Fortinet FortiOS Reviews

For me, personally within our company, I am using this for business administration, but the company as a whole uses the product as a general firewall solution.

This product has improved our organization by providing an easy and simple means of filtering of traffic and establishing VPN connections and authentication.

The high-availability feature is the most valuable feature for our company. It is faster and more secure by creating a situation where there are more paths and less opportunity for failure and data loss.

While the product is good and does provide services we need for authenticating and establishing VPN connections, some time ago we had issues with logins. The login event and the performance for this feature were very poor but have improved.

Excluding the login performance — which we would have issues with in the past that made us have to turn off the feature in order to examine the infrastructure — every other feature and functionality has proven to be stable. We have also experienced some issues with performance with filtering traffic but it was on the appliance and because it was just a basic setup.  The real problem was the configuration and had we been more familiar at the time, we would have done a better job with it. So it was not the product that was unstable, it was our application of it.

The solution is scalable, but we really have not had too much of a reason to put the scalability to the test. I cannot imagine an issue where we would have to scale more right now as we use two hardware installations and the high-availability feature manages the traffic. Two appliances for us seems like more than enough.

I think the technical support is not really very good. When we had some issues in the past and sent them to support, we waited a few weeks and in that time we managed to figure out the solution ourselves.

The one issue I am talking about was a very tricky issue, but they should know more about the product than we do even if we are doing the installations. Meanwhile, we had to wait and it was very inconvenient. So I think the process of the way they handle the management of issues could be improved. We managed to get some of the easier issues resolved in part through the support team initially, but when we reached the next level of difficulty, it lasted too long to get a resolution.

We had been using our own solution and wanted to go with a dedicated, packaged product. It was a business decision and would allow us to refocus our internal resources.

Because we have been doing installations of this product for five years, the installation is fairly easy. It was not very easy the first time but now we have a lot of experience in doing installations so, for us, it is easy to set up.

We do not use integrators or resellers as that is what we do and it is our responsibility.

As far as choosing the best licensing solution for your organization, do not buy the cheapest solution. Instead, buy the one that fits the traffic for your company with some room for expansion or headroom. Next year, if the business grows — which is usually what you want to do — you could reach a point where there is more traffic and the performance could become an issue.

We have lots of experience in using and installing FortiOS, and because of the experience has mostly been positive, I recommend FortiOS as a solution for firewalling. Besides the few issues we have experienced in the past, this is a stable solution and the high-availability feature is very, very good. 

On a scale from one to ten, where one is the worst and ten is the best, I would you rate Fortinet FortiOS as a nine. Despite the few problems we had in the past it is a very good solution which does what it is designed to do.

FortiOS' most valuable features are management, security, and easy updates with no downtime.

FortiOS's bandwidth and interface could be improved. In the next release, Fortinet should include an option to disable users.

I've been working with Fortinet FortiOS for five years.

We've been using FortiOS for five years and have had no problems with stability during that time.

FortiOS is scalable.

Fortinet's technical support is good and provides good solutions for us.

Positive

Previously, I used Cisco ASA Firewall.

The initial setup was very simple and was completed within a week.

The implementation was done by a reseller and a technical team from our side. 

On the technical side, we have received a good ROI from FortiOS as its scalability and management are good.

The licensing for FortiOS is good, with a security license included when we update the main license.

I would rate FortiOS eight out of ten.

We are system integrators and we deploy firewalls for our customers. I'm the CTO and we are partners with Fortinet. 

Fortinet is a feature-rich firewall. The ease of use is one of the primary advantages of this product. It has a very simple OS and things are pretty easy to do. Fortinet has a good price point which is one of the reasons it's so popular. It's also a good security product. With Fortinet, the link balancing features are easier to use compared to other firewalls. 

We have had some performance issues, but that seems to be improving. I'd like to see better integrations and more flexibility for different scenario configurations. In comparison to Cisco, the CLI is quite difficult to use. Finally, I believe that the reporting could be enhanced to provide better visibility into the traffic. 

As an additional feature, Fortinet could have XDR embedded into it which would mean more visibility from the reporting side because right now we have to separately install FortiManager and FortiAnalyzer for driver analysis.

We've been using this solution for over five years. 

Fortinet is a pretty stable product. 

Fortinet still has to prove themselves when it comes to higher throughput cases, because there are many places where other brands are placed with higher throughput than Fortinet. When we enable all the features, sometimes the performance migration is more significant compared to Fortinet's claims of what it should be, so that needs to be better matched. 

I think Fortinet needs to improve their support. They are not one of the gold star rating support companies. There are a few big vendors like Cisco, EMC, VMware with gold star support rating. The support is sometimes not up to the mark. 

The initial setup is quite straightforward. 

We generally deploy Fortinet, Cisco and occasionally Palo Alto which is an expensive firewall so less companies use it. We deploy Cisco and Fortinet frequently. When it comes to performance and price, Palo Alto is at the top on both counts. 

I rate the solution seven out of 10. 

We typically use the Fortinet hardware firewall, and the FortiOS runs inside of that. We're usually working in a small or medium-sized business environment. So we use it for remote access, access from the LAN to the WAN, and site-to-site VPN. 

I personally think the site-to-site VPN is the most useful feature. A lot of firewalls have that, but to me, that's one of the features that's essential. Either you want to just do some basic routing or use one of these kinds of practices.

FortiOS doesn't work well with all browsers. I think they need to do a better job of making it compatible with the various browsers that are out there. I see weird stuff happen sometimes.

