The valuable features are:
- Two-factor authentication
- User ID with our LDAP service
- Integration with our other FortiGates
The valuable features are:
By using one of our units as a load-balancing slave, we were able to roll out location-based VPNs that created quicker connections to local servers for our end users. Furthermore, incorporating a LBS unit has provided preventative measures and ensured that our remote users can still connect if a failure occurs on our master authentication unit.
It was initially difficult to sync our high availability, load-balancing slave (LBS) to our master unit. There were some initial issues connecting it and syncing with our master FortiAuthenticator unit. After reaching out to Fortinet support, it turned out that the unit needed a software update.
I would like to see the following:
We've been using our master unit for about a year and our LBS for about six months.
We had some stability issues. Our first LBS unit wouldn't work properly the first time and that wasted a lot of time. Eventually, it died and we had to RMA the unit.
We didn't have any issues with scalability.
The technical support we received from Fortinet was responsive. When we experienced problems, they were able to fix our issues.
Before implementing our FortiAuthenticators, we used our main FortiGate as a way to push out two-factor codes to our users. After a while, this option was not working. As we continued to grow, we needed something more substantial and manageable.
The initial setup was somewhat difficult in syncing our LDAP service to our main FortiGate.
Before using the FortiAuthenticator, we pushed out tokens via our main FortiGate.
If you want a more efficient way to manage two-factor authentication for your users, or implement the unit as a cluster member role, the FortiAuthenticator can be incorporated very well into your environment.
We connect FortiAuthenticator to different servers' active directories and use it for value authentication and VPN client authentication.
We use FortiAuthenticator for server login, terminal servers, Windows servers, and Linux servers. We have configured the solution for SSL VPN authentication with a Fortinet token.
The UI is user-friendly.
I've used the solution for three or four years.
Fortinet FortiAuthenticator is highly stable.
I rate Fortinet FortiAuthenticator's scalability a ten out of ten. Our clients are typically medium or enterprise-sized. Small customers typically don't use FortiAuthenticator.
We haven't raised tickets for FortiAuthenticator, but Fortinet's support is very good. We found a block in FortiGate, and I had to open a ticket in FortiMail, but the public documentation is very helpful.
Positive
The initial setup is easy. Only the Fortinet Access Control is difficult. The network access control solution is a difficult topic as well. It's not that the product is difficult. It's the environment, connecting to the switches, the firewalls, the zones, and the difficult appliances. FortiAuthenticator is easy to use and install.
However, I know FortiAuthenticator, so the initial setup was easy when I saw this product. The initial setup for all of the Fortinet products is typically easy.
The deployment time depends on the difficulty of the destination environment. Our last installation took four days. After that, we created the system's documentation, which took one day.
I rate Fortinet FortiAuthenticator a nine out of ten.
We use Fortinet FortiAuthenticator, mostly where wireless or wired authentication needs to be integrated between multiple identity stores.
The most valuable feature of the solution is RADIUS service and the social network integration feature.
The GUI has some shortcomings and can be made better. The GUI is not great.
For the next release, the thing that will be most useful is to integrate with other MFA providers.
I have been using Fortinet FortiAuthenticator for four years. My company has a partnership with Fortinet. We are also resellers.
Stability-wise, I rate the solution a nine out of ten. I have only ever known one stability problem.
Scalability-wise, I rate the solution an eight out of ten.
I think that commercially it is not valid for a very small number of users. It doesn't scale down all the way. I think that although it can be scaled up to thousands of users, it wouldn't be suitable for, like, a mobile network scale if you have got 50,000 or 1,00,000 users.
At the entry point, we have more than 100 users.
I have directly contacted the solution's support. They are very helpful. They do require a lot of supporting information, but they are very effective for what they do. I rate the technical support a nine out of ten.
Positive
Regarding setup, I would say that it is straightforward but not simple. It's not a job for the novice, but it is straightforward for an experienced engineer. Also, my clients normally ask for help.
The solution gets deployed on physical, virtual, and SaaS.
On a scale of one to ten, where one is a high price and ten is a low price, I rate the pricing a seven.
Price-wise, it is competitive, but they still charge.
For comparing or evaluating Fortinet FortiAuthenticator, the competitors I would normally expect to see would be RSA Security with their SecurID product. Also possibly, I would say that you would compare it against Duo or Okta.
Fortinet FortiAuthenticator is better since it is very much use-case dependent. I think a Fortinet-heavy environment where the customer already has a lot of investment into Fortinet makes it easier since it integrates more closely with their network equipment, like their firewalls. Also, it does not always require an on-premise component to provide services like RADIUS.
People who are looking to implement the product should pay attention to scaling and plan deployment thoroughly before starting, as for many things, once the decision is made, some things are difficult to change.
I rate the overall solution an eight out of ten.
We use it for single sign-on. After connecting to VPN it creates an active directory or up session and we know who it is and then we use Fortinet FortiAuthenicator.
