Fortinet FortiToken Reviews

All customers want a more secure VPN connection. Therefore, we use FortiToken as a multi-factor authentication solution to increase connectivity security for our customers.

The solution offers push notifications. When you try to connect to the VPN, FortiToken sends a push notification to our customer's device. The customer can then approve or deny the connection, making VPN security more straightforward and efficient.

The solution could be more user-friendly.

I have been using Fortinet FortiToken as reseller for three years.

I rate the solution’s stability a nine out of ten.

The solution can scale to any measure. Scalability is very easy because it doesn't have one client or 10,000 clients. It's the same configuration. You can distribute it anywhere with the client's token.

It is suitable for all kinds of business. We cater to the retail and finance sectors.

I rate the solution’s scalability a ten out of ten.

You can reach easily with the support team.

Positive

The initial setup is easy and takes one to two hours.

I rate the initial setup a ten out of ten, where one is difficult, and ten is easy.

The pricing is moderate. 

I rate the product’s pricing as seven out of ten, where one is cheap and ten is expensive.

You can track user login activity. You can send messages to your SysTrack servers and then monitor and report these activities.

Security is the top priority because it equates to saving time and money in the long run. Our customers' primary motivation is security. Without multi-factor authentication, like FortiToken, unauthorized individuals can use your credentials to access your data centers. Therefore, our customers prioritize security first, followed by financial considerations.

Every company and individual should prioritize using a multifactor authentication solution for their email, especially FortiToken. I highly recommend this solution for securing personal email accounts, online banking, and especially for company use. It ensures an added layer of security crucial in safeguarding sensitive information and preventing unauthorized access.

Overall, I rate the solution an eight out of ten.

On-premises

All users who can log in on Fortinet have Token. We have 15 FortiTokens for the managers who are connected to the VPN and also for those who are connected to the software. It is mobile, not a hard token. That said, I have the hardware token, which is related to the administrator, me, and my assistant. It's used on software and hardware. We use it at an administrator level and at a user level. 

The solution is great for security. It's for two-factor identification.

It is easy to implement. The deployment is quick and simple. 

It is stable and reliable. 

The cost isn't too high.

The solution works well. We have nothing to complain about. 

I've been using the solution for five years. 

The stability is ecellent. I would rate it five out of five. It is reliable, and the performance is good. We do not have any issues at all. 

We have 15 FortiTokens.

We did not previously use a different solution. This was the first solution we selected. 

It is an easy product to implement. From the software or the hardware itself, from the options, we can apply FortiToken for the user and just add the hot token serial number and go.

We only need one person to deploy the solution. I tend to manage it myself. 

The deployment takes about 45 minutes for the software. It might take about ten days for the hardware to arrive from Fortigate. After that, I just install the serial key, and everything is done. 

We have not noted an ROI.

We deal with a subcontractor in Saudi Arabia to pay everything in one bill yearly. Everything is a separate license fee, and we use different Fortinet solutions. However, we pay for everything yearly, all at once.

Generally, it is an affordable product. We do not find it to be overly expensive. 

I'd rate it a five out of five in terms of affordability. 

We did not explore other options. We chose the first option we looked at, FortiToken.

We are not partners. We use it internally in the company. We are end-users. We use a lot of Fortinet products. 

Nothing has to be done from the end-user perspective; they just add the username and password, and a code appears on the Fortitoken software or hardware. 

I'd rate the solution ten out of ten. 

I'd recommend the solution to other users and companies. 

We are using Fortinet FortiToken for token-based mobile applications.

The solution comes with two firewalls as a bundle. In that bundle, most of the individual users can be assigned to mobile users. However, in cases of technical difficulties, users may accidentally remove the mobile application. In normal scenarios, we get back to the activation key and assign it again.

In one instance, we had to call back Fortinet service providers to reactivate the token and access the system. If they could provide a managed portal for the token, then reassigning tokens can be easy.

