Fortinet FortiGate Reviews

We are using Fortinet FortiGate SWG for web filtering, application control, and IDPS. Additionally, we utilize it for VPN and the main features of a firewall.

Web filtering is very good, as well as IDPS. SD-WAN is a perfect feature. Additionally, the VPN is stable and very good. These features have proven effective in protecting our network, handling large volumes of traffic smoothly without any issues.

More improvement in AI would be a good edge. We would like the VPN to act as a web filtering solution because users outside the company don't have web filtering. It supports web filtering with an additional license.

We have been working with Fortinet FortiGate SWG for more than nine years.

We did not face any challenges during the installation. The process was very smooth.

Fortinet FortiGate SWG works well, handling the whole traffic smoothly with no problems. We have not faced any issues with stability.

The solution is very scalable.

We haven't needed to work directly with Fortinet support recently. Seven years ago, the experience was not good, warranting a rating of five based on that past experience.

The initial setup took just a few hours, as it was completed on the same day.

The implementation involved two engineers.

There are financial benefits as Fortinet's products are considered good value for money due to their robust features, despite being priced higher than competitors.

Fortinet products are very expensive compared to competitors like Sophos and SonicWall. From a pricing perspective, I would rate them a six.

Fortinet FortiGate SWG is a leader regarding Gartner. It has a friendly user interface and is very secure compared to others with many features. I recommend it to other companies because of these advantages. I would rate the product a nine. The overall product rating is nine.

Hybrid Cloud

Microsoft Azure

We use Fortinet FortiGate IPS to enhance our network security. It is especially necessary to secure the edge of the company.

The whole IPS suite is valuable, especially with the updates from FortiGuard. It provides real-time updates, offering a good vision on any changes. For example, if the rating of a certain website changes, we can investigate potential malicious content with FortiAnalyzer.

The pricing of Fortinet FortiGate IPS could always be improved.

I have been using Fortinet FortiGate IPS for two and a half years.

The deployment of Fortinet FortiGate IPS was moderate in complexity. It took approximately two hours to deploy, depending on one’s knowledge, and it was carried out by four or five engineers in the company.

Stability is generally good, but if you include FortiOS underlying in the FortiGate, there are often some patches to do and some loopholes. I would rate the stability as eight out of ten.

The scalability of Fortinet FortiGate IPS is good, and I would rate it nine out of ten.

The technical support from Fortinet is rather good, and I would rate it nine out of ten.

Positive

I worked a little bit with WatchGuard, but I do not know a lot about it. I am only here for two years and do not have experience with other vendors.

The initial setup of Fortinet FortiGate IPS took about two hours and was of moderate complexity.

The implementation of Fortinet FortiGate IPS was carried out by my team internally with four or five engineers involved.

I rate the pricing with an eight out of ten. They could always improve the pricing.

No, we are not considering any alternatives for Fortinet FortiGate IPS. We are quite happy with the product.

I would recommend Fortinet FortiGate IPS as it is a core component of cybersecurity for our company. Having a FortiGate without IPS services doesn't make sense for us. I would rate the overall solution nine out of ten.

On-premises

We use different solutions from FortiGate, focusing primarily on their firewalls within our department. However, due to a reorganization, the operational maintenance of FortiGate is now managed by someone else.

The most helpful features of FortiGate include its firewall policy, specifically the user-based policy, which I find to be quite beneficial in managing our network security effectively. FortiGate has also provided reliable protection against many attacks, although it lacks the ability to detect specific attacks like SQL injection, which usually requires a web application firewall.

The main area needing improvement is the user-friendliness of FortiGate's integration with other Fortinet tools like FortiAuthenticator and VPN services. Configuring these services is quite complex and not very user-friendly, requiring technical steps that are difficult for normal users to understand. Fortinet support's resolution of issues is slow, and the research on making the solution user-friendly needs to progress further.

I have worked with FortiGate for more than eight or nine years.

We have not faced any stability issues with FortiGate since we specified sizable RAM and CPU, and our size was adequate for our traffic.

