I am using Fortinet FortiGate as a perimeter internet firewall.
Technical Architect at a computer software company with 10,001+ employees
Beneficial centralized management and scalable
Pros and Cons
- "The most valuable feature is the FortiManager for centralized management."
- "Fortinet FortiGate could improve if it had a cloud-managed solution."
What is our primary use case?
What is most valuable?
The most valuable feature is the FortiManager for centralized management.
What needs improvement?
Fortinet FortiGate could improve if it had a cloud-managed solution.
For how long have I used the solution?
I have been using Fortinet FortiGate for approximately 10 years.
Buyer's Guide
Fortinet FortiGate
January 2025
Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
What do I think about the stability of the solution?
Fortinet FortiGate is approximately 80 percent stable.
What do I think about the scalability of the solution?
The scalability of Fortinet FortiGate is good.
How are customer service and support?
The technical support from Fortinet FortiGate is terrible. They can improve.
The presales, account management, and post-sales are the three worst things about Fortinet.
Which solution did I use previously and why did I switch?
I have previously used other solutions such as Cisco, Check Point, and Palo Alto.
The solution I would recommend largely depends upon the environment it is being implemented. We tend to mix and match firewalls, but Check Point tends to be, easier to manage, but more expensive. Their support is much better than Fortinet's when it comes to pre-sales and post-sales.
What's my experience with pricing, setup cost, and licensing?
The price of Fortinet FortiGate is better than Cisco, Check Point, and Palo Alto. In terms of pricing, it's probably a better-priced firewall solution overall.
What other advice do I have?
I rate Fortinet FortiGate an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Director of IT with 51-200 employees
Good reliability and robust solution
Pros and Cons
- "It's super reliable. I don't think I've ever had a reliability issue with it."
- "Monitoring and reporting could be better."
What is our primary use case?
We primarily use this solution as a firewall.
It's our main firewall, but we're planning to replace it with a pfSense for reasons I will discuss.
How has it helped my organization?
What is most valuable?
It's super reliable. I don't think I've ever had a reliability issue with it. Within the four years that I've been using it, maybe two or three times, resetting the firewall was what solved the problem. It's been super, super solid. I never have to think twice. If I ever experience a problem, the firewall is the last thing I think about. I never need to check it because it's never the problem. It's just super solid. It's also pretty robust. I know that there are more robust solutions out there, but not by a lot.
What needs improvement?
In the enterprise proprietary world, Fortinet, in my experience, considering its cost and reliability (maybe they could bring the price down or maybe they could make more plans), I honestly don't think that there is much room for improvement. I think it's a pretty good solution for anyone who is looking for a proprietary solution. I wouldn't look anywhere else.
Cisco, for example, is probably way overpriced. Fortinet on the other hand, one of their strong sides is that they have an all-encompassing solution with a very reasonable price point. Cisco and other brands are a little bit more modular — to get everything you'd have to buy a lot of different packages.
An automated guide feature or templates that you could pick and choose would be a nice addition.
It's definitely not as easy to look at traffic as I would like. Sometimes when I'm trying to see what traffic has been blocked or what traffic has been passed, it's not as easy as I would like to filter it out or to monitor bandwidth.
The monitoring is not as good as it could be. It could be a lot easier to understand. For example, I was trying to figure out, in a given timeframe, how much was downloaded off of a certain interface and I didn't really understand how I could get that information or if it was even available. I was searching the documentation online and I couldn't even figure it out. Monitoring and reporting could be better; It's very good, but there's definitely a lot of ways to improve it.
For how long have I used the solution?
I have been using Fortinet FortiGate for four years.
What do I think about the stability of the solution?
Fortinet FortiGate is super stable, one hundred percent. Just works 24/7 without any issues like you would expect from an enterprise product.
What do I think about the scalability of the solution?
I know that it's scalable, but I don't actually have any experience regarding scalability. It's probably not as scalable as pfSense because pfSense is based on open hardware platforms. I definitely know that proprietary platforms usually tend to be less scalable because they're more constrained with licensing. The scalability in my opinion would be decent, satisfactory, but I believe pfSense is probably more scalable. I know that there are a lot of big corporations like Google and others that use pfSense. I don't know the details. I'm just giving my educated guess.
Which solution did I use previously and why did I switch?