I prefer the passing tool that sent an active directory console to a Fortinet FortiAuthenticator, then Fortinet FortiAuthenticator not passing the locks. If I ask the Fortinet FortiAuthenticator, give me the name of the group. FortiAuthenticator passes the lock, the group name, or the directory.
I would like to see more security features in reference to identity login or identity identification. I would like to see a troubleshooting option. For troubleshooting or viewing the lock of the device set or separate the locks from the connected device. Maybe with any device connected to the Fortinet FortiAuthenticator. And then I need the parsing device and type of locks of this device.
I have been using Fortinet FortiAuthenticator for the past two months. Before that, we were only testing Fortinet FortiAuthenticator.
I believe Fortinet FortiAuthenticator is stable.
We are finding it to be fully scalable at this point one hundred percent.
Technical support is excellent with Fortinet FortiAuthenticator.
Positive
The initial setup was straightforward. The only problem we faced was the POC. We configure only through self-configuration. If we had an integrator or consultant to configure Fortinet FortiAuthenticator it would be easier than doing a self-configuration.
It was easy for me, but I had to read the documents about LDAP authentication. I did an in-house self-configuration. It was time-consuming.
When we buy the Fortinet FortiAuthenticator device there is a comparison between price and security. We have a government organization and we want to buy cheap products.
I would rate Fortinet FortiAuthenticator an eight out of ten.
We are resellers of this solution and partners of Fortinet. I'm the managing director and we are based in South Africa.
I really like the two-step authentication, it provides a higher level of security that we didn't have previously. Just having a password is not good enough anymore.
There are some issues with integration. We also have a problem that the cost of the solution is linked to the dollar and that can result in significant unexpected price rises.
I've been using this solution for a year.
The solution is scalable, we have over 1,500 users.
We had great technical support from an external company.
The initial setup was relatively easy. There were some issues we had with the LDAP integration, but it was solved quite quickly. We had some outside assistance for the deployment.
The actual cost is fair but when our exchange rate in South Africa goes through the roof, then the price changes quickly. It would assist us if the cost could be standardized or fixed. The exchange rate has a significant impact on us.
I recommend this solution, it does what it's meant to. I rate FortiAuthenticator nine out of 10.
We are a solution provider and we work with Fornet products, including FortiAuthenticator. I have installed it for a bank and their users authenticate their access through it.
Our implementation involved the creation of local users for the VPN, and they are authenticated using this product. This is the main purpose of it, and what had been requested by the client.
The most valuable feature is the authentication tokens.
There are some protocols, such as SHA and SHA-2, that are not supported. This is something that Fortinet is working on.
I have been working with Fortinet FortiAuthenticator for one year.
One of our clients has faced a lot of issues with FortiAuthenticator. For example, one of the devices restarted by itself, and the database was corrupted. To remedy this, we reinstalled the image and did the installation from scratch.
This is a scalable product.
The technical support by Fortinet is okay.
I work a lot with Fortinet products and I call the support often. They are very quick to respond and the support is very good.
I have worked on most of the Fortinet products, as well as with products from Palo Alto. At this time, the only single sign-on product that we use is FortiAuthenticator.
The initial setup was very complex. The was one cluster and one load balancer that had to be configured.
We expect to do another installation, although this time it will be using the RADIUS server.
What our engineers say about FortiAuthenticator is that when compared with other vendors, it has not yet reached the same level.
I would rate this solution a six out of ten.
I use Fortinet FortiAuthenticator to access VPN. Fortinet FortiAuthenticator is an easy-to-use solution.
I would like to see some email options for Fortinet FortiAuthenticator.
I have been using Fortinet FortiAuthenticator for one year.
I rate Fortinet FortiAuthenticator an eight out of ten for stability.
Around 200 users use Fortinet FortiAuthenticator.
I rate Fortinet FortiAuthenticator an eight out of ten for scalability.
Fortinet FortiAuthenticator’s initial setup is simple.
Overall, I rate Fortinet FortiAuthenticator an eight out of ten.
We use Fortinet FortiAuthenticator to maintain security, and access, and monitor authentication and authorization processes. It enables the proper functioning of the CA server. We can use various authentication methods, including EFTOS parameters like PKI (Public Key Infrastructure) for the CA server.
The product’s most valuable feature is integration with FortiGate, FortiToken, FortiTalk, and multi-factor authentication. It is inexpensive compared to Cisco and Clear Pass.
Fortinet FortiAuthenticator provides only authentication. It should also enable authorization services. There could be a central management point for both the services similar to Cisco and Clear Pass.
We have been using Fortinet FortiAuthenticator for around a year.
It is a stable product. I rate the stability a ten out of ten.
It is a scalable product. It is suitable for medium and enterprise businesses. Its scalability is a seven or eight out of ten.
Fortinet provides good support services.
Positive
Compared to Fortinet FortiAuthenticator, Cisco is a complicated tool to use. It is difficult to configure as it has many features. It is scalable but needs to be a more stable product.
The initial setup is very easy. It takes an hour to complete.
The product is inexpensive compared to Cisco. I rate its pricing a three to five out of ten.
I recommend Fortinet FortiAuthenticator and rate it an eight out of ten.