We use this solution for different reasons.
We use it for the firewall with SDWAN functionality
We use it in some use cases as a VPN Server.
We use it as a Wi-Fi controller on some sites.
We use if for internal network segregation and routing
We use this solution for different reasons.
We use it for the firewall with SDWAN functionality
We use it in some use cases as a VPN Server.
We use it as a Wi-Fi controller on some sites.
We use if for internal network segregation and routing
Fortinet FortiGate has improved the way our organization functions.
Versatile with a lot of controls and expert level customizations for advanced users
NGFW features seems to be effective are relatively easy to implement.
Fortigate DC Agent is a useful free feature to automatically detect logged on users and implement user based access policy
Basic VPN is included without extra charges
The Wi-Fi controller feature needs a lot of improvement. The function itself is not as stable as it should be in our use case which might be a problem in either the APs or the controller.
Would like to see more wizards and automation for more features such as virtual servers, SSL VPN, and others where policies, rules entries are created automatically form wizard input.
Some of the features related to load-balancing and traffic shaping are not as straightforward as they need to be.
The VPN functionality needs low-level debugging get what really going on. Log level is too detailed and requires someone who is quite experienced to analyze and solve those issues.
Zero-trust base features are lagging behind the other competition, based on what I have read. Would like to see those features in a clearly in the UI.
I have been using Fortinet FortiGate for four years.
We are not using the latest version, but close to it.
There are some stability issues when move to a newer version. It's always good to be a couple of steps behind when you upgrade as usually the latest major releases are a not stable. We are quite cautious to update.
The stability of VPN connection phase is can be enhanced
Wifi AP/Controller stability is an issue for us
It's quite scalable. The scalability and the migration are okay as well. Licensing model is also stright forword and certain features such as basic SSL VPN requires no to min additional cost per user.
Their technical service is quite good. The application notes and the help on the web are quite good.
I would rate technical support an eight out of ten.
By the time I joined a Fortigate was selected against pfsense.
The initial setup is intermediate in complexity but support and online documentation covers for it.
If you're a small-medium size business:
- Size your use case carefully as licensing price jumps significantly with HW changes.
- Customizable Forticilent SW can be downloaded for free with FNDN membership
- If you have multi sites and require Fortigate based 2FA then consider getting a dedicated fortiauthenticator (VM) with fortiokens acting a central RADIUS server which can be cheaper than cloud tokens an with additional authentication flexibilities.
pfsense; was decided against based required features (mainly VPN which is based in OpenVPN)
Paloalto; is a more expensive with comparable security features based on a recent NSS LABs report
Follow the instructions on the application manual carefully. Otherwise, certain features would not be running quite as they need them to without clear errors reported.
Contact technical support, they're responsive and have solutions for most of the problems.
Chose/size the HW carefully based on your use case as certain features are HW accelerated in higher variants but takes a huge toll on CPU/ memory when running on lower variants.
Consider using Fortigate DC Agent which is useful free feature to automatically detect logged on users and implement user based access policy
Consider segregating functions on different units instead of having all features on a Fortigate (i.e avoid having wifi controller + firewall + VPN on a single unit specially for lower variants)
Because of the flexibility, the advanced user features, the high level of security controls, and the tweaks that are available for the user, I would rate this solution an eight out of ten.
We primarily use this solution for our network, as virtual security of the network. It helps protect us and keeps us safe.
The overall experience has been very good. It fully meets our requirements. We find the solution to be pretty user-friendly.
The solution has a lot of features. I'm not sure if there is one that stands out as the most valuable for us.
The stability of the solution is very good.
The vendor has been very good at providing us with everything we need.
Overall, the pricing of the solution is very good. The product offers good value.
The product is quite flexible.
We've found the scalability to be very good.
The dashboards and UI are very nice.
We aren't really missing any features.
The solution isn't lacking anything. We've been overall very please with the experience we've had. There aren't really any negative aspects to discuss.
I have used the solution for a while. It's been more than five years at this point.
So far, we have found the stability of the product to be quite good. It doesn't crash or freeze on us. We haven't experienced bugs or glitches. The performance is reliable. It's good.
You can scale the solution if you need to. It's not a difficult thing to do.
We do plan to continue using this solution.
We don't have any experience with technical support. No problems have really presented themselves, and therefore there hasn't been a need to reach out at all. Therefore, we can't really speak to the helpfulness of technical support.
We didn't previously use a different solution.
