it takes around four to five days to deploy a smaller device. And for the largest device, it takes around a maximum of two months. We do the deployment on our own. So we have a sales team, a pre-sales team, and a deployment team. Our sales team gets this and handles the sales end. After that, we come into the picture. So we do the whole migration, as well as the new implementation and everything. It should take no more than two people to deploy. If we want to migrate from one Fortinet device to another, then we use the command line. They have some script in their firmware, and we can migrate the script directly from the older firewall to the new one. So it isn't too complex.

I'm somewhat aware of the pricing, but most of the time, the pre-sales staff only defines their requirements. And we get the licenses at the time of implementation, then register and activate them. But I think Fortinet has multiple packages. They sell licenses for a period of one, three, or five years. They also have special add-on licenses for various things. So, for example, if you want to get a security rating for the firmware configuration and everything, you need to purchase an additional security license. And if you want to do some IoT-related security, you also need to purchase separate licenses. 

I rate FortiGate eight out of 10 based on the performance, stability, performance, management, rights, and features. So most people lack SSL encryption and the certificate part. Those servers are running behind the FortiGate firewall. And most of the people I've seen are not using SSL encryption over there. And even for internet purposes, they're not using deep scanning.  So my suggestion to people thinking about using FortiGate is to prepare a plan before implementation and implement those things in inbound inspection and outbound inspection. This is recommended. And also, if you have multiple band links, then you must use SD-WAN. They have SD-WAN options in the FortiGate firewall. It's a pretty good feature. So you can use that to improve your stability and performance.

We deployed Fortinet FortiGate SD-WAN into one of our customers, and they are satisfied. We utilized Fortinet FortiGate's data center solution; we took in three units: FortiGate ADC 1101 and 2600, and we deployed them into a customer, with no issues so far. The impact of these services on data center protection at scale is still on the launch side; the production will be up maybe this month, but so far, there are no issues.

The best features I have already seen in Fortinet FortiGate are the automatic updates, the easiness of deployment, and the capacity. These three features are the best.

A shorter response time when we have questions could improve Fortinet's first-level support quality. The knowledge base is comprehensive, so that is okay. For additional features that could make Fortinet FortiGate even better in the future, they have the SD-WAN, but I do not know if they have quantum VPN. 

I saw one brand that has a quantum random number generator, so maybe that could enhance security, along with a smaller version of their product to fit into the budgets of smaller departments.

I have been dealing with Fortinet FortiGate since April.

I think Fortinet FortiGate is overall stable.

There are a lot of people using it, maybe more than a thousand.

The technical support by Fortinet is okay; they are very responsive, and they know what they are doing. If you ask them questions, they can easily answer.

I have no experience working with any other firewalls before using Fortinet FortiGate.

I was not a part of the technical team that deployed Fortinet FortiGate for integrating SD-WAN capabilities. I am actually with the research team, and I relate the feedback I get from their experience with Fortinet FortiGate.

The pricing of Fortinet FortiGate is a little pricey from my perspective. It is expensive comparatively to its competitors. The brand has its own price concerning the licensing model of Fortinet FortiGate.

We are dealing with other vendors besides Fortinet; we are constantly searching for brands and comparing their features side by side. Besides Fortinet, we are currently dealing with Palo Alto, Sophos, and my friends also did Check Point and another Korean brand. For Sophos, we are mostly dealing with firewalls. The Sophos products we are dealing with are firewalls. For Palo Alto, we are in the same category with firewalls.

I would recommend Fortinet FortiGate to others, specifically for larger companies but not for smaller companies because of the price-sensitive Philippine market, where you would not find a lot of companies buying premium products. I do not know if I can see room for improvement in Fortinet FortiGate because I am not so techie myself. I would rate Fortinet FortiGate as a product an eight out of 10.

Our standard practice involves tailoring deployments to meet specific customer needs. Typically implemented at the network edge, FortiGate SWG addresses diverse security requirements. Use cases include securing online services, protecting internal servers in a DMZ for LAN user access, and employing a segmented approach where different firewalls safeguard distinct zones, collaborating to manage and pass traffic for unique security needs. One of the firewalls also serves as the primary filter for internet traffic.

