Fortinet FortiGate Reviews

Fortinet FortiGate is used as a network firewall.

Fortinet has been a Perimeter Security which defends our network from Internet attackers, armed with zero-day exploits of common Internet services like HTTP and SMTP. We applied access-control lists to limit classes of VPN users' access to only what they need as a support team or solution deployers. We Shut off unused network services and defended critical resources first. We Build Internet-style perimeters for partner extranets. We also built secured wireless access.

Fortinet FortiGate UTM has many valuable features, such as application control, advanced persistent threat protection, Web and content filtering, IP reputation, integrated WLAN controller, intrusion prevention system, data loss prevention, and antimalware, antivirus, and antispam. It has security features that are in level with the Firewall technologies that are available in the market.

One of the features that I would like to have is endpoint protection, this should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not.

I have been using Fortinet FortiGate for approximately 6 years.

Fortinet FortiGate has high availability, which means that we have deployed two firewalls. In case of any failure of a device, the other one will continue to work. Our university stays online 100% of the time.

Fortinet FortiGate is quite robust. I haven't had any kind of hardware issue. The system has been running very smoothly with all the upgrades as far as I have continued my support with Fortinet. We keep renewing the support every year, which gives us the eligibility for all the updates.

I used the Fortinet FortiGate support a long time ago. There was a small feature that was not functioning as per the documentation. When they released the latest firmware and the issue was resolved. They provide prompt support.

I would rate the support from Fortinet FortiGate a five out of five.

Positive

The initial setup of Fortinet FortiGate is straightforward we had an right person in-house for deploying it. Moreover, If required, Fortinet has its support extended to us. We can approach them anytime and they can assist us with any kind of complicated configuration.

We implemented the Fortinet using an in-house Technical support team.

There is a subscription-based model to use Fortinet FortiGate. We pay annually for the solution along with the support. If you want to have all the updates, and security patches you will need to renew your support.

The price of Fortinet FortiGate is reasonable compared to other solutions.

I have evaluated many other solutions, such as Sophos. If you look at Sophos, it has its own endpoint protection. It keeps a record of each client, what are the threats that have happened on each client level, and if there is a ransomware attack. It blocks it and notifies the firewall. I would be able to see a single dashboard view of what kind of threat has happened and how to mitigate them all.

Fortinet FortiGate is a good solution overall. It is very user-friendly and all the policies are very easy to deploy. I would recommend Fortinet FortiGate to any new users who want to have a secure infrastructure.

I rate Fortinet FortiGate an eight out of ten.

There are some better industry-standard solutions out there in the market, and compared to them, Fortinet FortiGate has to be more flexible enough with their solution to be more competitive.

Fortinet FortiGate is being used in our company.

The interface is very good.

There are limited features.

Scalability could be improved.

The issues with the IOS are that they occasionally hang. They are not as reliable as they once were. 

When there is an issue with IOS, new updates are introduced, but the updates also have a lot of issues.

Performance and technical support are the main issues with this solution.

When compared to Cisco ISE, the device administration is not very good.

Fortinet is not very good at firewalls when compared to Cisco. Cisco offers full administration control, TripleA, SQT, they use TACACS security protocols, and they have much more control. Cisco's approach is superior.

I have been working with Fortinet FortiGate for four or five years.

This year, we're removing the Fortinet and switching to Cisco ISE to cut security.

There are issues with the stability of this solution.

There are limitations to scalability.

When compared with Cisco, the technical support is not very impressive.

The initial setup is very easy. It is not complex.

When compared to Cisco, it is very easy.

Pricing is lower than Cisco.

Fortinet FortiGate is not a bad option.

I would rate Fortinet FortiGate a five out of ten.

We use the FortiGate firewall for our centralized management services. We have SAP and there are multiple work-from-home users that connect using the VPN to access it. Also, we have some applications that are hosted on the server and we have assigned a public IP through the firewall for them.

For our server, we have specific some UTM policies, and we have designed access so that it is sectioned by zone.

The most valuable feature is the SSL VPN, as it allows us to connect and it separates this product from other firewalls.

The VPN performance with multiple users is very good.

We are able to generate a report where we can see details on exactly what the users are accessing. We can set limits as well as easily analyze what they are uploading and downloading.

The only challenge that we are facing is that a good internet connection is required for VPN stability.

Some of the web policy reports could be improved. There are reports generated that show exactly which user is using how much bandwidth, and which sites they have been browsing. We should have a way to show that on a single screen. As it is now, when I click on a user, the information shows on another tab.

We have been using FortiGate for more than seven years.

There is no downtime with this solution. The last time the users could not connect to the VPN was an issue with the internet.

We have not tried to scale FortiGate.

We have been in contact with Fortinet several times and the technical support that we have received is absolutely fine.

In addition to FortiGate, we are using a Sophos firewall.

The deployment took approximately four months.