Fortinet provides a prompt response. However, the resolution process is slow. While their response time is quick, their ability to resolve issues takes a long time.

Neutral

We have previously used a solution called Cyberoam, which has been replaced with a new brand. There are also managed firewalls offered as a cloud solution that we have not considered yet.

In terms of cost-effectiveness, Fortinet tools like FortiGate are costly for us as a higher education institute in India. Our expenditure is focused on minimal levels, however, FortiGate's pricing is positioned for corporate levels, which can be inflexible.

We are considering replacing Fortinet with a different solution, taking about a year to change configurations and rules.

Fortinet should consider developing a pricing scheme for the education segment since educational institutions in India operate on non-profit terms and under government regulations. They could potentially follow Kaspersky's example, which provided a more affordable pricing model for students and educational institutes. 

As a product, I would rate FortiGate around seven out of ten.

On-premises

I work in presales exclusively. I work in the public sector, focusing on presales of architecture. I usually work with enterprise businesses rather than SMB businesses.

Fortinet FortiGate is a simple solution, and the integration with other solutions in the Fortinet portfolio, such as the Security Fabric integration, is competitive. It is simple for deployment, design, and integration with other Fortinet solutions. The SD-WAN capabilities are simple because the license includes this function, making deployment straightforward for Fortinet FortiGate clients.

The impact of the SD-WAN on network performance includes cost efficiency and automation. For performance, the solution is focused on the user experience with optimal path selection. Unified SASE secures remote connections for many use cases. We use AI and machine learning enhanced FortiGuard services and FortiAnalyzer to protect data centers through deep inspection and other functionalities.

Fortinet FortiGate is stable in the data center environment and in its functionality. It is scalable. The price is competitive in the market, especially when integrated with other Fortinet solutions. It has a return on investment without the need for additional licenses for products such as FortiSwitches and FortiAP.

I have 12 years of experience in total with Fortinet FortiGate.

Fortinet FortiGate is stable in the data center environment, and it is stable in its functionality.

The solution is scalable.

Their customer service is great because the TAC service in Latin America is available 24/7 in English and Spanish. I am happy with the service. In Latin America, when I call at night, the response is in English, and during the day, it is in Spanish. The only challenge is the language availability at night, but I rate it a 10.

The setup is simple and easy, with no difficult configuration required for the devices.

Fortinet provides a return on investment. When using FortiSwitches and FortiAP, additional licenses are not required.

I worked with the implementation and presales of Fortinet FortiGate in the past. In the past two years, I haven't worked with deployment, but I have experience with presales in the last year. I am familiar with the SD-WAN capabilities. The solution focuses on user experience because the path selection is optimized for the user or application.

I rate Fortinet FortiGate a 10 out of 10 as it is a great product.

We mainly use the Fortinet FortiGate for perimeter wall protection and internet usage, protecting our network from internet threats and our endpoints, so we've set it at a perimeter level.

The main benefit I have seen from using Fortinet FortiGate is the protection it offers because I can see threats that come through in real-time, and if they are blocked, I can see that. We are able to customize those features, and it's so customizable that I can tweak it to fit our environment; it has really been helpful.

The hardware-assisted DDoS protection in FortiGate has helped us. We are able to monitor traffic in real-time and block it as needed. We have enabled this feature in every policy we created, so it consistently checks for any threats.

What I appreciate about the Fortinet FortiGate is the throughput and the management aspect; it's easy to manage. Unlike what we used before, initially, we had Microsoft Forefront, so moving from that application-based to a firewall which is appliance-based was really helpful. 

I would like to see the licensing aspect improved because there is a feature we were yearning to use, the bandwidth monitoring feature, but it's licensed separately. It's not bundled with the enterprise bundle, and since we normally buy the advanced hardware support annually, we found out that the license is licensed separately. If they could bundle it together, it could really be helpful to us.

We've been using it for the last seven years, and it has been helpful. We are looking forward to upgrading as the one we are having is at the end of life already. We are planning to upgrade to the latest one, and we are looking forward to the features it will offer.