I would also like to see some mobile-level application update. It would be easy for our team if we can have all the features in one place.

I have been using the solution since 2019. We implemented the demo piece for the PED staff and internal staff team. We deployed the solution as a case of factorization since there was a high-risk claim. We needed the solution for our critical business cases.

I would give eight out of ten for the stability of the solution.

I would rate the scalability of the solution an eight out of ten. There are about 150 users for the mobile token application in our company.

I would rate the tech support a seven out of ten. I have contacted support only once since 2019– for an activation error message. They resolved the issue within two days.

Neutral

I have been using Google Authenticator and Microsoft Authenticator. I am happy with FortiToken because it makes it very easy to install and manage tokens.

The setup of Fortinet FortiToken was very easy because the license of the solution was assigned by the vendor. Once initiated, we were able to access the tokens and assign them to the required users.

I would rate the pricing as an eight out of ten. We purchased the solution at a reasonable price in 2019.

I would rate the overall solution an eight out of ten. The solution is a smart product that anyone can easily access and manage. The solution is a good product for multi-factor authentication and to secure remote authentication in the corporate environment.

Hybrid Cloud

The platform's main use case is to facilitate authentication when connecting outside of the organization, particularly when using Fortinet VPN. It ensures secure access to our network resources, especially when working remotely.

The primary benefit of using FortiToken is its cost-effectiveness. It provides a reliable authentication solution without requiring significant financial investment.

One of the product's most valuable features is its ease of use. The soft token offering simplifies the authentication process, making it convenient for users. Additionally, its straightforward installation and configuration contribute to its value.

They could enhance synchronization with mobile applications, and addressing minor issues with authentication could further improve user experience.

I've been using FortiToken for about three years now.

I rate the product stability an eight out of ten. While it's generally reliable, there have been occasional instances where multiple authentication attempts were required.

Approximately 200 users are currently using FortiToken within our organization. It is scalable, and additional licenses can be easily acquired to accommodate more users as our organization grows.

The initial setup was straightforward. Onboarding and initial testing typically take about a day before the system is fully operational within our organization.

The platform's licensing cost is reasonable for our organization. We opted for a yearly subscription, which aligns well with our budgetary requirements.

FortiToken is integrated with our FortiFirewall and FortiWeb systems. This integration enhances security, especially when employees access organizational resources remotely, such as working from home.

I advise others to consider using the product to explore its token offering for simplified authentication.

I rate it a ten overall. It meets our authentication needs effectively and is a valuable asset to our organization's security infrastructure.

We only use FortiToken for authentication purposes, like logging into SSL VPN or plugging into firewalls.

I like how easy it is to configure and assign tokens. It's readily available through our application-based system.

The problem comes when we have to migrate tokens to new phones. There's no backup option or import/export feature, so you have to redo the entire process manually, adding tokens one by one, which is quite tedious.

The migration process is definitely a major area for improvement. Imagine losing your phone and having to set everything up again from scratch and add everything individually.  

In future releases, push notifications would be good! Instead of opening the app and entering the token manually, what if we received an approval or denial prompt directly on the phone as a notification? Just a tap to log in, that would be nice.

I have been using it for three years now. 

I would rate the stability a nine out of ten. It's been very reliable for my customers. 

I would rate the scalability a seven out of ten. The migration issue definitely brings it down a bit.

Moreover, if FortiToken could improve that, maybe introduce push notifications or even eliminate the need for manually entering token keys, it could easily reach a ten out of ten.

Replacing the token key entry with a simple notification and selection option to accept/deny would be very handy and useful. Now, we have to scroll down and search for the correct FortiToken by name. 

I recommend FortiToken for all companies, especially when they connect to sensitive servers. That's why I suggest them to use it.

There haven't been any emergencies, but the response times and everything were good when I needed help.

Positive

Before FortiToken, I used Okta for authentication. For firewalls and network devices specifically, I recommend FortiToken.

