Fortinet FortiGate Reviews

We primarily use the solution for its security features and performance. We enable features that assist with web filtering, application consoles, and IPS.

The performance of the solution is very good.

The product offers very good security.

It's pretty easy to install the solution.

The cloud management should improve. There are other manufacturers that have better management cloud solutions. Aruba, for example, is very good at this aspect. Fortinet could look to them as a model of how to do something interesting with management solutions.

Fortinet across the board needs to improve the LAN aspect of their products.

The solution lacks multi-language support.

They could offer access points to small companies and firewalls at those access points. Aruba, in that sense, is much better for smaller organizations as they provide this possibility.

We've been using the solution for a few years at this point.

The solution is quite stable. You don't have to deal with bugs or glitches. You don't have it freezing on you. It's reliable.

The solution is pretty scalable. It's flexible. It works with the organization and allows you to expand it as necessary.

In my company, we use FortiGate across several locations. The location with the most number of users has maybe 400 to 500 employees. That said, there is another FortiGate that manages the traffic that goes to the internet for all of the users across locations. We must have around 900 users.

We do plan to continue to use it going forward.

The solution does have different levels of support. If the problem is critical, you can escalate it quite well and even get telephone support.

That said, in terms of telephone support, they need to have support provided in the Spanish language. Right now, this is not the case.

While we concurrently use both Sophos and Fortinet, we're working towards just using Fortinet. I find that the performance of Fortinet is much better than Sophos.

The solution's initial setup is not complex. It's pretty straightforward. In my case, I have many years of expertise working with FortiGate and therefore it was not difficult. It's quite good and easy to manage.

How long it takes to deploy the solution, depends on what the customers ask you to do. More or less, however, it might take maybe one day to make the initial setup of the unit and the configuration that the customer requests. It may take another day or two to put it on service and check that everything is working properly, once again, based on the requirements of the customer.

I work mostly with firewalls and network equipment including firewalls, switches, and routers. I don't just work with Fortinet. I also work with Sophos, Cisco, and Aruba.

We're using the latest version of the product currently.

Overall, I would rate the solution ten out of ten.

We use it for routing and restricting user access.

We use the filtering feature the most. It has filtering and inbuilt securities. We can create customized rules to define which users can access a particular type of site. We can create policies inside the firewall.

The visibility of the network can be better. The GUI can be improved for better visibility of the network flow. Other solutions have better GUI in terms of network visibility.

I have been using this solution for maybe five or six years.

It is stable.

You can have the availability features. All the traffic goes through this firewall for access to the outside world.

Their technical support is good.

We were using some open-source solutions, and then we directly moved to firewalls.

The initial setup was straightforward. It was completed in a month or so.

We implemented it on our own. We are a small team, so a person with a few other duties also manages this solution.

It is not a very costly product if you compare it with other products. The return on investment is also good. If you compare the return of investment and money that you are spending on this product with Palo Alto, Cisco, Check Point, and other solutions, the investment is very less. We are happy with this solution.

The optional licenses are there, and you can choose which one you want and which one to avoid.

It is a fine solution. We have been using this solution for some years, and we are happy with it. We will continue using it unless the FortiGate solution is running itself in some other ways with new features.

I would recommend this solution. It is working fine for us. 

I would rate Fortinet FortiGate an eight out of ten.

We are resellers. We provide products and services to our customers.

It's not just one product. We have been using and installing different kinds of solutions for more than ten years.

I do remember that, of course, the interface was good. It's intuitive, and when we installed it together with access points, we could manage them from one place or from the cloud or from FortiGate itself. 

It's quite comfortable to handle the FortiGate firewall. The fact that we received reports by email, also good. All in all, it's quite a good product, of course, a very good product.

If it would integrate everything in one place then it would be an improvement.

I wanted to buy some switches and integrate them into the system, but we couldn't find anyone here in Israel to provide them or to provide support. Also, we could not get a replacement if something needed to be replaced. 

We wanted to use one vendor to do everything from one managed central management point. It may be something they offer now, but I am not sure.  

It would be helpful if we can have one easy place to manage, or from the cloud to all the devices that are at the client's location. This is the backbone, the switches, the access points, FortiGate, everything. 

Sometimes you do need to know some CLI commands, so it's a bit harder for technicians or new people that don't know it. 

So, if you could do everything without that, it would be much easier when you do V-LANs.

We have been using this solution for a few years.

We are working with several versions because we install them for our customers.

It's a stable product.

It fits for small and medium-sized companies. Regarding the very big ones, I don't know, I'm not in the enterprise market. But for our clients that are offices or companies that are sized between 20 users and 300 users, it's okay. It's good for them.

When I contacted technical support a few times, they were good.

Previously, we worked with Check Point.

They are both good products that are easy to use and have good support.

They're both good. I use them both, it depends on the customer, and what their requirements are. It also depends on which would give you the best value for the money at the time. I don't know how to say which one is better as a firewall. 

The initial setup is easy.

It's an expensive solution. The price should be lower.

In the beginning, I would be the one who would install them, but later it will be our technicians.

I would rate this solution an eight out of ten.

