Fortinet FortiGate Reviews

As a customer, we work with Fortinet FortiGate. Our major use case for Fortinet FortiGate is our Internet, serving as the main device for routing, firewall features, and everything.

Fortinet FortiGate is one of the best firewalls in the market currently, with a lot of next generation firewall features embedded into it, including SD WAN, which is one of the best services for traffic steering, managing packet log jitter and latency for any applications, making it unbeatable in terms of pricing compared to other firewalls.

It has a significant impact on our network performance as we are a health care company where users access health care business website URLs, and any latency is managed by SD WAN without manual intervention, benefiting the operation as we have more than a thousand users across different locations.

Fortinet FortiGate Unified SASE is effective in providing security policies across multiple locations, incorporating zero touch provisioning that is very impactful and beneficial in managing network problems.

In terms of hardware-assisted DDoS protection with Fortinet FortiGate, it is performance-based, depending on the number of concurrent sessions, users, and the specifications of the hardware product.

The one concern I have with Fortinet FortiGate is the firmware versions, which often have many bugs when upgraded, leading us to revert back to older versions multiple times in my lifecycle.

For example, when upgrading the firmware version, we noticed that one of the services was not working, resulting in no packet flow for a VLAN until we reverted back.

The main area for improvement in Fortinet FortiGate is the firmware versions, as we face uncertainties regarding upgrades and frequent bugs that require self-fixing of problems.

We have been using Fortinet FortiGate since two thousand three.

Fortinet FortiGate is very much scalable, with all models from Fortinet being impactful.

Technical support from Fortinet is generally good, though there are times when it could be better.

We have used other firewalls, including Palo Alto, which we find to be very pricey compared to Fortinet FortiGate.

The deployment process for Fortinet FortiGate is straightforward.

We conducted the deployment ourselves without the help of an integrator or consultant.

The return on investment with Fortinet FortiGate is very good, as it is one of the best products available in the market.

In terms of price for Fortinet FortiGate, it is not considered that expensive when compared to other products; it is medium priced for SMB businesses.

Palo Alto is a premier product, but both solutions have their unique advantages, making it difficult to declare one superior to the other.

We have Fortinet FortiGate in different locations, where every location serves as a data center using hub and spoke technology, connecting all spokes to a primary hub and a secondary hub for reliability.

We use segmentation in core switches; however, the segmentation features are primarily managed by Cisco switches and not by Fortinet FortiGate firewall.

The effects of SD WAN integration on remote users and application performance are very positive, as we integrate all traffic through Fortinet FortiGate SD WAN and aim for configurations that enhance efficiency across locations.

We have been using SD WAN with Fortinet FortiGate for more than five or six years.

Fortinet FortiGate Unified SASE is effective in providing security policies across multiple locations, incorporating zero touch provisioning that is very impactful and beneficial in managing network problems.

The effects of SD WAN integration on remote users and application performance are very positive, as we integrate all traffic through Fortinet FortiGate SD WAN and aim for configurations that enhance efficiency across locations.

With Fortinet FortiGate, the SD WAN feature is included with no additional costs, which stands in contrast to other products like Cisco and Palo Alto, which charge extra for similar features.

I would rate this review an eight out of ten.

We have a couple of use cases for Fortinet FortiGate. We are using it for SASE, the Secure Access Security Edge, to provide VPN services and firewall functionality. We are also using their access points as well as their firewalls and switches.

It is providing consistent security policies across multiple locations.

Fortinet Unified SASE is fantastic in my opinion. We rely heavily on it. It also provides remote access.

The solution provides consistent security policies across multiple locations.

The licensing is a little confusing and a bit too granular for Fortinet FortiGate. I would like to see a more streamlined set of options. 

The hardware is not terribly expensive, but the software license and support can be quite expensive. Some improvements could be made regarding cost considerations and complexity around their licensing.

I have had experience with Fortinet FortiGate for about three years.

Fortinet FortiGate is completely stable and rock solid. From a stability perspective, Fortinet FortiGate just works; you get it set up and it does not fall over. We have had no security-related incidents related to anything with the FortiGates. The advanced features are really good.

We are not that big, however, we have had no scalability issues whatsoever with Fortinet FortiGate. We have a redundant setup for failover, however, it has not had to fail over ever and we have not had a capacity issue. It is highly scalable.