I have been working with Fortinet FortiGate for seven years.

I haven't faced any downtimes, crashes, or issues with it; it's very stable.

It is scalable.

My experience with technical support for Fortinet FortiGate has been excellent. I would rate them nine out of ten; they've been really good.

I decided to move from Microsoft to Fortinet FortiGate. Fortinet and Cisco were rated highly worldwide. We compared those two and settled for FortiGate because of its manageability. The Microsoft firewall used to fail frequently, so we didn't want to go to another Microsoft product.

The experience with the initial setup and deployment process of the Fortinet FortiGate was complex, especially in terms of linking users. In our environment, we normally use the feature for Active Directory, and we don't give everyone internet access. We've enabled this feature called SSO linked to our Active Directory, and we create groups there. Setting that up initially was really tricky, so we had to engage the support team to sort us out. However, moving forward, it has been very good.

There are no challenges with updates and upgrades. They are straightforward. We have support from Fortinet and the local partner. 

We had a local partner here helping us with the initial setup.

It has worked and surpassed our expectations. We've really benefited from that.

It's pretty average compared to our environment.

My advice for other users looking into Fortinet FortiGate for their environment is to choose one that will serve them based on their needs, whether that's throughput or the number of users. That's really important to ensure they don't do an overkill, as we initially thought we went for a big firewall, only to realize later that it was the right choice. For our upgrade, we'll just go for a bit higher, but generally, it really serves us. 

I would rate Fortinet FortiGate a nine out of ten.

We are using Fortinet FortiGate for branch-to-branch connectivity. It handles internet outages, internet breaks to the cloud, and internet connectivity to the internal systems in the branches.

The SD-WAN and VPN tunnels are the best features of Fortinet FortiGate in my opinion. My major workload runs on Fortinet FortiGate, as it serves as the main backbone of the network.

The firmware in Fortinet FortiGate needs improvement. Some firmwares have many bugs, such as filter issues and VPN connectivity problems. Last month, with version 7.4.6, we experienced web filter issues. They need to fix the bugs before releasing firmware.

We have been using Fortinet FortiGate for up to 15 years, and it performs well.

In my opinion, Fortinet FortiGate is a stable solution.

Fortinet FortiGate's scalability is flexible and scalable.

The customer service and technical support of Fortinet FortiGate rates seven out of ten. The technical support and RMA process are acceptable. We don't raise many tickets, but when we do, we receive late responses for technical tickets, which is why I rate it seven out of ten.

We used Palo Alto and Cisco Meraki before choosing Fortinet FortiGate.

The initial setup of Fortinet FortiGate is very easy.

We used in-house resources for our setup instead of an integrator, reseller, or consultant.

We currently have approximately 110 Fortinet FortiGates and 40 managers. Each year we increase by almost 10 to 20 FortiGates. We are also considering FortiSASE and have discussed this with Fortinet FortiGate. We are planning changes in return on investment from this solution this quarter.

The pricing depends on market competition, which is high because Cisco Meraki and Palo Alto offer similar costs for pricing, setup, and licensing of Fortinet FortiGate. They need to compete with lower margins as prices are getting high for Fortinet FortiGate.

We are currently using Palo Alto and Cisco due to some issues with the Fortinet FortiGate sales people. We have installed equipment in almost four locations, and we are using these three solutions simultaneously.

We are planning to implement SASE and have already discussed this with Fortinet FortiGate. We are currently only discussing the possibility of using SASE.

The integration of SD-WAN capabilities with Fortinet FortiGate has positively impacted application performance. The implementation is straightforward for new users. My experience in integrating SD-WAN capabilities with Fortinet FortiGate has been excellent, rating it 10 out of 10.

Overall, I rate Fortinet FortiGate 9 out of 10.

On-premises

Other

We deal with messaging, specifically A2P, P2P, and RCS, a rich communication service.

We use Fortinet FortiGate 500, 600, and 900E, which are mainly used for data center activities.

