Fortinet FortiGate Reviews

Fortinet FortiGate is used as a network firewall.

Fortinet has been a Perimeter Security which defends our network from Internet attackers, armed with zero-day exploits of common Internet services like HTTP and SMTP. We applied access-control lists to limit classes of VPN users' access to only what they need as a support team or solution deployers. We Shut off unused network services and defended critical resources first. We Build Internet-style perimeters for partner extranets. We also built secured wireless access.

Fortinet FortiGate UTM has many valuable features, such as application control, advanced persistent threat protection, Web and content filtering, IP reputation, integrated WLAN controller, intrusion prevention system, data loss prevention, and antimalware, antivirus, and antispam. It has security features that are in level with the Firewall technologies that are available in the market.

One of the features that I would like to have is endpoint protection, this should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not.

I have been using Fortinet FortiGate for approximately 6 years.

Fortinet FortiGate has high availability, which means that we have deployed two firewalls. In case of any failure of a device, the other one will continue to work. Our university stays online 100% of the time.

Fortinet FortiGate is quite robust. I haven't had any kind of hardware issue. The system has been running very smoothly with all the upgrades as far as I have continued my support with Fortinet. We keep renewing the support every year, which gives us the eligibility for all the updates.

I used the Fortinet FortiGate support a long time ago. There was a small feature that was not functioning as per the documentation. When they released the latest firmware and the issue was resolved. They provide prompt support.

I would rate the support from Fortinet FortiGate a five out of five.

The initial setup of Fortinet FortiGate is straightforward we had an right person in-house for deploying it. Moreover, If required, Fortinet has its support extended to us. We can approach them anytime and they can assist us with any kind of complicated configuration.

We implemented the Fortinet using an in-house Technical support team.

There is a subscription-based model to use Fortinet FortiGate. We pay annually for the solution along with the support. If you want to have all the updates, and security patches you will need to renew your support.

The price of Fortinet FortiGate is reasonable compared to other solutions.

I have evaluated many other solutions, such as Sophos. If you look at Sophos, it has its own endpoint protection. It keeps a record of each client, what are the threats that have happened on each client level, and if there is a ransomware attack. It blocks it and notifies the firewall. I would be able to see a single dashboard view of what kind of threat has happened and how to mitigate them all.

Fortinet FortiGate is a good solution overall. It is very user-friendly and all the policies are very easy to deploy. I would recommend Fortinet FortiGate to any new users who want to have a secure infrastructure.

I rate Fortinet FortiGate an eight out of ten.

There are some better industry-standard solutions out there in the market, and compared to them, Fortinet FortiGate has to be more flexible enough with their solution to be more competitive.

Any time a firewall is deployed at a customer site, we'll use the intrusion detection, mostly on the input side, on VPN connections, as well as forward connections and established related environments. If you go to a website, you want to be sure it returns the content that it should, for instance. So we'll use IPS both for user traffic originating from behind the firewall, inbound NAT PAT, as well as for VPN connections. We are partners with Fortinet. 

Integrated management would probably be the most valuable feature. I can take a single FortiGate and manage switches and access points from a single login. I think it's on par with a Palo or a Check Point. I also like their sandbox. The solution covers what we need for most environments, whether small, midsize or enterprise. That aside, the user interface is pretty good and the packet capture works fairly well. The CLI is their own flavor of everything, but that's going to be true for just about anybody that's out there. IPS has widespread capabilities.

The biggest problem we have is the way they handle virtual IPs. It's not handled well at all and even pfSense handles that better. There are three different ways to configure it, depending on whether it is an internal or a through process, and it's just unnecessarily complicated. It would be nice if everybody got together and agreed on some language in their CLIs, but that's not going to happen. If you only dealt with one product on a regular basis, then the problem wouldn't be as evident.

I've been using this solution for many years. 

Scalability is relative because a given platform only has so much horsepower. It's not too bad to move from one platform to another, as long as they're on the same software rev. If they're not, then you run into the typical hassles where a backup from an earlier rev doesn't cleanly install on a newer rev. It would be nice if that was a little bit cleaner. 

The customer support is excellent. The first-line tech support is pretty quick about establishing whether they're going to be able to address a given problem. They can often escalate it on the phone, but they're also pretty good and timely if you're going through email. Once you have somebody assigned, it's pretty good.
We also have great local engineering support here in North Carolina. 

The initial setup isn't too complicated for a single WAN. You have to assign your name, your address, set up your aliases and then build rules. I think the VPN configuration could be a little simpler, but it's no harder than setting it up on a SonicWall, for instance. The setup can be done in less than an hour, including running updates and registration. A single person can deploy 10 switches, a pair of FortiGates in HA, and let's say 10 access points. One person will do the programming and then all installation is done by two specialists by code.

