We primarily use the solution for edge protection as well as the VPN and SD-WAN.
IT Operations Director at a tech services company with 51-200 employees
Stable with an easy initial setup and good documentation
Pros and Cons
- "The solution can scale well."
- "The support costs and licensing are sometimes so expensive."
What is our primary use case?
What is most valuable?
The solution has many valuable features. We tend to use all of them.
The initials setup is pretty easy.
The solution offers very good documentation.
The solution can scale well.
We've been happy with the technical support we receive.
The product is reliable and stable.
What needs improvement?
The support costs and licensing are sometimes so expensive. They should work on their pricing model.
For how long have I used the solution?
I've been using the solution since 2018. It's been a few years at this point.
Buyer's Guide
Fortinet FortiGate
January 2025
Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
What do I think about the stability of the solution?
The stability is very good. We don't deal with bugs or glitches. It doesn't crash or freeze. It's reliable.
What do I think about the scalability of the solution?
The scalability is very good. If you need to scale it as an organization, you can do so.
We have 100 users. They are largely network engineers, however, we have technicians and active users.
We do plan to increase usage in the near future. We have more projects coming up.
How are customer service and support?
We've used technical support in the past and we've had pretty good experiences. We're satisfied with the level of support we've received.
Their documentation is always good too. We've accessed cloud documentation via the portal and have found it to be helpful. The articles are very complete.
Which solution did I use previously and why did I switch?
We previously used Juniper. We switched due to the host and the usability of Fortinet.
How was the initial setup?
The initial setup isn't complex at all. We found it to be quite easy. It's straightforward.
The deployment took us about three to four weeks or so.
We use two people for deployment and maintenance.
What about the implementation team?
I handled the implementation myself. I didn't need the help of a reseller, integrator, or consultant.
What's my experience with pricing, setup cost, and licensing?
The solution is pretty expensive. That said, we see the value of the solution as it provides great value to our organization.
We pay to license the product on a yearly basis.
I'm not sure of the exact amount we pay, however, as it is not an aspect of the solution I handle directly.
What other advice do I have?
We are customers and resellers of Fortinet products.
We work with both on-premises and cloud deployment models.
I definitely recommend this solution to other organizations. We've had a positive experience.
In general, I would rate the solution at a nine out of ten. If the pricing were better, I would rate it higher.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
High-performing SSL VPN functionality keeps our users secure while they work from home
Pros and Cons
- "The most valuable feature is the SSL VPN, as it allows us to connect and it separates this product from other firewalls."
- "Some of the web policy reports could be improved."
How has it helped my organization?
We use the FortiGate firewall for our centralized management services. We have SAP and there are multiple work-from-home users that connect using the VPN to access it. Also, we have some applications that are hosted on the server and we have assigned a public IP through the firewall for them.
For our server, we have specific some UTM policies, and we have designed access so that it is sectioned by zone.
What is most valuable?
The most valuable feature is the SSL VPN, as it allows us to connect and it separates this product from other firewalls.
The VPN performance with multiple users is very good.
We are able to generate a report where we can see details on exactly what the users are accessing. We can set limits as well as easily analyze what they are uploading and downloading.
What needs improvement?
The only challenge that we are facing is that a good internet connection is required for VPN stability.
Some of the web policy reports could be improved. There are reports generated that show exactly which user is using how much bandwidth, and which sites they have been browsing. We should have a way to show that on a single screen. As it is now, when I click on a user, the information shows on another tab.
For how long have I used the solution?
We have been using FortiGate for more than seven years.
What do I think about the stability of the solution?
There is no downtime with this solution. The last time the users could not connect to the VPN was an issue with the internet.
What do I think about the scalability of the solution?
We have not tried to scale FortiGate.
How are customer service and technical support?
We have been in contact with Fortinet several times and the technical support that we have received is absolutely fine.
Which solution did I use previously and why did I switch?
In addition to FortiGate, we are using a Sophos firewall.