The initial setup is easy. You receive a QR code via email, scan it, and add it. No complicated procedures involved.

The deployment model depends on the customers. We have different customer setups, but most are on-premises, device-based deployments.

We typically require our assistance with deployment. We manage their hardware and infrastructure, so deployment falls under our responsibility.

The pricing is not very high, so I'd rate it around six out of ten, where one is high and ten is low.

I can compare it with Microsoft's 365 authentication or other Microsoft authentication solutions, but they have different features.

Overall, I would rate the solution an eight out of ten. I recommend FortiToken to all our clients who purchase Fortinet devices, especially within banking and payment systems. 

The name of the authenticator is from the user's site. It's sufficient for that to provide you with a number when you need to access a protected resource, which is the site. This is two-factor authentication. You have two layers of authentication. The first layer is provided by the name and password, and the second layer is provided by the authenticator. 

So you have to be attentive to that when the app prompts you, or at least the app prompts you, which advises you about the directive that someone is attempting to access this technology. And you can confirm by saying yes. It's directly linked to the internal access attempt to the site.

I appreciate that it provides comprehensive security. It is tailored to this specific purpose, and it excels in fulfilling this purpose.

On the Fortinet side, it is already well integrated with Android devices, simple devices, and PCs.

Maybe the price could be improved, and the integration could be better. But the integration is different from the authenticator side.

I have been using this solution for more than three years. We use the latest version as it updates automatically. 

I would rate the stability a ten out of ten. I haven't encountered any issues with this solution's stability

It is very scalable. It can manage thousands of users. We plan to expand our customer base.

We have around 250 users. We all rely on it for our authentication needs. It's in active operation.

We used Fortinet FortiAuthenticator. 

From the customer's perspective, the setup is flexible. You have the liberty to configure it according to your preferences. It took minutes to set up. 

We can do it in-house. Simply load the installation and compute user, and then you can use it.

The technical personnel involved in deployment and maintenance are developers.

The ROI is quite high because the consistent part of it originates from any directive of credentials or end-user passwords. It's a solution that significantly improves the authentication phase. This makes it less likely that a malicious actor would be able to gain unauthorized access to the network and launch the attack.

FortiToken hardware itself does not require a license. However, the FortiAuthenticator software does require a license. The cost of the license depends on the number of users. We pay it on a yearly basis. But you can also find agreements with other options.

There are no additional costs. It is not too expensive.

Overall, I would rate the solution an eight out of ten. I would definitely recommend using the solution. There are not many functionalities. However, it is a great solution for multifactor authentication.

The primary use cases of Fortinet FortiToken for my customers typically involve adding multi-factor authentication (MFA) for remote access. This is often required for remote workers or external providers. For instance, in industrial environments where external companies provide services, this solution helps manage secure access. Another common use case includes providing an external captive portal and self-registration.

The most valuable feature of the solution is its mobile application. It is particularly beneficial as it eliminates the need for hardware management. Users do not have to worry about managing or replacing physical tokens, which can be advantageous if the token is lost or damaged.

I would like to see the product improvements in dynamic VLAN pooling. Specifically, when users are assigned different VLANs based on their SSID, ensuring no unintended lateral traffic between users would enhance security and efficiency.

Sometimes, SMS messages do not reach recipients correctly due to country-specific limits on SMS character length. 

I rate the stability a seven. 

The platform easily scales from a few users to thousands by adjusting the licensing and configuration. I rate the scalability an eight. 

The support team is generally responsive and helpful, but resolution times can vary.

The initial setup requires understanding the platform's approach, licensing, and the correct version selection based on the customer's context.

The deployment time depends on the functionality required by the customer. I would rate the process as a seven.

Although the platform is relatively expensive, it offers significant value. I rate the pricing a nine out of ten. 

