Fortinet FortiGate Reviews

Our organization utilizes Fortinet FortiGate for SD-WAN. All business units within our organization connect to the SD-WAN, which is constructed using Fortinet devices.

The primary reason we implemented Fortinet FortiGate was to enhance connectivity. Our previous reliance on MPLS resulted in low bandwidth and high costs. By transitioning to SD-WAN devices and leveraging common ISP connections, we have achieved two significant goals: substantial cost savings and increased flexibility in configuring device communications across our various plants.

FortiGate offers us the capability to provide visibility into and segmentation of our industrial devices. We are currently implementing this for the LAN, and we are migrating firewalls to Fortinet FortiGate devices. In this process, we are separating the operational network from the IT network.

Knowing that some of Fortinet's devices can be used in harsh environments that's nice to have. But that's something that is not needed right now just because we are only using them in very few places. These devices are specifically used to prevent intrusions in harsh environments. 

These devices help to control network traffic with OT-specific protocols. The LAN firewalls we have implemented are purchased with the functionality of network-specific modules to enable the management of network traffic with OT-specific protocols.

The approved offerings help us achieve our budgetary goals. We are adapting the budget to align with the devices provided by Fortinet. We are doing this because we can utilize Fortinet. Therefore, all of our budgets should take this into account as well.

The decision to utilize Fortinet stems from its ability to integrate with our preferred vendors. We have plans to implement both ClearPass and Nozomi as part of our OT cybersecurity strategy, both of which offer API-based interfaces for connecting to FortiGate devices. This interoperability is crucial for our organization.

The combination of FortiGate and FortiManager provides a comprehensive overview of all the firewalls we manage. It is very convenient to have everything centralized in one place.

FortiGate has helped reduce the risk of cyberattacks that could disrupt our production, which is one of our primary goals.

We were not affected by any cybersecurity attacks that would have impacted our production operations. However, we have a comprehensive plan in place to address such incidents. FortiManager enables us to block essential protocols and implement security measures across all business units if we detect a security breach in one area. This centralized approach ensures that the security measures we implement are consistently applied throughout the organization.

FortiGate has aided in centralizing the management of our network and security operations. The impact of this on the operational efficiency of our industrial network depends on how we organize it. Centralized management has significantly simplified management tasks. However, we require a dedicated team capable of addressing the diverse needs of different plants and business units, implementing necessary changes, and resolving any issues that arise. A single point of contact facilitates this process. In this regard, we have not only improved operational efficiency but also consolidated our management structure, reducing the need for multiple teams scattered across different countries.

FortiGate provides us with actionable data that helps us make informed decisions about the appropriate actions to take. Additionally, we utilize FortiAnalyzer to analyze the type of traffic we are experiencing, potential issues, and other relevant information. Furthermore, we monitor CPU memory, bandwidth, and other metrics associated with various IP connections using Fortinet devices. This monitoring is conducted across multiple firewalls. By employing these tools, we can ensure that any changes we make are the correct ones and are made for the right reasons.

The implementation of Fortinet's Security Fabric has significantly enhanced the security of our industrial control system. Previous solutions were unable to effectively manage the diverse protocols employed in this environment, resulting in operational and technological limitations. However, with the introduction of the new security fabric, we are now able to address these challenges and achieve a more robust security posture.

The Fortinet Security Fabric helps us reduce our mean time to remediation. With all its tools and centralized management, it's much easier to identify and resolve issues, leading to improved overall security posture.

Fortinet helped mature our approach to cybersecurity for protecting our industrial equipment.

The flexibility and ease of configuration are the most valuable features.

Overall, we are satisfied with the product. However, we encounter occasional capacity issues. The FortiAnalyzer, being a hardware appliance, has limited expansion capabilities. As our organization has grown, we've outpaced the FortiAnalyzer's performance. The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware. This is an area that could be improved. If we anticipate reaching the size of six countries within the next five years, investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware. The ability to scale the FortiAnalyzer in tandem with our growth would be a significant improvement.

I have been using Fortinet FortiGate for over three years.

FortiGate is now stable. We experienced some difficulties in the beginning, possibly due to some bugs we encountered. However, for approximately the past six months, we have been closely monitoring various ratings for FortiOS versions. As a result, we are currently running only on mature versions. Since then, we have observed that the device is significantly more stable than before.