How was the initial setup?
The deployment took approximately four months.
What's my experience with pricing, setup cost, and licensing?
The licensing costs are very low.
Which other solutions did I evaluate?
Previously, we were using Turbo VPN to connect using mobile devices. The problem was that the users would be disconnected when the mobile was in a roaming area, and the connectivity is not as stable.
We moved to a cloud service and assigned a public IP address for that application, and we have cut out the VPN for it. That was a rare issue that we were facing with FortiGate.
What other advice do I have?
This is a good firewall and I have recommended it to some of my colleagues in other organizations, and they have implemented it.
I would rate this solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Fortinet FortiGate
January 2025
Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
Branch Manager at a computer software company with 11-50 employees
Effective bandwidth management saves us money and keeps our customers happy
Pros and Cons
- "This solution made it very easy to manage our bandwidth."
- "Compared to some other products, the DLP is not at par for the moment."
What is our primary use case?
Our primary use case for this solution is to manage bandwidth for our customers. This is done by setting the appropriate firewall rules and policies.
How has it helped my organization?
This solution made it very easy to manage our bandwidth. It is important because we do not have to buy additional bandwidth from our ISPs. The rules and policies are set such that our users are happy, and we can maintain our current cost of bandwidth.
What is most valuable?
One of the most valuable features for us is that it is easy to configure. It is also very easy to manage. One of the things we were looking at was a product that is user friendly, and this helps us to generate and analyze the reports we need.
What needs improvement?
I recently saw the new updates that are coming, such as the ability to quarantine a user's machine. Once done, you have the ability to connect to it from the FortiManager Console and you can bring it back online, out of quarantine. This is all very good news.
One of the areas that I feel need improvement is on the DLP (Data Leak Prevention) side of things. Compared to some other products, the DLP is not at par for the moment.
Also, if in the next few years this solution can be made to support HE between models, it would be better.
I feel that improvements can be made on the security side. Sometimes the product does a good job, but sometimes not.
For how long have I used the solution?
More than five years.
What do I think about the scalability of the solution?
The scalability is good, although I see that some brands are now coming up with an important advancement. Currently, when you want to do HE (High-end), you have to have the same model or a similar model. Some competing solutions are now able to do HE between mixed models.
How are customer service and technical support?
I hardly ever use their technical support, but when I do they are pretty good.
Which solution did I use previously and why did I switch?
Previously we were using SonicWall, and we had no trouble after switching to FortiGate. One of the reasons that we switched is because we needed something that is easy to configure and manage.
One of the problems we had is that we could not get SonicWall to print out a comment. The documentation says that it should be able to, but it was not printing. The currently solution meets this requirement.
How was the initial setup?
The initial setup is straightforward and it is easy to configure.
What's my experience with pricing, setup cost, and licensing?
In terms of pricing, the cost of the product is important because we do not want to pay for something that is too expensive. At the same time, however, pricing is not as important as manageability and support. I would say that all things considered, the pricing is pretty good.
Which other solutions did I evaluate?
After switching from SonicWall, we did not evaluate options other than the current solution.
What other advice do I have?
We look for a couple of things when selecting a vendor or product. First, we look at the user interface and figure out whether it is easy to manage. We also consider the price because we do not want to overpay. That said, price is not our number one priority; user manageability is.
We have been using a pretty wide range of products. We have used models such as the Fortinet FortiGate-30E, 51E, 90D, and 200D. They are all pretty good at doing the job that they are configured for. Obviously, the firewall sizing has to be done right, but if the product sizing is done correctly then they will never go wrong.
I have not yet used the cloud access capability, but we do plan on testing it.
After we purchased FortiGate we grew by forty percent, and it was able to continue to perform as it had before.
Overall it is user-friendly, easy to configure, easy to manage, the support is pretty good, they are priced low, and they do the job that you require.