It doesn't crash the router bin itself, but it typically takes some time. Sometimes I'll have to reboot the router to get it working with a browser again. This is maybe just a problem with older versions. I can't say anything about the recent versions of the FortiOS, but over the years, I've seen weird stuff.  This is mainly just a problem with the browser interface. I've never had a problem with the command line.

I think FortiOS is scalable. It's not a Cisco product, but it's a solution that's easy to deploy and manage at scale. You can build as your business would grow. You could go to a higher unit without much effort. Migration is clean in terms of going from small to big units. You typically have to just configure again, but it's not difficult to do. There isn't a whole different set of OS commands between different models.

I find Fortinet to be on the higher end of the scale in terms of technical support. I don't know if I'll give them an A-plus, but I'd probably give them an A. Relative to other companies out there, like Microsoft, Intuit, and some of the other support agencies or ISPs that we deal with, their support is better than most.

I would rate FortiOS a seven or an eight.

The primary use case is for integrated cybersecurity.  

The VDOM (Virtual DOM) is a virtualized firewall that has some opportunities for flexibility that are an advantage in certain configurations. The other valuable part is that this flexibility makes it easy to integrate with Cisco products.  

The product really has everything that we need as far as features for this type of solution and our use case. It works fine for us. One thing that can be improved is the pricing model. It is currently subscription-based and I think they should probably try to change that.  

We have been using FortiO since around 2016. So we have been using it for four years.  

We had some issues with the stability of FortiOS, but I do not think it was because of Fortinet. It was because of how the integrator handled the configurations. The partner that implemented it originally did not do it optimally. We ended up having to change the partner in order to have it done correctly.  

So far we are satisfied with the technical support. We have not had a lot of need to use them.  

We had been using Check Point and we still use it. In fact, we have been working with Check Point more than Fortinet. I may be a bit biased toward Check Point because I already have more implementation support for it than FortiOS.  

The difference between the price of the products is also obvious. Pricing is more flexible with Check Point than with Fortinet. Fortinet ends up being more expensive because of the pricing scheme.  

The pros and cons of them are not so much different. If it were my choice and we were going to change what we use or choose between the two, then we would move back to using Check Point exclusively. 

I think that the setup was a bit complex because we have a complex network. Because of that, we had to do some interoperability testing first and that made the initial setup take longer than it would in another, simpler environment.  

The initial setup is one other area that could be simplified.  

We used a partner for the implementation. We ended up having to replace them with a different partner because of installation issues. The second partner was able to fix the issues.  

The costs for the maintenance and subscription for Fortinet FortiOS software alone is actually half of the cost of the hardware. For example, if your hardware costs were about $40,000, your yearly subscription to FortiOS is about $20,000. That is kind of the drawback to using Fortinet. By comparison, that $60,000 is already three years of maintenance or support with Check Point for the same scale setup. It is a significant cost difference.  

I would probably recommend Check Point to most users considering FortiO if they do not have any ACI (Application Centric Infrastructure) implementation or a Cisco ACI. If you could do a workaround on the ACI, then I would probably still recommend Check Point. But if you do not know how to make that type of adjustment or can not and you do not have any partners that need to access your systems, then it is better you go for Fortinet.  

We primarily use the solution for protecting our virtual infrastructure.

The solution needs to adjust its pricing model. With the way they are structured, everything is very disparate and sold separately, and, depending on the solution, it can get quite pricey.

The solution could be more intuitive. Especially when customers have access to it, it's not as simple and straightforward as some of the other devices I've taken a look at.

The solution seems very stable once you have everything up and running. 

The solution is extremely scalable.

Technical support is good. I would rate them nine out of ten.

The initial setup is pretty straightforward.

It wasn't technical people doing that deployment for the proof of concept, so it took about a day. We also hadn't set up all the features and capabilities. 

We pay $100,000. That covers the cost of the hardware that we run the VN's on. That also includes any SGNA costs for the internal support tech.

We use the private cloud deployment model.

I would rate the solution nine out of ten.

We use the solution as a firewall, and in conjunction with Fortinet FortiMail.

The solution is very easy to configure and has a good interface, plus it offers more configuration options than other vendors.

I would like to see fewer bugs. If you use the box with its basic features, the solution is straightforward and stable, but you can run into bugs when using newer features or in more complex use cases. They included a DNS filter as a new feature, and I had issues that required raising a ticket with customer support.

I've been using the solution for between 10 and 12 years.

The solution is very stable. There are occasional bugs, but support is very quick and helpful in resolving these issues.

The initial setup was easy.

A medium 100 or 200 Series box costs around $3000, and the software cost is around 55% of the hardware cost.

Depending on the situation, performance issues may require changing out the box. 

Fortinet's SD-WAN connects the user to the application or app server on-prem or the cloud.

Fortinet has optimized the WAN environment for connecting users to the application.

Fortinet's central management needs to be improved. FortiManager's technical tool provider ability should manage all Fortinet security products. Right now, FortiManager only manages the configuration of FortiGate.

I've been using Fortinet for about five years.

Fortinet's performance is stable.

Fortinet is scalable. We can increase the scalability in the help center. We have 500 to 600 users now, but we plan to grow to 700 or 800 users in the next two years. 

I'm satisfied with Fortinet support.

We switched to Fortinet because it's easy to use and deploy. In recent years, Fortinet has worked to combine the SD-WAN and next-gen firewall into one device, improving the ease of use. 

Setting up Fortinet is straightforward. It takes about 10 to 15 minutes to deploy. We have a team of five engineers to deploy, maintain, and manage Fortinet.

We deployed Fortinet ourselves.

I rate FortiOS nine out of 10.