We have been using the FortiGate antivirus software for a couple of years, as of mid-July. The hardware solutions for the firewall, we have been using for less than a year.

We are using FortiGate 80E for a medium-sized office. I am pretty satisfied with it. It has performed well. The primary use is to protect the internet traffic for a medium-sized office, up to fifty users, using a local domain with a not so intensive cloud traffic. Generally, it is just to protect the internet access for all the users in the network.

Also, we are using VPN at external locations to the office, which FortiGate supports.

It give us the liberty to let us do our jobs.

• There is an easy process for configuring it, and it is straightforward to implement the device from scratch.
• It has a somewhat diverse device interface, but if you have one day to play with it, you can easily find whatever you need. 
• All types of policies need to be installed, then all the parameters are configured. It is not very demanding,

At first glance, the interface for the device is very confusing. However, every version is getting better.

I have had no concerns with the stability so far.

We have been in no position to upgrade our number of users. So, I cannot judge this aspect of the product.

They provides local support. I have been using them only for some site blocking. They are pretty efficient in this. They say they will respond in 24 hours, but I have received responses in a maximum of one hour, which is impressive.

We had a server acting as our service-based firewall, so no solution for firewall. 

FortiGate is my first actual solution for firewalls.

The initial setup was very straightforward.

It provides mid-sized company pricing.

Most important criteria when selecting a vendor: We have specific procurement rules, then we specify the technical specifications. After that, whoever is cheapest should get the job.

The unlimited VPN licensing. All of our remote locations (1000+) used IPSec VPN and SSL to connect to the cluster.

We went from being terrified about our firewalls screwing up to completely forgetting we had firewalls. I slept better and so did my manager.

A real-time log viewer in the GUI with the capability to filter traffic displayed. Cisco ASA's have this and it's fantastic.

I used it for four years. We had two devices that were clustered together in a high availability pair as the front end of an country wide, high visibility solution.

No issues encountered.

No issues encountered.

No issues encountered.

Customer service was decent with Fortinet - they were helpful and got the product to our doorstep quickly.

This is where Fortinet stumbles. The support is farmed out overseas to techs that are not very knowledgeable about the Fortinet products. The response time for a critical priority one issue was over four hours and they only responded because we threatened legal action for them violating our support contract.

They used to have Juniper products, which are terrible. The enterprise class firewalls do not support any sort of packetflow gathering such as netflow, and the devices didn't even support Juniper's proprietary jflow. Their SRX series routers, meant for home office use, had more features and capabilities.

It was very straightforward and we encountered very little problems. Fail-over occurred within a second with zero outages or anyone actually taking notice. Firmware updates were easy to apply in a live environment if required, and the GUI was very easy to understand.

I deployed it - I'm FCNSA certified.

If we used a similar solution that required a "per seat" license per VPN, we would have literally spent over 100x what the solution cost us.

We implemented the clustered firewalls for around $30,000, and each office had another Fortigate device at a cost of around $1,000.

Cisco was evaluated but we didn't want to pay for the VPN licensing.

It's an absolutely fantastic product. Just get your support contract clarified, and confirm the response times.

It is quite easy to handle.

Its reporting can be improved. Sometimes, I don't get proper reports.

I have been using this solution for the last two years.

Its stability is quite good.

It is quite scalable.

Their support is great. I would rate them a five out of five.

Previously, we were using a different solution, and as compared to that solution, it is very easy to handle.

I would rate it a nine out of 10.

We use this solution for different reasons.

We use it for the firewall with SDWAN functionality

We use it in some use cases as a VPN Server.

 We use it as a Wi-Fi controller on some sites.

We use if for internal network segregation and routing

Fortinet FortiGate has improved the way our organization functions.

Versatile with a lot of controls and expert level customizations for advanced users

NGFW features seems to be effective are relatively easy to implement. 

Fortigate DC Agent is a useful free feature to automatically detect logged on users and implement user based access policy

Basic VPN is included without extra charges

The Wi-Fi controller feature needs a lot of improvement. The function itself is not as stable as it should be in our use case which might be a problem in either the APs or the controller.

Would like to see more wizards and automation for more features such as virtual servers, SSL VPN, and others where policies, rules entries are created automatically form wizard input.

Some of the features related to load-balancing and traffic shaping are not as straightforward as they need to be. 

The VPN functionality needs low-level debugging get what really going on. Log level is too detailed and requires someone who is quite experienced to analyze and solve those issues. 

Zero-trust base features are lagging behind the other competition, based on what I have read. Would like to see those features in a clearly in the UI.

I have been using Fortinet FortiGate for four years.

We are not using the latest version, but close to it.

There are some stability issues when move to a newer version. It's always good to be a couple of steps behind when you upgrade as usually the latest major releases are a not stable. We are quite cautious to update.

The stability of VPN connection phase is can be enhanced

Wifi AP/Controller stability is an issue for us

It's quite scalable. The scalability and the migration are okay as well. Licensing model is also stright forword and certain features such as basic SSL VPN requires no to min additional cost per user.

Their technical service is quite good. The application notes and the help on the web are quite good.