I would rate this solution nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Manager at SICOM LTD
Good pricing, scalable, and helpful for controlling the traffic
Pros and Cons
- "We were looking for the VPN feature and controlling the inflow and outflow of all the traffic within the site and across the sites. We are also using it for the VPN and VLANs."
- "It can be a little bit more user-friendly in terms of policy definition and implementation. It seems a little bit complicated, and it could be simplified."
What is our primary use case?
It controls the inflow and outflow of all the communication between different sites and so on.
We are using its latest version.
What is most valuable?
We were looking for the VPN feature and controlling the inflow and outflow of all the traffic within the site and across the sites. We are also using it for the VPN and VLANs.
What needs improvement?
It can be a little bit more user-friendly in terms of policy definition and implementation. It seems a little bit complicated, and it could be simplified.
When there is a change in the IP address from the ISP, there is some disruption in the service. So, we try to do it when we have the least number of people working, which means very late at night. So, for the time being, it is working fine.
For how long have I used the solution?
We have been using this solution for nearly a year.
What do I think about the stability of the solution?
Apart from the disruption in the service because of the IP address change, it has been quite stable.
What do I think about the scalability of the solution?
We are implementing it phase by phase. Initially, we had one VLAN, and then we added more. So, it is quite scalable, and we haven't had issues with it so far. It has been recommended by the vendor that the model that we have would meet our requirements for the time being. In two or three years, depending on how we expand and how many more resources are required, we might have to look at another version of the device.
How was the initial setup?
It was the vendor who did the initial setup. It was done within the time range that was allocated for the setup. My guess is that it was straightforward.
We are still in the process of implementing the solution. The commissioning has not yet been done. What we had previously is now changed to a new solution and a new way of doing things, and this is still in the implementation phase. Our implementation is being done phase-wise. We do things and tune it until we are happy with it, and then we go to the next phase. So far, it's working fine.
What about the implementation team?
We have a relationship with the vendor. We discussed what we wanted to do and finally, we selected the product, and after that, it was installed and configured on our premises.
We have a small team of three or four people for deployment and maintenance.
What's my experience with pricing, setup cost, and licensing?
Its pricing is fine. It is on a yearly basis. Other than the licensing fee, there is no extra fee.
What other advice do I have?
I would rate it an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Reasonably priced, but the scalability has limitations, and is unreliable
Pros and Cons
- "The interface is very good."
- "Performance and technical support are the main issues with this solution."
What is our primary use case?
Fortinet FortiGate is being used in our company.
What is most valuable?
The interface is very good.
What needs improvement?
There are limited features.
Scalability could be improved.
The issues with the IOS are that they occasionally hang. They are not as reliable as they once were.
When there is an issue with IOS, new updates are introduced, but the updates also have a lot of issues.
Performance and technical support are the main issues with this solution.
When compared to Cisco ISE, the device administration is not very good.
Fortinet is not very good at firewalls when compared to Cisco. Cisco offers full administration control, TripleA, SQT, they use TACACS security protocols, and they have much more control. Cisco's approach is superior.
For how long have I used the solution?
I have been working with Fortinet FortiGate for four or five years.
This year, we're removing the Fortinet and switching to Cisco ISE to cut security.
What do I think about the stability of the solution?
There are issues with the stability of this solution.
What do I think about the scalability of the solution?
There are limitations to scalability.
How are customer service and support?
When compared with Cisco, the technical support is not very impressive.
How was the initial setup?
The initial setup is very easy. It is not complex.
When compared to Cisco, it is very easy.
What's my experience with pricing, setup cost, and licensing?
Pricing is lower than Cisco.
What other advice do I have?
Fortinet FortiGate is not a bad option.
I would rate Fortinet FortiGate a five out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Business Development Manager - Security at a computer software company with 201-500 employees
A good product with good security that's simple to use
Pros and Cons
- "The security on offer is very good."
- "The scalability could be better."
What is our primary use case?
We primarily use the solution for security.
What is most valuable?