I personally prefer pfSense as it's open-source and you only have to pay a minimal fee for support. But for people who want that platform, I think it's a great solution. If I wasn't using pfSense, I would definitely go with FortiGate.
The two products are completely different. If you're using pfSense, you're basically using the entire open-source world — so you're based on FreeBSD, you're using Snorts, everything is open-source. It's very easy to make modifications and to figure out what's going on. You're not dependent on your single company's documentation, there's a huge user base. It's very easy to modify and extend. You can see what's going on — it's very transparent in that sense. It's probably a little bit more manual. With pfSense, You have to put in a little bit more effort to get things done, but, in the end (aside from the huge cost savings), you get all the features that are available in an enterprise firewall for just the price of support, which is also very minimal.
If you need to make any tweaks, you can do it all yourself. If you need to tweak ciphers for SSL for compliance (for PCI, for security compliance) it's not a difficult thing to do; it's a fairly trivial task.
How was the initial setup?
I didn't set it up initially, but I did set up a lot of things from scratch. I think it could be more simple. When you're looking at a proprietary solution, usually it's aimed for end-users and they just want to do point and click. I believe in certain aspects, pfSense was simpler. I think there's maybe just a bit of a learning curve, but I guess you would experience that with any platform.
What's my experience with pricing, setup cost, and licensing?
I think that the pricing is fair.
What other advice do I have?
On a scale from one to ten, I would give Fortinet FortiGate a rating of nine.
Other than the price and the lack of extensibility and transparency (which is inherent in any proprietary platform); if you're going to compare it to pfSense, then I would not give it a nine. I would give it an eight, and I would give pfSense a 10. pfSense has its drawbacks, but not that many, in my opinion.
Take the time to learn the platform and you won't run into trouble later. That's my advice.
Other than that, it's super solid, super reliable. It does the job.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Fortinet FortiGate
January 2025
Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
System Engineer at Trends and Technologies, Inc
It's a user-friendly solution with good interoperability, and it's cheaper than most
Pros and Cons
- "FortiGate firewalls are user-friendly, and I like the security profiling features."
- "While FortiGate is cheaper than most other solutions, we're seeing increased license renewal costs. Most of our clients are asking for more significant discounts because the price is going up."
What is our primary use case?
Our primary use cases for FortiGate are SD-WAN and the next-gen firewall.
How has it helped my organization?
Most clients in the Philippines seek a cost-effective solution that can secure their network, and FortiGate is often their first choice. If your network is secure, there's less downtime and threat exposure, increasing overall efficiency.
Fortinet's secure SD-WAN helps us remedy threats faster. It's user-friendly, and you can see everything on the FortiGate dashboard through a single pane of glass. Secure SD-WAN has reduced our mean time to detect. We haven't had any significant issues so far.
SD-WAN has reduced our help desk tickets by making us secure. Many of our clients switched from other brands to Fortinet, and they feel that the FortiGate box and the added security FortiGuard provides have exceeded their expectations.
What is most valuable?
FortiGate firewalls are user-friendly, and I like the security profiling features.
FortiGate has always had good interoperability. Their fabric enables you to integrate a lot of products into one vendor.
The secure SD-WAN gives you a tool for failproof your connections, especially with a branch-to-branch setup. FortiGate also comes with FortiGuard, which is an excellent threat-detection service. They have their own R&D and threat intelligence for FortiGuard.
What needs improvement?
While FortiGate is cheaper than most other solutions, we're seeing increased license renewal costs. Most of our clients are asking for more significant discounts because the price is going up.
For how long have I used the solution?
We have been using the solution for more than two years.
What do I think about the stability of the solution?
I rate FortiGate an eight and a half out of ten for stability.
What do I think about the scalability of the solution?
I rate FortiGate a nine out of ten for scalability.
How are customer service and support?
I rate Fortinet support a nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We also use Meraki. FortiGate has advantages in terms of usability. Also, if we don't pay for the Meraki license, it becomes useless.
How was the initial setup?
Deploying FortiGate is straightforward. It typically takes about three days to deploy and configure the solution. One person is usually enough to deploy it.
What was our ROI?
Most of our clients are still using the FortiGate D Series, so they have gotten their money's worth.
What's my experience with pricing, setup cost, and licensing?