Their support is outstanding for Fortinet FortiGate. You get through to a person. They are very quick to respond and they are extremely knowledgeable and very helpful.

We previously used Palo Alto, and the reason we switched to Fortinet FortiGate for firewalls or SD-WAN edge solutions was reputation. We felt that the product set just fit better and was more flexible.

The initial setup of Fortinet FortiGate was pretty straightforward. It gets a little complex with routing rules and ACLs and VLANs and things of that nature. However, the interface is pretty straightforward. It has a good CLI interface as well. Whenever it was a bit too complicated, we would pick up the phone and get an expert to help us through it.

Return on investment since having this product is hard to quantify as it is a sunk cost and the cost of doing business. Having this functionality in place has shown no negatives, and this solution works effectively. 

We do not have significant cost overhead to maintain it. Once you get it set up, it just works. It is a little expensive, however, you get what you pay for. Whenever we need support to bring on something that we do not understand, they help us. From a net cost overhead, it is cost avoidance from additional headache related to instability or things not working properly. 

The return on investment is more about cost avoidance and stability, resulting in lack of downtime and incidents.

The licensing could be improved as it is a little confusing and too granular for Fortinet FortiGate. I would like to see a more streamlined set of options.

We operate in the Insurtech industry. We have not integrated it with the SD-WAN features yet. 

We do not utilize Fortinet FortiGate's data center solution as we are not big enough for that. 

On a scale of one to ten, I rate Fortinet FortiGate a nine.

Fortinet FortiGate is strong in SMB and mid-market, approaching SD-WAN from a security perspective. Customers have requirements for internet as many are moving away from private connectivity and migrating to Teams, making security a top priority. They've chosen Fortinet FortiGate as it offers both a comprehensive security portfolio, including intrusion detection, deep packet inspection, and VPNs. It provides robust SD-WAN capability, eliminating the need for two vendors. Additionally, they offer a SASE solution for smaller sites where a virtual Fortinet FortiGate can be used instead of a physical one, saving space for retail locations.

These features resonate with small to medium-sized organizations, attracting more people to the Fortinet FortiGate solution since it's security-first while also providing SD-WAN capability. Unlike competitors such as Meraki that limit connections to two, Fortinet FortiGate allows up to 100 connections as their focus is on security rather than SD-WAN.

Fortinet FortiGate SD-WAN capabilities typically require redundancy depending on the carrier. There are two types of redundancy: network redundancy with different carriers, such as Bell and Telus, or Verizon and AT&T, both connecting to the same Fortinet FortiGate box. In traditional setups, when there were two connections, one would be active and the second passive, activating only during failover. This wasn't cost-effective as customers paid for both connections while one remained passive.

In the SD-WAN environment, both connections become active, allowing application-specific routing. For instance, voice traffic can be directed to one connection while data traffic uses the other. Rules can be created specifying alternative routes if the primary connection is unavailable.

The impact on service availability and overall network performance is significant. It provides customers with assurance against single points of failure. However, capacity management remains crucial. If both networks operate at 80% capacity and one fails, the secondary connection would face a 160% load, causing blockages. Ideally, connections should operate at 50-60% capacity to handle full load during failures.

Fortinet FortiGate has been successful and ranks high on the Magic Quadrant since they're innovators with appropriate pricing. They offer a best-in-breed solution for their target market. While they're not focused on large enterprises they excel in the mid-market SMB segment, offering comprehensive solutions from endpoint protection to VPNs and deep packet inspection.

Fortinet FortiGate has started implementing AI, however, it hasn't reached full maturity. Their AI solution doesn't compare to solutions such as Microsoft Copilot and SharePoint, primarily since AI relies on data, and Fortinet FortiGate focuses on perimeter defense and security rather than internal network data.

One notable limitation is the absence of honeypot capabilities, which competitors such as Palo Alto offer. These capabilities entice and trap attackers, allowing analysis of attack vectors. Fortinet FortiGate focuses purely on defense mechanisms without actively gathering intelligence about potential threats. This approach aligns with their mid-market focus, where such advanced threat intelligence features might be less critical than in enterprise environments.

I have architected Fortinet FortiGate over the last 12 months.

Fortinet FortiGate performs at 100% effectiveness when customers have the right skill sets and policies in place, making it a very reliable solution.

Scaling-wise, there have been no problems with Fortinet FortiGate. In the mid-market, which typically handles up to 50 to 100 sites and campus environments, there haven't been any scaling issues.

