Fortinet FortiGate-VM Reviews

It's crucial for protecting my internet network. It works well internally.

Fortinet FortiGate-VM improved security within our virtualized environment.

However, I would rate the ease of management a seven out of ten, with ten being the best. 

The policies are very valuable. They allow me to secure and manage future traffic effectively.

The biggest area for improvement is storage configuration. It could be smoother.

I have been using it for four years. 

When it comes to stability, various factors are involved, including partners, configurations, and third-party integrations. 

However, we do use it, and it seems reliable and secure for most situations.

The company that acquired us already had similar technology in place, so there wasn't a significant change when they integrated FortiGate-VM.

We have around 60 end users in our company using this solution. It is a very scalable solution.

It's a new technology, and we're still learning. Support is crucial.

Neutral

The initial setup is straightforward and quick.  

We moved the equipment to the site, connected it to the internet, and configured it through the console.

I took a consultant's help.  

It improved security a lot.

My recommendation is: If you use FortiGate-VM, make sure your infrastructure is good first and that power generation is very stable. 

We use the solution for our private cloud.

We use Fortinet for everything in our organization. Our organization has Fortinet experts. The virtualized network features work fine. The flexibility is fine. It’s easy to integrate the solution with our network infrastructure.

We face some issues with the IPsec connection during replication. It must be improved.

I have been using the solution for six months.

The stability is fine.

I rate the tool’s scalability an eight out of ten. We have many users in our organization.

The initial setup is complex because we use CLI. The solution is cloud-based. We have moved our on-premise VM to a private VM.

I have used Netgate. I prefer Fortinet FortiGate-VM.

Overall, I rate the product a nine out of ten.

We use Fortinet FortiGate-VM as an edge firewall for Internet traffic control and as the main firewall for cloud environments. Whether they're on AWS, Alibaba Cloud, or another platform, FortiGate-VM serves as the primary firewall.

One notable feature is the SD-WAN, which is a strong component of the FortiGate-VM. The fabric feature is also good, but not all customers use FortiGate's networking components, such as the switches. We enable various protection features on FortiGate, such as IPS and web application security. Most customers utilize these protection features to enhance their security.

Integrating multi-factor authentication with FortiGate-VM can be challenging. While multi-factor authentication is important, not all customers have it enabled. Integration with third-party solutions like ManageEngine or Duo can be complex and sometimes problematic during testing. However, high availability works smoothly with FortiGate-VM. We use high availability, and SD-WAN features effectively; overall, the performance is good.

I have been using Fortinet FortiGate-VM as a reseller for eight years.

The stability is good.

I rate the solution’s stability a nine out of ten.

We implemented it for more than one thousand users.

I rate the solution’s scalability a ten out of ten.

Support from the engineering team has some weaknesses. Sometimes, they focus on closing tickets quickly or asking for logs without thoroughly addressing the issue. However, the support team includes knowledgeable and responsive individuals, especially those from non-Arabic backgrounds. 

Positive

Setting up FortiGate-VM is straightforward, but there is a step that can be a bit tricky. After installing the VM, you need to log into the CLI for the first time to set a static IP address if you have multiple interfaces. By default, interfaces will receive IP addresses via DHCP from the cloud service provider. You must disable DHCP on the additional interfaces and set static IPs to ensure proper access and configuration. You may have trouble accessing the firewall if you don't do this.

Issues with certificates and licenses often arise from the distributor, not Fortinet.

The setup process is generally easy. FortiGate is becoming popular in Saudi Arabia due to its user-friendly interface and ease of configuration compared to other vendors like Palo Alto. High availability setup is also simple and not overly complicated.

When comparing Fortinet to other vendors in Saudi Arabia, like Palo Alto, Fortinet stands out positively. In comparison to Sophos, many customers are currently switching to Fortinet. Fortinet's pricing is competitive, making it an attractive option.

To block HTTPS management traffic from the WAN, you must carefully manage the HTTPS settings. If HTTPS is not enabled on the WAN interface, you won't be able to block management traffic effectively. Some customers require HTTPS because of NAT services and use public IPs. Disabling HTTPS can disrupt management access. Better controls for managing the interface from the WAN side would be helpful.

Fortinet FortiGate is easier to configure and manage compared to Palo Alto. Setting up policies, routing, and VPN tunnels on FortiGate is more straightforward and faster. Palo Alto can be complex, requiring multiple steps to create a policy and manage interfaces.

FortiGate also excels in troubleshooting and logging. The logs are easier to read and provide better classification, making it simpler to troubleshoot issues. In contrast, Sophos is less effective for larger-scale operations and doesn’t match Fortinet’s capabilities. 