The critical feature for ensuring secure access is the solution's comprehensive functionality, which secures the user identity of those attempting to connect. The integration of all features collectively ensures high security.

The integration process is relatively straightforward, which is beneficial when deploying the platform. It is often integrated with third-party tools. For example, it can be combined with a management system that handles tokens and supports external keys such as YubiKey for additional multi-factor authentication.

I rate it an eight out of ten. 

We use Fortinet FortiToken when a client requires it.

The FortiToken from Fortinet is primarily used for VPN authentication. That is one of the most common use cases. VPN authentication as well as two-factor authentication on VPN. In addition, two-factor authentication is required for administration access to the FortiGates.

In the rare case where the FortiAuthenticator is separate, they use it as a directory for the enterprise. It can also be used for other applications such as Microsoft. External applications and, on occasion, customer applications that use RADIUS.

I believe FortiToken is the simplest to implement. However, there is no difference in terms of features other than multi-factor authentication. It's very basic.

Ease of administration, which is not always a feature, but the ease of administration, token importing, and exporting, is why FortiToken has been considered as a multi-factor authentication solution.

FortiToken could be made much more flexible. They're doing very well now. I think having two-factor authentication on their firewalls for administration, as well as being able to use them for VPN access for MFA, was a great idea. However, in terms of a broader base of support, I believe their support for SAML, for example, could be greatly improved. OAuth, SAML, and other protocols that are more geared toward cloud-based applications, in my opinion.

I would like to see complete OAuth support. Also, if they can support it from a SaaS (Software as a Service) or cloud platform, that would be great. 

I have been working with Fortinet FortiToken for four or five years.

There are two kinds of customers. There are clients for whom we only implement and clients for whom we manage. Where we have a managed service with the client, we keep them on the most recent version, which is N-1.

Fortinet FortiToken is very durable and stable.

If you don't use the VM solution, it's not very scalable because, from a hardware point of view, you almost have to buy hardware and do a full replacement. From that perspective, I wouldn't say it's scalable. But, again, if you're using your VM  you would have to rebuild your VM.

I wouldn't go so far as to say it's not scalable. However, when it comes to the number of users, it is very scalable in terms of being able to cater to a small environment of five users versus 100,000. But, in my opinion, when you have to migrate as your environment grows, it's not very scalable. It is, but it is difficult to import and export through it.

The number of users we have is probably in the region of 20 or 25.

It would be on a daily basis because you have to log on all the time, especially now that you're remote. And MFA is required by the majority of our company or clients.

I work with Fortinet support on a regular basis.

In terms of support, Fortinet is one of the better vendors. However, they face significant challenges when it comes to getting a response. When you log a support call, getting the response you want is always a problem. It's almost as if you're being passed from one engineer to the next, and it's extremely difficult to articulate the problem and get a response.

I don't use them myself, we are integrators. A few clients use Fortinet FortiAuthenticator, Fortinet FortiToken, McAfee Total Protection for Data Loss Prevention, Trend Micro Integrated Data Loss Prevention, and GTB Technologies Inspector, but they use FortiToken specifically. I believe I added RSA Authentication Manager, followed by Cisco, Jira.

The initial setup is extremely simple. The FortiAuthenticator and FortiToken are unquestionably the simplest multi-factor authentication solution to implement.

It takes two to three hours to get it up and running. But, the biggest challenge is always the user element, where you have to get users to install the application and communicate with them. That can take you a lot of time depending on the size of your organization and the level of technological sophistication of your end users.

That would require a significant amount of time. But the initial setup, which is to set up the FortiAuthenticator, import the tokens and integrate that with, the FortiGates, is very simple and doesn't take long.

Yes, absolutely, I would recommend this solution, especially for clients performing standard RADIUS authentications, because I believe they're quite solid. I believe where it becomes more difficult is with open authentication protocols such as SAML and OAuth. Fortinet has a long way to go in this area.

I would rate Fortinet FortiToken an eight out of ten.