The scalability for the FortiManger and the devices themselves is a nine out of ten but for the FortiAnalyzer it is a six out of ten.

On the few occasions that we have needed to use technical support, we have found them to be responsive.

We used different solutions such as Cisco, Watchguard and Sophos in different countries, and one of the reasons we switched to FortiGate was to standardize what we used in all the countries.

The FortiManager is one of the biggest advantages they have. From a single management point, we can manage all the devices connected to the support manager. This is something I haven't seen before. So, in that sense, I would say that the most important difference between FortiGate and other vendors is the FortiManager.

Due to the extensive network, the deployment spanned several months; however, on a site-by-site basis, each deployment was completed within a few hours. We had a minimum of two people per country involved in the deployment with 1-2 people from Central IT.

It was a mixed team vendor - in-house. The vendor expertise was really good and I would rate it on a 9 out of 10.

FortiGate's pricing falls within the mid-range when compared to other leading firewall solutions. While it's more expensive than Sophos, it's more affordable than Palo Alto.

I would rate Fortinet FortiGate eight out of ten.

We have FortiGate deployed across multiple locations with 120 firewalls.

I suggest testing FortiGate. For organizations looking for an affordable solution, with good management and initial management, Fortinet FortiGate is the right choice.

On-premises

We integrate SD-WAN capabilities with Fortinet FortiGate frequently. Integrating SD-WAN is very easy and almost plug and play. In many cases, it's accomplished by using the built-in features. For more advanced SD-WAN configuration, it's very well documented and described in the Fortinet documents, which helps significantly. It works flawlessly most of the time and is very easy to administer.

I haven't worked extensively with Fortinet Unified SASE yet. We will probably work more with it, but since Norway is quite a small country, we don't have the same use cases as America has, which has many branches of their customers. Our big clients are usually what the US refers to as a small business. We have many smaller locations, which have fewer security needs in a SASE way, as of yet. We are starting to see that the thinking about SASE is changing and more companies are actually starting to open up for the idea of having SASE. I still haven't actually implemented it. I've done several labs with Fortinet and workshops with them. I don't have the experience to actually say how it works because I haven't implemented it with a working customer yet.

I have used Fortinet FortiGate's data center solution. In some cases, we use the high-end data center Fortinet FortiGate. We currently don't utilize machine learning in our data center solutions. We have not implemented any AI capabilities in our production environments due to security concerns. We prefer to avoid using newer and potentially untested technologies in critical environments. Our focus is on maintaining security, and we believe in having a hands-on approach to fully understand the processes involved. Although we’re not using AI, we have had a lot of success with FortiGate for data centers. They are very effective, and I personally enjoy using them. One of the advantages of FortiGate for data centers is that it operates exactly the same way as a regular FortiGate. This means you don't have to relearn everything just because you’re using a higher-end product; it's extremely powerful without requiring a significant adjustment. Overall, we appreciate the ease of transitioning to these systems.

We’re not necessarily a bigger part of the development as a partner, but I feel we’re more informed and more welcomed into the process of actually building the Fortinet FortiGate features because we can easily create a feature request and they will actually take it seriously if it’s something that they see a use case for, and they will publish it. I feel we have a great say in what could be improved feature-wise. I also feel they are very attentive when we’re giving them constructive criticism and they actually take it seriously, which not all vendors are. Being that we’re a small country, it speaks volumes that they care what we say because we’re not that big of a deal in the global picture of Fortinet sales, but they still care what we mean and what we say. It’s very nice to feel that.

The best features of Fortinet FortiGate would be the throughput for the value for money in regards to throughput and security. Many companies have security, many companies have throughput, but very few have throughput and security bundled together in the same price range. It's very easy to use compared to competitors, easy to understand, and the training material is readily available and not hidden behind paywalls as much as many competitors have chosen to do. It's easier to get knowledge, easier to get understanding, and it's a wide portfolio of training material, which is easy to access, which is very good for new technicians. It's also very good for the customer if they want to get a deeper understanding of the product they are actually buying, which they often do.

There's not much to improve except getting rid of more bugs earlier in the software versions so you don't have to be one and a half years behind on software because you're afraid of bugs in the newer releases. I do understand why they have feature releases, which are the newer software releases, but when Fortinet themselves say, don't use feature releases if you don't need the features in production environments, I would really prefer to have more stable software releases, so you don't have to be scared when upgrading.