Fortinet FortiGate has helped us significantly in many ways. Previously, we had multiple data centers interconnected over IPsec tunnels. Each IPsec tunnel was individual, and if that tunnel went down, manual intervention was needed to reroute the traffic to the available path. To avoid such cases, I introduced the SD-WAN concept using ADVPN (auto-discovery VPN). With this solution, I have almost four sites where critical traffic flows, avoiding many impacts. The reason we prefer Fortinet FortiGate SD-WAN is that it enables automatic establishment of the next available VPN if any connectivity goes down, ensuring all hub and spoke connectivity flows through the hub. Using ADVPN, spoke-to-spoke communication is established so that hub bandwidth or hub firewall does not get overloaded.

The best features in Fortinet FortiGate are the SD-WAN, IPsec tunnel, and the SSL VPN. It is very user friendly, and we can integrate multiple underlay links to the firewall. From there, you can manage it, and by using this SD-WAN concept, the device itself will make decisions about which path to take to reach the destination. If there are any issues on the desired path, it will automatically select the best path based on the configuration defined in the SLAs. This feature is particularly impressive. Before introducing SD-WAN, I had perimeter devices such as independent routers where intelligent routing across the underlay links was not possible.

It is very informative and easy to implement. The GUI is very user friendly. Using this solution, we can easily integrate security profiles based on needs and requirements of internal stakeholders to avoid malicious traffic or security-related issues.

When onboarding any Fortinet FortiGate to your production platform with active internet connectivity, the device connects to FortiGuard to fetch all signatures and behavioral patterns based on your security policy. It detects anomalous traffic and packets undergo deep inspection. If there are any anonymous or malicious activities, it immediately blocks them based on defined policy actions and alerts the end user and network administrator via FortiManager or via the cloud.

I don't have any areas for improvement in terms of features. With the introduction of AI/ML, they are performing behavioral pattern checks in terms of security. They have removed the SSL web-based and tunnel-based features, and they are improving in many aspects including the UI. However, throughout this year, their support has been very poor.

We have been using Fortinet FortiGate for more than 10 years.

It's stable. I would rate it a ten out of ten for stability.

It's scalable. I would rate it a ten out of ten for scalability. 

We have clients with more than 2,000 users.

Their support needs improvement. When raising a service request on the portal, it normally takes two to three days for a response. Even for production issues, they do not initiate contact. The customer has to call the TAC before they schedule calls, which is problematic.

Neutral

The deployment is very easy. People who are familiar with Fortinet FortiGate can implement it through CLI and GUI. It is very user-friendly for deploying complex configurations. There is also a tool called FortiExporter, which can convert all configurations from any OEM to Fortinet FortiGate.

It doesn’t require much maintenance. The only maintenance activity required is firmware updates.

We have approximately 84 devices in production, demonstrating our investment in Fortinet FortiGate and its usefulness in many ways.

We have invested almost 60% to 70% in Fortinet FortiGate as we don't have any other firewall apart from it. In some cases where we had Palo Alto, we removed it and purchased Fortinet FortiGate. We are using Fortinet FortiGate as our production firewalls in our organizations, corporate offices, and all locations.

It's economical.

In terms of cost, features, and security, everything is top-notch. I would recommend everyone to use Fortinet FortiGate instead of purchasing expensive firewalls such as Palo Alto and other OEMs. It is more economical and provides more flexibility and granularity in terms of access.

Fortinet is a market leader. It is phenomenal in terms of price and kind of services.

I would recommend Fortinet FortiGate to others. I would rate it a ten out of ten.

On-premises

A typical use case for this solution is that we have small to medium-based customers, and we need a central firewall, which should provide firewall and next-generation features, VPN for home office, and for mobility users, mobile users, and this is what we all use with the Fortinet FortiGate firewall.

Fortinet FortiGate has positively impacted my client's organization because we have know-how of FortiGate; we could debug problems, we could set up our settings as planned, and I appreciate the easy way of configuration, that we can use parallel GUI and CLI, or CLI and web interface, which we can use in parallel. It is a product that we can use very easily.