This is a cloud-based solution. Therefore, there really isn't an installation process per se. It's very easy to get started.
The solution offers good value for your money. It isn't too expensive.
It is my understanding that we are using the latest version of the solution. However, I am not 100% positive. I don't know which version number we are currently on.
I'm not sure if I would recommend the product. It would depend on each individual company's needs.
I would rate this solution at an eight out of ten. It's been a pretty positive experience overall.
We primarily use the solution for security, including threat prevention.
The threat prevention is the solution's most valuable aspect.
The solution's initial setup is very simple and straightforward. It's not hard to implement it.
The stability if the product is very good so far. We haven't had any issues.
The pricing of the product is reasonable.
The logs need to be better. They need to be more visible and easier to access.
The VPN features could use some improvement.
I've been using the solution for about two years at this point. It hasn't been too long.
The stability is excellent. We haven't had any issues in that sense. It's not buggy and there aren't glitches. It doesn't crash or freeze. We find it reliable.
I do not foresee the product being easy to scale. We find it so hard. It does not seem to be possible.
Currently, we have around 15 users and there are five to ten people handling the management aspect of the product.
Over the past two years, we really haven't had any issues that would require us to reach out to technical support. The user experience has been good. If we run into little issues, we may reach out directly to the vendors, however, I can't say that I've spoken with technical support. I wouldn't be able to evaluate their services or speak to their level of knowledge or responsiveness for that reason.
I've used other solutions in the past, including, for example, Sophos. However, I have found Fortigate to be more reasonably priced and generally much better as a product.
The initial setup is very easy. It's straightforward. We didn't run into any complexities. We were able to set it up without any issues at all.
The initial implementation was handled by the vendors. They were great at assisting us with the process.
We've found that the cost of the product isn't too high. They are a bit higher than other options, such as Meraki, however, it's still not so bad.
You need to pay for the hardware and then you need to pay for the licensing as well.
We are just a customer. We don't have a business relationship with Fortinet.
We are using the latest version of the solution at this point.
Overall, we've been pretty happy with the solution. I would rate it at an eight out of ten.
We are basically system integrators. We design and implement firewall solutions for our customers. We also provide after-sales services.
We have deployed this firewall for different types of clients. We are providing solutions starting with FG-30E, which is the lowest model in the FortiGate series, and up to 1000 series.
We understand a customer's requirement of current internet users. After that, we design a perfect solution through which they can not only protect their network but also have load balancing between multiple internet service providers. They can also have secure connectivity from a remote office by using a single box device.
The web filtering facility and application control are the most valuable features from the point of view of our clients. The VPN feature is also quite popular amongst our clients. Two-factor authentication is one of the good features in Fortinet. These features are important for the current scenario of security. Security has become a necessity nowadays. With cyber-attacks becoming more common, protecting an organization's data is one of the major tasks.
It is also very stable and scalable, and it is very straightforward to configure. Their technical support is also good.
Security is a continuous process. In every product, there is a requirement for improvement. Its pricing should also be improved according to Indian market requirements.
They must also improve on the reporting part. Its reporting can be more precise. If we can get a real-time report in a specific format, it will be helpful for customers to know about the current status of their security.
I have been working with this solution for the last 12 to 13 years.
It is very stable. We have been working with this solution for a long time, and we found it to be stable.
It is a scalable solution, and you can also upgrade. They come up with a new feature every time. Whenever you're updating your firewall firmware, it is ready to mitigate threats available in the fiber scenario.
Our clients are small, medium, and large businesses. We have deployed it for small offices or retail stores as well as for big manufacturing units. We also have clients from Education and Healthcare. Some of the large companies have between 800 to 1,000-plus devices protected through this firewall.
Their technical support is good.
I have a little bit of experience with other firewalls such as Sophos and Check Point. There are some basic differences in the features and their functionality, but I cannot say that this one is the best, or this one is not good. I have more confidence in Fortinet FortiGate, so we are focusing only on this.
In terms of support, we had purchased a Check Point product for a customer, and we were trying to get support from the team, but it was very difficult. Sophos is okay in terms of support.
Its initial setup is very straightforward. It is very easy if one knows the basic concepts. It has a graphical user interface, which makes it straightforward to configure. You can configure it step by step. The basic implementation of this firewall can be done in a very simple way. There could be some complexity at the Enterprise level, but at a basic level, it is very straightforward.
