Fortinet FortiGate Reviews

We primarily use the solution as a firewall.

We use the firewall to enforce our company ideologies and principles and policies. The solution has built-in features for web filtering that are great. It categorizes it nicely for you. 

The interface itself is nice to work with. It's a lot better than the initial interface that they used to have around version four. I used to work for FortiGate some time back, and the earlier interfaces were not as good as these latest ones. 

I like that once you open it up, you have a dashboard that can give you a holistic overview of what is happening. You can see, for example, how your resources are doing on your firewall or if you still have disc space for logs and so forth.

The solution gives you an immediate view of what's happening on the hardware itself. What we have done with FortiGate is we have put up a FortiAnalyzer, a FortiGate reporting hardware. We are using it in conjunction with FortiGate. 

The solution offers good reporting. We get our reports from there. We have the opportunity to get real-time reports. 

There are great templates, so you don't have to customize them if you don't want to. You do have the option to custom create some folders and some reports, however, with what is there, you don't really need to go through extra effort, as they already give you a lot of predefined views of reports and so forth.

We have access to quite a few features. The web filter and application control are primarily what we are using. Then we also have a VPN feature, which allows for our remote users to connect and get through the firewall. 

The commercial side of things can be improved a bit. They have such a good product, and when you disable some features, it has to be commercialized for you to enjoy those features. Therefore, you are actually buying half a product. You have hardware there, and yet, your features are not enabled. The primary things, such as the antivirus, web filter, DNS filter, application intrusion, file filter, and email filter come with the general license. There are other things that you want to also enjoy in this system and you can't. 

There are SD-WAN network monitoring, SD-WAN features, Industrial Databases, Internet of Things, Detection, etc., however, we do have not licenses for those features. We thought that if you bought a product, you should have all of the features it offers. Why should you need to make so many extra purchases to enable features? They should have one price for the entire offering. That's one of the drawbacks they could look at. 

Sometimes the firmware automatically updates itself. Then it corrupts the configuration and you have to roll back or you have to do amendments to the configurations. That, however, has happened only once with us. We have put in controls for automatic updates to stop them and now we do manual allowance or we allow the manual update.

Most of the features are good. They give you pricing and you get a VPN for about 10 users where you can test it. For us, we feel that we need to buy extra licenses due to COVID, as people are working from home. Under the current conditions, we are not getting the best out of the firewall. 

They could just maybe put better graphics or better reporting into the solution. I want to know who is the user and what is the exact website they're visiting. Something like that would help. They should do more like what the GFI is doing.

We've been using the solution for a bit over a year now.

6.4.2 is our current version. The latest is 6.4.3. It's available like I say, however, we have not installed it. We'll wait until around December, then we will then install that one. We like to wait to witness its stability. Once we know it is bug-free, then we allow it to run as the latest platform.

We have a cluster and we have configured it with high availability. What we have done is we have put one primary and one secondary in case it breaks or it gets damaged. We have a third one at our DR site as well, which works in conjunction with Plateau. We have employed the same rules and some stricter rules on the DR site, just to allow traffic between these machines.

We allow certain times for updates on the infrastructure we have at the DR. We are planning some more, however, we don't enjoy all the features yet. We want to bring in an SD-WAN. Maybe that can also help us with scaling our network at different angles and from the cloud or being from an LD device or so forth. We're still working on that.

We have a partner that we work with. We have support at another level and I'm the primary person that looks after the firewall. If I have an issue that is urgent and I don't have the time to do the knowledge base to actually turn it around, we usually engage our partner, which has engineers that have the knowledge necessary to deal with it and who are certified in FortiGate. 

We have what is called FortiCare. We have FortiCare support as well for firmware and general updates and all those other things. I normally do updates and so forth myself. It's very little intervention from outside technical support.

Having background knowledge, the initial implementation was not really complex for me. You just need to know your environment and what is needed as well as what is allowed. 

The business input was the only item outstanding as there were issues such as who needs to have social media access at what time and who needs to have full access. Those were business decisions, however, but from the technical side, it was fairly easy.

They have almost all the features embedded in the solution. It's just that some features are not available because you have to pay for it. There are lots of add-ons available, and you need to pay extra for them, so pricing can add up.

We are strictly a government entity. We are a customer.

The model that we are using is the 500E, which is for small and medium enterprises. We are not a big institution. We do not have the latest version. We like to wait about three months before we apply anything new to make sure the early releases aren't flawed. After three months, after we've got a good review, then we will say, "Okay, let's upgrade to that version."