Fortigate is as cost-effective as its competitors. As the boxes get big, it gets pretty expensive but that's for large organizations that have a substantial IT budget.

My advice is to go through some basic training before trying to take it out of the box because the language that's used to configure FortiGate is not the language used on the Cisco ASA or on WatchGuard, or Juniper. The language is a little different so what you think you're configuring and what you're able to configure are two different things. The way that the policies are applied is different than it is from other boxes. So just because you have a technician-level cert with Cisco, you will not be able to successfully configure a VPN on a FortiGate. 

I rate this solution eight out of 10. 

It is used as a defense mechanism for securing the internal network from the external network. We also use it to have VPN tunnels between us and our partners and the support organizations we work with.

We are using FortiGate 200F.

We are mostly using it as a defense mechanism. It has many more possibilities, but at this moment, it is only used for defense against attacks. It is doing what it should do with the FortiGuard subscription on it, which is an advanced security subscription.

It is easy to use. We chose this product for the possibility to have virtual domains (VDOMs). We are building another company in the group, and we would like to split the firewalling rules and policies between these two companies. Each company would be able to manage its own policies and security rules, which is an advantage of Fortinet FortiGate. We can define VDOMs, and every company can manage its own VDOM as if it has its own physical firewall, but in fact, we would be using the same physical appliance because we are also using the same internet lines. So, it allows us to reuse the existing resources without the disadvantage of having to compromise on policies and security. Each company can choose its own way of working.

I don't see any area of improvement at this moment. I'm responsible for the IT infrastructure. I'm not a security specialist. The IT security is being managed by the CSO in our company. 

We had some issues in the beginning while setting it up, but after doing the firmware update, it is working fine.

It has been a little over a year since we have the firewall cluster in place.

It is a stable product. We had some issues in the beginning while setting it up, but we received an update of the firmware, and since then, it has been stable.

It is being implemented for everybody. It is our security layer.

Their support is good. We had some issues in the beginning, and they were resolved within a couple of days after we explained what we were trying to do. They confirmed that it is a bug, and they would give us a fix. A couple of days later, we had the fix.

We were using SonicWall firewalls. We found FortiGate better, and we switched everything. We decommissioned all SonicWall firewalls. One of the reasons why we changed from SonicWall was that its licensing was user-based and function-based. So, every time we did something, we had to add another license or subscription. The licensing of FortiGate is clear. We know what is the price.

We migrated last year from a typical MPLS network to a complete and only one network between the sites. For firewalls, we now have a few solutions in place in our headquarters. We have Fortinet Firewall Cluster, and on the remote sites, we are using Meraki firewalls that are being used as a router at the same time. 

It is easy to use.

Its price is reasonable. They have a clear pricing policy. It is not complicated by the number of VPN users at a time. We know what the price is. The yearly subscription for the security license is rather high, but it is all included for whatever number of users you have and the kind of functions you need.

I would rate it a nine out of ten.

We use Fortinet FortiGate for web filtering, IPS reporting, and firewall policy routing.

What we like about Fortinet FortiGate is that it's fast. You can also use it immediately, e.g. you don't have to wait and apply the policy before you can use it. It's robust and offers immediate usage, unlike Check Point, which we noticed was a slow product.

Fortinet FortiGate is also more secure, depending on how you set up the SD-WAN technology.

We also like the zero trust access, arrays, and the EDR features on this product. It's also 100% more user-friendly, e.g. even when I worked with them configuration-wise. The availability of the support hotline and their knowledgebase articles, e.g. the Cookbook, help a lot. Those articles are accessible to everyone, and they're free.

Whenever you implement a solution, you can run through Cookbook, then you can install the Fortinet certificate if you aren't able to, if you're stuck, but most of the time you are likely to get it right. The Cookbook explain everything straight to the point, and this makes it much easier.

Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%.

I've used Fortinet FortiGate for three years, and the last time I used it was last year.

The product is very stable. It's a powerful product.

Fortinet FortiGate is a scalable product.

Installing Fortinet FortiGate is straightforward. The Cookbook tells you where the issue is, then the packs that come with the software, they are quick to advise on what bugs you can expect, and how those bugs can be fixed. I enjoyed installing the product.

The initial setup for Fortinet FortiGate took less than a week. We spent another week migrating the policy, or recreating the policies on the new object, because of the incompatibility with Check Point. We had to recreate the policies, otherwise, the change was quick, and we just had to mount them and connect the HA link and the other internet link. The setup was quick.

The product has different licensing models, depending on what you're going to do. For the IoT service, initially the program was for free, then the IoT service and the mix firmware that we had, we had to pay.

