FortiGate Next Generation Firewall (NGFW) Reviews

We use different solutions from FortiGate, focusing primarily on their firewalls within our department. However, due to a reorganization, the operational maintenance of FortiGate is now managed by someone else.

The most helpful features of FortiGate include its firewall policy, specifically the user-based policy, which I find to be quite beneficial in managing our network security effectively. FortiGate has also provided reliable protection against many attacks, although it lacks the ability to detect specific attacks like SQL injection, which usually requires a web application firewall.

The solution is primarily used as a border firewall as well as for internal LAN segregation, internal IPv4 policy management, a VPN for end users, and IPSec tunnels.

Before we implemented this solution, we had only one firewall and old Linux IP tables with no graphical user interface. 

The firewall system we have implemented in my company serves as the gateway to access the internet. We have different VLANs set up on the firewall for various networks. 

We enforce security measures based on policies. When it comes to security, we have web monitoring, application filtering, and MAC address filtering implemented on the firewall. We also utilize VPN and SD-WAN architecture. Everything is functioning well. 

Additionally, we have two ISPs connected for load balancing. We send the logs, and audit logs to FortiCloud for analytics and statistics. 

Moreover, we have an alerting system for FortiGate, which is also functioning properly. The firewall operates in question mode, using round-robin connections, and handles routing as well.

FortiGate is a very good product. It offers a wide range of features, and its availability is almost everywhere. The support, both local and international, is good. Also, they provide certification programs for the next-generation firewalls, which is beneficial. 

The product speaks for itself and holds a strong position in the market. In our company, we highly recommend FortiGate to our colleagues and other IT professionals. Furthermore, it offers cost advantages compared to other products.

The company uses FortiGate to offer protection for clients transitioning from MPLS to Internet, ensuring security for this new type of connection. In Brazil, clients typically seek protection, and FortiGate is used to offer such solutions. We start with this new kind of connection, explaining and training clients about the product.

With the FortiGate solutions, I see a benefit in controlling the bandwidth and managing users' access. It's important for leading the market and helping IT managers use the solution.

Organizations with about 50 to 100 employees use the solution for VPN, ZTNA, and remote connectivity between branch offices and site-to-site VPN. The solution acts as a gateway-level firewall that secures the office infrastructure against threats in mid-size enterprise organizations.

FortiGate Next Generation Firewall is a good solution because it has a range of options and a clear ecosystem. It has good availability of solutions that complement the next-generation firewall. For example, it has a good range of switches and access points. The solution also has a good ecosystem where cloud services like FortiMail complement the whole solution. The solution has a better ecosystem for community support.

I use the FortiGate firewall for ordinary firewall functions, including SSL inspection, VPN, and site-to-site VPN.

The most valuable features of the FortiGate firewall include SSL inspection, VPN functionality, and threat intelligence features for preventing threats. These features are essential and provide significant functionality for our organization.

The solution is used as a perimeter firewall, and all traffic is routed through the appliances before accessing the Internet. FortiGate Next Generation Firewall is also used in policy-based routing. The solution has features such as IPS  and web filtering. 

Presently I am carrying out a POC to evaluate where the SD-WAN functionality of the solution can be utilized by our company. 

It's an out-of-the-box solution with impressive ratings. FortiGate Next Generation Firewall has a stateless balance proposition. The updates from the vendor ensure that the product remains up to date in terms of threat intelligence capabilities. 

I personally go through reports on utilizing FortiGate Next Generation Firewall resources, bandwidth and applications that are present in the company's environment. The product has been capable of providing the aforementioned reports for the last 280 days, and such features are highly valuable for reporting purposes. The reports provided by FortiGate Next Generation Firewall also help in analyzing the traffic condition in a network. 

Conventionally, the solution is used for perimeter security. Whenever we find our organization's customer without an existing firewall, we use FortiGate Next Generation Firewall both for perimeter security as a firewall and as a VPN appliance to allow work-from-home employees at the VPN end. In the aforementioned instance, our company also uses the solution to connect different branches.

If our organization is establishing the network for a company with different branches spread geographically, we will use the VPN in IP set and FortiGate. The solution is highly flexible and is available at a cost-effective price. 

When using FortiGate Next Generation Firewall, availing the FortiGuard subscription is very important due to the vast threat intelligence with an international network.

Using the aforementioned network, FortiGate has been able to procure intelligence about the threats and incorporate the mitigation and protection against those threats in FortiGuard. So when you have FortiGuard integrated with the firewall, you have a robust perimeter solution to protect against malware.