The deployment duration depends on the complexity level. A simple deployment can be completed in a few hours. A complex deployment can take one to two days depending upon the requirements. This is because, in addition to implementation, we also have to test the solution as per a customer's requirements to see whether it is fulfilling the given task or not.
We are a very small company with seven to eight people. We have a total of three people working with firewalls. They're network and support engineers.
Our clients definitely get a return on investment. It is a really good product, and the stability of the product is a very important factor for our clients.
Pricing and licensing is a little bit complicated in FortiGate. They are always on the higher side. This is one issue that we always raise with the company that they should reduce the price according to Indian market requirements. There are no costs in addition to the standard licensing fees.
It is a good product, but I would always recommend selecting an implementer partner carefully. The implementor should be able to implement all the features so that you get the best benefits of the firewall. An implementation partner is very important. If you don't have a proper partner, you will probably end up with a mashup, and you won't be able to use all the features. Your performance might also not get optimized.
I would rate Fortinet FortiGate an eight out of ten.
When trying to move from MPLS to SD-WAN they have a very good SD-WAN offering.
The solution integrates well.
It has high-quality security features.
It provides a full end-to-end security suite.
The security of the solution is good.
The solution could have licensing fees reduced in the future.
I have been using the solution for 5 years.
It is not common for the solution to become unstable, but it does happen. The good thing is, they constantly release updates. If the version you are using has a bug, in the next version it definitely will be fixed.
The solution is highly scalable because they have devices that can handle a large amount of traffic. The VM version with the hardware appliances is widely scalable. It can handle small businesses to large scale enterprises. In terms of mode of deployment, you have VM, hardware appliance, and cloud. There is cloud management as well that is scalable. It can suit a number of deployment scenarios.
We currently have 50 employees using the solution, some of our clients that have deployed it has 1000 users and it has not given a problem.
The customer service was very fast to respond to our needs.
The installation is not difficult but there is a learning curve, it becomes easy over time.
The basic installation took approximately two days. A more complicated scenario can take even up to two weeks. Depending on the options that you are looking for, there are many things you can consider. If you are looking at a complex design then you are going to take more time.
I did the deployments myself with one other technician.
The pricing of the solution is very competitive. The license price can vary depending on the product you have and the different types of licenses you need. For example, they have an enterprise and UTM license. It depends on the type of license and the size of the company.
Fortinet has a product that can cater to any area of the security market. For example, application firewall and authentication products.
I would recommend this solution to others.
I rate Fortinet FortiGate a nine out of ten.
We primarily use the solution as a hardware firewall. In China, there's a lot of content that would be available in the West that isn't allowed here. We're able to block certain content from getting through filters.
The solution offers a very good package for all kinds of virtual appliances, subscriptions, and so on. It's a reasonable price. It's not too much.
The services on offer are just superb.
The way it can block certain content is very useful for us. It gives you a good heads up as to what streams are being blocked from the network, which helps with visibility.
The simplicity of the product is great. It's very easy to use, which is a compliment we get all the time in terms of feedback.
There seems to be good reporting features.
The scalability is there. If you need to expand the product, you can.
The menu structure is more logical than, for example, Cisco or SonicWall. I find that the Fortinet is easier to understand in terms of the installation process and setup.
The only problem that we have here in China is that the whole subscription process on Fortinet is a little bit difficult if you are doing it from China. China has kind of a firewall around the country, and we sometimes have complications due to that aspect.
As a whole, I don't think that the product is actually missing any features.
You do need some IT knowledge in order to effectively work with the solution.
I've been working with the solution since about 2016. It's been a few years at this point.
The solution is very stable. There aren't issues with bugs or glitches. It doesn't crash or freeze. It's very reliable.
The scalability is good. You can expand it as needed and add on extra apps to add in extra functionality if you want to.
We mostly deal with mid-range companies.
I only talk with people here in China that are the Chinese sellers or distributors from Fortinet. They are Chinese and I don't speak or understand one single character Chinese. So for me, it's very difficult to communicate with technical support. Most of the time, I let them talk with one of the people who I know who is fluent in English and Chinese. That's what I do.
Most of the time, I can do all the research on the internet to see what kind of device I need and then I get a translator and we figure it out.
We only use Fortinet's FortiGate for our hardware firewall protection.
However, if our clients need extra security, we may add other brands and security layers. We also work with SonicWall, Checkpoint, and Barracuda, for example.
I've also worked with pfSense, which is free, however, it has much more of a do-it-yourself approach. It's also quite different from other solutions. If you have Cisco experience, you'll be able to navigate Fortinet, whereas pfSense requires much more in-depth study. It has its own language, basically. That's one of the reasons you won't find too many of its configurations in China.