From an implementation and partner support perspective, Fortinet FortiGate's support deserves a rating of seven out of ten.

Neutral

The setup requires understanding of security and is not plug-and-play, but it isn't complex when implemented by certified Fortinet engineers.

We provide professional services to install Fortinet FortiGate through our Fortinet-certified engineers, who handle installation services for companies.

The return on investment is 100% guaranteed. Similar to car insurance, security investment proves valuable when incidents occur. For small businesses, average losses can reach $300,000 per week, while mid-market companies face potential losses of $500,000 to a million. This makes the annual security investment of approximately $100,000 worthwhile. Furthermore, cyber insurance requirements often necessitate solutions such as Fortinet FortiGate rather than simpler alternatives.

Fortinet FortiGate pricing varies based on hardware specifications, size, and quantity purchased. Many companies access these solutions through managed service providers, who add their management fees to the hardware and license costs. Due to security being a specialized skill set and the various types of attacks (phishing, DDoS, hacks), having Fortinet FortiGate represents just one component of the total security investment.

There's always room for improvement with Fortinet FortiGate, as no vendor achieves perfection. In their market segment, considering their offering and price point, they merit an eight out of ten rating.

I have experience with Fortinet solutions.

I have had experience recently with FortiGate as well.

All the basic and important features needed for perimeter solutions to protect branches and headquarters are valuable with the FortiGate Next Generation Firewall (NGFW).

The FortiGate Next Generation Firewall (NGFW) is deployed in a company that is a carrier of telecommunication services, providing solutions to all kinds of companies around the world, especially in Mexico.

It addresses new and emerging security threats in the telecommunications industry, as we recognize that it is a highly effective solution that provides robust protection. That's the reason it was the main product we used to sell for perimeter security.

We use FortiGate Next Generation Firewall (NGFW) for the access points and their switches.

All the basic and important features needed for perimeter solutions to protect branches and headquarters are valuable with this solution.

The antivirus, malware, anti-malware, anti-spam, IP VPN connections, and firewall rules bring the most value for me and my clients. 

The segmentation capabilities enhance our security posture because they work effectively combined with the switching solutions, allowing us to easily combine switching with the firewall, as we could segregate the VLANs. They were powerful and appropriate for the solution we needed while supporting all the adequate features we required.

I'm not completely sure how Fortinet can improve the FortiGate Next Generation Firewall (NGFW), however, there were situations of availability related to their switching solutions due to box errors. Fixing the bugs in their switching solutions is necessary because I have faced several situations where we lost connectivity because of their firmware.

I have almost 12 years of experience with FortiGate Next Generation Firewall (NGFW).

Regarding next-generation firewalls, I would give the FortiGate Next Generation Firewall (NGFW) a rating of ten out of ten for stability.

The scalability of the FortiGate Next Generation Firewall (NGFW) is quite good; it is easy to make it scalable.

I would place the scalability between nine and ten on a scale of one to ten.

I would rate Fortinet's support a ten out of ten. They are excellent and very available whenever we needed their help.

Positive

We used to struggle with Cisco because it didn't have most of the features that Fortinet has, and when comparing with Palo Alto or Check Point, the prices are higher, which is important for solutions needed by mid-sized companies.

Their deployment team is substantial, consisting of between 100 and 150 people.

Most clients realize the benefits from deployment immediately. They look for internet availability and the security needed for their endpoints.

Fortinet has good prices compared to other vendors; there were cheaper options, and when we compared Cisco, Fortinet's prices were lower.

I don't remember how I bought the FortiGate Next Generation Firewall (NGFW), so I can't say if it was purchased through AWS Marketplace.

The FortiGate Next Generation Firewall (NGFW) helps with the economic aspect because it effectively protects what we needed with the companies in designing the products and solutions.

I'm not familiar with how the FortiGate Next Generation Firewall (NGFW) utilizes artificial intelligence or if it has AI-driven features to improve threat detection and response, so I cannot detail its existence or help.

I would recommend FortiGate Next Generation Firewall (NGFW) to others. It is a very good product. In my position, I sold approximately 1,000 units.

On a scale of one to ten, I rate this solution a ten.

I integrate service with Fortinet FortiGate. I integrate service, and some manage service, so the customer already has the firewall and we manage them, or we sell the hardware. But mostly for hardware, there are a lot of sellers, so mostly we do the services.