Even though we feel that sometimes they create a new version to take care of a vulnerability or threat, we like to be safe and avoid bugs. The version that we are fitting currently is 6.4.2, which is fairly stable.

Apart from the fact that they should just include everything in their offering, everything else works fine for me. There's a whole lot of Fortinet products that work together, FortiSwitches, FortiAP's, etc. Overall, I would give it eight of ten. 

I'm primarily using the solution for security purposes, and also for managing the network for various companies. I am deploying it for uniting management statuses, in order to be able to manage everything inside and to control security policies. It can fight against attacks to the system or for email searches. It is basically a central management security appliance.

We find it's good for managing the network and offers good defense against attacks.

Technical support is great. It's really fast.

Overall the solution is pretty user-friendly. It has a good dashboard and is pretty easy to navigate.

The pricing is excellent. It's much less expensive than Cisco.

The only thing is sometimes you have to learn with CLI. For those not familiar with CLI it can be an issue. It would be ideal if we could avoid using CLI. If you make a mistake in the command line, it's harder to detect. It would be much better if they had a user-friendly GUI.

The initial setup is complex.

I've been using the solution for five years.

The solution is very stable. You don't have to worry about bugs or glitches. I tend to wait and not upgrade to the latest version right away to ensure this is the case.

The solution is scalable. If you need to expand it, you can. We have it at a variety of networks and sites with no problem.

We have 120 users that are connected to a minimum of 80 computers and a minimum of 15 servers, which is great. The solution is working and it is still stable even across all of these devices and servers. We have multiple networks inside as well, so we are not only on one network. We set them separately, which is why the initial setup for us was quite complex. We're through with that though.

The technical support is pretty good. they're pretty knowledgeable and responsive, especially when you get to the Level 3 techs.

We previously used CheckPoint. Unfortunately, they didn't have a very good service, especially in technical support, and therefore we decided to switch.

For our organization, the initial setup was not straightforward. It was pretty complex. That's due to the fact that we had many networks to set up and many sites to take into account.

We set up the solution ourselves, although we did work closely with Fortinet as part of their bundle package.

The licensing is paid on a yearly basis.

I evaluated Palo Alto. They didn't have the complete solution we wanted. Neither did Juniper, which we also looked at. We looked into possible having Cisco, however, Cisco is too expensive. 

When we looked at Cisco, we also evaluated Meraki, which is a part of Cisco. It did not have what we needed either. 

We are using the 200E in our environment. We had 200D before.

We're not using the latest version of the solution, which is 6.4. I like to wait on new versions to see if it is stable before deploying it. I like to take my time and avoid headaches where possible.

I would recommend the product to other organizations. It's got great bundle options which make it a very good choice - and it's much cheaper than Cisco.

We used the solution for the client environment.

The solution is easy to use and checks the access control as a firewall. We did not face any challenges while integrating the solution into our infrastructure. Fortinet FortiGate SWG is easy to use.

Fortinet FortiGate SWG can't be used on its own, and you have to get FortiAnalyzer.

I have been using Fortinet FortiGate SWG for three years.

Fortinet FortiGate SWG is a very stable solution.

Fortinet FortiGate SWG is a scalable solution.

The solution's initial setup is simple once you get a hang of it. All the documentation is available to help with the setup.

Overall, I rate the solution a nine out of ten.

FortiGate is a popular firewall in Turkey due to its widespread use and strong performance. Technical experts can easily be found for FortiGate, which is very important. Almost every company uses FortiGate internally. FortiGate is user-friendly and reliable, offering good performance at a reasonable cost.

You can integrate certain other services with FortiGate and use additional threat intelligence services because they allow you to combine various solutions, enhancing your overall security.

FortiGate may include AI capabilities and integrate external threat intelligence. However, version management and backup/restore operations could be improved.

I have been using FortiGate Next-Generation Firewall as a reseller for 15 years.

With high availability, this FortiGate allows one device to take over for another seamlessly in case of failure.

I rate the solution’s stability an eight out of ten.

FortiGate is scalable because it supports various models that can accommodate different dimensions. It is suitable for all types of businesses.

I rate the solution’s scalability a nine out of ten.

The initial setup is easy. The firewall setup involves more than just physical installation and basic configurations. It includes customizing specific policies and configurations tailored to the customer's needs, which can take up to two or three days for a single firewall. This process is resource-intensive both in terms of cost and time.

I rate the initial setup a nine out of ten, where one is difficult, and ten is easy.

The product is cheap.

