Fortinet FortiAuthenticator Reviews

I am using Fortinet FortiAuthenticator for SSL and logins.

The most valuable features of Fortinet FortiAuthenticator are easy to configure, secure, and the application has good performance.

It would be helpful to receive a code by yourself for authentication instead of it registered to a phone.

I have been using Fortinet FortiAuthenticator for approximately two years.

I rate the stability of Fortinet FortiAuthenticator a nine out of ten.

Some additional features would be helpful.

Our customers are enterprise-sized companies.

I rate the scalability of Fortinet FortiAuthenticator an eight out of ten.

The support is responsive and the support is in our local language.

I rate the support from Fortinet FortiAuthenticator a nine out of ten.

Positive

The initial setup is simple compared to other solutions. 

I price of the solution is expensive.

I rotate the price of Fortinet FortiAuthenticator a seven out of ten.

We have one person for 100 users of the solution.

I rate Fortinet FortiAuthenticator a nine out of ten.

We primarily use Fortinet FortiAuthenticator to centralize the management of user identity information in Security Architectures, enforce Role-Based authentication, and allow Two Factor authentication with Softclient support.

This is a must-have technology in Fortinet implementations with several gateways and distributed environments.

It is easy to set up and will reduce Network administrators' efforts to integrate diverse identification methods. Must evaluate Single Sing On Mobility Agents to full integration of users position on the network and complete the solution.

Using this product strengthens enterprise security. It offers role-based security policies and User Identity Management with different methods.

This product provides automatization. There is a self-service user portal for registry and support for domain and non-domain guest users, with diverse channels vía hardware tokens, software tokens, e-mail, and SMS.

This solution brings user satisfaction. It reduces the need for network administrator intervention by allowing the user to perform their own registration and resolve their own password problems and issues.

Key Features and Benefits

1. Two-factor/OTP Authentication with FortiToken: Enforce user-based policies. Fortitoken is available in soft and hard versions for flexible usage.  Most Valuable in Mobile Phones App for OTP.
2. Integration with LDAP and AD: This solution integrates with existing enterprise systems and technologies from diverse vendors of user information management systems.
3. LPAD/AD/RADIUS/SYSLOG/KERBEROS/REST API/FSSO and Web Portals: There is flexible integration with these services.
   
4. It is usable in network WAN, wireless, and VPN Scenarios.
5. The domain and guest-users support are good.

I would like to see integration and customization capabilities with the end-user portal to solve authentication issues with diverse implementation scenarios. Specifically, with web applications, enterprise networks, and VPN.

We have been using Fortinet FortiAuthenticator for three years.

This is a stable, set-and-forget product. Logical operations run in the Gateways.

FAC 200E/400E will support environments for hundreds of users, based on Physical Appliances. If future needs are in the scope then I suggest implementing virtual deployments.

Technical support is not needed in any sense. We have three years running without hardware appliance incidents or major issues.

This is the first authentication platform that I have worked with.

The initial setup process will vary from simple to complex and depends on your existing User Identity Systems, integrations, and scale of the network

In-house engineers, properly trained, are responsible for deployment and maintenance.

Our ROI was reached in less than a year. This solution is good in terms of financial returns.

FAC is an affordable solution for Middle Range (200E/400E) and also needs a package of mobility agents (2,000) perpetual.

There is nothing to buy in the gateways (FG) and it is fully integrated.

As a Fortinet customer, the logical evaluation was FAC from the same vendor.

This is a must-have technology in Fortinet deployments with distributed environments.

The basic use we have for FortiAuthenticator is multi-pack authentication.

FortiAuthenticator has helped a lot of our customers in the way that they do the business when they onboard their clients to the data center. It has drastically changed what they used to do earlier after the installation.

It is cost-effective. The users can be securely managed by adopting it.

They need to have some kind of write-up and solution document that people can access very easily. All of the Cisco documentation is available on their website and in other places. They should make it available to the public. 

The more people know about this product, the better. That will make it easier for them to position FortiAuthenticator to their customers or use the product in production.

Other features that would improve the product are a single sign-on where people can use their Gmail ID to log-in, etc. This feature we wanted and now they are rethinking it. At this stage, I can't give any other suggestions for improvement other than this.