The security on offer is very good.
It's very simple to use.
They have a very good technical center.
It's, overall, a very good product.
The solution is stable.
The initial setup is straightforward.
What needs improvement?
The scalability could be better.
For how long have I used the solution?
I've used the solution for three years.
What do I think about the stability of the solution?
It's a stable solution. The reliability is good. There are no bugs or glitches. It doesn't crash or freeze.
What do I think about the scalability of the solution?
The product can be scalable. However, it could be better. You are limited by the hardware.
We have more than 100 clients using this solution.
How are customer service and support?
I've dealt with support in the past. I've also dealt with Palo Alto support. I find them to be very good.
Which solution did I use previously and why did I switch?
We also used Check Point and Palo Alto. Fortinet, however, scores very high against security threats, when you compare the three.
How was the initial setup?
The initial setup is great. It's not complex or difficult. It's pretty simple, pretty straightforward.
We installed it within a day with no issues. It doesn't take much time.
We have five to six technicians that can handle deployment and maintenance responsibilities. We are all engineers that are managed centrally.
What's my experience with pricing, setup cost, and licensing?
You do need to purchase a license in order to use the product.
What other advice do I have?
I'd recommend the solution to other companies that want to try it out.
I'd rate it at an eight out of ten. We don't have any real challenges with it at the moment.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Network Analyst at Aloo Telecom
A stable product that allows us to offer several services in a single box
Pros and Cons
- "We have been able to offer several services to customers in a single box."
- "I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity."
What is our primary use case?
Our primary use case for this solution is the provision of services to our customers, the end users.
How has it helped my organization?
This solution has improved our organization a lot. We have been able to offer several services to customers in a single box.
What is most valuable?
The firewall is a valuable feature because it offers more security for end customers. The HA function is fantastic, as the link switching time is almost imperceptible. It also offers dedicated IP, all in one box.
What needs improvement?
I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity.
For how long have I used the solution?
Trial/evaluations only.
What do I think about the stability of the solution?
My impression of the stability is very good. It is very difficult to have to replace the equipment due to lack of resources.
What do I think about the scalability of the solution?
I found this product to be good for scalability. It offers several features, among them I can mention Application Control, Antispam, QoS and others.
How are customer service and technical support?
I found the technical support team to be careful and committed to delivering what we needed.
Which solution did I use previously and why did I switch?
Prior to using the FortiGate solution, I used the MikroTik RB1100AHx2e. I found that the FortiGate 60D offered more security.
How was the initial setup?
The setup was straightforward and easy, and the equipment has a good command line interface.
What about the implementation team?
We were given all the support that we needed for implementation. The vendors were fantastic.
What was our ROI?
The return is inevitable when you have equipment that offers stability and quality in services.
What's my experience with pricing, setup cost, and licensing?
Before choosing a piece of equipment you have to take into account the cost-benefit offered by each one. Sometimes it is not worth paying a very cheap price to have a minimum level of security.
Which other solutions did I evaluate?
Our evaluation of the MikroTik RB1100AHx2e revealed that it lacks antivirus software and has no lock for botnet control centers.
What other advice do I have?
There is a VOIP feature that by default is enabled on the Fortigate 60D. This greatly increases the CPU usage, which causes bad behavior in the equipment. This feature should be disabled and if necessary, the user can re-enable it.
The FortiGate 60D is a fantastic piece of equipment.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT System Administrator at emirates hospital
Enables us to control our internet usage with the web filter for application features
Pros and Cons
- "The most important features with FortiGate are the web filter and application controls. We can control our internet usage and use the web filter for application purposes."
- "Some features of Fortinet FortiGate are actually fee enabled that are inconvenient for deploying in production. Other issues relate to isolation with Cisco products and your server."
What is our primary use case?
We use Fortinet FortiGate mainly for web filtering and site-to-site VPN connectivity. We establish filters based on the type of application for filtering purposes.
How has it helped my organization?
