Fortinet FortiManager (BYOL) Centralized Security Management

What do you like best about the product?

What stands out most is the ability to manage our entire footprint of FortiGate firewalls from a single pane of glass. Instead of logging into dozens of individual remote appliances to update security policies or object configurations, I can build unified policy packages centrally and push them out simultaneously.

The use of Administrative Domains (ADOMs) is incredibly helpful keeping our environments segmented. Additionally, the revision history
control acts as an excellent safety net being able to compare configuration changes side-by-side and quickly roll back to a previous state during a botched changed window has saved our team a massive amount downtime.

What do you dislike about the product?

There isn't much to complain about because the platform does exactly what it is designed to do. The only real thing to keep in mind is that it requires a shift in mindset if you are used to managing firewalls individually. Because Forti Manager works on a central database model, you have to build a strict habit of making all your changes directly inside Forti Mnager rather than logging into local FortiGate.

Furthermore, the user interface can sometimes feel overly complex with too many nested menus, requiring multiple clicks to perform routine tasks. We have also noticed occasional lag when compiling large policy packages or pushing updates down to remote branches over-lower bandwidth connections.

What problems is the product solving and how is that benefiting you?

Our organizations manages a distributed infrastructure across multiple branches and remote sites. Before adopting FortiManager, maintaining a consistent security was an absolute headache, and human configuration errors were common.

Forti Manager solves our scalability and consistency issues. By utilizing device templates and standardize policy packages. We can guarantee that every site follows exact corporate compliance and firewall rules. When we deploy a new branch office, we can utilize zero-touch provisioning strategies to get the firewall configured and online in a fraction of the time. This central control reduces day-to-day administrative overhead, prevents configuration drift, and keeps our small network team from drowning in repetitive tasks.

As an administration these are the main strong points for me.

True Single Pane of Glass, ADOMs, Rapid Deployment with Templates, Simplified Firmware Orchestration.

What do you like best about the product?

Centralized management in teams to facilitate

What do you dislike about the product?

many times there are compatibility issues with the configuration

What problems is the product solving and how is that benefiting you?

Centralized management

What do you like best about the product?

1. What I like about Fortimanager is its ability to centrally manage multiple FortiGate devices from a single console. It makes administrator much easier by allowing policy changes, device monitoring and configuration updates across different locations without needing to log in to each firewall. This saves a lot of time.
2. The most helpful feature is policy management and configuration consistency. Using templates, ADOMS, and centralized policy packages helps standardize security rules across branches while reducing manual errors.
3. FortiManager allows administrator to track revisions, compare configurations and quickly restore previous versions when needed,

What do you dislike about the product?

1. One downside of FortiManager is that the interface and navigation can take time to get used to especially for new administartors. Sinceit includes many advanced features for centralized management, policy packages, ADOMS and device templates.
2. Anothe challenge is policy synchronization and change management in complex environments. If configurtions are not planned properly, administartors may need extra time to review policy dufferences or resolve conflicts between device-level and centralized changes.
3. Reporting and troubleshooting can also require some experience, particular;y when managing large deployments with multiple devices.

What problems is the product solving and how is that benefiting you?

1. It also helps solve the problem of inconsistent security policies between branches. With centralized policy packages and templates, configurations remain standardized across all locations, which improves security posture and reduces the risk of human error.
2. Fortimanager keeps revision history, allows configurations comparisons and provides rollback options when needed. This helps during upgrades, troubleshooting and planned changes while reducing downtime risks.
3. Fortimanager helps solve the challenge of managing multiple FortiGate firewalls across different locations from one centralized platforms. Instead of configuring each device separately, administrators can push policies, updates.

What do you like best about the product?

Quality management and policy creation, along with VPN, IPS, and SD-WAN configuration, are all handled through a single control plane.

What do you dislike about the product?

We are repeatedly facing sync issues with Fortigate gateways.

What problems is the product solving and how is that benefiting you?

Multiple users can work simultaneously to deploy the policy, and they can also manage it accordingly.

What do you like best about the product?

FortiManager stands out for its centralized management capabilities, making it easy to oversee multiple FortiGate firewalls. It enables administrators to deploy policies, perform updates, and manage revisions from a single dashboard, eliminating the need for manual configuration on each individual device. The inclusion of automation tools, scripting options, and zero-touch provisioning greatly reduces the time required to manage large networks, while also helping to maintain consistent security policies and minimize errors. With the integrated FortiAnalyzer, users benefit from comprehensive logging, detailed reporting, and FortiView, which offers real-time threat visibility and supports swift incident response.

What do you dislike about the product?

FortiManager's main disadvantages stem from its complicated and unintuitive user interface, which demands significant training and often hampers efficient policy management and navigation. Pushing policies can be a cumbersome process, as updates must be applied individually to each firewall, making the task time-consuming. Additionally, synchronization delays can lead to inconsistencies, especially during important changes. When used alongside FortiAnalyzer, performance problems may occur, and the handling of different firmware versions is unreliable, frequently requiring upgrades to address bugs.

What problems is the product solving and how is that benefiting you?

FortiManager addresses the challenges of decentralized firewall management, inconsistent policies across various FortiGate devices, and manual configuration errors in distributed network environments. By centralizing configuration, policy enforcement, backups, and firmware updates within a single console, and utilizing ADOMs for multi-tenancy, it streamlines network administration and enhances overall efficiency.