If the customer wants Fortinet FortiGate, I give Fortinet FortiGate. If the customer wants Sophos, I give Sophos. Both have a different market and different customer profile.

Whatever the customer asks, we provide. I'm running Fortinet FortiGate now because a customer wants that in my data center.

I find Fortinet FortiGate valuable due to Fortinet's ASIC, as I have known Fortinet FortiGate since a long time ago, from the first time they ran. They use ASIC. While Sophos also has a special hardware solution such as Xstream, they have all different purposes and different advantages, so I can utilize both. It depends on the customer.

I don't have any problem with Fortinet Unified SASE. Mostly in Indonesia, in our market, customers buy the brand without knowing the full capability of it. So actually with Fortinet FortiGate, you also have to implement FortiManager, FortiAnalyzer and for hardware control, FortiNAC and so on. But because it's so modular, sometimes customers mistakenly just buy the firewall. The firewall doesn't work right. That's a problem. I understand that this product design philosophy of Fortinet FortiGate is meant to serve very big corporations which have established SOC teams. They put segmentation of who is the manager and who is the analyzer. That's why they put the separate server for that. But because the brand is so famous, even small customers want to buy it.

I think Fortinet FortiGate could learn from its competitors that there's nothing to change. Perhaps they could just launch a lightweight version of the SIEM and SOAR tool, which is cloud-based. This would be for small organizations who cannot afford to build the full scale SOC facility and team.

I have been working with Fortinet FortiGate for maybe five or six years, or maybe longer than that. It could be 10 years as well.

I have been working with Fortinet FortiGate for quite a long time, but I am not a partner yet. Last year I took partnership with Sophos, so we do both.

I don't have experience integrating SD-WAN capabilities with Fortinet FortiGate yet, as we had a case but the project didn't go. SD-WAN is not mostly firewall. Yesterday, I just had a discussion with a new customer that wants to buy ZTNA and NAC.

I think the pricing of Fortinet FortiGate is affordable to some small customers, but they can only afford the firewall without the other components. Mostly firewall, so it's just selling products, not selling a security system.

In my opinion, Fortinet FortiGate doesn't need to be improved. It's because it has a different market. I had a case maybe five or six years ago. There was a tender of SD-WAN implementation for 10,000 mini marts. A company that has 10,000 outlets of mini marts needs security. In the data center at their headquarters, they need a very big firewall, up to 500 Gbps. But in the outlet, which is a small store or mini mart, they need a very small firewall that's capable to do SD-WAN, authentication, security, VPN and so on. Fortinet FortiGate has it all. Fortinet FortiGate is suitable for that kind of organization. They have a special SOC, so they buy FortiManager, FortiAnalyzer and so on. I rate this review an 8.

I am focused on data center solutions, specifically implementing the FortiGate, FortiAnalyzer, and FortiProxy systems. 

Fortinet FortiGate offers several valuable features, particularly as an interface-based solution. Its design makes it easy to understand both incoming and outgoing network traffic through its interface. The log detection system is user-friendly and effective, allowing for straightforward monitoring of network activity. Additionally, the support for 802.1X and other solutions enhances its functionality. The Unified Threat Management (UTM) feature is particularly effective and beneficial for organizations. One of the best aspects of FortiGate is its adaptability within various environments.

Fortinet FortiGate is a good solution for SD-WAN in network enterprises, with LAN or two ISP solutions that can be separated, making it good for lab parallel network segregation. My experience integrating the SD-WAN capabilities includes having two ISP solutions. One is Airtel with a speed of 1 Mbps, while the other is Vodafone, which offers speeds of 60 Mbps and 40 Mbps. These traffic levels are manageable when using SD-WAN for effective traffic management. Essentially, the integrated SD-WAN on the FortiGate device is suitable for handling traffic management with these ISP solutions.

The security policies in Fortinet FortiGate are very attractive, including application, web filtering, and anti-virus, with very effective web filtering in this organization for behavioral analysis by users. 

The solution has improved my organization significantly, with impactful capabilities such as sandboxing and cloud solutions, such as XDR, MDR, and EDR.

I believe there is room for improvement in machine learning and AI in Fortinet FortiGate. I would like to see more automation regarding AI and machine learning in Fortinet FortiGate.

I have five-year experience with the Fortinet FortiGate firewall.

