The most valuable features of Fortinet FortiOS include:
- Its ability to efficiently work with large-scale firewall deployments
- Custom segmentation for the firewall without additional devices
- Constant updates and definitions for threat detection
- SD-WAN and site-to-site VPN capabilities
- User-friendliness
- Ease of management and configuration
- Security and authentication capabilities
- Built-in SD-WAN functionality
- Flexibility
- IPS and DNS filtering databases
- UTM features
- Internet gateway functionality
- Comprehensive integrations
- Dontrol over inbound and outbound traffic
- Next-generation firewall capabilities
- Powerful CLI and GUI
- "In terms of benefits, it’s a standard solution used by many, and our customers and partners widely utilize the VPN features. It’s elementary to work with and implement because it is familiar across different infrastructures."
- "We primarily use Fortinet FortiOS for site-to-site VPNs, reporting features, and wireless capabilities. It is well integrated within the Fortinet ecosystem."
- "The firewall options in FortiOS allow us to open up access to our vendors for EDI and all its features."
The firmware updates have significant bugs and issues that affect the network and firewall. The solution should include an advanced firewall feature to enhance security.
Integration with endpoint protection or EDR is also necessary to strengthen infrastructure and detect threats from user activities on the Internet. Additionally, the solution lacks the ability to monitor the ISP link, requiring the use of third-party applications.
Real-time threat monitoring is missing, and traffic visibility should be improved on the dashboard.
Generating multiple reports and extending log visibility beyond a week is necessary.
The user interface could be more user-friendly and responsive, with notations for changes made.
DDoS protection and managing local DSCP networks need improvement. SD-WAN configuration should be easier, and better support, bandwidth optimization, and traffic prioritization capabilities are desired.
The monitoring function should be more accurate, easy to use, and include more active monitoring of traffic.
The solution would benefit from the ability to create another site on a VPN. Memory and CPU utilization should be managed better, and cloud functionality should be enhanced. The complex initial setup could be simplified, and NMS should be built into the solution.
The features of FortiAnalyzer should be included in Fortinet FortiOS without requiring an additional license and device.
- "Sometimes, Fortinet FortiOS changes its CLI (command line interface) with new versions, which leads to internal incompatibility. When this happens, you need to update the configuration to match the new format, as the commands aren’t always the same. This can create some confusion and extra work because, unlike other vendors where the CLI commands remain primarily consistent with updates, Fortinet often changes the syntax between versions."
- "The main challenge with Fortinet FortiOS is integration with third-party solutions. I don't see any other areas for improvement. Nowadays, all products work well for 50-60 percent of needs. We must only fulfill 60-70 percent of client requirements because they don't use 100 percent of product features. Banks and financial sectors might need more security features. I don't work much in banking, but they often use multiple products for different security layers, not just firewalls. They might use various products or APIs for different purposes. In the end, clients use the products that suit their needs."
- "Fortinet could integrate something like a YubiKey for 2FA with their SSL VPN clients."
