Fortinet FortiGate-VM Reviews

My primary use case of this solution is for advanced security in the cloud, as well as SD-WAN and branch connectivity. We use version 6.4 and are just now moving to 7.0. 

FortiGate-VM has many valuable features: it's easy to use, it's intuitive, it's got very good traffic inspection features, it's got comprehensive filtering categories, and it has an extensive threat database, using FortiGuard. 

FortiGate-VM could be improved by making it cloud-based. I'd like it to be a cloud-based management solution instead of just a dedicated management orchestration tool. 

I have been using FortiGate-VM for five years. 

Personally, I like Fortinet support. I know other colleagues and people think it's slow, but I don't.

I used FortiGate for 10 years. I also have experience with Azure Firewall Premium, Cisco ASA, and Cisco Firepower. 

The installation is really easy. There's HA deployment in the marketplace involving Azure and AWS. I handle the installation myself. 

I implement this solution myself for customers. 

There are yearly or monthly licenses which you can choose from. 

I rate FortiGate-VM an eight out of ten. I recommend this solution to others. There's a use case, like any cloud-based firewall. 

We're an MSP, so we sell, configure, and manage these solutions for customers. 

My primary use case is for controlling the internet in our organization, as well as for our VPN for those working from home. I also use it for routing the connection to stores so we can access them.

This solution allows us to easily access the stores from where we are. It also blocks a lot of websites that we don't want to allow access to during working hours. It has also made our network more secure, and it's now much harder for people to intrude into our network.

The most valuable feature is that its IPsec works perfectly. The work filter also works perfectly - it's able to detect anything coming in that is not supposed to be on the network.

We have had some issues with connecting to the VPN from home after firmware updates, which could be an area for improvement.

I have been using this solution for about five years.

I think the product's stability is very good.

The scalability depends on what you want to use it for - previously, we were using 60D, and it wasn't accommodating some features we wanted, so we had to go to 100D.

The technical support is very helpful.

I previously used pfSense but found it was a bit complicated in terms of configuration and didn't give periodic updates. I switched to FortiGate because they were very consistent in giving updates on outbreaks and what they were doing to resolve them.

The setup was straightforward because of the integrator's help. Deployment took about two days, and only my assistant and I were required for deployment and maintenance.

I implemented through an integrator.

Our main ROI has been the extra stability on our network - since we implemented this solution, we haven't had any major attacks.

The cost of this product is too high on a yearly license. The license can be renewed on a monthly or yearly basis. There are additional costs for extra features.

To me, this is one of the best firewalls I've ever used. I would rate this solution as nine out of ten.

Fortinet FortiGate-VM is easy to use.

The performance could be better. Some features need to have quality control when the switch is working. The dedicated bandwidth for some users is not reliable.

I have been using Fortinet FortiGate-VM for approximately one year.

I have found Fortinet FortiGate-VM to be stable.

We have approximately 150 people using the solution.

The technical support could improve. They took approximately one month to solve a firewire issue to update. I would not recommend it.

I have used Sophos previously and I could it to be better. However, we have found the performance to be the same as Fortinet FortiGate-VM.

The company that provided the solution that was installing it took approximately three days.

I can do the implementation by myself. I do the maintenance and support of the solution.

There is an annual license required to use the solution.

I rate Fortinet FortiGate-VM a seven out of ten.

We primarily use the solution for our internal worldwide corporate network.

It's allowed us to have fewer personnel requirements in relation to maintenance. 

The maintenance part is definitely quite easy. We do not require any additional manpower to maintain this. It's quite simple and it has the least required manpower over it based on an individual unit.

The initial setup is pretty simple. 

The solution can scale well.

The stability is quite good.

Right now, we are totally satisfied with this solution. There are several units worldwide. We have only one unit at our Kolkata location, and we are satisfied as of now in terms of its capabilities.

Price-wise, it could be slightly better, however, if you compared it to other makes and models of equal category, it is generally cheaper.

I've used the solution over the last seven months. 

The stability has been good. Its performance is reliable. There are no bugs or glitches. it doesn't crash or freeze. 

The scalability is there. When taking into consideration our business environment right now, I find that this is capable of handling all the requirements until the end of 2022.

Right now in the Kolkata office, we are around a hundred people - and that is in the Kolkata office only. If you talk about India, then we have around 250.

We do not plan to increase usage at this time. However, in the future, scaling may be required. 

I've never directly dealt with technical support and therefore cannot speak to how helpful or responsive they are.

We did previously use a different solution, however, the main office makes the decisions around product changes. They may have chosen this product as it is less expensive. 

We had been using a British Telecom hybrid VPN solution. In April, we stopped that and migrated to this new SD-WAN connectivity solution based on the Fortinet firewall. 