Fortinet is much cheaper compared to the other leading platforms. However, most of our customers are asking for bigger discounts on license renewals.
What other advice do I have?
I rate Fortinet FortiGate a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Head of IT Infrastructure at a non-tech company with 1,001-5,000 employees
Includes many valuable features, is extremely stable, and scalable
Pros and Cons
- "The most valuable features of the solution are SD-WAN, filtering testing applications, web filtering, and the new VPN."
- "The routing capability on the FortiGate devices has room for improvement."
What is our primary use case?
We use Fortinet FortiGate for the protection of our perimeter, VPNs, web filtering, application filtering, and general edge protection.
How has it helped my organization?
I received four tickets a year when I joined my current company, and what the solution has really done is enabled the SD-WAN feature. This has given us more value and reduced the amount of time spent on the manual management of our edge device. We are now able to set our SLAs and be on autopilot.
What is most valuable?
The most valuable features of the solution are SD-WAN, filtering testing applications, web filtering, and the new VPN. The new web flash is especially noteworthy because it supports Google and the single sign-on for our VPN activities.
What needs improvement?
The routing capability on the FortiGate devices has room for improvement.
For how long have I used the solution?
I have been using the solution for three and a half years.
What do I think about the stability of the solution?
The solution is very stable.
What do I think about the scalability of the solution?
The solution is very scalable. To scale our firewall we only need to add more hardware. We currently have over 2,000 users.
Which solution did I use previously and why did I switch?
We previously used Mikro Tik before the organization decide to switch.
How was the initial setup?
The initial setup is straightforward. As long as we know what we are doing the deployment can be completed within one business day.
What about the implementation team?
The implementation was completed by a partner and two people were required. We completed the configurations ourselves.
What's my experience with pricing, setup cost, and licensing?
The pricing is flexible. We pay for our device and our subscription according to our needs.
What other advice do I have?
I give the solution a ten out of ten.
One interesting and critical thing about Fortinet is the add-ons they have included with their firewalls, such as SD-WAN, which would cost a lot of money with other providers but is included with Fortinet's firewall.
When looking for a solution that can better optimize our connectivity and also keep providing security along the website for our branch offices, Fortinet FortiGate is the best solution. The solution is worth every cent. I use FG-61E and for the size of the device it has been very stable for the three years with only occasional reports to apply updates. Fortinet FortiGate has been very responsive to vulnerabilities that have been released. Our business is 24/7 and we don't have leaks. Our servers are always available.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Presales Manager at Rayat Group
Makes it easy to create policies and integrates with Active Directory
Pros and Cons
- "The integration with Active Directory is one of the good features. Most of the customers are now looking for the Single Sign-on feature. So, being able to integrate Active Directory with the firewall is useful. It is also easy."
- "Its reporting and pricing need improvement."
What is most valuable?
I like its interface. It is a simple solution. As compared to Sophos, its interface is easier. It is easy to create a policy, and you can easily understand it.
The integration with Active Directory is one of the good features. Most of the customers are now looking for the Single Sign-on feature. So, being able to integrate Active Directory with the firewall is useful. It is also easy.
What needs improvement?
Its reporting and pricing need improvement.
For how long have I used the solution?
I have been using this solution for five years.
What do I think about the stability of the solution?
Its stability is good. It has 90% stability.
What do I think about the scalability of the solution?
Its scalability is good.
What's my experience with pricing, setup cost, and licensing?
It is more expensive than Sophos. Fortinet is overall more expensive than Sophos. The small range of Fortinet, such as 60F and 80F, is more expensive than the small range of Sophos. Sophos is cheaper. In addition, if you jump from 80F Series to 100F Series, the price doubles.
What other advice do I have?
I would rate it a nine out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Sales Engineer - Sênior at a tech services company with 201-500 employees
Good web filtering, nice GUI, and an easy initial setup
Pros and Cons
- "The initial setup is straightforward."
- "Technical support could be better. You don't always get the level of help you need right away."
What is our primary use case?
We primarily use the solution just for internal segmentation and connection of some ranges using IPSec.
How has it helped my organization?
Currently, the solution is saving costs for us and blocks applications effectively using layer seven.
What is most valuable?
The solution's most valuable aspect is the IPS for potential mitigation from the cloud inside our network.
The VPN SSL is important for us.
The web filter is very good.
The GUI is okay.
