Fortinet FortiGate Reviews

The purpose of this solution is to provide intrusion protection and more robust endpoint security for small offices. We are providing an enterprise solution for a small business by adding endpoint protection coupled with Intrusion Detection and Protection.  For small offices needing HIPAA compliance, we need to make sure we are providing robust protection instead of the default modem gateway provided by the ISP.

The Fortinet product provides enterprise capabilities in a small footprint at a price point that is more attainable for a small business. The product meets the IPS/IDS/Endpoint protection that small organizations need for their HIPAA and PCI compliance.  While the end user may not understand the true capabilities, the managed service provider can more easily deploy and maintain this small footprint product.

The main reason why I purchased the particular unit was based on other reviews and leadership in this space. Being able to have a VPN solution as well as integrated access points is a plus. For me, it's all about simplicity. When you look at my particular model for a managed service provider, it's basically to help simplify, protect, and remain compliant. When you're trying to implement something, it's about making sure it is simplified. This seems to fit the bill.

The product has enterprise capabilities, which means there are a ton of configurations possible.  What I'd like to see in the product is more of a branch in the box wizard deployment for those that are not as well versed in firewall and routing.  For a small business, the firewall should be able to self-configure for a Unified Threat Management configuration with 2 SSIDs for protected wireless network for internal gear and a guest wireless network for employee cell phones and guests.  I'd like to open the box, plug in the router behind the cable modem, and check a few boxes, and the rest is done automatically.  I don't want to have to build a configure VLANs, SSIDs, security protocols for each port, and try to figure out and understand all the layers in an effort to deploy a solution.  It's great to have those capabilities in case you need them, but for most of the offices I am trying to deploy these into--it should be a branch in a box.

I've only been using the solution for a few weeks. It's very new for us.

Stability has been fine. I've had no questions about the stability of it. It seems so far it is staying up. I haven't had any issues to speak of.

I haven't really pushed this product from a scalability perspective. Certainly, if you look at the performance metrics, the F series appears to have really expanded the capacity and capabilities beyond past models. If you look at 40E versus 40F, there's a fairly substantial difference. For a small office, it's going to be just fine.

I haven't reached out to technical support and therefore can't speak to their level of responsiveness.

N/A

The initial setup is complex for me due to my lack of experience with the Fortinet FortiGate product. The complexity can be a good thing, however, as there's a lot of really good features associated with it. Where it could be simplified is in having that easy deployment option, and then you can start going down and trying to get into the nitty-gritty and figure out when do you need the extra features.

Right now, I'm just in a test environment getting all the firmware up and tested. Then, once I have it tested, I'll take it to the client location and yank out their WiFi mechanism, their WiFi router, and put this in.

I'm currently handling the implementation for a client.

ROI is somewhat difficult to measure when you are mostly talking about deploying a product for endpoint security.  If your environment stays protected, then it was a good return on investment.

When you look at these endpoint security systems and firewalls, these products a few years were way too expensive for a small business. Now we have enterprise level security in a footprint that is less than $1,000.  For offices that have 10-25 computers needing protection, this is a better solution.

The good news is that Fortinet does have a good support network as well as their education academy to help someone get up to speed on their product.

We use Fortinet FortiGate for VPN. We connect the branches together for the HQ. That's why we are using the VPN, and we publish some of the websites in the HQ, and the users can access that website from outside with the two-factor authenticator and a token key. We are using FortiGate to control the connection between the branches. But, for the software, we are using this to collect the data to extract reports.

I like FortiManager.

Improvements depend on your specific needs. Currently, it meets my requirements. Whenever I need something, Fortinet improves and updates the software for me.

I have been working with Fortinet FortiGate for about ten years.

Fortinet FortiGate is a stable solution.

On a scale from one to five, I would give its stability a five.

Fortinet FortiGate is scalable. If you are familiar with it, you can work from anywhere and do whatever you want. It is very easy to scale. We have about 500 users in our organization. It is not only engineering and not IT because we publish many websites from HQ to other branches. End-users use the Fortinet username and password to log in with two-factor authentication and the token.

Technical support is good.

On a scale from one to five, I would give technical support a five.

Positive

The initial setup was very easy. We had two third-party members and four of my team members implement this solution. It took us five to six days to install and deploy both the software and hardware. For the software alone, it took us about two days to implement. You need two people to manage and maintain this solution.

We had a third-party company help us with this implementation. They came and did the first setup, and after that, I followed the technical support from Fortinet.

Licensing costs are acceptable. I think it's cheaper than Cisco. We pay for the license on a yearly basis.

