Fortinet FortiManager Reviews

Our solution centralizes all the firewalls in different regions or data centers into one location. We manage policy distribution between various regions by creating policies and deploying them according to the device location where the policy is needed. 

We also distribute certificates remotely for managers. Our solution primarily works with FortiGate firewalls without integrating with third-party products.

The centralized management of policies and certificates, coupled with the capability to handle multi-site deployments effectively, provides streamlined operations. 

Centralized visibility enhances security management, offering unified management across regions such as India, Singapore, and Australia. FortiManager captures all devices and provides reports for security analysis. 

We consider the pricing reasonable as it reduces operational costs and boosts security efficiency.

The graphical user interface could use improvement as it appears complex and not user-friendly. Better integration of Fortinet ADC into FortiManager would be beneficial.

We have been working with FortiManager for more than five to ten years.

Palo Alto Panorama is difficult to configure compared to FortiManager, which is more feasible and easier to manage.

Initially, the deployment takes some time, but it is easy to accomplish. Some challenges we encountered include the NTP server, certificate management, and port openings across regions.

We initially deploy our own NTP server. If that does not work, we resort to manual timing settings.

Pricing is reasonable and does not pose challenges.

FortiManager is more user-friendly compared to Palo Alto Panorama. It is suitable for small-scale and easy management. 

I would rate the overall solution between seven out of ten. Better integration of other Fortinet products like ADC into FortiManager would be beneficial.

Amid a surge in malware threats, including ransomware, heightened awareness about security vulnerabilities has prompted organizations to prioritize robust cybersecurity measures. Fortinet's SD-WAN solutions provide a comprehensive approach to secure and efficient wide-area networking for our customers.

The user interface, along with user-friendly planning features, makes it straightforward to configure desired settings.

Issues arise when customers experience unstable electricity or poor grounding conditions. In such cases, their CPE or other devices on-site may become unreliable, leading to occasional configuration discrepancies. To address this, site visits are necessary, and sometimes manual configuration adjustments are required. In extreme cases, device replacement may be necessary, particularly when inadequate electricity grounding poses a persistent challenge, creating specific conditions for intervention.

Presently, our customers have a limited number of remote sites, numbering in the hundreds, with none exceeding a thousand or more. Fortunately, there haven't been any issues reported with this scale of deployment.

Fortinet's support has proven to be reliable, particularly as we've been engaged with them since the project's initiation. This long-standing collaboration has facilitated effective communication, allowing us to seek advice or receive the correct configurations when encountering issues. Their assistance has been instrumental in problem-solving and troubleshooting. I would rate it eight out of ten.

Positive

Previously, we employed Cisco Catalyst switches, specifically the Catalyst 1100 series. However, during that time, the stability of these switches was not satisfactory, and there were noticeable issues. We transitioned to FortiManager because our customers expressed a preference for enhanced security features in the form of superior Customer Premises Equipment. The local certification standards in Indonesia have played a crucial role in raising awareness among our customers regarding the need for robust security measures.

The initial setup is straightforward.

The installation is very simple, thanks to its use of zero-touch provisioning. With another engineer on hand and static alerts in place, the installation process is hassle-free. Completing the setup typically takes around fifteen minutes.

While I find the pricing somewhat higher compared to other options, it remains acceptable for now. I anticipate a growing demand for SD-WAN security in the future, particularly with Fortinet gaining popularity. I hope that the prices will become more competitive in subsequent releases, as the current pricing is perceived as somewhat elevated.

Overall, I would rate it nine out of ten.

We had a customer that had about five locations and at each location, they needed a management device. We installed FortiManager at the head office and all locations report back to it. 

Setup, setting policies, and reporting were all very easy. We had no issues whatsoever getting the solution up and running. 

The ability to manage multiple devices is great. We have one set up and one pane of glass for management. The reporting features are customizable for the customer. We would normally just show them some default reports and they would customize them. So far, there are no problems customizing your reports.

I haven't had any issues with the product.

Their EDR products could be better. They need to dedicate more R&D to that area.

I've used the solution for a while. The company I work with now exclusively uses Fortinet products.

Technical support is very good.

Positive

For network monitoring, I've previously used SolarWinds. The major differences are the ease of use of Fortinet and its single pane of glass. It's also easier to get reports. SolarWinds can require a little more technical knowledge. 

The initial setup is very simple. I'd rate the process eight out of ten in terms of ease of setup. The deployment takes, on a complex install, about two days. On a simpler install, it would take less than a day.

Usually, we have one solution implementation engineer managing the deployment. 