The initial setup is straightforward.
The documentation provided is okay, I find that sometimes, with other startups, it's hard to find a good amount of documentation in order to assist you with the product. In this case, the solution offers a good amount of detail.
The solution offers good analyzing capabilities.
What needs improvement?
I'm not sure if the solution is really lacking anything major. For us, it works okay.
They seem to have made a lot of improvements since the last release.
Technical support could be better. You don't always get the level of help you need right away.
For how long have I used the solution?
We've been using the solution for about ten years at this point. As it's been about a decade, I'd say we have quite a bit of experience with it.
What do I think about the stability of the solution?
For the most part, the memory and the CPU are good. It's generally stable. We don't face any issues with this aspect of the solution.
What do I think about the scalability of the solution?
The scalability is fine. If a company needs to expand it, they should be able to do so without any issues.
We only have about 40 users on the product currently. It's not a big company.
For now, the product is good as it is and we don't have plans to increase usage in the future.
How are customer service and technical support?
By and large, technical support is good. It's okay. It's not bad. It could be better, however, they do answer our questions when we have them. We're mostly satisfied with the level of service they provide. Of course, it could always be a bit better.
Sometimes the first contact is useful, and sometimes you don't get the kind of help you need right away. It would be nice if it was more consistent.
Which solution did I use previously and why did I switch?
We also use Sophos. We use both solutions at the same time.
How was the initial setup?
We didn't face any complexity when handling the initial implementation. The process is quite straightforward.
The implementation itself can sometimes take less than a week. On average, you should expect it to be about a week in total.
What about the implementation team?
I didn't need the assistance of a reseller or integrator. I handled the implementation myself.
What's my experience with pricing, setup cost, and licensing?
We're charged a licensing fee on a yearly basis. I'm unsure of the exact cost to the company, however. I'm not sure if there are other costs over and above the standard licensing fee.
Which other solutions did I evaluate?
We also looked at Juniper when we evaluated FortiGate. FortiGate is much easier to use in comparison which is why we chose it. The documentation was also better. That, and there was no integration for SSL in Juniper.
What other advice do I have?
We're just a customer. We don't have a business relationship with the company.
Overall, I would recommend the product. It comes with a very good set of features.
I would rate the solution ten out of ten. We've been quite happy with it.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior System & Security Administrator at a legal firm with 51-200 employees
Offers side-to-Side VPN Support for Secure Networking
Pros and Cons
- "Our project needs to link two sides through the internet. One of these was in Cairo and the other in another city. We used FortiGate as the integrating solution between the two locations, i.e. the Fortinet 30E & 100E."
- "Fortinet needs more memory to save the log files. We need it to save the logs on the hardware and not in the cloud. I know this feature is available in FortiCloud, but if we need this log locally, it is not available."
What is our primary use case?
We use Fortinet FortiGate 100E for a VPN. We also use the solution for word filtering. These are our primary business requirements.
How has it helped my organization?
We were not fully operational previously. Our project needs to link two sides through the internet. One of these was in Cairo and the other in another city.
In Egypt, to make this possible, we built connections for everything between the two sides through the internet using the VPN side-to-side with Fortinet.
We used FortiGate as the integrating solution between the two locations, i.e. the Fortinet 30E & 100E.
What is most valuable?
The main feature that Fortinet FortiGate has that is very useful for me, is that I can connect two sides of the network to each other with Fortinet.
I can make two VPNs run side-to-side. VPN is very simple and so easy with FortiGate.
What needs improvement?
Fortinet needs more memory to save the log files (like in the 101E, the old product). We need it to save the logs on the hardware and not in the cloud.
I know this feature is available in FortiCloud, but if we need to log locally, it is not available. Also, the log only records a little time and needs to be longer.
For how long have I used the solution?
One to three years.
What do I think about the stability of the solution?
Fortinet FortiGate offers good stability. I have been using it for around two years.
What do I think about the scalability of the solution?
FortiGate is a very scalable tool. They have an app to manage the access points, switches, and other solutions.
For our project, now we're over a hundred users at the headquarters. The other branch supports about 20 persons.
How are customer service and technical support?
Fortinet tech support is very helpful. I have not faced any trouble with their technical support.
Which solution did I use previously and why did I switch?