It is very stable. I would rate the stability of Fortinet FortiGate a ten out of ten.

Its scalability is very good. It's easily scalable.

We have about 15,000 users.

Their customer support is very good. I would rate the technical support for Fortinet FortiGate a ten out of ten.

Positive

The deployment of Fortinet FortiGate is easy.

The solution requires maintenance, and upgrades are very easy and impactful, providing seamless upgrade processes without critical issues.

I estimate that Fortinet FortiGate has saved us around 20% in terms of time, money, and resources.

The pricing of Fortinet FortiGate is average, not cheap or overly expensive compared to other firewall solutions in the market. It's effective and affordable for customers.

When comparing Fortinet FortiGate to other solutions like Palo Alto or Check Point, I find that Fortinet is much easier to implement. My colleagues often struggle to understand other solutions, but Fortinet is more adoptable, which is beneficial for training purposes. The training resources available at training.fortinet.com are quite helpful. I believe Fortinet stands out in terms of effective training and the quality of knowledge provided. Their documentation is particularly impactful, making the learning process more efficient. Overall, Fortinet offers a very effective and knowledgeable training experience compared to other vendors.

I would rate Fortinet FortiGate a ten out of ten.

A use case for Fortinet FortiGate includes connecting nine to ten different sites to the main Fortinet FortiGate firewall and diversifying the traffic with two-way traffic. It functions as a load balancer to balance loads between different sites.

The main benefits of Fortinet FortiGate, especially in India, are its economic value, scalability, and different sizing options. When compared to Cisco or Juniper, upgrading to a higher class involves a substantial cost increase, whereas with Fortinet FortiGate, the next class is only marginally higher.

The best feature of Fortinet FortiGate is SD-WAN. It ensures continuous connectivity by taking over during link failures, preventing any downtime for the company. One of my clients faced many problems with the primary internet provider and requested multi-path functionality. We implemented the SD-WAN facility and added another three-link WAN link, converting the normal port into SD-WAN and assigning weightage. When there is no response from the primary connection after a certain number of milliseconds, it switches to the secondary and then to the tertiary connection. The impact on network performance with the SD-WAN is very good, provided it is sized properly based on throughput. It is necessary to calculate how much data is transferring daily or per minute, then size the firewall accordingly and select a particular model.

The Fortinet FortiGate solution offers ease of use, not requiring highly skilled workers. General users with two or three experienced team members can read the manual and implement the needed configurations.

Hardware-assisted DDoS protection in Fortinet FortiGate is very easy to implement with single-click options, though care must be taken not to burden bandwidth. Certain ACL units should be used, applying rules only to interesting or exposed traffic.

Some features in Fortinet FortiGate need improvement as we discover when calling support that certain actions must be done from the command line. Not all features are available in the web UI. Features such as enabling multiple MPLS circuits can only be accomplished through the command line, so these need to be made available in the web UI.

Fortinet needs to improve customer support and documentation.

I have been working with Fortinet FortiGate for more than 15 years.

Fortinet FortiGate is very stable, but the person procuring the firewall needs to ensure it is sized properly. If the sizing is not proper, it will create many problems.

The scalability of Fortinet FortiGate is very good. It has improved significantly compared to five years ago when it was not as scalable.

When we encounter struggles, they perform actions from the backend, taking control and resolving issues. This becomes a black box for us because we do not know what actions they took.

Neutral

The initial setup of Fortinet FortiGate is straightforward and easy. HA is the deployment model we always recommend.

While we have not calculated it specifically, we found the ROI to be good, approximately 97% to 98%.

I utilize the Fortinet FortiGate hardware and have never tried the VM version, working only with normal VPN configuration, user configuration, normal routing, and multiple WAN links. While we are using the dynamic segmentation feature, we have not tested it thoroughly enough to analyze its benefits.

People generally go with the recommendations of high-level architects. For core networks, they typically suggest Cisco or Juniper. In India, the market follows whatever the chief architect suggests without quantifying whether it is worth it.

My advice for others considering Fortinet FortiGate implementation is to focus on its ease of use. 

Based on my experience, I would rate this solution an eight out of ten.

We have two deployments of Fortinet FortiGate at different sites. One is the SD-WAN, and the other is the next-generation firewall.

We secure our perimeter using Fortinet FortiGate. We are using it as a gateway device, and we have all the filters, such as the web filter, the intrusion detection and the anti-virus. We mainly use it to filter our traffic. Most importantly, it serves as our gateway device. That is how we are using it at the end of the day.