Once we have implemented it, it goes over to our support center and they handle it under a managed service.

Fortinet has the best pricing currently on the market. They are very competitive, especially if you are a preferred partner (which we are). 

I'd advise others to use it. It's a powerful tool. It makes managing multiple Fortinet products very easy. You can tie in FortiSwitches, Fortigates, et cetera, and gain one central point of management with great reporting functionality.

I'd rate the solution an eight out of ten. It's best of breed and always on the cutting edge of security technologies. they keep abreast of upcoming trends and emerging technologies. 

We had clients that wanted to manage multiple devices such as Fortigate firewalls. The customer had an environment with multiple devices or multiple branches. Now, they can centrally manage everything with this one product.

The features are good.

The reporting functionality is centralized. You can see policies and monitor the entire infrastructure. It makes administration very easy.

I cannot comment on what needs to be improved, although there are always potential areas for improvement in every product.

The Fortinet team is always very responsive and resolves issues quickly. For example, sometimes there may be a communication issue. However, other items may be the culprit, such as network connectivity. It depends on the customer's network. 

I've used the solution for two years.

It is a stable solution. 

The solution is scalable. The solution can be scalable or maybe not scalable enough in some use cases. If you are working with a private or public cloud, it is very scalable. If you go for a hardware-based client, you may need to upgrade the hardware to scale. 

Technical support is very good. They could always be better. Sometimes certain issues take more time, especially in terms of escalation. 

Positive

The installation is very easy. Documentation is very easy to find on the partner portal.

Configuration can be a big task. It depends on the scope of work. However, a fresh install might take about one hour. 

One person can easily deploy the product. That said, it depends on the environment. For example, if some devices are located in another location, another person may need to be there. You might need some credentials for that location as well.

There is some maintenance for proper monitoring and updating to the latest version of firmware. If you get any error messages or alerts, you'll have to action them. One person can handle maintenance tasks. 

The solution is competitive. It's neither cheap nor expensive. The solution can be paid annually. If you use a cloud, you will have to pay for subscription charges. 

I work as a reseller.

I'd advise the solution to users that have a big organization and if they are using Fortigate Firewalls, It helps centralize anything.

I'd rate the solution nine out of ten. They have so many features. It's very feature-rich. From one central location, you can monitor everything. 

FortiManager is used to facilitate the administration of FortiGate equipment. There are many features to automate processes and make it easier to manage the devices. For example, we can push the same configuration to hundreds or thousands of devices, which helps us maintain a global version of the configuration and status of the devices. We also use scripts and templates to make it even easier.

The ZTP (Zero Touch Provisionning) helps us to reduce the implementation time and TCO of the remote sites.

The main function of FortiManager that makes it valuable to me is automation. I can automate the installation of configurations using different programming languages like Python or HPE, and it's a GUI solution, so it's pretty easy to use, even for basic users. It's also compatible with traditional programming languages, another feature I like about FortiManager.

There are a lot of bugs that need to be fixed, for example, the ZTP. Automating and making it easier to understand devices is necessary, especially in terms of zero-touch provisioning. This mechanism needs more work as there are some bugs and some functions that do not work very well. Today, there are tickets with Fortinet regarding a problem with cluster devices. It means two devices can be configured to work like one device. In general, it is easy to configure manually, but when you want to do it automatically, Forti Manager should help, but today it didn't work.

FortiManager is a good tool, but there is a lack of really advanced documentation. While there are a lot of features available, for example, when working with Fortinet support, it can be challenging to find the right information. I work with Fortinet support every week as we have a partnership in my enterprise. However, for the public, it's not easy to access the kind of documentation we have access to. This level of partnership with Fortinet can be costly to attain for the general public.

Some learning websites and communities are available, but the documentation provided is not as advanced as what we have access to. It's challenging to find confirmation and recommendations for advanced admin settings based on complex configurations. To have access to this kind of information, a partnership or conversation with Fortinet support is required, which can be expensive for most users.
Fortinet need to work on the automation part because they are using now JINJA as programming languge without a real complicator behind to help resolve errors on the code which is very challenging.

I have been using this solution for six years.

The device itself is very stable, but it's not the main number when it comes to using FortiManager to manage other devices. However, when it connects to other devices for the gate or to manage them, some functions don't work. There are some problems, but it's only around 3-5%, while 95% of the time, there are no problems interacting with other devices.

It handles stability very well.

FortiManager's ability to scale is good as it's a virtual machine. You can raise the capacity as you go, and there is no limit for hardware. The basic ones support a lot of devices and offer a good defense. However, you need to raise the level of licensing every time to support more devices. So, in terms of scalability, it's really good.