The other product I was previously using was ForgeRock but did not have the experience of integrating it with Fortinet FortiGate.
How was the initial setup?
For the Fortinet installation, our initial setup was for word filtering. It was very easy and did not take a lot of time. The deployment took about three days.
FortiGate is very easy. The entire solution setup processes took about three days. I can make many of the rules for most users as we need it configured easily.
What about the implementation team?
I am the integrator for Fortinet FortiGate solutions at our company.
What's my experience with pricing, setup cost, and licensing?
The licensing price for the Fortinet products is approximately a thousand of dollars per year for the FortiGate 100E and $200 per year for the FortiGate 50E.
I don't use additional licensing, just the yearly subscription.
Which other solutions did I evaluate?
We did not evaluate any other options for this purchase.
What other advice do I have?
If anyone asks me for my experience with Fortinet solutions, I would recommend FortiGate, especially if they need to use it for security.
I would recommend the FortiGate series for integration with any hardware or software product. I am very satisfied with Fortinet. I would rate it a 9 out of 10 overall.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Network & Security Team Head at Amiral
Highly reliable, effective profiles, and scalable
Pros and Cons
- "The most valuable features of Fortinet FortiGate are the different types of profiling. It has been the most effective for me. The WAF and the antivirus profile are the most effective in network protection."
- "Fortinet FortiGate is a stable solution. However, my issue is the performance only. When I use all the profiles, this affects the performance. From the beginning, I should have had a better sizing of the box."
What is our primary use case?
We use Fortinet FortiGate mostly for a data center firewall.
What is most valuable?
The most valuable features of Fortinet FortiGate are the different types of profiling. It has been the most effective for me. The WAF and the antivirus profile are the most effective in network protection.
For how long have I used the solution?
I have been using Fortinet FortiGate for approximately seven years.
What do I think about the stability of the solution?
Fortinet FortiGate is a stable solution. However, my issue is the performance only. When I use all the profiles, this affects the performance. From the beginning, I should have had a better sizing of the box.
What do I think about the scalability of the solution?
The coverage and scalability of Fortinet FortiGate are good.
We use the solution for daily operations in the data center. There are hundreds of users that use the solution.
How are customer service and support?
The support from Fortinet FortiGate is great. When I have an issue with the support team, it is when I can't understand what they need and they do not understand. They then typically ask for a remote session which can help us receive the solution. Overall, the support team for Fortinet FortiGate is very good.
How was the initial setup?
The initial setup of Fortinet FortiGate is very straightforward.
I rate the initial setup of Fortinet FortiGate a four out of five.
What's my experience with pricing, setup cost, and licensing?
We pay for the solution annually.
What other advice do I have?
The sizing is very important for the Fortinet FortiGate because after designing you have to choose what size and what kind of FortiGate you will implement. Sometimes you need to implement profiling and this will take from your processing.
In my area, this solution is recommended for many projects because it's very easy to do the implementation and troubleshoot and is highly stable. The integration between many devices, such as the FortiAnalyzer and FortiManager, is good and helps us. Fortinet FortiGate is recommended for any firewall design.
I rate Fortinet FortiGate a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Buyer's Guide
Download our free Fortinet FortiGate Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2025
Popular Comparisons
Netgate pfSense
OPNsense
Cisco Secure Firewall
Sophos XG
Palo Alto Networks NG Firewalls
Check Point NGFW
Azure Firewall
WatchGuard Firebox
SonicWall TZ
Juniper SRX Series Firewall
Untangle NG Firewall
Fortinet FortiGate-VM
SonicWall NSa
Sophos XGS
Fortinet FortiOS
Buyer's Guide
Download our free Fortinet FortiGate Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Comparison of Barracuda F800, SonicWall 5600 and Fortinet
- Sophos XG 210 vs Fortigate FG 100E
- Looking Into Implementing a Web Security Solution.
- Cyberoam or Fortinet?
- Fortinet, Palo Alto or Check Point?
- Which would you recommend to your boss, Fortinet FortiGate or Sophos UTM?
- What Is The Biggest Difference Between Cisco ASA And Fortinet FortiGate?
- Cisco Firepower vs. FortiGate
- We're trying to choose between Fortinet or Checkpoint UTM firewalls. Can you help?
- What Is The Biggest Difference Between Fortinet FortiGate and Meraki MX Firewalls?