We wanted to see how Fortinet FortiGate SD-WAN can help us reach out to our branch, and that was the only reason for enabling it. It pretty much works for connectivity to the branch.

It is very user-friendly compared to other products. It integrates with many other technologies out there. It does not matter what technology you have deployed within your network, it can work with that.

We have not had an issue with the Fortinet FortiGate firewall. We recently renewed the licenses for the firewall and FortiNAC, and it has been working well. I have not had any incidents or instances since the last renewal.

Application control and the web filter are the best features of Fortinet FortiGate. 

Traffic control is available, and I have been using Fortinet FortiGate to allocate bandwidth also, so it helps me manage and allocate bandwidth to my applications. On that side, that has worked for me. Most importantly, it helps to filter unwanted traffic.

Its pricing can be better. I cannot think of anything else because it pretty much satisfies our requirements. I am comfortable with this product. 

The only issue that I have is with FortiNAC. The firewall is fine, but the FortiNAC interface is a little bit too jumbled or too complicated, not as straightforward as it is on the Fortinet FortiGate firewall and FortiAnalyzer. 

I have not faced any stability issues with Fortinet FortiGate. I would give it an eight out of ten for stability.

Fortinet FortiGate is scalable. I would rate it an eight out of ten for scalability.

I raise my tickets for Fortinet FortiGate, and they are handled well. The support is pretty good. I would rate the support an eight out of ten.

Positive

In this work environment, Fortinet FortiGate was the first one we had as our firewall. We had nothing before it.

I have previously worked with Check Point and Cyberoam. Those are the only two products that I can compare with Fortinet FortiGate.

From my experience, administration is a bit complicated on the Check Point side. Most of the concepts are similar, but configuring Fortinet FortiGate is a little bit easier for me compared to Check Point. Cyberoam was resource intensive, which I have not seen in Fortinet FortiGate.

The initial setup of Fortinet FortiGate was handled by a provider to implement it, but the knowledge transfer was pretty much straightforward. It took about two weeks to deploy Fortinet FortiGate.

We are not a business-oriented organization; our primary aim is to make sure that our assets are protected. We had some issues before having this firewall, and we have not had any incidents ever since we implemented Fortinet FortiGate.

When I look around at other products, such as Sophos, Fortinet FortiGate is 20% to 30% more expensive with our current cost.

The license renewal for Fortinet FortiGate has been a little bit costly. When we are paying, we renew both the warranty and licenses for Fortinet FortiGate. That is what makes the whole thing a bit costly.

We normally purchase and renew those licenses for FortiAnalyzer, FortiNAC, and Fortinet FortiGate firewall at the same time. When I look around, I would say Fortinet FortiGate is on the higher side.

The thing that I have not experienced with it is the web application firewall. I was trying to find out from the partner whether it is something that is licensed separately. When you look at the policies, it looks it is not active.

I would recommend using Fortinet FortiGate because of its usability. I would rate it a nine out of ten.

Me and my team have been managing site-to-site and remote access VPNs. We have been doing centralized logging through FortiManager and applying security policies, such as web filtering and application control across distributed branch locations. 

I have also handled firmware upgrades, security patching, and integrating the Fortinet FortiGate logs within SIEM tools, such as Splunk, for threat monitoring.

I have integrated SD-WAN capabilities with Fortinet FortiGate by configuring multiple WAN links for dynamic path selection, load balancing, and failover based on performance metrics. I have used application-aware routing to prioritize critical traffic, such as VoIP or business apps, over high-quality links, while sending less critical traffic over backup circuits. We have managed and monitored these through FortiManager and FortiAnalyzer, ensuring visibility and automated alerts if link performance degrades.

The network performance has shown a significant positive impact. By utilizing features such as dynamic path selection and application-aware routing, we've been able to reduce latency for critical applications such as VoIP and video by 20-30% during peak times. Additionally, we’ve minimized downtime through automatic failover between links. This approach has also allowed us to cut costs by routing non-critical traffic over lower-cost circuits while keeping high-priority applications on premium links.

I have used the unified SASE feature a little bit, and it is very effective because it consolidates firewall, IPS, and other features such as sandbox into a single platform. It simplifies the management since we do not have to rely on separate appliances. It also helps with faster threat detection and response, especially when paired with FortiAnalyzer and SIEM tools, such as QRadar. The logs and events are correlated automatically, which makes a significant difference.