I have worked on and off with Fortinet FortiGate for about seven years. My main focus has been Fortinet FortiGate for around four years now. It was a part of my work day earlier and now it's one of my main responsibilities to develop our Fortinet FortiGate use for customer cases in our company.

Considering the last three years, I would put Fortinet FortiGate at a seven out of ten because there have been many bugs and vulnerabilities, which forces us to do updates very hastily. I do understand that other competitors also have vulnerabilities. I just feel that Fortinet FortiGate has had many vulnerabilities in the last three years, which forces us to do unscheduled downtime for upgrades. Most of the time in large data center installations, you don’t really notice the downtime because it’s high availability, so the other one takes over. We have many customers that don’t have high availability, so it really sends a message that we are using a product that’s maybe not the most secure regarding vulnerabilities, which is unfortunate. Most customers understand it, but it’s still a nuisance to have unscheduled downtime because of a vulnerability.

The scalability of Fortinet FortiGate rates a perfect ten out of ten. Scalability is one of the biggest upsides of it. It doesn’t create a problem if the customer wants to upscale or extend or do anything to scale the solution. Even downscaling works very well.

We're taking the large customers in Norway. In the last eight months, we had the two biggest Fortinet sales in Norway's history, so we're focusing on high-end customers.

Most of the time, vendor support for Fortinet FortiGate rates a ten out of ten. They’re very helpful and sincere. They really try their best to help us with our problems and challenges, and they never back down from wanting to help. Sometimes it’s an eight out of ten because we sometimes get in the same cases as a competitor of ours, not a competitor of Fortinet, and they tend to say that they’re treating us equally, while we know they are not. I know they’re trying their best to be equal, but there are many levels of why it’s hard. Most of the time, it would be a ten out of ten with no issues at all.

Positive

As a company, we've gone from only selling Fortinet FortiGate as an accessory to creating an entire department in our business dedicated to selling Fortinet products in the span of three years.

I find that with the proper experience using Fortinet FortiGate, the deployment process is quite straightforward. However, it does take some time to become familiar with the deployment tools like FortiManager. While FortiManager is highly beneficial, mastering it requires considerable time and effort since it operates differently than FortiGate. Therefore, you need to learn a new product in order to use it effectively. Also, a lot of technicians use that as an excuse to not learn it that well and continue to use Fortinet FortiGate, which kind of eliminates the purpose of FortiManager. The skill requirements for using FortiManager are somewhat high. This perspective is based on our Norwegian segment, where most of our customers have fewer than ten Fortinet FortiGate. In many cases, they likely don't need FortiManager at all.

The initial deployment takes days. There’s tuning and everything, but the initial deployment and getting it up in production is usually completed in days. Most of the time we actually do it in one day. After hours on a weekday, we usually deploy big Fortinet FortiGate for the biggest customers. We usually finish that before the next work day. The initial setup takes days, not weeks. Completing the setup completely is a continual thing, so that’s never really done because we’re fine-tuning everything all the time. It’s not something I can put a time estimate on.

It's easy to maintain, but it does require upkeep, as all security products do. You can't just deploy and forget about it. This is especially true for security systems, since new vulnerabilities and methods of exploitation arise every day. However, this is not unique to Fortinet; it's a reality across the entire industry. Keeping that in mind, maintaining a Fortinet FortiGate is still quite straightforward, and there are no significant issues in doing so.

Implementation is usually done internally with highly trained staff in our department dedicated to Fortinet FortiGate, without extensive use of external consultants.

We're starting a new division, a group of FortiGate and Fortinet specialists. Right now, I'm focused on creating and launching this group. Currently, we have ten experts on board, with four or five who are very familiar with the product. I would categorize five to six of them as high-level experts. The remaining team members are also knowledgeable; they may not all be classified as experts by Fortinet, but I consider them to be. These individuals are well-versed in FortiGate and are capable of handling complete installations for large customers independently. I would estimate that there are about seven of them with this level of expertise.