I would rate technical support an eight out of ten.

By the time I joined a Fortigate was selected against pfsense.

The initial setup is intermediate in complexity but support and online documentation covers for it.

If you're a small-medium size business:

- Size your use case carefully as licensing price jumps significantly with HW changes. 

- Customizable Forticilent SW can be downloaded for free with FNDN membership

- If you have multi sites and require Fortigate based 2FA then consider getting a dedicated fortiauthenticator (VM) with fortiokens acting a central RADIUS server which can be cheaper than cloud tokens an with additional authentication flexibilities.

pfsense; was decided against based required features (mainly VPN which is based in OpenVPN)

Paloalto; is a more expensive with comparable security features based on a recent NSS LABs report

Follow the instructions on the application manual carefully. Otherwise, certain features would not be running quite as they need them to without clear errors reported. 

Contact technical support, they're responsive and have solutions for most of the problems.

Chose/size the HW carefully based on your use case as certain features are HW accelerated  in higher variants but takes a huge toll on CPU/ memory when running on lower variants.

Consider using Fortigate DC Agent which is  useful free feature to automatically detect logged on users and implement user based access policy

Consider segregating functions on different units instead of having all features on a Fortigate (i.e avoid having wifi controller + firewall + VPN on a single unit specially for lower variants)

Because of the flexibility, the advanced user features, the high level of security controls, and the tweaks that are available for the user, I would rate this solution an eight out of ten.

We primarily use the solution as a hardware firewall. In China, there's a lot of content that would be available in the West that isn't allowed here. We're able to block certain content from getting through filters.

The solution offers a very good package for all kinds of virtual appliances, subscriptions, and so on. It's a reasonable price. It's not too much.

The services on offer are just superb. 

The way it can block certain content is very useful for us. It gives you a good heads up as to what streams are being blocked from the network, which helps with visibility.

The simplicity of the product is great. It's very easy to use, which is a compliment we get all the time in terms of feedback.

There seems to be good reporting features. 

The scalability is there. If you need to expand the product, you can.

The menu structure is more logical than, for example, Cisco or SonicWall. I find that the Fortinet is easier to understand in terms of the installation process and setup. 

The only problem that we have here in China is that the whole subscription process on Fortinet is a little bit difficult if you are doing it from China. China has kind of a firewall around the country, and we sometimes have complications due to that aspect.

As a whole, I don't think that the product is actually missing any features.

You do need some IT knowledge in order to effectively work with the solution.

I've been working with the solution since about 2016. It's been a few years at this point.

The solution is very stable. There aren't issues with bugs or glitches. It doesn't crash or freeze. It's very reliable.

The scalability is good. You can expand it as needed and add on extra apps to add in extra functionality if you want to.

We mostly deal with mid-range companies. 

I only talk with people here in China that are the Chinese sellers or distributors from Fortinet. They are Chinese and I don't speak or understand one single character Chinese. So for me, it's very difficult to communicate with technical support. Most of the time, I let them talk with one of the people who I know who is fluent in English and Chinese. That's what I do. 

Most of the time, I can do all the research on the internet to see what kind of device I need and then I get a translator and we figure it out.

We only use Fortinet's FortiGate for our hardware firewall protection.

However, if our clients need extra security, we may add other brands and security layers. We also work with SonicWall, Checkpoint, and Barracuda, for example.

I've also worked with pfSense, which is free, however, it has much more of a do-it-yourself approach. It's also quite different from other solutions. If you have Cisco experience, you'll be able to navigate Fortinet, whereas pfSense requires much more in-depth study. It has its own language, basically. That's one of the reasons you won't find too many of its configurations in China.

The initial setup, for me, at least, is very straightforward. It's just a few clicks and you're set up. It may be a bit more complex for someone else who may not be as familiar with the product.

I have partners that assist with the initial setup and I have network engineers who are doing the job for me. They are working for me as they are my employees. As their boss, of course, I have to know a little bit about how to handle it as well. We handle the implementation process for our clients. We implement it according to ISO and Chinese security standards.

The solution is pretty affordable. It's not overly expensive. It's not like Cisco where you pay an awful lot of money mostly for the name.

There are extra apps you can add to the product, however, those come with an extra price tag as well. That said, it allows you to do more things and expands its capabilities.

I like to use Fortinet due to the fact that with the device you can do so much more, it's not only web filtering. If you decide to use it for something else, you just pay some money to Fortinet for another package and you are good to go. It makes it a little bit easier for small or large companies as it's so flexible in its offering. 

In China, due to business constraints, licensing is quite complicated here.

I'm a service provider in China. Basically, I'm connecting companies, foreign companies or Chinese companies, or even foreign public services to business VPNs or business cross border interconnections.

Whether we use the latest version of the solution or not depends on the client, their needs, and the environment. If a client needs more security, we may even layer in other brands to help with that.

We tend to keep deployments on-premises as you can run into issues with using the cloud in China. We prefer to have it on-premises and then bring lines in to hook everything up. It's simpler and there are fewer issues.

In general, I would rate the solution at a ten out of ten. We've just been pleased with the product and the ease of use.