Services are separate in terms of Fortinet FortiGate license models, e.g. you could have IPS, AV scanning on high availability, etc. The license could be on annual renewal.

I evaluated Check Point, but my problem was that it was too slow to install, and you have to wait long while your environment is down. With Fortinet FortiGate, it was instant. Fortinet FortiGate is very easy to install, unlike Check Point. Fortinet FortiGate is a better product.

I have experience with Fortinet FortiGate. I used to manage the product in the past, but in a different company. I transferred to another company into a new position, and Fortinet FortiGate is being used in my current company.

This product can be deployed both on-premises and on cloud. We use version 300E for on-premises, and VM04 on cloud.

They are doing a lot of things to improve Fortinet FortiGate, that I can't think of anything else I'd like added to it. There's zero trust access, the EDR, and the arrays. I can't really say that there's anything that they have not started. They're able to provide what I want.

We started with 100 users of Fortinet FortiGate in the company, then it went up to 270 users, because we also had a child company with end users of this product.

We didn't have to contact technical support for Fortinet FortiGate, because we had a third-party guy who was helping us, and we seldom contact him. If we find an issue, we just email, and he'll write back to us. We also get advise on the old firmware, for example, that there's a higher chance it's static and could be affected by vulnerabilities. Any help was done quickly, and it was nice. Nowadays, we are doing all the work, e.g. not having to contact our third-party guy.

We don't really need a team for deployment and maintenance. There's another engineer we're sharing ideas with, otherwise, deployment and maintenance are both very straightforward. You just need to know what you're doing, e.g. a good path, IPsec channels, etc., and it'll be much easier.

I can recommend Fortinet FortiGate to others, especially because I understand it the most now. We do know everybody won't choose it, because Check Point, Cisco, and other competitors are coming up with robust devices. Everyone wants to win against their competitors, but I'm happy with FortiGate. It's a product I can recommend to others.

I'm rating Fortinet FortiGate a ten out of ten, because it doesn't give me any issues. It's very easy for me to rate it a ten.

Fortinet FortiGate is a firewall that protects all network data. We use it as our primary firewall in the office.

The performance is good.

It is easy to use.

I would like to see better pricing in the next release, as well as a simplification of the installation.

I have been working with Fortinet FortiGate for six years.

Fortinet FortiGate is a stable product.

Fortinet FortiGate is a scalable product.

In our company, it is the main gateway for the internet, and we have less than 100 users.

Deployment is faster per user. Each one has a laptop or a PC, as well as a mobile phone, so we have less than 100 devices per user, but with mobile phones and Internet access, that number can rise to more than 100.

I have contacted technical support many times, they are very important and they are very good. They follow up on all of the cases that we have opened.

The response time is great.

They also always have an updated version of the firmware.

I now have UniFi Switches for our WiFi access point. We began using UniFi to replace Cisco Linksys Ethernet switches.

I am also working with QNAPS for network connections.

For virtual meetings, we use Google Meet. Some of our customers use Webex but we mainly work with Google Meet.

In our company, we have Kaspersky, as well as Fortinet.

It's not straightforward. You must have at least the knowledge and the settings. It's not that simple.

The length of time it takes to install is determined by the configuration you have inside. It could take anywhere from 30 minutes to three hours.

In our company, I am responsible for the solution's maintenance and deployment.

We had the assistance of a consultant at first.

Licensing fees are paid on a yearly basis.

It would be better if it could be made a little less expensive. 

It will be more expensive for the first year, then it will gradually decrease by a certain amount per year or something along those lines.

We have the full license that included all of the features and support.

Aside from the licensing fees, there are no other costs.

I would rate Fortinet FortiGate a nine out of ten.

We are using it in our data center. It is being used at the perimeter of our data center to protect the applications that we have inside the data center. We are at the beginning of its installation in our data center. We have recently installed a new cluster for IPS functionality, and we have to check if this cluster does the job.

We are using its latest version.

The simplicity of the configuration and the stability of the product are most valuable. The VPN concentrator is very useful. 

It is quite new for us, and we need to go more in-depth into the monitoring tools. It provides different features that we need to do what we want. So far, it is okay for us. In terms of improvement, in the future, they can provide a faster implementation of features. Some of the features are first available in other solutions. Fortinet sometimes takes a little bit longer than other solutions, such as Check Point, to implement new features.

It is quite a new product for us. We started using it only about six months ago.

Its stability is okay for us. Since we have put this new cluster, we haven't had any problems or crashes. It's okay for us from this point of view.

We got this firewall just less than a year ago, and we hope to see good performance in three or four years.

There are around 10,000 people in our company, and they are all using FortiGate because they all need to go through this cluster of firewalls.