The implementation process was not complex or difficult. It was straightforward. 

The deployment takes around two to three hours.

Maintenance aspects are handled by the vendor. 

The implementation was done by our vendor as well as our internal team.

We won't have a sense of an ROI until we've used the solution for another year and a half. 

The pricing is pretty reasonable when compared to other solutions of the same caliber.

We pay a yearly licensing fee. I do not know the exact costs, however, as that is handled by the team in Luxembourg.

We don't make product decisions. Decisions of that scale come from Luxembourg. 

We are a customer and an end-user.

I'm not sure which version of the solution we're using.

I'd rate the solution at a nine out of ten.

We're using FortiGate-VM on-prem for our firewalls. The Fortinet component in the cloud is FortiGuard. We get our virus definitions regularly updated from the cloud, but the FortiGate firewalls are all on-prem. While the virtual firewalls are created inside the physical firewall, there is an option for a virtual machine firewall where we'll give you the VHD file, and you can install it to a server.

Virtual machines aren't widely used in Brunei because the Brunei government isn't ready for these things yet. They're more confident in hardware, but everything is slowly starting to head in this direction. Others are watching what will happen when people use the apps before they try them.

Some customers prefer VM, especially those customers already leveraging the virtual machine environment. Typically, they don't want to spend on the hardware because they already have all these VMs, so they choose the VM option. But in most deployments, they still prefer the hardware for their firewall because it's already hard-coded.

To improve FortiGate-VM, Fortinet needs to harden it more. For example, if you are using Hyper-V, then you need guidelines for hardening FortiGate-VM that are specific to the Hyper-V environment. If it's VMware, there should be at least a guideline on how to harden the firewall.

We've been working with FortiGate-VM since 2010.

Fortinet-VM is more scalable than the hardware version. If you're using an appliance, there are limitations in terms of hardware specs. So if you want a more scalable firewall, you can get a VM and install it on a high-end server. From there, you have more leverage on how many virtual firewalls you want to create based on that VM. In other words, it's already fixed hardware in the appliance — it's already hard-coded in the appliance. So if you are using a VM and installing it on a high-specs server, then your machine has much higher performance in packaging all these policies and all these hardware security features. 

We proved the frontline support for our client organizations or customers. So far we are satisfied with Fortinet support. We have currently have Fortinet-certified engineers in our company, so we don't have to contact support unless it's a complex issue. We have an NSE7-certified engineer, so we are quite confident with our deployment now.

FortiGate-VM setup is pretty straightforward. It depends on the implementation size, but it takes a week for an organization of around 100 users. Normally Fortinet helps their customers with deployment and post-deployment adjustments, so you don't have any problems. If anything goes wrong, Fortinet is there to support you. 

Like most similar products in the market, Fortinet's enterprise customers need to pay for annual support. They call it FortiCare, and it's direct support from Fortinet. FortiCare is renewed annually and covers support for new releases, purchases, and updates. 

I rate Fortinet FortiGate-VM eight out of 10. However, based on experience, we usually don't recommend using VM firewalls. We still prefer using a hardware-based firewall when that's appropriate. It depends on your needs and the size of your user base. With FortiGate-VM, you can control the size of your firewall if you're using VMs. But on the other hand, if you are using Microsoft Hyper-V, you need to address all these vulnerabilities of Microsoft. And if you're using VMware, then you need to deal with VMware's vulnerabilities. The hardware version of FortiGate has already been hardened based on FortiGate standards. That's the main difference between the FortiGate appliance and FortiGate-VM.

FortiGate is an Exhibition Firewall that comes with the Antivirus, IPS, and Web Applications

The most valuable features are the IPS and Antivirus.

The firewall functionalities are fine.

It has a lot of features.

It needs an Application Inspection. The threat landscape is very high. Anyone can exploit the flow-based policies. It is always better to have intern-based policies.

I have been using Fortinet FortiGate-VM for more than two years.

We are using the latest version.

Fortinet FortiGate-VM is a reliable product.

It is easy to scale this solution, but there are some challenges with Azure and high availability.

My experience with technical support was good.

We are also using Palo Alto.

The initial setup was simple.

We don't require a lot of maintenance. Most of the maintenance is carried out by Microsoft.

It is a custom operating system that is available on FortiGate Firewall, and Palo Alto Firewall.

Microsoft doesn't do anything in terms of upgrades of the patches. They only do basic maintenance at the host level and the VM level.

We only have one person managing the device.

We were able to complete the installation on our own.

Pricing is somewhere in the middle. It's a mid-ranged product.

There are additional fees with this solution.

I would recommend this solution to others. It is a stable firmware, with many releases. It has a lot of features. Apart from the firewall, it comes with antivirus, IPS, and Web Application Firewall.

