We are resellers. We provide products and services to our customers.
It's not just one product. We have been using and installing different kinds of solutions for more than ten years.
We are resellers. We provide products and services to our customers.
It's not just one product. We have been using and installing different kinds of solutions for more than ten years.
I do remember that, of course, the interface was good. It's intuitive, and when we installed it together with access points, we could manage them from one place or from the cloud or from FortiGate itself.
It's quite comfortable to handle the FortiGate firewall. The fact that we received reports by email, also good. All in all, it's quite a good product, of course, a very good product.
If it would integrate everything in one place then it would be an improvement.
I wanted to buy some switches and integrate them into the system, but we couldn't find anyone here in Israel to provide them or to provide support. Also, we could not get a replacement if something needed to be replaced.
We wanted to use one vendor to do everything from one managed central management point. It may be something they offer now, but I am not sure.
It would be helpful if we can have one easy place to manage, or from the cloud to all the devices that are at the client's location. This is the backbone, the switches, the access points, FortiGate, everything.
Sometimes you do need to know some CLI commands, so it's a bit harder for technicians or new people that don't know it.
So, if you could do everything without that, it would be much easier when you do V-LANs.
We have been using this solution for a few years.
We are working with several versions because we install them for our customers.
It's a stable product.
It fits for small and medium-sized companies. Regarding the very big ones, I don't know, I'm not in the enterprise market. But for our clients that are offices or companies that are sized between 20 users and 300 users, it's okay. It's good for them.
When I contacted technical support a few times, they were good.
Previously, we worked with Check Point.
They are both good products that are easy to use and have good support.
They're both good. I use them both, it depends on the customer, and what their requirements are. It also depends on which would give you the best value for the money at the time. I don't know how to say which one is better as a firewall.
The initial setup is easy.
It's an expensive solution. The price should be lower.
In the beginning, I would be the one who would install them, but later it will be our technicians.
I would rate this solution an eight out of ten.
We are currently using manual router failover that can be configured on the Fortinet security appliance’s second network interface to provide network edge redundancy if the primary managed router fails. If the edge router fails, traffic can be moved to the security appliance with a simple cable swap.
We are looking for a fully redundant solution with automatic failover between both Fortinet Security appliances. I am currently looking at battle card information between Fortinet and Zscaler. I have to do a competitive analysis.
The low cost of ownership was a benefit with all of the features we wanted.
Preconfigured images have been developed for quick deployment. However, if we need a custom policy or have to include an existing policy then that can be accommodated as well.
Virtual Domains (VDOMs) are a feature that we found valuable.
We found the Firewall, VPN, Application Control, IPS, Fortiguard Web filtering, anti-botnet, FortiGuard, Anti Spam Wireless LAN controller, WAN optimization, vulnerability assessment, and endpoint control all to be valuable.
Fortinet certifications include NSS Labs for NGFW, firewall, IPS, SSL, antivirus, and antispam.
Fortinet provides a consolidated security platform for the market place and certifications with NSS labs prove their security assurance.
To the best of my knowledge, Fortinet does not have a CASB solution and Fortinet does not have a Zero trust solution. Fortinet claims to do everything Zscaler is capable of and I'm looking for a comparison between the supported features.
Fortinet VPN and DDoS capabilities are great, yet we need to provide a solution that enables CASB and integration to the cloud.
We have been using FortiGate for three years.
Fortinet is very easy to service and set up.
Fortinet is the least expensive solution.
We are comparing the features of Zscaler vs. Fortinet. We are trying to determine what features Zscaler has over Fortinet and vice versa.
Fortinet was initially scoped as 25 rules for small, 50 for medium, and 100 for large. We need to incorporate more rules but there would be additional professional services or staging services. We are looking to incorporate the cloud access with the Fortinet UTM solution.
Fortinet FortiGate has many use cases: firewall, security, and wifi controller. We use the solution for our project's internet gateway.
My company operates a large data center with many useful applications, sections, and databases. We have to put the security function into FortiGate to protect the databases in the organization.
Fortinet FortiGate has many excellent functions and good security. The firewall is the most common function that we have used for a long time.
The Fortinet FortiGate firewall has been improved with many new functions. Fortinet is working to develop a new generation of firewalls with better security.