The licensing costs are very low.

Previously, we were using Turbo VPN to connect using mobile devices. The problem was that the users would be disconnected when the mobile was in a roaming area, and the connectivity is not as stable.

We moved to a cloud service and assigned a public IP address for that application, and we have cut out the VPN for it. That was a rare issue that we were facing with FortiGate.

This is a good firewall and I have recommended it to some of my colleagues in other organizations, and they have implemented it.

I would rate this solution a nine out of ten.

We are an IT service provider. We provide solutions to our customers based on what their needs are.

I don't know that it changes the way the organization functions. I think it gives customers more peace of mind knowing that they have this in place, that they have it set up properly, that they can run reports to get the information they need of who is using it, and who the top five users are.

Different areas in reporting that they can get information that they need to know. That it's blocking what needs to be blocked, it's allowing what needs to be allowed, it's doing what it needs to do based on the specific requirements and I don't have to worry about it.

There is an enormous amount but it also depends on the customer. Some have to do with the tracking of bandwidth to ensure that the students are not using too much or too little bandwidth. 

There is also reporting. The reporting is valuable.

The next-gen features, the unified threat management capabilities are something that just about everybody is interested in at this point.

I don't like that anything more than very basic reporting is not included. You have to buy their cloud module that's an add-on for getting more customized reporting.

It has just about everything that we are looking for and the customer is needing. It's just the reporting part that is lacking in the base application.

Technical support could be improved.

I have been using this solution for approximately four years.

I am sure there are bugs or glitches from time to time, but it's not anything that's been problematic or had multiples where it's been an issue.

Our clients are small to medium-sized businesses. 

Technical support is okay. They are not exceptional or awful, they're in the middle.

It's hit or miss on their technical capabilities and who you get and who you talk to.

I would rate them a six or a seven out of ten.

We didn't deploy a variety of solutions. Cisco is one we have deployed as well. It's just not as easy to setup. It's all command line, there is not a user interface, it's more expensive, and It doesn't have as much capability.

The initial setup is straightforward.

There's a lot to it, but it's very easy. It's a web interface and very easy to walk through it.

We deploy both on cloud and on-premises, depending on what the customer's requirements are.

Fortinet solution has received great feedback. It compares well to Palo Alto. It's a lot more expensive.

It's very full-featured solution and it's priced well.

I would rate this solution a nine out of ten.

The product's basic firewall feature is one of the best in the market for network security.

The platform's compatibility with Wi-Fi equipment needs improvement. Sometimes, the Wi-Fi units don't work, or one of the networks stops working, and we have to reboot the FortiGate client's endpoint.

I have been working with Fortinet FortiGate for more than ten years now.

It is a reliable solution. I rate the stability a ten. 

Small-scale companies sometimes use the whole UTM solution, which includes antivirus and URL protection. However, enterprise clients usually use additional solutions for those kinds of things.

I rate the scalability a ten. 

The technical support team is responsive and helpful.

Positive

The initial setup is easy. Depending on the project, the deployment process can take several days.

The platform generates a good return on investment. 

The product pricing is reasonable. 

It is easy to integrate FortiGate into existing infrastructure. As a firewall, it's one of the best products available today. For other features, we sometimes prefer other vendors, but for firewalls, especially for SMBs, it is a great product.

I rate it a ten out of ten. 

We use Fortinet FortiGate for web filtering, IPS reporting, and firewall policy routing.

What we like about Fortinet FortiGate is that it's fast. You can also use it immediately, e.g. you don't have to wait and apply the policy before you can use it. It's robust and offers immediate usage, unlike Check Point, which we noticed was a slow product.

Fortinet FortiGate is also more secure, depending on how you set up the SD-WAN technology.

We also like the zero trust access, arrays, and the EDR features on this product. It's also 100% more user-friendly, e.g. even when I worked with them configuration-wise. The availability of the support hotline and their knowledgebase articles, e.g. the Cookbook, help a lot. Those articles are accessible to everyone, and they're free.

Whenever you implement a solution, you can run through Cookbook, then you can install the Fortinet certificate if you aren't able to, if you're stuck, but most of the time you are likely to get it right. The Cookbook explain everything straight to the point, and this makes it much easier.

Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%.

I've used Fortinet FortiGate for three years, and the last time I used it was last year.

The product is very stable. It's a powerful product.

Fortinet FortiGate is a scalable product.

Installing Fortinet FortiGate is straightforward. The Cookbook tells you where the issue is, then the packs that come with the software, they are quick to advise on what bugs you can expect, and how those bugs can be fixed. I enjoyed installing the product.

The initial setup for Fortinet FortiGate took less than a week. We spent another week migrating the policy, or recreating the policies on the new object, because of the incompatibility with Check Point. We had to recreate the policies, otherwise, the change was quick, and we just had to mount them and connect the HA link and the other internet link. The setup was quick.