In cloud environments, we recommend FortiGate-VM because it integrates well with cloud service providers. On-premises, many customers prefer physical FortiGate hardware, particularly with VMware setups. However, FortiGate-VM is more commonly used for service providers like SCC, Alibaba, and AWS.

Overall, I rate the solution a ten out of ten.

They could simplify the troubleshooting process. Troubleshooting requires expertise, often necessitating the command-line interface (CLI). It could be more advanced and easier to use than other products.

Additionally, they could enhance support capabilities and a facility to communicate efficiently with the team.

We have been using Fortinet FortiGate-VM for seven years.

The product is stable. However, there are a few areas of improvement. I rate the stability an eight out of ten.

It is best in terms of pricing for small and medium-sized companies, where it stands out as a cost-effective and feature-rich solution. For larger enterprises, we emphasize the potential benefits of complementing FortiGate-VM with additional firewalls, such as Palo Alto, to enhance security and address potential vulnerabilities.

I rate the scalability a nine out of ten.

The initial setup process is easy. It can deployed on the cloud and premises based on the client's requirements.

There are products like Cisco Meraki that are more inexpensive than Fortinet FortiGate-VM. However, it provides better security features. Palo Alto's pricing is similar to that of the FortiGate-VM regarding quality for security features. It is reasonable.

FortiGate VM in a cloud infrastructure provides security benefits. It offers the same robust features and functionality in virtual, on-premise, and traditional data center environments. It protects against external attacks and internal threats through features such as web filtering, secure application filtering, and antivirus capabilities. These functionalities collectively enhance security measures, safeguarding against various potential risks.

It is extensible, as we can add as much functionality as we require. It is simple to add more resources. It has a flexible pay-as-you-go pricing model.

I rate it an eight out of ten.

We have a private cloud environment with two firewalls and a physical host with a total storage capacity of approximately 5 terabytes running on VMware. The private cloud is a payment services gateway processing transactions from 1,500 outlets nationwide. We have around a thousand virtual machines, and all of them use Fortinet. 

We like FortiGate-VM's IPS features and its ability to create multiple virtual firewalls. 

I have used FortiGate-VM for five years. 

Stability is one area where Fortinet stands out. We don't see dropped sessions or downtime. The hardware is extremely stable, and our utilization stays well below the limits. 

You need to upgrade your box to scale, but it's easy to migrate from one to the other. 

Fortinet support needs improvement. The response times are lackluster. Fortunately, the product is stable and we seldom have issues. Also, it takes months for them to deliver hardware when we order it. 

Neutral

It's easy to install and configure FortiGate-VM. One engineer can finish the job in half a day. 

You will recover your investment if you purchase the right size and use it for six or seven years. However, you'll lose money if you need to replace or upgrade the box after three years. It's critical to buy the correct size from the start.

FortiGate-VM is a little expensive compared to Sophos. You pay a fixed license for the box, but there are various options if you need to upgrade. 

I rate Fortinet FortiGate-VM nine out of 10. It's a solid product overall, but Fortinet support has a lot of room for improvement. I wouldn't recommend it for an enterprise use case. It might work, but you should test it first. They have various options, so you should pick one that meets your business requirements and your environment.

All firewalls, including Fortinet FortiGate-VM, provide similar features under the sync capability. The differences between them are minimal, with FortiGate-VM offering simplicity in use. It covers aspects such as intrusion prevention, web filtering, application control, routing, virtual domains, policy-based routing, and SSL.

For our customer, this product holds paramount importance. It is critical for them as we collaborate with government agencies, financial institutions, and oil and gas companies. Inspecting and controlling traffic, especially pertaining to credit cards, is crucial for their operations.

GitDM, like FortiGate VM, provides similar features to FortiGate appliances or cloud solutions. However, FortiGate VM is more suitable for heavy traffic and inspection compared to GitDM. Unfortunately, FortiGate VM lacks a dedicated SPU for inspection, and all features rely on CPU and RAM.

I don't have any specific improvements to suggest, but perhaps the pricing could be enhanced. Regarding updates, more frequent updates would be appreciated. FortiGate-VM is currently focused on providing very good firmware updates, automation, and top-notch features. It stands as a great product for now.

Based on our needs and the vulnerabilities we've encountered due to various downloads, I suggest integrating with Kaspersky Gateway. This integration would involve scanning and inspecting both official emails and spam emails. Our customer has successfully worked with Kaspersky Gateway, and overall, the integration has been effective.

I have been working with Fortinet FortiGate-VM for 3 years.

In conjunction with the switch and based on the sizing, it indicates a suitable box or VM for the customer. If the level of mailbox is low, the stability will be good, and the box will not be in conserve mode. Regarding impressions of scalability, I would rate it eight out of ten.