Fortinet already improved FortiGate, but in the current market, many brands of security devices have improved together. Fortinet still needs to catch up with market standards.
Fortinet is lacking in features in comparison to competitors.
Fortinet FortiGate is very stable.
Our experience with Fortinet FortiGate depends more on the sizing of the customer. Fortigate is very scalable to serve our customers' needs.
We have scaled from fifty to more than a hundred instances of Fortinet FortiGate. Around 20 staff are required for deployment and maintenance, mostly engineers.
We are not a distributor for Fortinet, so we will not actively promote it as a solution.
The technical support with Fortinet is good. We have our engineers required to have certification in Fortinet products. We provide training classes for our engineers.
We also implement solutions with Palo Alto Networks and WatchGuard.
Fortinet FortiGate is user-friendly to set up. The UI is fine. We still have concerns about security with Fortinet.
The security could be improved compared with Palo Alto Networks equipment. Palo Alto Networks products have more technical issues than Fortinet.
Overall, Fortinet FortiGate is not complicated to set up.
We had a team for implementing Fortinet FortiGate on these projects. We also have many business partners for service work as integrators.
Our partner for the Fortinet FortiGate installation was one of the few consultancies that have exceptionally good service in the market currently.
We have begun Fortinet FortiGate training through the consultant company and now have many partners for service contracts.
The pricing and licensing of Fortinet FortiGate are good if they stay the same. The price is not too high now, but license pricing still changes too much.
Fortinet FortiGate is comparable with the other products in the current market.
We are not sole-distributors of Fortinet products currently. It is part of a portfolio of solutions that we offer our business clients.
The policy for integration and for configuring Fortinet FortiGate should be friendlier than in the version we are using now. Because Fortinet has been in the market for a really long time, and we are very experienced with Fortinet products, I would rate FortiGate with an eight or nine out of 10. I would rate it this score because of the experience that Fortinet has as a market leader for such a long time.
The product's basic firewall feature is one of the best in the market for network security.
The platform's compatibility with Wi-Fi equipment needs improvement. Sometimes, the Wi-Fi units don't work, or one of the networks stops working, and we have to reboot the FortiGate client's endpoint.
I have been working with Fortinet FortiGate for more than ten years now.
It is a reliable solution. I rate the stability a ten.
Small-scale companies sometimes use the whole UTM solution, which includes antivirus and URL protection. However, enterprise clients usually use additional solutions for those kinds of things.
I rate the scalability a ten.
The technical support team is responsive and helpful.
Positive
The initial setup is easy. Depending on the project, the deployment process can take several days.
The platform generates a good return on investment.
The product pricing is reasonable.
It is easy to integrate FortiGate into existing infrastructure. As a firewall, it's one of the best products available today. For other features, we sometimes prefer other vendors, but for firewalls, especially for SMBs, it is a great product.
I rate it a ten out of ten.
The tool is a nice product and easy to handle. The software's user interface is also good. You can easily implement remote access in the solution.
I would like to see improvements in the product's application rules.
I have been working with the tool since 2015.
The tool is stable.
The tool is scalable.
I did not contact the tool's technical support team because it is very strong and stable.
The tool is easy to deploy.
I would rate the product an eight out of ten.
Fortinet FortiGate can be deployed on the cloud, hybrid, and on-premise. We use a combination of private and hybrid for the deployment.
We are using Fortinet FortiGate for parameter security, network isolation, and web filtering.
The most useful functionality of Fortinet FortiGate is the user interface, multiple engines, and their cloud with the latest integrations. Additionally, the Security Fabric tool is very good.
Fortinet FortiGate can improve by integrating the web application firewall and the DDoS protection part of the solution. Having a WAF feature, web application firewall, and proxy together would be a good benefit.
I have been using Fortinet FortiGate for approximately five years.
Fortinet FortiGate is highly stable. It has high availability.
The scalability of Fortinet FortiGate is very good.
We have customers with 1,000 users using this solution and others with 100.
Engineers use this solution and all the end-users are connected to it. The whole organization is using the solution.
The technical support is very helpful. We had a very good experience with them.
The initial installation is straightforward, and the full process takes one to two days.
We have our own team that does the implementation of the solution.
The support subscription for the solution is annual. You are paying for support and there are two levels of support, professional and advanced.