The product has different licensing models, depending on what you're going to do. For the IoT service, initially the program was for free, then the IoT service and the mix firmware that we had, we had to pay.

Services are separate in terms of Fortinet FortiGate license models, e.g. you could have IPS, AV scanning on high availability, etc. The license could be on annual renewal.

I evaluated Check Point, but my problem was that it was too slow to install, and you have to wait long while your environment is down. With Fortinet FortiGate, it was instant. Fortinet FortiGate is very easy to install, unlike Check Point. Fortinet FortiGate is a better product.

I have experience with Fortinet FortiGate. I used to manage the product in the past, but in a different company. I transferred to another company into a new position, and Fortinet FortiGate is being used in my current company.

This product can be deployed both on-premises and on cloud. We use version 300E for on-premises, and VM04 on cloud.

They are doing a lot of things to improve Fortinet FortiGate, that I can't think of anything else I'd like added to it. There's zero trust access, the EDR, and the arrays. I can't really say that there's anything that they have not started. They're able to provide what I want.

We started with 100 users of Fortinet FortiGate in the company, then it went up to 270 users, because we also had a child company with end users of this product.

We didn't have to contact technical support for Fortinet FortiGate, because we had a third-party guy who was helping us, and we seldom contact him. If we find an issue, we just email, and he'll write back to us. We also get advise on the old firmware, for example, that there's a higher chance it's static and could be affected by vulnerabilities. Any help was done quickly, and it was nice. Nowadays, we are doing all the work, e.g. not having to contact our third-party guy.

We don't really need a team for deployment and maintenance. There's another engineer we're sharing ideas with, otherwise, deployment and maintenance are both very straightforward. You just need to know what you're doing, e.g. a good path, IPsec channels, etc., and it'll be much easier.

I can recommend Fortinet FortiGate to others, especially because I understand it the most now. We do know everybody won't choose it, because Check Point, Cisco, and other competitors are coming up with robust devices. Everyone wants to win against their competitors, but I'm happy with FortiGate. It's a product I can recommend to others.

I'm rating Fortinet FortiGate a ten out of ten, because it doesn't give me any issues. It's very easy for me to rate it a ten.

In my previous company, which was a silver partner, we installed 300 and 301 for a few use cases. The most selling product at that time was FortiGate 100E.

I'm pretty happy with its reliability. It is also very scalable.

They have to just improve its performance when we enable all UTM features. When you enable all the features, the performance of FortiGate, as well as of Sophos and SonicWall, goes down.

I worked with this solution for four years in my previous company.

It is very stable. When you compare it with Palo Alto, it is stable.

It is very scalable.

They are very knowledgeable and helpful.

Based on what my engineers told me, it is easy to install. It is straightforward.

It is affordable. Palo Alto is much more expensive than Fortinet.

I would rate it a nine out of 10.

We are partners with Fortinet, so we are system integrators. We are the bridge between Fortinet and the customer.

I'm satisfied with the product more or less. If we are presenting Fortinet and proposing Palo Alto also, Fortinet is not able to develop the kinds of features available right now in the market. Even with the sandboxing feature, which is an advanced synchronized security, right now most customers are asking for a complete solution like EDR, XTR, or a kind of firewall. It should get synced, and there should be a type of URL filtering application that filters all kinds of visibility.

The feature which gives us a lot of pain is ASIC architecture. The firewall architecture is a kind of an operating system in the chip. We have our kind of base operating system in raw mode, so nobody is able to hack it out. The problem is that every time your base operating system gets an upgrade, customers need to upgrade the firewall. It means you have to replace the older firewall. That's a pain area. It should not be that kind of ASIC base. It should be based like Check Point and Palo Alto so if there is a major update coming in, they can be updated on the same firewalls.

We have been working with Fortinet for about five years.

The product is stable. Normally we are selling Fortinet for customers who have 100 or 150 users, not more than that. Over time, there is a lot of worry about insecurity. For big accounts, we are not able to satisfy the customer with the Fortinet firewall because they ask for a lot of features. Even in PLC, we have some challenges in that.

Technical support is okay.

Initial setup is easy to configure.

The price is fine. We were expecting that Fortinet would give competition to Palo Alto, but the market that we are covering with Fortinet is kind of SMB. They are compatible with Sophos, so we are not dealing with the big boxes because then there will be a requirement of big boxes. If there are more than 2,000, 5,000, or 15,000 users, we are selling for Palo Alto, but not lower than that.

I would rate this solution 6 out of 10. 

The people who are working right now as system engineers are doing a kind of formal activity with the configuration. That means they are doing the basic activation. They are not doing a lot of experiments on them, so they should go with that because Fortinet is also having sensors, which can be highlighted to the customers. 

Training should be available to the partner. The people who really implement the Fortinet firewall or Check Point or Palo Alto don't have enough knowledge about that because there is no public document or public training available.