I don't have many insights on numbers, but we’ve gone from only selling Fortinet FortiGate as an accessory to creating an entire department in our business dedicated to selling Fortinet products in the span of three years. That’s very quick in our business, which signals it’s a very good return on investment. We have a very big focus internally on getting more people on board with Fortinet, even moving people from other vendors to Fortinet to create a better understanding of the entire Fortinet portfolio to be able to take those cases because we see the customers really want Fortinet FortiGate and we want to deliver it. That’s one of the main focuses we have now, getting more people on board.

There are levels to it, but the newer FortiGate models offer a very good value for money. It's not too cheap but also not too expensive. I find it to be fairly priced and almost the standard of what the competitors should offer as well.

Regarding how I compare Fortinet FortiGate to other solutions on the market or other vendors, I feel we’re not necessarily a bigger part of the development as a partner, but I feel we’re more informed and more welcomed into the process of actually building the Fortinet FortiGate features because we can easily create a feature request and they will actually take it seriously if it’s something that they see a use case for, and they will publish it.

I would absolutely recommend Fortinet FortiGate. It makes a complex area easy to understand and easy to administer. It’s a very complex world protecting from the scary outside internet, but Fortinet FortiGate makes it very easy and they do have easy to use guidance built into the Fortinet FortiGate itself that helps you make good choices. You can also use the built-in features to scan your deployment to see if anything is done out of the norm. If you’ve misclicked something and done anything wrong, you would get a message if you just use the tools in the gate. It’s a quick and easy way to deal with something very complex.

My overall rating for Fortinet FortiGate would be a nine out of ten.

On-premises

The main use cases for Fortinet FortiGate usually include security to filter traffic to inside the network, load balancing and QoS for the user side, as well as Zero Trust Network Access, allowing users outside and inside the network fabric to connect to our application that is under the firewall.

The most useful features in Fortinet FortiGate are the security features, where we can analyze what kind of traffic is inside our network, and we also utilize ZTNA for limiting and managing our network access. 

The issue with Fortinet FortiGate is the many security CVEs around; I have read there are probably multiple critical CVEs above 9.0 in Fortinet FortiGate products. There appear to be fewer issues with other brands such as Palo Alto or Check Point, but especially with Fortinet FortiGate, there are many vulnerabilities that can be found. The way we manage this is by applying updates whenever new ones are available, but the high critical CVEs generate concern, as we buy security products for our safety and when we find that attackers can easily breach them, it makes us question the safety of the product itself. 

I hope we can deploy the product in an active-active configuration since we currently have two units in an active and passive setup. There are limitations when trying to install it with active-active, but we hope to run it that way.

I have been working with the Fortinet FortiGate firewall for two years.

Stability wise, Fortinet FortiGate is quite good; we rarely have issues with stability, and compared to the previous solution we had, which was much worse, Fortinet FortiGate has had no issues so far.

Fortinet FortiGate is not very scalable. We use the appliance, and once we are out of capacity, we have to buy a new one, as there is no way through scalability. I would rate scalability as a seven out of ten.

I rarely use customer support, but there are a few cases where I tried to reach out before, and it was handled and closed properly, so I had no issues. I would rate the support as nine, based on my experience.

The previous solution we used was Sophos. Sophos had stability problems.

The setup is not complex. It's quite straightforward.

The return on investment after implementing Fortinet FortiGate has been quite okay, allowing us to get the value of what we paid for.

The benefit is more like we are buying insurance. All of the security products may be optional, but having them helps us feel safer and assures us that our network is protected from attackers.

It's affordable. We usually pay about 10K USD annually for the license on a yearly basis.

We have experience with integrating SD-WAN capabilities in Fortinet FortiGate. It is only useful if we have multiple internet operators; if we use a one-to-one connection, there are no benefits. Some of our sites do have multiple internet access, allowing us to use SD-WAN to manage the connection, making it easier to treat it as a single connection while SD-WAN helps manage and load balance between those two.

We do not use Fortinet Unified SASE now, but we are considering implementing it. In the data center, we actually have another solution, but Fortinet FortiGate is used only for our customer-facing side.

My advice to those planning to use Fortinet FortiGate is to check for updates often. We had several issues before due to the firmware we used, but after upgrading to the 7.4 firmware, a lot of issues were resolved just by applying the update regularly. Actually, compared to other firewalls, it is on the very affordable side.

I would rate Fortinet FortiGate an eight out of ten.

On-premises

We are using it for security purposes. We have deployed it across multiple locations where we are already using it.