The initial setup, for me, at least, is very straightforward. It's just a few clicks and you're set up. It may be a bit more complex for someone else who may not be as familiar with the product.
I have partners that assist with the initial setup and I have network engineers who are doing the job for me. They are working for me as they are my employees. As their boss, of course, I have to know a little bit about how to handle it as well. We handle the implementation process for our clients. We implement it according to ISO and Chinese security standards.
The solution is pretty affordable. It's not overly expensive. It's not like Cisco where you pay an awful lot of money mostly for the name.
There are extra apps you can add to the product, however, those come with an extra price tag as well. That said, it allows you to do more things and expands its capabilities.
I like to use Fortinet due to the fact that with the device you can do so much more, it's not only web filtering. If you decide to use it for something else, you just pay some money to Fortinet for another package and you are good to go. It makes it a little bit easier for small or large companies as it's so flexible in its offering.
In China, due to business constraints, licensing is quite complicated here.
I'm a service provider in China. Basically, I'm connecting companies, foreign companies or Chinese companies, or even foreign public services to business VPNs or business cross border interconnections.
Whether we use the latest version of the solution or not depends on the client, their needs, and the environment. If a client needs more security, we may even layer in other brands to help with that.
We tend to keep deployments on-premises as you can run into issues with using the cloud in China. We prefer to have it on-premises and then bring lines in to hook everything up. It's simpler and there are fewer issues.
In general, I would rate the solution at a ten out of ten. We've just been pleased with the product and the ease of use.
We have created a virtual cloud on-prem, providing services to our different IT domains in terms of software, database and ERP. We've also created a virtual firewall handling the security and protecting servers in the network. No unwanted or unauthorized user can access the servers. That's a good sign of security and the handling of the network. It provides us with oversight. I'm a senior network engineer and we are customers of Fortinet.
With the Covid pandemic, the VPN has become the most valuable feature. With the majority of traffic connecting from remote locations, the VPN provides stability and reliability. The antivirus and its IPS, intrusion prevention system, also helps with stability.
In our environment, we need multiple virtual firewalls to facilitate end users and customers. Fortinet doesn't provide that but they really should include that feature.
I've been using this solution for three years.
Overall stability of the solution is good. I am totally dependent on this device. Basically, it's deployed on the edge of our network. All the software and HR, admin, every department is behind this network. And every user connects their internet services via the VPN.
Scalability of this solution is good, we can add devices whenever we like.
Whenever there's an issue and we contact support, the response is positive. The support is impressive.
We previously used Cisco ASA but that model didn't support the latest technology, and was also very expensive. The main issue that caused us to switch solutions was the throughput of the interface. Cisco was providing us with one gig interface. Because of our gradually increasing bandwidth and network requirements, we had to move to more bandwidth and a 10 gig interface, which Fortinet provides. Although Cisco provides the same on a different model, that model was very expensive. That's why we chose to switch to Fortinet Firewall.
The initial setup is simple. It's only complex if the design hasn't been sorted or tested. If we're deploying, we study the network, traffic patterns, and traffic path, which is, I think, the most important thing about deploying any network device. We can easily create or delete, modify or customize and optimize the feature, the network, the routing, the policy, and the different features of this device. Most of the time we carry out the implementation ourselves, deploying in different phases; firstly connecting the network, and then partially shifting the traffic phase by phase. When we removed ASA and shifted all the traffic to Fortinet, the overall performance and overall working was very impressive. Downtime probably came to a total of 15 to 20 hours. We have multiple groups using this product - I would estimate somewhere between 12,000 to 13,000 users and the solution is used continuously.
I think the licensing of Fortinet is in the middle range. We also had a demonstration from the vendor that gave us the confidence to work with these devices. We purchased the solution on a bundle basis which the vendor offered us. There are additional costs if we enable a new feature not included in the bundle.
I think Fortinet is a cheaper, stable, scalable, and reliable device.
From my experience, I would rate this solution a nine out of 10.
Our primary use case of this solution is for the firewall and IPS; the security on behalf of our network, to support north and south traffic. We are customers of Fortinet and I'm a systems engineer.
The firewall is stable and that's important. There are a lot of functions we use on the IPS and it works well for us. It's stable, the interface works for me.
We currently have two on-premise data centers with several separate firewall units and unfortunately they don't connect with each other. We'll likely migrate to Azure in the next two years because of that.