On a scale from one to ten, I would give Fortinet FortiGate a ten.

We have created a virtual cloud on-prem, providing services to our different IT domains in terms of software, database and ERP. We've also created a virtual firewall handling the security and protecting servers in the network. No unwanted or unauthorized user can access the servers. That's a good sign of security and the handling of the network. It provides us with oversight. I'm a senior network engineer and we are customers of Fortinet. 

With the Covid pandemic, the VPN has become the most valuable feature. With the majority of traffic connecting from remote locations, the VPN provides stability and reliability. The antivirus and its IPS, intrusion prevention system, also helps with stability.

In our environment, we need multiple virtual firewalls to facilitate end users and customers. Fortinet doesn't provide that but they really should include that feature. 

I've been using this solution for three years. 

Overall stability of the solution is good. I am totally dependent on this device. Basically, it's deployed on the edge of our network. All the software and HR, admin, every department is behind this network. And every user connects their internet services via the VPN. 

Scalability of this solution is good, we can add devices whenever we like. 

Whenever there's an issue and we contact support, the response is positive. The support is impressive. 

We previously used Cisco ASA but that model didn't support the latest technology, and was also very expensive. The main issue that caused us to switch solutions was the throughput of the interface. Cisco was providing us with one gig interface. Because of our gradually increasing bandwidth and network requirements, we had to move to more bandwidth and a 10 gig interface, which Fortinet provides. Although Cisco provides the same on a different model, that model was very expensive. That's why we chose to switch to Fortinet Firewall.

The initial setup is simple. It's only complex if the design hasn't been sorted or tested. If we're deploying, we study the network, traffic patterns, and traffic path, which is, I think, the most important thing about deploying any network device. We can easily create or delete, modify or customize and optimize the feature, the network, the routing, the policy, and the different features of this device. Most of the time we carry out the implementation ourselves, deploying in different phases; firstly connecting the network, and then partially shifting the traffic phase by phase. When we removed ASA and shifted all the traffic to Fortinet, the overall performance and overall working was very impressive. Downtime probably came to a total of 15 to 20 hours. We have multiple groups using this product - I would estimate somewhere between 12,000 to 13,000 users and the solution is used continuously. 

I think the licensing of Fortinet is in the middle range. We also had a demonstration from the vendor that gave us the confidence to work with these devices. We purchased the solution on a bundle basis which the vendor offered us. There are additional costs if we enable a new feature not included in the bundle.

I think Fortinet is a cheaper, stable, scalable, and reliable device. 

From my experience, I would rate this solution a nine out of 10. 

We are selling FortiGate 60E and 200E. I mostly look after imports and finance, and my sales team and my corporate manager look after the business. Currently, we are buying renewals for our customers from a local distributor.

Customers are more inclined towards FortiGate because of application control, web filtering, and anti-spam features. The support from the FortiGate team is good, and price-wise, it is affordable.

They are doing good, but they can improve the distributor assignment. The availability of the product and the timeline of delivery are the main things. The distribution should be swift, and the distributor should not reach out to end customers directly. They should work as a distributor. There should also be one more local distributor. Currently, there is only one distributor in Pakistan, and the rest of them are in UAE. It is difficult to work with only one distributor. Sometimes, you don't get along with the same distributor, and that's why they should have one more distributor. 

Their licensing should also be improved. The activation or renewal of the product should be done from the date of renewal, not from the date on which the license expired.

I have been using this solution for almost two years.

It is 100% stable.

It is scalable. We have more than a thousand users. 

The support from the FortiGate team is good. My engineers never complained that they are facing any problem with Fortinet in terms of support.

It is very easy to install. It is way easier than Cisco.

The deployment duration varies from customer to customer. It depends on what features they want to utilize, what is their scenario for IP addressing, and what security level they want to implement. It also depends on the policy and the planning of the technical teams. My engineers and the customer's engineers sit together, and they plan the activity and take care of everything. After that, they decide what to implement and how long it will take. Sometimes there are physical, logical, or IP addressing problems, so it all depends on the customer and our implementation planning. I have three guys for deployment. 

Its price is affordable and lesser than Cisco. Cisco is expensive.

In terms of licensing, there is only one issue. If a customer's license has expired a month ago and they do the renewal after one month, Fortinet renews the license from the start of the previous month. The activation of the product is done from the previous month, not from the date of renewal. The customers usually shout and complain that because they are paying today, the renewal should start from today. The support contract renewals or licensing should be renewed from the date of renewal, but Fortinet starts from the day it had expired. It is a loss for customers. They might have had some problems because of which they did not take the license one month before. Fortinet should work on this. Cisco doesn't do this. Cisco always starts from the day they apply for the license.