I rate Fortinet FortiGate a nine out of ten.
The UTM (application control) features have been very important, because they have solved many issues that other firewall providers have not developed as Fortinet has.
A clear example of this feature advantages is blocking and allowing the Google suite. For example, without UTM, we would not have been able to execute some customer requirements like this one:
A customer asked us that some host on their LAN is going to be assigned to be a POS workstation. They needed that workstation to have permissions to some applications and some URLs, and they needed to block users from opening sites like YouTube, Google+, and Google Drive, but they needed to get in to some POS URLs hosted in the Google cloud. We were working with rules allowing some specified URLs, but it didn’t work because the subnetting IP address the customer needed to be allowed, sometimes matched the YouTube service. Google support engineers told us they rotate their IP addressing subnets to be more secure and they do not always attach an IP address to a domain name. So, sometimes the customer’s workstations were able to open YouTube sites too.
The way we could block YouTube and allow the customer POS URLs sites, was by configuring an application control sensor, where we were able to block some categories like this:
Another requirement was to allow some specified applications, so we configured the next sensor structure:
Another customer reported to us they had issues working with Gmail attachment files; they could not do it. Executing some packet captures and with the Fortinet TAC help, we found they were using the latest Chrome versions that use the QUIC Google protocol, which is not supported by Fortinet because it is not a valid protocol. We proceeded to block the QUIC protocol using an application control sensor.
After this blocking action, the customer was able to work without any issue.
It can block applications in level 7.
Even though other companies have latest-generation firewalls, FortiGate’s database is bigger.
They could improve performance with all the UTM features working.
Sometimes, we have seen that when you enable the antivirus sensor, customers report slow web browsing. We know this is normal, but we would like to know if it is possible to make feel the customer their web browsing is fast with not as much delay. The antivirus sensor analyzes all the protocols and packets we specified, and this is an important performance affectation. In my personal point of view, I don’t think it is a serious issue, but we receive many reports from users who browse the web with antivirus sensors applied to their firewall policies.
I have been using it for seven years.
It is working in route mode, with all UTM licences active; it has FSSO configured to give permission to the users. It is configured to provide VPN SSL service.
I have encountered stability issues only when we enable all the UTM features.
I have not encountered any scalability issues.
Technical support is 9/10.
We have been using FortiGate solutions for eight years. We have been upgrading when solutions in the family become unsupported.
The initial setup is easy; no issues with doing it.
My company did not evaluate other options. They decided to purchase FortiGate directly.
Work a lot with all of the UTM features because they can be very helpful right now with configuring firewall policies. The policies became very whole.
The solution is mostly used for the connection with VPN clients. We use the solution for network security and network segmentation.
It's a flexible solution. The security that it's providing is a valuable aspect of the product.
FortiGate integrates well with other equipment such as FortiSwitch, FortiIB, and more, and delivers one pane of glass for the management of those devices.
It's an easy solution to set up.
Technical support has been good.
The configuration option availability is not 100% from the website of the FortiGate web management site. When we log on to the web interface on FortiGate, we do not have everything under this web solution. If we need some specific configuration or need to do some specific configuration, we need to do additional things on the CLI.
The stability could be a bit better.
I've used the solution for at least the last 12 months.
In terms of stability, there are some areas in which they need to improve. There are different versions and we understand from past implementations which will work best according to our client's needs. The wrong one may not be as stable as they would like.
Some clients may increase usage in the future. FortiGate is fast becoming a very popular solution and its use will likely grow in general.
In general, technical support is helpful. We are quite happy with the level of support on offer.
The solution's initial setup is pretty simple and straightforward. It's not overly complex or difficult.
The length of time it takes to deploy really depends on the size of the project.
While we do assist the client with the implementation, they tend to handle the maintenance on their end.
Typically we, as integrators, will assist the client with the initial setup.
The overall costs are pretty typical. It's not overly cheap or overly expensive.
I work as an integrator and maybe 60% of my work is around FortiGate. My company is a Fortinet partner and integrator.
If companies are thinking about the security of their network, they should consider FortiGate as a gate to the internet. I would highly recommend it to others.
For small or mid-size businesses, I'd rate the solution an eight out of ten.
Hamza, I think you may find our product comparison between Checkpoint and Fortigate interesting:
www.itcentralstation.com