Web filters, particularly web application controls, grant us the ability to regulate user access effectively. Among the various features, I find web application control and IPS to be the most valuable.

There's room for improvement in the interface, especially following their upgrade to version nineteen. The issue arises from the increased complexity, where tasks like defining the NAS require navigating a separate window, and regular policy configurations are done in a different window.

I have been using it for seven years.

I would rate its stability capabilities nine out of ten.

Regarding scalability, I would rate Fortinet highly, giving them eight out of ten due to the effectiveness of their new hardware, which greatly enhances scalability. We've carried out installations for a variety of setups, spanning from small to medium-sized deployments.

I would rate its technical support services seven out of ten.

Neutral

WatchGuard deserves credit for offering multiple options, including a client base and a comprehensive reporting feature, all within a unified license and toolset.

I would rate the initial setup six out of ten in terms of complexity.

The deployment can take up to a week but typically can be done in a couple of days.

We essentially customize implementations based on the customer's chosen appliance. The cost varies depending on the specific appliance they purchase. We provide coverage for whatever they acquire, and throughout the year, we pay different amounts to various vendors. The cost has increased since the update so I would rate it eight out of ten.

In terms of reliability and security, FortiGate stands out. WatchGuard excels in additional features, offering the best reporting and various configuration options. While Sophos is also strong in security, I would rate it slightly lower than FortiGate. Overall, I would rate it nine out of ten.

We use Fortinet FortiGate SWG to secure both Internet-facing and internal applications.

The web solutions are the most important features.

The solution could add API protection.

I have been using Fortinet FortiGate SWG for a year.

The product is stable.

The solution is scalable.

Support is good.

Positive

The deployment depends on the requirements. It takes a minimum of one day to complete.

The initial setup is managed by a partner.

Three to four people are enough for setup, depending on the tools. You need a network engineer, a partner, and a firewall engineer to install.

The product is expensive. It comes with a yearly subscription, which includes support and everything.

Maintenance is easy. One person is enough to do the regular maintenance, but two are suitable for feasibility.

The product is good. It does the job of what is said. It is very stable and reliable. One should consider based on the POC and their requirement, but for our requirement, FortiGate was the one to go for.

We use it for Internet-facing applications and web-based applications. We use it more as a web solution. There might be other use cases or other requirements for other companies.

Overall, I rate the solution a seven out of ten.

The product provides a good user experience.

Fortinet FortiGate SWG's costs need improvement. Also, there could be an efficient feature for solution consulting to answer queries related to architecture design.

The product is highly stable.

The product is suitable for enterprise customers. The solution architecture takes a bit of time to scale as it is a new product in the market. The customers need more experience working with it. I rate its scalability a five out of ten.

FortiGate provides the technical support services. However, customers have an SLA agreement with us, and we have an SLA agreement with FortiGate. Thus, it takes longer to establish efficient communication between them.

Neutral

The platform requires a few months to design the architecture.

The product is expensive compared to Cisco.

I recommend Fortinet FortiGate SWG and rate it an eight out of ten.

The product has the most valuable configuration, offloading, and security features.

Fortinet FortiGate SWG's SSL offloading features need improvement.

We have been using Fortinet FortiGate SWG for five years.

I recommend Fortinet FortiGate SWG to larger companies as the lease line is expensive. It is suitable for companies who are running web applications. It is not a necessity for small businesses.

The product's tier-one support process is time-consuming. It takes time to reach the right person to sort out the issues.

Neutral

I have previously worked with a product related to SSL offloading and caching through a reverse proxy. Currently, we are serving the small and medium-sized business (SMB) segment, where the requirements and infrastructure may not necessitate SSL offloading and related features due to the absence of web servers within their networks. Simpler and more streamlined solutions suffice for their requirements in such cases.

The initial setup process is easy. It takes two or three hours for basic implementation. At the same time, it takes around two days to perform a clone test. It includes fine-tuning, optimizing, and transforming it to the environment once stabilized.

The product is expensive.

I rate Fortinet FortiGate SWG an eight out of ten. It has a lower failure rate in terms of configuration. Once it is configured, it keeps running for years. However, they have increased the process by almost 60% to 70%.