The support team is excellent, providing assistance and resolving issues effectively.

The setup is straightforward for me, but our customers might find it a bit challenging. Overall, following the provided steps and consulting the official materials or documentation makes the FortiGate-VM setup relatively easy.Firstly, we establish a console connection to the firewall and access its default IP. In the second step, we create rules to enable the firewall to access the internet. Following these two steps, we register a rule with Fortinet Broadcom, download the necessary licenses, and upload them. After uploading the license, we set up an interface rule, check the license, and configure interfaces such as LAN, WAN, and VPN. Subsequently, we create profiles, including web filter, application, antivirus, and IPS profiles. The last steps involve configuring interfaces like LAN, WAN, and VPN, as well as attaching profiles to outbound policies. We also consider additional configurations, like server publishing, destination netting, or integrating with PBM for Alibaba Cloud. The final three configurations are optional and depend on the customer's requirements.

We can tailor the suitable license for the customer, whether they require UTB or enterprise features. The options are flexible based on their needs.

I would recommend Fortinet for large-scale companies and Sophos for medium or small enterprises. I would rate it 8 out of 10.

We are using Fortinet FortiGate-VM for network-level security.

There is a cloud and on-premise version of the solution available.

Our company deploys this solution to many companies.

The most valuable features of Fortinet FortiGate-VM are the ease of use, IPS system, application filter, web filtering, and email security. Additionally, there is a migration tool that other vendors do not provide. We only need to upload the configuration file to the tool, and it converts everything, except the passwords, and gives us the new configuration, which we can directly upload on the firewall. This migration process takes a maximum of 15 minutes.

The solution can improve by adding separate interfaces for proxy and flow-based usage.

In the next release, the web application firewall should be integrated into the hardware. There is separate hardware for the web application firewall and for  FortiGate.

I have been using Fortinet FortiGate-VM for approximately seven years.

I rate the stability of Fortinet FortiGate-VM an eight out of ten.

We have approximately 30 users and 30,000 users.

This is a scalable solution.

I rate the scalability of Fortinet FortiGate-VM an eight out of ten.

The support from Fortinet FortiGate-VM exhibits high responsiveness. Whenever I raise a ticket on their portal, they typically respond within 15 to 20 minutes. In urgent cases, we can contact them via a ticket, and an engineer will be promptly assigned to assist.

I rate the support from Fortinet FortiGate-VM an eight out of ten.

Positive

I have used multiple types of firewalls and vendors, such as Cisco Firepower. Palo Alto, and Sophos.

Palo Alto is a great solution but it is expensive. I would choose them over Fortinet FortiGate-VM but they are too expensive. For my use case, Fortinet FortiGate-VM is the best for the environment.

Fortinet FortiGate-VM has discounts for generalized partners.

The initial setup time of Fortinet FortiGate-VM depends on the policies and filters that need to be applied to different users. The time can vary a lot on the environment. Its time ranges from minutes to a month. However, we can do the process remotely and it takes approximately 10 minutes.

We do the implementation of the solution.

The license can be purchased at intervals of one, three, and five years.

The price of the solution is in the middle range compared to the other vendors. However, the vendor is increasing the price gradually.

One person is suitable in a 24-hour period for the maintenance of the solution. A three to five administrator maintenance team would be sufficient to cover all the maintenance shifts per week.

I highly recommend Fortinet FortiGate-VM to others.

I rate Fortinet FortiGate-VM a nine out of ten.

We use the product primarily in environments requiring robust network security and compliance, especially in the banking and enterprise sectors.

The platform has enhanced our organization's security posture by providing effective threat protection, bandwidth management, and SDN capabilities.

They could enhance the product's functionality for more comprehensive threat detection and mitigation, especially for large-scale deployments.

I have been using Fortinet FortiGate-VM for several years. 

The product is stable. 

The product is scalable. 

The initial setup of FortiGate was straightforward. It involved detailed planning for appliance selection based on user numbers, throughput requirements, firewall, IPS capacity, and VPN needs. 

We managed the implementation in-house, leveraging our expertise in network configuration.

FortiGate offers a favorable ROI due to its competitive pricing structure and effective network security capabilities, making it a cost-effective choice for our organization.

We evaluated alternatives like Checkpoint and Palo Alto. We chose FortiGate for its cost-effectiveness, robust performance in our specific use cases, and the comprehensive support provided by Fortinet.

The product's threat protection features have been instrumental in managing subscription-based licensing and ensuring compliance with regulatory requirements, especially in banking environments.

I rate Fortinet FortiGate-VM an eight out of ten.