The security features are valuable, particularly the ransomware attack protection features. Fortinet FortiGate provides excellent security against ransomware attacks.

It contains every feature that is required. The things we require are already sorted out, so there isn't any scope for improvement as far as our requirements go. However, its price can be better.

We have been using it for more than one and a half months.

It's stable. I would rate it an eight out of ten for stability.

It's scalable. I would rate it a nine out of ten for scalability.

I am handling all the operations. We have multiple staff members at multiple locations.

Coming from a technical background, there hasn't been any requirement to speak with customer care representatives. The manual provided covers everything comprehensively.

Neutral

I have experience with Sophos, Fortinet FortiGate, and SonicWall.

We purchased it through our vendor. Our company doesn't prefer to make purchases through online shopping platforms such as Amazon and Flipkart.

We have seen a return on investment of more than 20%.

It is somewhat expensive compared to other solutions such as Sophos.

I would recommend it to others. I would rate Fortinet FortiGate a nine out of ten. There isn't a need to compare it with anyone else because Fortinet FortiGate is at the top of the market.

Private Cloud

We are using Fortinet FortiGate SWG for web filtering, application control, and IDPS. Additionally, we utilize it for VPN and the main features of a firewall.

Web filtering is very good, as well as IDPS. SD-WAN is a perfect feature. Additionally, the VPN is stable and very good. These features have proven effective in protecting our network, handling large volumes of traffic smoothly without any issues.

More improvement in AI would be a good edge. We would like the VPN to act as a web filtering solution because users outside the company don't have web filtering. It supports web filtering with an additional license.

We have been working with Fortinet FortiGate SWG for more than nine years.

We did not face any challenges during the installation. The process was very smooth.

Fortinet FortiGate SWG works well, handling the whole traffic smoothly with no problems. We have not faced any issues with stability.

The solution is very scalable.

We haven't needed to work directly with Fortinet support recently. Seven years ago, the experience was not good, warranting a rating of five based on that past experience.

Neutral

The initial setup took just a few hours, as it was completed on the same day.

The implementation involved two engineers.

There are financial benefits as Fortinet's products are considered good value for money due to their robust features, despite being priced higher than competitors.

Fortinet products are very expensive compared to competitors like Sophos and SonicWall. From a pricing perspective, I would rate them a six.

Fortinet FortiGate SWG is a leader regarding Gartner. It has a friendly user interface and is very secure compared to others with many features. I recommend it to other companies because of these advantages. I would rate the product a nine. The overall product rating is nine.

Hybrid Cloud

Microsoft Azure

We use Fortinet FortiGate IPS to enhance our network security. It is especially necessary to secure the edge of the company.

The whole IPS suite is valuable, especially with the updates from FortiGuard. It provides real-time updates, offering a good vision on any changes. For example, if the rating of a certain website changes, we can investigate potential malicious content with FortiAnalyzer.

The pricing of Fortinet FortiGate IPS could always be improved.

I have been using Fortinet FortiGate IPS for two and a half years.

The deployment of Fortinet FortiGate IPS was moderate in complexity. It took approximately two hours to deploy, depending on one’s knowledge, and it was carried out by four or five engineers in the company.

Stability is generally good, but if you include FortiOS underlying in the FortiGate, there are often some patches to do and some loopholes. I would rate the stability as eight out of ten.

The scalability of Fortinet FortiGate IPS is good, and I would rate it nine out of ten.

The technical support from Fortinet is rather good, and I would rate it nine out of ten.

Positive

I worked a little bit with WatchGuard, but I do not know a lot about it. I am only here for two years and do not have experience with other vendors.

The initial setup of Fortinet FortiGate IPS took about two hours and was of moderate complexity.

The implementation of Fortinet FortiGate IPS was carried out by my team internally with four or five engineers involved.

I rate the pricing with an eight out of ten. They could always improve the pricing.

No, we are not considering any alternatives for Fortinet FortiGate IPS. We are quite happy with the product.

I would recommend Fortinet FortiGate IPS as it is a core component of cybersecurity for our company. Having a FortiGate without IPS services doesn't make sense for us. I would rate the overall solution nine out of ten.

On-premises

We use different solutions from FortiGate, focusing primarily on their firewalls within our department. However, due to a reorganization, the operational maintenance of FortiGate is now managed by someone else.