A single sign-on is used to create a user ID and password for the user to get onto the network. You can ask them to use their LinkedIn credentials or maybe Gmail, some of the social networking credentials to gain access.  

This is useful when you are onboarding any guest users for internet access. This is something that is a very good feature which they could have integrated already.

It's very stable when compared to other products.

For scalability, you need to size FortiAuthenticator properly. You should plan it initially, then make the implementation. 

It's is not 100%, maybe 80% on the scalable side. There are some places where we use it for 800 to 1000 users. With the proper deployment, we can support close to 2000 users.

You need certified people to understand this product like dedicated engineers. You need a person that knows the product and how it works. 

Otherwise, if any new person comes to FortiAuthenticator, it will be very difficult for them to understand. Over time, you'll be able to get to know the layout and how the product works.

Technical support is quite good, There is something called the 8x5 and 24x7 technical support for the solutions. If you have 24x7, they will respond immediately. 

If you have 8x5, and they will respond next business day depending on how soon the TAC engineer picks your request for your deployment or ongoing support issues.

We used a different method as a solution, primarily SafeNet, but there are others. It all depends on a customer-to-customer and case-to-case basis. It depends on the budget and what the customer asks for in the contract. 

At the end of the day, it all revolves around the money, i.e. how many dollars you pay for the solution.

The initial setup is straightforward. It's not that complex. If you know about the product, you will be able to do the setup. 

It takes generally, one to two weeks for the full-fledged deployment. We have a demo unit. We just used that for showcasing the capability of the device to all of our customers. 

Once they start using it, they would advise on the deployment.

There is an economic investment on this product that compares to other products from Cisco. There is a ROI on this product.

You buy the pack for 100 to 200 users. Once it goes over, you have to renew it on a yearly basis. It may be on a term where you license for one business. Officially, the authentication license has a third-party involved. Then you need to take your action. 

I don't see any additional license costs from FortiAuthenticator, but for the add-on features like MS Gateway, etc., you need to buy them.

FortiAuthenticator is a very good solution. It is all jury-based. FortiAuthenticator is very easy for anyone to understand how it works and be able to take action.

I would rate FortiAuthenticator with an eight to nine.

We are currently using FortiAuthenticator for VPN access.

For security access, it is good.

The Fortinet security area is authenticated; they use it to access that is the main purpose.

FortiAuthenticator should integrate with other applications. I currently use Google Authenticator and Office Authenticator, and it would be better if FortiAuthenticator could be added to other applications.

As a user, I have been working with FortiAuthenticator for about three years now.

The solution is stable, and I would rate it ten out of ten.

The response from Fortinet is very fast. We use them for integration with the Mitel solution, and they are supportive and helpful.

Positive

My colleague did the setup, and I didn't feel that he struggled much. It seemed straightforward and not too difficult.

The pricing is about three on a scale where ten is low. Pricing should be more flexible.

I recommend it to other users who are using FortiGate to go for Fortinet.

I'd rate the solution ten out of ten.

We are using FortiAuthenticator for authentication to connect to our network, either through some software or VPN or SSL or CyberArk, anything.

Samuel is good. We are using Samuel. Also, the good thing is that it's easy to use, and the logs are very precise.

There is a room for improvement. The log is a bit difficult to access, and searching the log codes is also a bit difficult. So it would be much better if, when we open a log, it could provide detailed information about errors, reasons for failure, and such.

We have been using this solution for approximately one and a half years.

It is very stable. We have never had any issues with this solution.

I would rate the scalability an eight out of ten. Some improvements, but it's on our end as well because we are still using the older variant. 

We have around five to seven end users using this solution.

The customer service and support are awesome for FortiAuthenticator.

I've been using Fortinet for the last eight or nine years. So, for other professional solutions from Fortinet, the support is not so good. You have to open a case as usual, and some technical contact will get in touch with you if they're available. If not, we have to call a toll-free number manually, and they will connect us to an available agent who will check our case and then escalate it. For normal issues with no business impact, it's okay to wait for two or three hours, no problem. But in critical situations, it's challenging to reach them.