FortiGate Firewall offers advanced threat intelligence capabilities. It allows integration with various threat services, such as Cisco Talos. If you are a customer of both FortiGate and Cisco for threat intelligence, you can integrate Cisco Talos with FortiGate, which enhances security effectiveness through Intelligence.

I recommend FortiGate for every company. It's a highly effective solution that can significantly enhance firewall security. You can easily find technical guides to help you understand its capabilities. FortiGate is known for its reliability and robust features.

Overall, I rate the solution an eight out of ten.

We use the solution in our network.

IPsec is valuable. Internet filters are valuable features. The solution is secure. The VPN is good.

The performance can be improved.

The tool is stable.

We have around 90 users.

We contacted support while we worked with IPsec. The support team helped us.

Positive

The deployment of IPsec took around 5 hours for 90 users.

The security provided by the product is our return on investment.

The tool is moderately priced. We pay $500 per year for the license.

Overall, I rate the product a ten out of ten.

We use the solution for security.

It is a good solution. The product is stable and strong. We never had any issues with it. All the features work perfectly.

The product’s price is high. It is charging more compared to other solutions.

I have been working with the product for six to seven years. We are working with the latest version of the product.

The product is stable, so we have no complaints. I rate the tool’s stability a ten out of ten.

I rate the tool’s scalability a ten out of ten. We are an SME. We have around 300 users.

I have 20 years of experience in the industry. The initial setup is simple for me. We can deploy the solution within hours.

I rate the product’s pricing a six out of ten. We pay a yearly license fee.

We implement the solution for our clients. We never had to contact technical support. I recommend the solution to others. It is a good product. Overall, I rate the tool a ten out of ten.

My clients use it as a proxy. The second use case is to try a kind of web filtering. So that's the reason why they're buying. We have customers to whom we have sold an appliance, and we also have a customer to whom we have sold on a virtual machine. So, it's placed on their private cloud.

We've been able to try and secure our perimeter better because of the proxy and the gateway. Moreover, traffic from all our compliance actually passes through this. 

We have compliances also, so we get log reports from that, which goes into our log management software. And it actually helps us to try and analyze any security threats to our environment.

DNS security is something that is actually a good service that comes along with the FortiProXY or a Forti secure web gateway.

Fortinet FortiGate SWG is already a good solution, especially with its IP reputation and anti-botnet security features.

The UI/UX experience can be a little better.

My company has the skill set assets. 

We've been in the business for more than eight years. We have implemented FortiGate SWG in the last twelve months.

I would rate the stability a nine out of ten. It's very highly stable. Even if the appliance on-premise solutions have been working fine, Fortinet has a good RMA policy in case of failure as well.  

I would rate the scalability of this product a nine out of ten because it is highly scalable. We have not had problems with customers in terms of scalability.

For medium and enterprise businesses, we would be looking at a web gateway. Small businesses normally don't get into buying a web gateway as such.

We expect a little skillset from the partner as well. However, if we raise the ticket, it becomes much easier, and we get the necessary technical support.

Positive

I would rate my experience with the initial setup an eight out of ten, where one is difficult, and ten is easy.

Usually, the deployment model is in a private cloud.  It can be deployed as an on-prem solution also. The customers have proxy gateways, and so it comes as an appliance as well or as hardware. 

The deployment takes days. It doesn't take weeks. But it depends on the customer environment, like the number of users and what policies need to be configured for that. 

So, it depends on the complexity as far as configurations are concerned. But it definitely can be done in days, and it doesn't take more than ten odd days or so, depending upon the scope.

From a price standpoint, Fortinet is willing to work with partners to get good deals, and Forti will not lose on a price. 

So, we'll be able to try and have a good price versus performance metrics that Fortinet provides.

I would rate the pricing a six out of ten, where one is cheap and ten is expensive.

Overall, I would rate the solution an eight out of ten. I would definitely recommend using the solution. 

We use Fortinet FortiGate SWG for firewall, antivirus, scanning, and web filtering.

The most valuable features of Fortinet FortiGate SWG are IPS and scanning. Fortinet FortiGate SWG is also easy to use.

The solution’s stability could be improved.

I have been using Fortinet FortiGate SWG for six years.

I rate Fortinet FortiGate SWG an eight out of ten for stability.

Around 60 users use Fortinet FortiGate SWG in our organization.

The solution’s initial setup is straightforward.

We implemented the solution through an in-house team.

Fortinet FortiGate SWG is an affordable solution.

I would recommend Fortinet FortiGate SWG to other users.

Overall, I rate Fortinet FortiGate SWG a nine out of ten.