I have not yet interacted with them. That's because we didn't encounter any important issues. When we have any technical questions, our partner has been able to answer our questions. So, I don't have any experience with Fortinet support.

It is straightforward at the beginning.

We worked with a partner. Usually, when we have a project, we do the initial setup with this partner. After that, we are able to manage the firewall without any outside help. 

Its pricing is competitive with other solutions.

We chose it after comparing different solutions on the market.

I would recommend this product. It is very easy to use. We are happy to use this product.

I would rate it an eight out of 10.

Fortinet FortiGate is being used in our company.

The interface is very good.

There are limited features.

Scalability could be improved.

The issues with the IOS are that they occasionally hang. They are not as reliable as they once were. 

When there is an issue with IOS, new updates are introduced, but the updates also have a lot of issues.

Performance and technical support are the main issues with this solution.

When compared to Cisco ISE, the device administration is not very good.

Fortinet is not very good at firewalls when compared to Cisco. Cisco offers full administration control, TripleA, SQT, they use TACACS security protocols, and they have much more control. Cisco's approach is superior.

I have been working with Fortinet FortiGate for four or five years.

This year, we're removing the Fortinet and switching to Cisco ISE to cut security.

There are issues with the stability of this solution.

There are limitations to scalability.

When compared with Cisco, the technical support is not very impressive.

The initial setup is very easy. It is not complex.

When compared to Cisco, it is very easy.

Pricing is lower than Cisco.

Fortinet FortiGate is not a bad option.

I would rate Fortinet FortiGate a five out of ten.

Fortinet FortiGate is a firewall used for network security.

Fortinet FortiGate has helped our organization because it provides us with all features that are existing in all the other firewalls, they have a great firewall. Fortinet firewall gives you all the controls you need to control and inspect your traffic from malicious attacks.

The most valuable features of Fortinet FortiGate are the ability to work in proxy mode, which other solutions, such as Palo Alto cannot. There are some features that are better that come at no extra license or subscriptions cost, such as basic SD-WAN. The DLT is useful, other solutions have the same feature too, such as Palo Alto.

Fortinet FortiGate can be deployed in the cloud, they have a full portfolio for security. You are able to integrate other Fortinet solutions together to take full advantage of their security portfolio.

The Fortinet FortiGate documentation library and full resources can be reached easily. You can search and find a solution to a problem you might have. Additionally, the overall solution is highly user-friendly.

Fortinet FortiGate could improve by having better visibility. Palo Alto has better visibility.

When using Fortinet FortiGate you sometimes have to use the CLI to do some configurations which can be sometimes more difficult than using a GUI that other solutions can use, such as Palo Alto.

I have been using Fortinet FortiGate for approximately 40 years.

The stability is very good in Fortinet FortiGate. If there are bugs or problems the issues are fixed quite quickly with updates. Palo Alto has a similar level of stability, they support their appliance from updates to the OS.

Fortinet FortiGate has good scalability. You can deploy it in multiple areas and in multiple deployment modes such as firewall, inter-firewall, or core firewall. Fortinet FortiGate has appliances on multiple series that have different performances. You can choose multiple areas or multiple sites.

I have not used the support from Fortinet FortiGate. I have solved the issues I have had from using my own experience.

I have used Palo Alto previously.

When comparing Fortinet FortiGate and Palo Alto, they are equivalent to each other. However, Palo Alto is the Gartner Magic Quadrant leader and is easy to deploy. It would be difficult to describe the advantages or disadvantages because they are very similar.

Fortinet FortiGate has simple ways some of the features can be configured, such as VPN and routing protocols. You need additional effort to do it using Palo Alto. Palo Alto has a more detailed required configuration and this is why extra effort is needed.

I would rate the implementation of Fortinet FortiGate a five out of five.

The process of implementation is easy.

The price of Fortinet FortiGate can be better than others solutions because Fortinet sometimes helps you with the prices. They help the customers buy the solution by providing them a discounted price for good technology to protect their environment from multiple exploitations and network attacks.

Fortinet FortiGate as a less expensive solution than Palo Alto.

I would rate the price of Fortinet FortiGate a four out of five.

I have evaluated other firewall solutions.

Fortinet firewalls are a great new generation firewall. Since we are in these pandemic times with the increasing number of remote workers, you need one solution to protect against the additional breaches on a day-to-day basis. This means you need a great SD-WAN solution. Fortinet FortiGate helps by preventing these attacks because it is a secure solution and you have full visibility of the scalability of the traffic. The solution takes the appropriate actions paths based on the FLAs

Fortinet FortiGate is an excellent choice for you to implement as an SD-WAN solution.

I rate Fortinet FortiGate a nine out of ten.