The level of support for P2 and P1 is wonderful. However, for levels 3 and 4, they have to work on their computer capacity and numbers. I've worked with them many times, and sometimes I have a good engineer but not a good understanding of the program.

By default, when we open a ticket, we only have access to P3 and P4. If we need P2 or P1, we have to ask for it, but not every single ticket requires P2 or P1 priority.

I have had both good and bad experiences with technical support.

Neutral

FortiManager is definitely better than Cisco, and it's easier to use and more stable. I remember finding FortiManager to be much more flexible and stable.

Meraki works very well but is cloud-based and lacks some administrative tasks and functions. FortiManager is better than Meraki for managing devices.

The initial setup is quite simple. Initially, I combined CentOS with other products, which took about five hours. However, It's not complicated at all. Moreover, I train some of our clients on how to use it, and they find it easy to understand. I can easily explain the technical aspects of the initial setup, like scripting, etc.

Fortinet FortiManager can be deployed both cloud-based and on-premise. There are various platforms available for on-premise deployment, such as hardware devices or VMs, that can be started on Hyper-V, NSR, or NSF. Additionally, it can be deployed on cloud-based platforms like Azure, Google Cloud, or Amazon AWS.

Overall, I would rate the solution a seven out of ten.

We have over 300 Fortigate sites and we use this solution to manage everything under one interface. 

The scripts are very useful. We can push the TCL and CLI scripts to Fortigate.

The automation is great between Ansible and Fortimanager.

We can integrate the solution with other solutions.

There is one central template that we can use across sites. 

The setup is very simple. 

We can use the solution as a VM. 

We've faced an issue when we need to move devices. Templates need to be recreated instead of having the policies, et cetera, cut and pasted over. Everything should just move over when we need to move devices instead of recreating everything from scratch. 

For the IPSEC tunnels, Fortimanager doesn't have all of the features that are available on Fortigate. 

I've been using the solution for three or four years. 

The stability is very good. We haven't dealt with any issues so far. It's reliable. 

The scalability is okay. There are some restrictions. However, it is pretty good. I'd rate the solution eight out of ten. 

We have three accounts using the product. They range in size.

We have an internal team that can handle tickets. We're limited in opening tickets directly with Fortinet.

In the past, however, I have opened many tickets with Fortinet in the past and found them to be very helpful and responsive. They were good at solving issues. 

We have worked with Palo Alto and Cisco. The way of working with the firewalls is a bit different in Palo Alto's Panorama. With Panorama, we can add policies and prioritize them to override firewall policies (and vice versa). It's very flexible.

The initial setup is very simple. We can create it using a VM. 

Our company has its own physical infrastructure, and we place the virtual infrastructure within that. 

I don't deal with the pricing of the solution.

In general, I would rate the product seven out of ten. It offers good features, however, Palo Alto offers better options.

I utilize Fortinet FortiManager to push commands with scripts. I made different scripts for different use cases.

I appreciate the ability to connect via SSH through Fortinet FortiManager to the FortiGates I manage. This feature allows me to gather information about the interfaces without having to physically connect to the device. This is a convenient aspect that I find valuable.

I have started utilizing the group features, which enable me to manage and update the devices in a structured and organized manner. For example, when installing new firmware or updates of FortiOS, I can divide the devices into different groups and update each group individually. This is a feature I began using around a year ago and has proven to be very useful.

Moreover, I have begun utilizing customized fields, which has added an extra level of convenience to my work. These fields have proven to be quite useful, and I would recommend them to others.

The information extraction through command lines was could improve to some extent. Although there were some command lines available, there were not enough options. For instance, I needed to obtain the management IP address of my two Fortigates, but the Fortinet FortiManager did not provide me with the IP address on the LAN interface. I attempted to find this information through the command line but was unsuccessful. I also searched for articles on the internet, but could not find a solution. This is an aspect that could be improved or potentially there is a method to access this information that I have yet to discover.

I have been using Fortinet FortiManager for approximately three years.

Since I have been using the solution I have not experienced any problems with the stability.

We did not run into any problems with the scalability.

I reach out to the technical support team through a ticket. I was attempting to perform a rather complicated task, which involved pushing the FortiOS onto a FortiGate 30 E device without actually installing it. I had found information online that this was possible, but I encountered issues while trying to do so with two FortiGates.

I was successful in pushing the FortiOS onto the device, but both devices stopped functioning after that. I then asked the technical support team if this was a supported process, to which they responded that while it is possible, it would depend on the model being used. Based on my understanding, it is possible but with some limitations, especially with older models of the Fortinet solutions. This was the nature of my interaction with the technical support team.