The most helpful features of FortiGate include its firewall policy, specifically the user-based policy, which I find to be quite beneficial in managing our network security effectively. FortiGate has also provided reliable protection against many attacks, although it lacks the ability to detect specific attacks like SQL injection, which usually requires a web application firewall.

The main area needing improvement is the user-friendliness of FortiGate's integration with other Fortinet tools like FortiAuthenticator and VPN services. Configuring these services is quite complex and not very user-friendly, requiring technical steps that are difficult for normal users to understand. Fortinet support's resolution of issues is slow, and the research on making the solution user-friendly needs to progress further.

I have worked with FortiGate for more than eight or nine years.

We have not faced any stability issues with FortiGate since we specified sizable RAM and CPU, and our size was adequate for our traffic.

Fortinet provides a prompt response. However, the resolution process is slow. While their response time is quick, their ability to resolve issues takes a long time.

Neutral

We have previously used a solution called Cyberoam, which has been replaced with a new brand. There are also managed firewalls offered as a cloud solution that we have not considered yet.

In terms of cost-effectiveness, Fortinet tools like FortiGate are costly for us as a higher education institute in India. Our expenditure is focused on minimal levels, however, FortiGate's pricing is positioned for corporate levels, which can be inflexible.

We are considering replacing Fortinet with a different solution, taking about a year to change configurations and rules.

Fortinet should consider developing a pricing scheme for the education segment since educational institutions in India operate on non-profit terms and under government regulations. They could potentially follow Kaspersky's example, which provided a more affordable pricing model for students and educational institutes. 

As a product, I would rate FortiGate around seven out of ten.

On-premises

I work in presales exclusively. I work in the public sector, focusing on presales of architecture. I usually work with enterprise businesses rather than SMB businesses.

Fortinet FortiGate is a simple solution, and the integration with other solutions in the Fortinet portfolio, such as the Security Fabric integration, is competitive. It is simple for deployment, design, and integration with other Fortinet solutions. The SD-WAN capabilities are simple because the license includes this function, making deployment straightforward for Fortinet FortiGate clients.

The impact of the SD-WAN on network performance includes cost efficiency and automation. For performance, the solution is focused on the user experience with optimal path selection. Unified SASE secures remote connections for many use cases. We use AI and machine learning enhanced FortiGuard services and FortiAnalyzer to protect data centers through deep inspection and other functionalities.

Fortinet FortiGate is stable in the data center environment and in its functionality. It is scalable. The price is competitive in the market, especially when integrated with other Fortinet solutions. It has a return on investment without the need for additional licenses for products such as FortiSwitches and FortiAP.

I have 12 years of experience in total with Fortinet FortiGate.

Fortinet FortiGate is stable in the data center environment, and it is stable in its functionality.

The solution is scalable.

Their customer service is great because the TAC service in Latin America is available 24/7 in English and Spanish. I am happy with the service. In Latin America, when I call at night, the response is in English, and during the day, it is in Spanish. The only challenge is the language availability at night, but I rate it a 10.

The setup is simple and easy, with no difficult configuration required for the devices.

Fortinet provides a return on investment. When using FortiSwitches and FortiAP, additional licenses are not required.

I worked with the implementation and presales of Fortinet FortiGate in the past. In the past two years, I haven't worked with deployment, but I have experience with presales in the last year. I am familiar with the SD-WAN capabilities. The solution focuses on user experience because the path selection is optimized for the user or application.

I rate Fortinet FortiGate a 10 out of 10 as it is a great product.

We mainly use the Fortinet FortiGate for perimeter wall protection and internet usage, protecting our network from internet threats and our endpoints, so we've set it at a perimeter level.

The main benefit I have seen from using Fortinet FortiGate is the protection it offers because I can see threats that come through in real-time, and if they are blocked, I can see that. We are able to customize those features, and it's so customizable that I can tweak it to fit our environment; it has really been helpful.

The hardware-assisted DDoS protection in FortiGate has helped us. We are able to monitor traffic in real-time and block it as needed. We have enabled this feature in every policy we created, so it consistently checks for any threats.

What I appreciate about the Fortinet FortiGate is the throughput and the management aspect; it's easy to manage. Unlike what we used before, initially, we had Microsoft Forefront, so moving from that application-based to a firewall which is appliance-based was really helpful. 