With Fortinet FortiGate I can do over forty enlaces. We give all of the log-based runtime support to every user and the web traffic coming in. Also, we can enlace all of the security projects from our two servers with the other forty enlaces.
What is most valuable?
The most important features with FortiGate are the web filter and application controls. We can control our internet usage and use the web filter for application purposes. All branch FortiGate devices are integrated with FortiAnalyzer and easy to download and monitor the logs from all other locations. It's easy to change the configurations using CMD-SSH. FSSO is also another good feature.
What needs improvement?
It is mainly our own application of FortiGate that we need to improve. If you compare FortiGate to any other products, all of the other products have more signatures. I couldn't find that many signatures available in the application.
Some features of Fortinet FortiGate are actually fee enabled that are inconvenient for deploying in production. Other issues relate to isolation with Cisco products and your server.
Fortinet should make it so that we are not able to use analytics from Cisco at the same time that FortiGate is installed. We are not able to do real-time network monitoring.
For the next release, FortiGate should be improved to support these issues. For the setup, you need to prepare a lot for that before engaging the deployment.
I learned a lot about FortiGate from books. That should be important in preparation. Fortinet should implement these changes, then we would be able to do more.
For how long have I used the solution?
Less than one year.
What do I think about the stability of the solution?
Stability is good. The only issue is that in the VPN, I have seen many times that there is no stability in the VPN configuration and VPN connectivity. That is our only issue.
What do I think about the scalability of the solution?
If we implement Fortinet to Fortinet connections, then the solution works fine and there are no issues. If we connect with any other vendor like Cisco, Palo Alto, or these kinds of devices, I can see sometimes that the connectivity issue is there.
From IIS, the I/O packet works and connectivity is ideal. Connectivity is fine, but the title clock unnecessarily comes in and sometimes it doesn't reach the destination.
We use Fortinet FortiGate in twenty to twenty-five locations at the time, although we are basically focused on healthcare industry requirements.
For the deployment and maintenance, we have two people we are using right now. Regarding maintenance and deployment, we employ experts in network and security support.
We don't have any plans to increase usage of Fortinet FortiGate. We only use it in 25 locations.
How are customer service and technical support?
We have evaluated Fortinet FortiGate's technical support and it is good.
How was the initial setup?
The initial setup is straightforward. The normal VLAN interface configuration with the LAN configuration is fine. There is no problem with that.
Our deployment took a maximum of half an hour to forty-five minutes. It only took this much time for the entire configuration including the LAN and policy configuration.
What about the implementation team?
We did not use an integrator or consultant. Our security engineers completed the configuration.
What other advice do I have?
In terms of rating, Fortinet FortiGate will come in with an eight out of ten. We are satisfied with the product overall.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Fortinet FortiGate Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2025
Popular Comparisons
Netgate pfSense
OPNsense
Cisco Secure Firewall
Sophos XG
Palo Alto Networks NG Firewalls
Check Point NGFW
Azure Firewall
WatchGuard Firebox
SonicWall TZ
Juniper SRX Series Firewall
Untangle NG Firewall
Fortinet FortiGate-VM
SonicWall NSa
Sophos XGS
Fortinet FortiOS
Buyer's Guide
Download our free Fortinet FortiGate Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Comparison of Barracuda F800, SonicWall 5600 and Fortinet
- Sophos XG 210 vs Fortigate FG 100E
- Looking Into Implementing a Web Security Solution.
- Cyberoam or Fortinet?
- Fortinet, Palo Alto or Check Point?
- Which would you recommend to your boss, Fortinet FortiGate or Sophos UTM?
- What Is The Biggest Difference Between Cisco ASA And Fortinet FortiGate?
- Cisco Firepower vs. FortiGate
- We're trying to choose between Fortinet or Checkpoint UTM firewalls. Can you help?
- What Is The Biggest Difference Between Fortinet FortiGate and Meraki MX Firewalls?
Good performance.