We plan to keep selling this solution. Fortinet has launched new partnership levels. They have removed the silver partnership. We were a silver partner previously, and we have now become a premier partner or something like that. So, we have to improve our partnership on new levels.

I would definitely recommend this solution. We always support customers and recommend buying Fortinet. It is a better, more stable, and relatively cheaper product than Cisco. We supply Cisco only when a customer forces us to go for Cisco.

I would rate Fortinet FortiGate a nine out of ten.

I primarily use the solution for network security - especially for the VPN connection, the remote site connection. 

The solution is very easy to install.

The services from Fortinet products are very, very good. The WIFI that Fortinet provides for us, for example, is fantastic. 

The VPN tunnel is very stable and there is more than one option for the tunnel, which is helpful. 

We can customize the product well.

There's a very intelligent solution that they gave us in order to make the VPN connection easy. It is a very, very, very useful tool. 

The stability of the solution is excellent, as it is with other Fortinet products.

Fortinet is a very big product. It has FortiGate, FortiWiFi, FortiSwitch, email security, etc. Due to this, they have some weaknesses in the ISPs, the services. They could improve these aspects. Hotspot services especially could be a lot better. 

There are just some services that aren't available. For example, the Ethernet or point-to-point protocols. They could add these services to their product offering - especially services for ISPs.

I've been using the solution for about three years at this point.

The solution is very stable. That's not a problem at all. There aren't bugs or glitches. It doesn't crash or freeze. It's quite reliable.

The solution can scale well. If a company needs to expand it, they can.

I have various clients that use the solution and they have a user base that can range anywhere from five users to over 10,000.

I do plan to continue to use the solution in the future, however, I can't speak as to if my clients will expand their services or not.

Technical support, by and large, is very good. Fortinet has a very fast response time for their support tickets. It doesn't matter if the help is coming from the local distributor, or from web support. I don't face any problems with their level of attentiveness. I'm quite satisfied.

I use a wide variety of products in my shop. For example, I also work with Sophos UTM, Cisco, HPE, and Aruba products. 

There's a lot of problems in, maybe, let's say, Sophos products. Especially in their support. They have very weak support. Cisco has good support, on the other hand, and a very good product, however, it is too expensive. HPE is a very nice product and has good support, however, it's not a UTM. Therefore, often we end up recommending Fortinet options.

The initial setup was not complex. It was pretty straightforward.

How long it takes to deploy the solution depends on the company and the configurations required. Sometimes I am able to do it in one day, whereas other times it takes more than one month to complete.

I'm just a customer. I'm using the latest version of the solution. I'm using the F-series. Previously, I used the E-series.

We use the on-premises version of the solution as Fortinet does not yet support the cloud.

I am not an organization, I am in IT support. I have my own agency for installing such devices. I use it for some universities which is more than 10,000 students in some cases. I also use it in some factories which have four to five users. It works just as well for small and medium-sized companies as it does for enterprise-level organizations.  

I would recommend the solution to others for sure.

Overall, I would rate Fortinet's solution at a nine out of ten.

We use Fortigate, and we have a relationship with Fortinet. We are working with the Fortigate 100F firewall. It is mainly for firewalling, but we would also use them for network demarcation as a DHCP or NAT router. We're also working with our Fortinet account manager to try and push further forward using an SD-WAN controller.

In terms of deployment, it comes through to the build lab. We configure it and then ship it to our customers. We are reviewing how to obviously do zero hands with FortiCloud, but what we've done so far has been conventional configuration and shipping.

Fortigate represents a really scalable way of delivering perimeter network security, some level of layer 7 security, WAF, and also a way to create a meshed ADVPN solution.

Usually, we sell the bundle with the UTM or threat management piece with IPS, IDS. Other providers, such as Palo Alto, are ahead in terms of safe functionality. So, for me, delivering truly safe service is probably something that still needs to be improved.

Anything they can bring around safe service would be brilliant. At the end of the day, when we talk to customers about deploying, split tunneling, and looking at endpoint security, remote access or safe type of features would be useful.

I've been selling Fortinet technologies for over 10 years.

It is stable.

It is scalable. It is quite straightforward. Moving from, for instance, legacy 200D to 100F has proved not to be an issue. It is quite straightforward.

I am not a hundred percent sure. Our third-line guys deal with them quite a lot. In terms of escalation, for example, when one of my customers had a query about secure authentication on the portal, it has taken some time to get feedback from the vendor or the manufacturer. So, I am unsure. I've not had a great experience, but I can't really answer that one properly.