Positive

The initial setup is simple. It's not that difficult. You have to know the functionality of FortiProtect, the requirements, and it depends on your network. It's not that difficult to implement.

We have VMs and devices. But mostly, we are moving to VMs.

We design and then, Fortinet team will implement.

I would rate the pricing a four out of ten, where one is cheap, and ten is expensive. It is not that costly. It is cheap, easy to manage, easy to install, and easy to configure. 

We evaluated Palo Alto. It's easy to use, offers a lot of features in one box, and it's cost-effective. And the support is very good.

Overall, I would rate the solution an eight out of ten. 

We're using Fortinet FortiAuthenticator to bypass identity to the Fortinet FortiGate. We do not use FortiAuthenticator too much because it is middleware.

Fortinet FortiAuthenticator has improved our organization because we are able to can create identity-based policies. For example, who are you and where are you. We are shifting from the IP-based to the identity-based.

The price of the solution could improve, it is expensive.

I have been using Fortinet FortiAuthenticator for approximately five years.

We have not had issues with Fortinet FortiAuthenticator. It is stable.

Fortinet FortiAuthenticator is scalable.

We have approximately two people that are using the solution.

We needed to use Fortinet FortiAuthenticator because we wanted to use the identity-based policy so that FortiAuthenticator can help us to pass the identity to the Fortinet FortiGate.

The initial setup of Fortinet FortiAuthenticator was straightforward. The implementation process took three to four days with multiple sites.

I rate the initial setup of Fortinet FortiAuthenticator four out of five.

We did the implementation of Fortinet FortiAuthenticator in-house and we have two people for the maintenance.

We typically purchase licenses for five years and when new projects come we reassess the situation and renew or switch solutions. 

There are no additional costs to the standard licensing fees.

I rate the price of Fortinet FortiAuthenticator a three out of five.

We did not evaluate other solutions before choosing Fortinet FortiAuthenticator.

I rate Fortinet FortiAuthenticator a five out of ten.

I like the self-registration capabilities.

The certificate authority aspect is excellent. 

I love that there is a single sign-on for Fortinet products. 

The initial setup is very easy.

It is a stable product.

The solution can scale as necessary.

Technical support is good. 

Fortinet has another product called FortiNAC. These two solutions work together well.

The integration with other products, for example, some SAML authentications, would make it more flexible.

I've used the solution for two years. It hasn't been too long. 

The solution is stable. It's reliable. There aren't any bugs or glitches and we find that it does not crash or freeze.

It can scale if you need it to. The solution can expand. 

In general, Fortinet technical support is good. We have only had the solution for a small amount of time. We haven't used their support that much. Their response time has been very good. 

I found the initial implementation process to be simple and straightforward. I didn't find it to be overly complex. There aren't too many features, unlike an FortiNAC solution, that need to be set up.

I've evaluated the difference between Fortinet and Cisco in the past.

I'd advise new users to configure the backup, routine backup, to get the most out of the product. You can have problems if you don't.

In general, it's a simple product and we've enjoyed it. 

I'd rate the solution seven out of ten.

Our customers use Fortinet FortiAuthenticator for SSL VPN security. Our customers are from various industries including retail, finance, and manufacturing.

The tool's most valuable features are push notifications and integration with the FortiGate firewall. Push notifications provide an instant acceptance mechanism. When customers try to access SSL VPN, the solution sends a push notification to their mobile phone, and they can easily approve the access. The integration with FortiGate firewall is very easy if our customers use FortiGate for their firewall.

It also supports easy user management. You can easily manage user accounts and groups.In terms of benefits, the tool provides both cost savings and efficiency, but efficiency is more important for our customers. The main point of this solution is security, which is the most important thing. After that, maybe you can say time management - you can easily manage your access and permissions. Cost savings come third.

I think the tool could provide this solution on the cloud. It's currently an on-premises solution. A cloud-based version could make setup, installation, and management easier. With on-premises, you must pay capital expenses (CapEx) upfront. However, if the solution was cloud-based, it would be operational expenses (OpEx), which is often easier to manage. You can pay monthly instead of paying the total cost at once. In my opinion, OpEx is more easily manageable than CapEx.

I have been using the product for five years.