Something that stood out for me once I started using Fortinet FortiGate was the centralized management through FortiManager and how easily I could deploy consistent policies across multiple sites. The VPN configuration was also very straightforward compared to some other platforms. The integration with SIEM tools makes monitoring and incident response much smoother, which stood out to me. 

For the future, one improvement area is the complexity of SD-WAN configuration. When managing a large number of sites, the GUI is user-friendly, but when scaling deployments, it sometimes requires more manual fine-tuning or scripting. 

Another concern is reporting. FortiAnalyzer is powerful, but generating customized reports can be cumbersome compared to some other tools. Additionally, seeing deeper automation and API integrations would be beneficial so that policy updates and SD-WAN changes can be pushed faster across large environments.

I have been using FortiGate for about four to five years in various settings. My experience includes working with Fortinet FortiGate and other firewalls and Panorama across multiple roles. I have been involved in designing as well as managing policies. Additionally, I have handled upgrades and migrations.

The performance and stability of Fortinet FortiGate has been strong in both small and large environments. The throughput and latencies are very good, even with multiple security features such as IPS, antivirus, or SSL inspection enabled simultaneously. I have found them to be reliable with minimum downtime. The Fortinet high availability features work effectively to ensure continuous network availability.

Scalability is quite straightforward. They can scale from small branch offices to large enterprise environments. Their model hardware options and virtual firewall instances allow flexible deployment. For larger data centers or higher complex environments, sometimes Palo Alto or Cisco solutions offer more advanced scaling options, but Fortinet FortiGate is definitely competitive for enterprise needs.

I have worked with them a bit, and we usually start by opening a support ticket through the Fortinet support portal. I also remember calling their TAC hotline directly for priority one issues, particularly for major VPN outages or SD-WAN failures.

I typically provide the necessary diagnostics upfront, such as logs, packet captures, and debug outputs, so we can move quickly towards a resolution. Most cases are resolved fairly quickly, but for more complex bugs, they may suggest fixes or recommend firmware updates. In such cases, it just takes a bit more time.

I would rate their support an eight out of ten. They are generally very responsive and knowledgeable, especially regarding firewall and VPN issues. While resolutions can take longer for complex problems or new features, overall, the support team is very helpful and proactive in providing patches and workarounds.

Positive

I have used many alternatives to Fortinet FortiGate, including Palo Alto Networks firewalls and Cisco ASA Firepower. Palo Alto has strong application visibility and threat prevention, while Cisco excels in routing and integration. I have also worked with Juniper, which is great for scalability, and Check Point. I am comfortable adapting to different firewall ecosystems depending on the environment and requirements.

It wasn't that hard. Overall, it was pretty straightforward. For smaller sites or branch offices, the GUI is intuitive and clear. FortiManager helped streamline policy pushes across multiple devices, which made it easy to manage. However, for more complex deployments that involved SD-WAN or advanced features, there was some initial complexity in fine-tuning configurations and integrating with our existing infrastructure. Despite this, it was manageable with good planning and testing. Overall, the process was relatively easy.

Maintenance is definitely a part of my role. I am responsible for applying firmware updates, security patches, and configuration backups on FortiGate devices to ensure stability and security. While Fortinet provides regular updates and technical support, the day-to-day maintenance, monitoring, and troubleshooting are handled internally by our network team.

I haven't looked into that directly, as I am not involved in the purchasing or budgeting aspects. However, I believe Fortinet offers competitive pricing compared to other enterprise firewall vendors. Their licensing model is straightforward, especially regarding security features like anti-filtering, IPS, and web filtering.

The choice really depends on the specific features needed, such as advanced SD-WAN capabilities, which can increase costs. Therefore, it is important for organizations to plan their licensing effectively to optimize value.

I have used FortiClient as part of the Fortinet SASE deployment, primarily for remote users, providing secure access via VPN and ZTNA, along with endpoint protection such as web filtering and threat detection. I have also deployed it to integrate with Fortinet FortiGate and the cloud so users can get consistent policies whether they are on-site or remote. It is useful because it centralizes management and policy enforcement, but I have noticed it can use more system resources on endpoints, so tuning the profiles is important for performance.