I've been using this product for about seven years.
This is a stable solution.
For the traffic we have all five firewalls. The log is minimal with the traffic, which is going over the firewall and we don't require a lot of scalability.
We have support in the Netherlands, direct contact with our partner but not with Fortinet. For big changes and difficult issues I can get extended support from a partner. I do the simple fixes myself.
I've used a heap of different products. I've worked with Palo Alto and also with Fortinet. From experience, I prefer Palo Alto, but for the business I'm working in now, Fortinet is okay.
I've had great experience with Palo Alto but I think Fortinet FortiGate is also a great solution. Some time ago we upgraded to the Fortinet solution of our previous partner and there was a memory leak which created problems. Our firewalls crashed multiple times a day and we had a lot of issues. I think the issue was a systems error and it shouldn't have been deployed. It's all very stable now.
I would rate this product a nine out of 10.
The features that I have found most valuable are the SD-WAN and their IP4 policy.
In terms of what could be improved, the SD-WAN is quite difficult, because if you install in the new box, 15 is okay, but if you change from an old configuration, if there is already a configuration and a policy when you change to SD-WAN, you must change the whole policy that you see in the interface.
I have been using Fortinet FortiGate for about two years.
Fortinet FortiGate is stable so far. We had a difficulty, but after we opened the support, we found out that it was only from having the wrong config. But so far, it is stable.
So far our biggest client is only FortiGate 400, a small-medium business.
Their technical support is very helpful, although they only have it for their in-the-box and sometimes we have difficulty with the out of box, with the ISP or other things. So we must find a solution for the customer. But if it is the wrong product or if there is a configuration issue in the product, yes, they're very helpful.
I have also worked with the Hillstone network, with Palo Alto and with Barracuda.
In terms of support, so far FortiGate is helpful whereas with Barracuda I didn't get the support like FortiGate.
The initial setup and new configuration are very easy. It is very user-friendly. It's only three clicks from the menu, two or three sub-menus and we already have it configured. It's not difficult because we have experience with the SonicWall, Palo Alto, etc.., but Fortinet is user-friendly.
In terms of price, FortiGate's price is reasonable. Most of the customers stand by it, and are aware that the price is worth it for the performance.
In terms of advice for anyone looking to use FortiGate, you need to learn about trouble-shooting, because sometimes you find out you have the wrong configuration, not because of a FortiGate problem or FortiGate config, so you are responsible to handle the trouble-shooting.
On a scale of one to ten, I would give Fortinet FortiGate a nine.
One thing they could offer is a version that already has the configuration. This would make it easier. This is something that I would request. I worked with Barracuda, I worked with Palo Alto. If you want it easy. It's very easy. But FortiGate needs to have something more like that, to do it faster.
We primarily use the solution for edge protection as well as the VPN and SD-WAN.
The solution has many valuable features. We tend to use all of them.
The initials setup is pretty easy.
The solution offers very good documentation.
The solution can scale well.
We've been happy with the technical support we receive.
The product is reliable and stable.
The support costs and licensing are sometimes so expensive. They should work on their pricing model.
I've been using the solution since 2018. It's been a few years at this point.
The stability is very good. We don't deal with bugs or glitches. It doesn't crash or freeze. It's reliable.
The scalability is very good. If you need to scale it as an organization, you can do so.
We have 100 users. They are largely network engineers, however, we have technicians and active users.
We do plan to increase usage in the near future. We have more projects coming up.
We've used technical support in the past and we've had pretty good experiences. We're satisfied with the level of support we've received.
Their documentation is always good too. We've accessed cloud documentation via the portal and have found it to be helpful. The articles are very complete.
We previously used Juniper. We switched due to the host and the usability of Fortinet.
The initial setup isn't complex at all. We found it to be quite easy. It's straightforward.
The deployment took us about three to four weeks or so.
We use two people for deployment and maintenance.
I handled the implementation myself. I didn't need the help of a reseller, integrator, or consultant.
The solution is pretty expensive. That said, we see the value of the solution as it provides great value to our organization.
We pay to license the product on a yearly basis.
I'm not sure of the exact amount we pay, however, as it is not an aspect of the solution I handle directly.
We are customers and resellers of Fortinet products.
We work with both on-premises and cloud deployment models.
I definitely recommend this solution to other organizations. We've had a positive experience.
In general, I would rate the solution at a nine out of ten. If the pricing were better, I would rate it higher.