It is reasonably straightforward if you've got the management portal in terms of FortiCloud. With that, migrating from one firewall, as it reaches the end of support, to an upgraded firewall is fairly intuitive. You should be able to easily reverse out a script and configuration and apply that to the new firewall, following proper governance as a managed service.

We're a managed service provider, so we would probably put two to three PS engineer days to follow the appropriate protocol. From a lead time perspective, a new high availability firewall deployment should not take more than 10 working days from the config test, deployment, and failover test perspective.

If you are a mid-market business, Fortigate presents a solid proposition for the mid-market. If you are getting to enterprise-level, for me, Palo Alto is still a more viable product when you get up to what I call financial services, enterprise-level service customers. 

I would rate it an eight out of 10 for its ease of deployment and its ubiquitous approach to network security. 

Our primary use case is mainly for firewalls. We tried FortiClient as well and FortiToken, but we mainly use it for the firewall.

The solution is deployed on-prem. We are using the latest version.

The most valuable feature is the interface, which is very user friendly. We are utilizing most of the features, like content filtering. The firewall is powerful.

The renewal price and the availability could be improved. We faced a lot of delivery issues because of the pandemic situation. We are a customer, but sometimes we have sister companies, so we deliver or order a few extra boxes. In these cases we are facing some delays, like three or four months. There are a massive delays in deliveries and they're saying that it's from the vendor itself. I don't know how long this will last or if it's just temporary.

We have been using this solution for six to seven years.

The solution is stable. The only issue is the renewal price, which is always higher compared to the purchase price.

We have two people for maintenance from network and security.

We have up to 100 users, and we are pretty satisfied. It's stable. We have never had to scale up because of the newest model. We go with C, E, then F, but at the same level, we never had to upgrade the hardware itself to a higher or a bigger model.

We raised a few tickets and issues, and they replied to us. It was pretty good. We have never faced any problems with getting our issues resolved.

It was straightforward. We didn't face any issues.

We implemented through a reseller and it took couple of days. There were some modifications and configurations that took more time, but the core configuration took a couple of days.

The renewal price is always higher compared to the purchase price.

Fortinet is one of our top products, our main products. They have 75% market share, so we cannot ignore the fact that they are in the market, but I need an alternate solution. I don't want to depend on only one vendor, so I think Sophos will be a good option for us.

I would rate this solution 8 out of 10.

We primarily use the solution for its security features and performance. We enable features that assist with web filtering, application consoles, and IPS.

The performance of the solution is very good.

The product offers very good security.

It's pretty easy to install the solution.

The cloud management should improve. There are other manufacturers that have better management cloud solutions. Aruba, for example, is very good at this aspect. Fortinet could look to them as a model of how to do something interesting with management solutions.

Fortinet across the board needs to improve the LAN aspect of their products.

The solution lacks multi-language support.

They could offer access points to small companies and firewalls at those access points. Aruba, in that sense, is much better for smaller organizations as they provide this possibility.

We've been using the solution for a few years at this point.

The solution is quite stable. You don't have to deal with bugs or glitches. You don't have it freezing on you. It's reliable.

The solution is pretty scalable. It's flexible. It works with the organization and allows you to expand it as necessary.

In my company, we use FortiGate across several locations. The location with the most number of users has maybe 400 to 500 employees. That said, there is another FortiGate that manages the traffic that goes to the internet for all of the users across locations. We must have around 900 users.

We do plan to continue to use it going forward.

The solution does have different levels of support. If the problem is critical, you can escalate it quite well and even get telephone support.

That said, in terms of telephone support, they need to have support provided in the Spanish language. Right now, this is not the case.

While we concurrently use both Sophos and Fortinet, we're working towards just using Fortinet. I find that the performance of Fortinet is much better than Sophos.

The solution's initial setup is not complex. It's pretty straightforward. In my case, I have many years of expertise working with FortiGate and therefore it was not difficult. It's quite good and easy to manage.

How long it takes to deploy the solution, depends on what the customers ask you to do. More or less, however, it might take maybe one day to make the initial setup of the unit and the configuration that the customer requests. It may take another day or two to put it on service and check that everything is working properly, once again, based on the requirements of the customer.

I work mostly with firewalls and network equipment including firewalls, switches, and routers. I don't just work with Fortinet. I also work with Sophos, Cisco, and Aruba.

We're using the latest version of the product currently.

Overall, I would rate the solution ten out of ten.