It has a lot of integration with external connectors, such as Teams, that are protected from threats that come from external sources.

I would rate Fortinet FortiGate-VM an eight out of ten.

The use case for VMs is if you're going to deploy them like a SaaS edge, to protect your applications or provide deeper visibility into the traffic. Or you could use it in your data centers as well. However, that's not our preference.

We primarily use the solution for network segmentation at our data centers and remote connectivity to our distributed sites.

We were able to take advantage of their management tool, FortiManager, to get a single pane of glass. FortiManager and FortiAnalyzer do not have a single panel glass. Rather, they are two panes of glasses to manage and monitor the firewalls where previously we were using Cisco. I don't want to call them legacy firewalls, however, with Cisco firewalls, we didn't have that management or logging visibility.

The product has pretty good logging and reporting capabilities native to the firewall. Then they also use FortiAnalyzer to aggregate that traffic and provide more detailed and aggregated reporting. That's going to help when you're analyzing network traffic for network segmentation initiatives.

The stability is excellent.

It's very easy to set up, even for more junior developers.

The scalability has improved. 

It's got a clean interface and it's very intuitive. Everything is easy to navigate.

Their offering for MFA isn't the cleanest. They have a product called FortiAuthenticator. It's not a FortiGate but that is one of their MFA offerings. However, other products that I've used, like Duo, are better from a user experience standpoint. They are easier to configure. 

I've been using the solution for ten years. It's been a while. 

Six or seven years ago, they had issues with code versions where they would make changes within the code version and they would have some bugs. That said, over the last six or so years, their releases have been very stable. We've had very few issues with any type of bugs or issues.

Scalability has gotten better with their SD-WAN offering. They're able to utilize inexpensive lines such as 4G, 5G, or DSL. It has allowed us to move away from expensive MPLS lines.

Historically, conventional or Next-Gen firewalls have been utilized at data centers and remote sites. Now, however, a lot of customers are moving towards Zero-Trust access and SASE. I'm currently looking to get a little bit more information on Zero-Trust architecture, as it reduces the overall management and need for physical firewalls in all your locations, which can get expensive.

We also use the Cisco ASA firewalls. I do find that Fortinet is easier to handle than Cisco as you don't need to handle tasks via the command line, which makes it easier especially for junior-level developers.

The initial setup is very straightforward. I started out in the Cisco world with Cisco firewalls and switches. Then we started deploying FortiGate and I found that FortiGate was easier to learn, especially for junior-level engineers. We were able to get junior-level engineers up to speed quicker than if it was a Cisco platform, especially if they haven't used the command line before.

Deployment usually takes a day, depending on the complexity of the firewall. It might be a day to two, depends on if we are using multiple IPSec tunnels if it's at a data center or a remote site. 

In terms of deployment and maintenance, in my experience, by a rough order of magnitude, a company would need one technician per 30 firewalls. For our company, we had a team of three network engineers and we had a fleet of about 120 firewalls.

I handed the implementation myself with my team. We didn't need any integrators or consultants.

For our entire fleet of 120 firewalls, we're paying about $100,000 per year. The licensing fees give you support and the capability to download updated definitions of threat intelligence from Fortinet.

I was previously a customer. now I am a reseller and Fortinet partner.

We primarily use hardware-based appliances, including the 100 D/E series, 100F, 190 D/E's, ADCs, 600 E's. They are similar to VMs.

We're using the most recent code level at this time. We're one version behind the latest version. We tend to use one version behind the most recent for safety reasons so that we can avoid troublesome bugs or glitches.

Anyone looking to deploy Next-Gen firewalls, in general, should really define their use cases to be able to decide on the proper technology to deploy within the environment. If you're looking to deploy Next-Gen firewalls at all your locations and create point-to-point VPN tunnels, they can get cumbersome and difficult to manage policies. It is also difficult to do network segmentation. With some of the Zero-Trust offerings, you're able to actually move your clients outside of your corporate perimeter, and then isolate those applications based on the user per application, instead of requiring them to dial back via traditional VPN to your data centers, which sometimes isn't the best user experience for your end-users.

I'd rate the solution at an eight out of ten.

I work for a telecommunication company. We are a service provider, and we use it for our internal network and for providing services to our customers.

The firewalling feature is used the most, but we also have a particular use case for the SD-WAN service. 

Its interface is good. It comes with a lot of features, and its performance is also very good. 

It is a very good product, and it is good at standing by itself. It can maybe have a little bit of integration with other products, but it is not that important for most use cases.

I am quite new to this product.

Its stability is very good.

For the SD-WAN use case that I am researching, it seems more suitable for medium-sized customers. It is a little bit difficult to use for a big customer.

Their technical support is good.

I would rate Fortinet FortiGate-VM a 10 out of 10. It tops others in terms of performance.