Fortinet FortiGate can be improved because we have some smaller customers, and with the SMB or small customer solutions with the two letters, 50, 70, 90, they sometimes cause problems. They could improve the smaller devices. One issue is that they have retired SSL VPN for existing devices. This causes significant effort for us to change customer setups. Additionally, they changed features when we only make a patch update and not only a major update. This is really a problem.

I have experience working with Fortinet FortiGate for 20 years, and I wanted to see if we have the right product because we have some problems currently with Fortinet.

I find Fortinet FortiGate to be a stable solution.

It is definitely a scalable solution.

I rate technical support seven out of ten because we made a migration from a FortiGate 200 on another customer side, and we wanted to switch a FortiToken from one model to another one, which was only possible with support. It worked, but we needed about 10 different calls; it was really complicated. Support helped, but people changed every time. Every call, we had a call number, and in each call, people changed, so we had to explain again what we wanted to do. For a similar process, we had to make two different calls, one for mobile token, one for hardware token. This was really challenging. Support is working and good, but it's not perfect.

Positive

We've used Sophos firewalls, but we don't use them anymore because they cause too many problems for us.

The initial setup of Fortinet FortiGate is straightforward.

I haven't seen an ROI with Fortinet FortiGate.

My experience with pricing, setup costs, and licensing of Fortinet FortiGate is okay. We won a deal in comparison to Check Point where FortiGate was much cheaper. Compared to Sophos, the base models seem to be cheaper with Sophos, but the services seem to be cheaper with FortiGate.

I remember doing research on peerspot.com about IT solutions. I wanted to investigate differences between firewall competitors or firewall vendors and Google led me to their site. I have checked a few reports, and they have not been very useful for us. For comparing different vendors, I was also led to their site. They have different types of reports, including user voices and Palo Alto Networks review tips and advice from real users in an 80-page long report. They have market shares and rankings and customer voices, but the customer voices point to a single feature, so I don't get an overall picture of the comparison.

My relationship with Fortinet is that we are a reseller. We have made some tests with SD-WAN but have not introduced this product into production. We use Fortinet FortiGate firewalls and some next-generation fire features proxy, but we don't use SASE. We utilize NPS services, FortiGuard services, antivirus, and malware protection. My clients are typically small to medium businesses, with customers from about 20 to 500 people. I would rate Fortinet FortiGate overall as a seven based on my experience in the last year. Before it would be an eight, but now it's seven because of the problems with the SSL VPN. Additionally, we bought some 50G models that still have a 7.0 firmware, which is really old, and this is not good.

On-premises

Majorly, I use Fortinet FortiGate for establishing SD-WAN in different remote locations. I also use it for segmenting wireless from LAN and implementing basic policy routing for departments. The next-gen features on Fortinet FortiGate permit proxy access, where URLs can be specified for specific users or departments to access.

Fortinet FortiGate has several valuable features. The configuration and policy setup are easy to implement. There are embedded features in Fortinet FortiGate, including DLP features, WAF presence in the firewall, and proxy capabilities. It has security profiles that can be set for various functions. In terms of security, it is particularly strong.

SD-WAN offers better reach, good reachability, and enhanced performance for network optimization. People implement SD-WAN today because of reachability and network optimization capabilities.

Fortinet FortiGate is effective in protecting against malicious access. It has a robust security architecture, which is something I truly like about FortiGate.

The SD-WAN integration is very simple. I appreciate the simplicity of the FortiGate system. It's one of the things I like most about it. With FortiAI, it's very easy to input your queries, and the system helps you set it up. If you prefer to do it manually, there is excellent documentation and step-by-step guides available to assist you. For me, the experience has been seamless and straightforward.

I cannot think of many improvements needed for Fortinet FortiGate. However, the pricing compared to competitors is quite high, though you get value for what you pay with Fortinet FortiGate.

With FortiSIEM, I have experienced some challenges. It has been suspended and is not available for utilization now. They should work on improving FortiSIEM.

I have worked with both virtual appliances and physical devices, primarily with hardware devices, for over five years. The models I have used include 60, 100, and 201 series.