Evaluating my experience with the support was decent but not textbook. During the evaluation process, I was asked for a substantial amount of information, some of which I felt was not pertinent. Nevertheless, I obliged and provided all the information requested. The main objective of the evaluation was to gather data from the devices and assess their performance. After the analysis was completed, the evaluators came back with their findings and advised that my current approach with the version or model being utilized within the organization was not recommended.

I rate Fortinet FortiManager a nine out of ten.

FortManager is a tool for centrally managing multiple FortiGate firewalls.

Without FortiManager, you cannot manage a complex environment across several sites with multiple firewalls. 

FortiManager could improve by making it easier to port larger policy packages to the FortiGate firewalls. Sometimes, there's an issue when we install a big package of policies. If you have a couple thousand policies for FortiGate firewalls, it can take a few minutes to receive a response from the remote devices. It's only an issue when you're dealing with thousands of policies and installing them on a large number of devices.

We have used FortiManager for about 14 years. 

I rate FortiManager eight out of 10 for scalability. 

I rate Fortinet support nine out of 10.

Positive

I have worked with Cisco and Aruba. We decided to switch to Fortinet a couple of years back because we determined that Fortinet offered the best solution.

Deploying FortiManager is straightforward. The initial installation is simple and can be completed in a few minutes, but configuring the devices and sending the policy packages to the firewalls can take a few hours. We have around seven engineers maintaining this solution. 

I rate FortiManager six out of 10 for affordability. The pricing is decent. It isn't the most expensive solution. 

I rate FortiManager eight out of 10. I recommend it for those who use FortiGate firewalls. It's a management unit for Fortinet solutions, so if you don't use FortiGate, it makes no sense. 

We primarily use the solution for management tasks. We have Fortigate firewalls across the globe and need this product to manage everything. 

It's able to manage multiple devices, which is quite useful. 

The analytics are quite useful. 

It is easy to set up the solution. 

The solution is stable.

Technical support is good.

It can scale. 

The pricing is reasonable. 

Pricing-wise, it could always be less, even though it is less expensive than Palo Alto.

I've been using the solution for three and a half years. 

It is quite stable. I'd rate it nine out of ten. It is reliable. The performance is good. There are no bugs or glitches. It doesn't crash or freeze. 

It is very scalable. I'd rate it nine out of ten in terms of scalability. They are very flexible. 

We have less than 20 people on the solution. 

Technical support is helpful. They are responsive. 

Positive

We are also familiar with Cisco, Palo Alto, and Juniper as well. 

We moved from Palo Alto to Fortinet based on the cost savings we would achieve. 

The solution has an easy setup.

I'd rate it nine out of ten. It's not complex. 

We have a large setup. Getting everything working took us a couple of months. 

The solution is pretty reasonable in terms of price. I'd rate the affordability around seven or eight out of ten. 

We are customers and end users.

I'd rate the solution nine out of ten. 

We are using the latest version of the solution.

We have a large setup for managing multiple Fortigates, et cetera. You get what you pay for, and it gives us all of the features and functionality we need. If a company has basic requirements, it might be better off with a PfSense.

I'd recommend the solution to others. For the number of features you get, the pricing is pretty great.

We primarily use the solution for managing firewalls. 

We enjoy the centralization of all roles and objects and so on.

As a manager, you can manage 50 or 40 firewalls with only one product.

The initial setup is easy.

It is stable. 

The solution should be more open to other products. FortiManager must be able to manage other products from other vendors. While it's perfect for other Forti products, it's not ideal for everything.

This is not available to work with many other vendors in the cloud. In the end, you want only one view of your own security view of everything, which is impossible with FortiManager.

Of course, this is the case with Palo Alto as well.

I've been using the solution for seven or eight years. 

It is a stable, reliable product. The solution has good performance. There are no bugs or glitches. It doesn't crash. 

The product is likely scalable, however, we haven't pushed it. 

We have no experience with many numbers, such as 200 or 600 devices. We scale up to 60 firewalls. 

Forti support is quite good.

We work with Fortinet and Palo Alto.

The initial setup was not complex. However, we did the initial setup seven years ago.

We are Fortinet partners at this moment.

I'm not sure of the exact version we are on. I'm more on the sales side. 

We manage from Spain many firewalls around the world, and at this moment, it's very necessary to have FortiManager. It's just too bad we can't manage other vendors. 

I'd rate the solution at an eight out of ten. I'd rate it higher if it offered more outside-brand integrations.