I would like to see the licensing aspect improved because there is a feature we were yearning to use, the bandwidth monitoring feature, but it's licensed separately. It's not bundled with the enterprise bundle, and since we normally buy the advanced hardware support annually, we found out that the license is licensed separately. If they could bundle it together, it could really be helpful to us.

We've been using it for the last seven years, and it has been helpful. We are looking forward to upgrading as the one we are having is at the end of life already. We are planning to upgrade to the latest one, and we are looking forward to the features it will offer.

I have been working with Fortinet FortiGate for seven years.

I haven't faced any downtimes, crashes, or issues with it; it's very stable.

It is scalable.

My experience with technical support for Fortinet FortiGate has been excellent. I would rate them nine out of ten; they've been really good.

I decided to move from Microsoft to Fortinet FortiGate. Fortinet and Cisco were rated highly worldwide. We compared those two and settled for FortiGate because of its manageability. The Microsoft firewall used to fail frequently, so we didn't want to go to another Microsoft product.

The experience with the initial setup and deployment process of the Fortinet FortiGate was complex, especially in terms of linking users. In our environment, we normally use the feature for Active Directory, and we don't give everyone internet access. We've enabled this feature called SSO linked to our Active Directory, and we create groups there. Setting that up initially was really tricky, so we had to engage the support team to sort us out. However, moving forward, it has been very good.

There are no challenges with updates and upgrades. They are straightforward. We have support from Fortinet and the local partner. 

We had a local partner here helping us with the initial setup.

It has worked and surpassed our expectations. We've really benefited from that.

It's pretty average compared to our environment.

My advice for other users looking into Fortinet FortiGate for their environment is to choose one that will serve them based on their needs, whether that's throughput or the number of users. That's really important to ensure they don't do an overkill, as we initially thought we went for a big firewall, only to realize later that it was the right choice. For our upgrade, we'll just go for a bit higher, but generally, it really serves us. 

I would rate Fortinet FortiGate a nine out of ten.

We deploy the FortiGate Next Generation Firewall (NGFW) mainly in education, with retail, big retails, and other industries such as manufacturing, agriculture, and some banking.

Some of the best features with the FortiGate Next Generation Firewall (NGFW) particularly are its security focus, the easy to configure IPS, the Layer 7 capabilities, and the easy way to configure different VDOMs in each equipment so we can separate the different features or the different sites that the client may use in one data center.

The application control feature has helped manage the network traffic with filtering and antivirus capabilities. When we use it in SD-WAN solutions, we can apply in a unified and easy way the different profiles for each branch, and we can also have one profile for the hub if they have a data center with some servers connecting to the FortiGate. We can have different profiles, and it helps us to detect easily any threat that we may have in the network and control the outbound traffic to the internet, restricting those applications or those web services that the final users don't need to have access to.

The FortiGate Next Generation Firewall (NGFW)'s anti-malware protection is very effective, as we have demonstrated through our work with this feature.

The FortiGate's analytic tools have provided insights into network security events by implementing the IOC license, Indicator of Compromise, in some customers, which has been very helpful because it demonstrates that we can identify the threats more easily or the difference in the way that the customers use the network. We can identify the possible behavior of the customers on the network and can identify the possible threats and isolate that customer if we receive any threat for the network or the company.

The web filtering has also helped for maintaining network security because we have been implementing some filters in customers so they don't have access to potential sites that can make a threat to our network, for example, to access peer-to-peer networks or any other sites that are not allowed in the company.

The FortiGate Next Generation Firewall (NGFW) could be improved in application control if they can have a bigger baseline of applications that they can identify, because this is something that is always growing. I know that Fortinet with the team is updating this database, but it's something that grows at a pace that is very difficult sometimes to keep up. This applies to all vendors, not only Fortinet.

I would rate their support for the FortiGate Next Generation Firewall (NGFW) on a scale of one to ten as 7.5.

Positive

The pricing for the FortiGate Next Generation Firewall (NGFW) is fair.

My company has a business relationship with Fortinet as we are both resellers and we also use the technology. If they had any questions regarding my feedback on the FortiGate solution, not the NGFW, but the FortiGate, it would be okay for them to contact me in that regard. I rate the FortiGate Next Generation Firewall (NGFW) 8.5 out of 10.

On-premises

Amazon Web Services (AWS)