Fortinet FortiGate is one of the best firewalls available. There are no crashes or performance issues. It is very stable and reliable.

The solution is scalable.

I have worked with Sophos and Check Point firewalls. Fortinet FortiGate leads compared to other solutions. Based on customer requests, we provide different options. I recommend people should consider Fortinet or Sophos, depending on their needs. Fortinet FortiGate performs well against other firewalls in the market.

The hardware is easy to set up. I have only had issues with the activation of the evaluation license. 

There has definitely been a return on investment with Fortinet FortiGate.

The pricing depends on the capacity required. There are 100 series, 200 series, and 500 series options. The prices are moderate and reasonable for each series.

For organizations using Fortinet FortiGate, it is important to utilize the security profiles properly. Make sure anti-spoofing is set up and networks are well-segmented on the Fortinet. Ensure proxy configuration is based on URL access stability.

I would rate this solution a nine out of ten.

On-premises

We are using Cisco for the core switch, and for the firewall and WAN security, we are using Fortinet FortiGate. For distribution switches, we are using Ubiquiti. 

We are using the 200F series of Fortinet FortiGate for our main branch and model 60 for our branch offices at five locations. We have connected a site-to-site VPN with Fortinet FortiGate. 

We have used multiple WAN ASPs and set up SD-WAN. It's quite interesting and user-friendly; essentially, anyone can configure it. All you need to do is go through the documentation, and you'll be able to set it up directly. We experimented with Cisco and other devices, but found them to be somewhat challenging. Additionally, there are commercial aspects to consider. However, with FortiGate, everything is bundled together, eliminating the need to pay extra for SD-WAN management.

Performance-wise, we have great output with SD-WAN in our network. Earlier, when we were using it without SD-WAN, it was very difficult, and our IT team's effort was greater. After this SD-WAN configuration, we have no need to worry about whether the link is going down or not. We just get the notification, and at that time, we work on it. There is no need to run behind that.

The only issue is their renewal pricing. For more than 10 years, we have been customers of multiple Fortinet FortiGate security devices, and every time, it's at a high price. It is very difficult for small companies, especially in India. If Fortinet can reduce the renewal price a little bit, it can expand and target small businesses as well. Currently, only medium and large-scale organizations can afford it. Startups and small companies cannot afford it. The renewal cost is very high. When we get the equipment along with the license, it's acceptable, but the next renewal after one or three years is very expensive compared to other firewalls.

We have been using Fortinet FortiGate for more than 10 years. It's the fifth device we are using. Earlier devices reached the end of life. After that, we moved to the next product.

Fortinet FortiGate is absolutely scalable enough for our needs.

We have more than 400 employees, and there are six branch offices connected. The branch offices are connected with site-to-site VPN, and multiple roaming employees or working from home employees are connected with SSL VPN. More than 100 people are connecting at a time. We only need two IT people to maintain the security devices.

We very rarely raised tickets with Fortinet. Only on one occasion, when the FortiCloud account was locked, we raised a ticket. Apart from the configuration part, we never contacted them. They were very supportive. With that particular ticket, we got help immediately.

Positive

We are also customers of Cisco and Ubiquiti. We have a core switch, 9000 series switches, and Ubiquiti equipment.

I have earlier worked with Cyberoam and Sophos as a partner. They have a range of devices, and the renewal price is also lower in Sophos compared to Fortinet FortiGate.

I was involved in the deployment of Fortinet FortiGate. The deployment process of Fortinet FortiGate is very straightforward, and since we have experience, it's very easy for us. Even for freshers, if they have basic theoretical knowledge of the setup, they can easily implement it. 

It's deployed on-premises. We are not planning for the cloud. Our clients are not comfortable with the cloud solutions.

We deployed it ourselves with one or two people for the deployment.

The renewal cost is much higher than other firewalls. It is not reasonable.

I would definitely recommend Fortinet FortiGate to others. 

My experience with Fortinet FortiGate has been good overall. I would rate Fortinet FortiGate an eight out of ten.

On-premises