I would rate Fortinet FortiGate an eight out of ten. It offers a great balance of performance, security features, and ease of management. However, there is room for improvement in areas such as scalability for extremely large environments and deeper automation. Nonetheless, it is a solid platform that fits well in most enterprise networks. Therefore, I would give it an eight out of ten.

My main use case for Fortinet FortiGate is controlling our incoming and outgoing traffic as it's installed in our data center. We're managing all the VPNs, IPsec VPNs, over 48 VPNs with our Fortinet FortiGate. We are also controlling network attacks and threats using IPS/IDS, using web filter, and URL filtering. We are bounding users to access the relevant sites only by using the URL.

Fortinet FortiGate has positively impacted our organization by providing stronger network security as it's a next-generation firewall. The IPS we have blocks known threats and vulnerabilities in real-time. Application control detects and controls thousands of applications, blocks P2P, and limits social media.

SSL inspection scans encrypted traffic, even TLS 1.3 for hidden threats, advanced web filtering, antivirus, and anti-malware. The result is fewer breaches, blocked attacks, better compliance, and simplified and secure WAN connectivity, intelligent link selection based on latency, load balancing across multiple ISPs, and automated failover.

We can run routing protocols very easily, such as BGP. We are using BGP over IPsec VPN for our multiple branches and different stations. We are using BGP over Fortinet FortiGate so it's automated. If one ISP goes down, it will shift automatically without requiring human or network administration involvement. It improves VPN and remote access, including SSL VPN and IPsec VPN as well.

The best features Fortinet FortiGate offers include the SD-WAN, which really stands out, and the comfortable GUI. The IPsec VPN configuration is very user-friendly. Compared to Huawei firewall, Fortinet FortiGate offers more features and is more user-friendly.

In terms of security features, Fortinet FortiGate has Deep SSL/TLS inspection, which is very limited in Huawei NGFW firewall. The AI-powered features in Fortinet FortiGate are more advanced compared to Huawei's basic filtering. The SD-WAN is built-in and mature, while Huawei's support is less feature-rich.

Application control is very granular with signatures, while Huawei is less extensive. The management and usability of Fortinet FortiGate is clean and user-friendly, compared to Huawei's more complex user interface. FortiOS CLI is popular and well-documented, while Huawei, Cisco, and Juniper differ from standards. Fortinet FortiGate offers centralized management through FortiManager and FortiAnalyzer. The reporting, logs, and firmware updates are excellent and stable in Fortinet FortiGate.

Fortinet FortiGate can be improved, specifically in the user interface and UX enhancement. The GUI, especially in older FortiOS versions, can be cluttered or slow. Improvements could make the UI more modern and responsive with a quick dashboard, real-time visibility, health checks, and improved policy editing with bulk changes and better search filters.

Policy management in a large environment becomes complex when managing dozens or hundreds of policies. This could be improved by introducing better policy grouping and tagging for more intelligent policy optimization suggestions, such as unused rules or shadow rules.

The built-in logging and reporting is limited without FortiAnalyzer. Internal reporting tools should be enhanced with graphs, trends, PDF exports, alert-based thresholds, and real-time traffic summaries without requiring FortiAnalyzer, which requires additional payment.

User identity integration with LDAP, AD, and user-based rules can be tricky or limited. Additionally, SSL users cannot change their passwords themselves, which should be included in the OS functionality.

I have been using Fortinet FortiGate for six years.

Fortinet FortiGate's scalability is good, and it can handle our organization's growth and needs as it's expanding.

When choosing Fortinet FortiGate, you must know your network size and use case. Choose a FortiGate model that fits your current network and allows for future growth. For small offices and branches, you can use 40, 48, 40F, and 60F series. For medium offices, 80F and 100F are suitable. For large enterprises, you need 200F, 400F, 600F. For data centers, 1000F is recommended.

It's advisable not to buy a model that barely fits; choose one with headroom for future expansion. Always check key specs based on your needs, such as firewall throughput, threat protection throughput, VPN throughput, maximum concurrent sessions, and ports. Check if you need SFP, PoE, or 10G ports.

Consider the features you actually need, such as SD-WAN, SSL VPN, application IPS, AV scanning, Wi-Fi AP support, or central management. If you need central management, you can use FortiManager. Look for FortiOS version compatibility as the F-series offers clear advantages. Make sure your team can operate and manage it with experienced Fortinet engineers.

My review rating for Fortinet FortiGate is three out of ten.