Overview
Video 1
Video 1
Video 2

Product video
FortiGate-VM on AWS delivers next-generation firewall and VPN/SD-WAN capabilities for organizations of all sizes. It enables broad network protection and automated security management for consistent enforcement and visibility across your AWS VPCs and hybrid cloud infrastructure. FortiGate natively integrates with AWS Gateway Load Balancer, AWS Transit Gateway and other AWS security services to simplify and deliver enterprise-class security for applications and workloads running on AWS.
FortiGate-VM reduces complexity by combining secure connectivity with advanced threat protection capabilities such as powerful intrusion prevention (IPS), malware detection and protection, and continuous threat intelligence from FortiGuard Labs security services. It offers a management console that provides comprehensive network automation and unified visibility across multi-cloud environments.
FortiGate-VM, in concert with other elements of the Fortinet Security Fabric, enables common deployment scenarios such as cloud security services hub, secure remote access, container security, web application security, and critical workload protection.
Visit the FortiGate-VM on AWS Community Resource Hub to find onboarding, deployment, and technical information and join in discussions: https://community.fortinet.com/t5/FortiGate-VM-on-AWS/gh-p/fortigate-vm-on-aws
Please contact awssales@fortinet.com with any questions.
Highlights
- FortiGate offers protection from a broad array of threats, with support for all of the security and networking services offered by the FortiOS operating system.
- Delivers complete content and network protection by combining stateful inspection with a comprehensive suite of powerful security features to meet PCI DSS compliance.
- IPS technology protects against current and emerging network-level threats. In addition to signature-based threat detection, IPS performs anomaly-based detection which alerts users to any traffic that matches attack behavior profiles.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $1.02 |
m5.4xlarge | $3.29 |
t3.xlarge | $1.02 |
c6a.2xlarge | $1.60 |
m5.8xlarge | $4.10 |
c5n.xlarge | $1.02 |
c7a.2xlarge | $1.60 |
t2.small | $0.36 |
c6a.4xlarge | $3.29 |
c7a.4xlarge | $3.29 |
Vendor refund policy
You may terminate the instance at anytime to stop incurring charges.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
Please ensure the connectivity to FortiCare (https://directregistration.fortinet.com:443 ) by checking all related setup on security groups, ACLs, IGW, route tables, public IP address...etc.
After deploying the instance, click on Manage in AWS Console to see the running instance and public DNS address to continue the configuration of the FortiGate-VM. Connect to the secured Web UI via the public DNS address: https:// <public DNS address>. For any CLI configuration/settings, SSH is required to log into the CLI. Default login credentials are with a username of admin and the AWS Instance ID value as the password. The FortiGate-VM AWS Install and Configure guide is located at https://docs.fortinet.com/document/fortigate-public-cloud/7.6.0/aws-administration-guide/
Support
Vendor support
This product is intended for On-Demand subscription. Please contact Customer Support with the following information instead of trying to register in FortiGate management GUI:
- The serial number of your FortiGate instance
- The email ID of your Fortinet account. If you do not have an account yet, please sign using the link below
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Standard contract
Customer reviews
Strong content filtering has isolated lab traffic and has reduced security costs significantly
What is our primary use case?
My main use case for Fortinet FortiGate is content filtering, and content filtering is the primary function. I am also doing East and West traffic filtering.
I use content filtering and East-West traffic filtering by creating groups based on separate projects in Active Directory, and on the firewall side, I create policies, web application profiles, and category-based profiles tailored to each project's requirements.
We have separate projects, and I isolate those subnets from one subnet to another so that both subnets do not communicate directly and only communicate via Fortinet FortiGate itself, with policies created to manage the East and West traffic.
What is most valuable?
Some of the best features of Fortinet FortiGate are its ease of use compared to other vendors, and from a troubleshooting point of view, it is also very useful and easy to troubleshoot. It stands out as easy to use and troubleshoot because I do not need to create separate NAT policies; with Fortinet FortiGate, I align my NAT policies and content filtering within a single policy, making management straightforward, and the logs are clearly visible, making troubleshooting much easier.
Compared to other firewalls, Fortinet FortiGate offers easily manageable features such as vulnerability profiles and threat profiles, which I believe is one of its main advantages.
Fortinet FortiGate has positively impacted my organization with its cost-effectiveness because it provides features that are very similar to others, but at a much lower cost, and everything my organization needs is available with Fortinet FortiGate.
Being cost-effective has allowed us to save a lot of money, which is particularly useful since I was exploring firewalls to secure my internal labs, and finding Fortinet FortiGate was a revelation as I could achieve my requirements without the additional costs of other firewalls.
What needs improvement?
I wish Fortinet would explore SASE solutions more, as it has become very popular and people are increasingly using it.
For how long have I used the solution?
I have been using Fortinet FortiGate for around the last seven years.
What do I think about the stability of the solution?
Fortinet FortiGate is stable, and I have never experienced issues similar to those from the ASA .
What do I think about the scalability of the solution?
Fortinet FortiGate's scalability is very good, and I believe there are no issues.
How are customer service and support?
I have faced challenges related to support, as I have encountered issues where support engineers are not aligned within the time frame, and sometimes they request multiple logs unnecessarily, causing delays and leaving a bad impression on my end users.
I have had a bad experience with customer support many times.
Which solution did I use previously and why did I switch?
I previously used a Cisco ASA but switched due to certain performance-related issues.
How was the initial setup?
My experience with pricing, setup cost, and licensing went smoothly, with no issues related to licensing or installation, and the overall cost is definitely cheaper than other prominent firewalls along with phenomenal features.
What about the implementation team?
I do not have a business relationship with the vendor other than being a customer, but I do have partners to buy network equipment such as firewalls and switches.
What was our ROI?
I cannot share exact numbers for ROI, but I saved a lot of money, which made management very happy, especially knowing that I achieved my functional goals with Fortinet FortiGate that might have incurred more costs with other firewalls.
What's my experience with pricing, setup cost, and licensing?
Fortinet FortiGate has positively impacted my organization with its cost-effectiveness because it provides features that are very similar to others, but at a much lower cost, and everything my organization needs is available with Fortinet FortiGate.
My experience with pricing, setup cost, and licensing went smoothly, with no issues related to licensing or installation, and the overall cost is definitely cheaper than other prominent firewalls along with phenomenal features.
Which other solutions did I evaluate?
I evaluated options including Palo Alto, Cisco, and other products before choosing Fortinet FortiGate.
What other advice do I have?
I would rate Fortinet FortiGate a nine overall, as I only deduct one point for the support issues I have experienced.
I selected nine because, feature-wise, the product is excellent and cost-effective compared to others, but I deducted a point due to the disappointing support from Fortinet.
I advise others looking into using Fortinet FortiGate to check their requirements first, as it provides all kinds of services other firewalls do and is very cost-effective.
People looking for a firewall should definitely evaluate Fortinet FortiGate, as it is very cost-effective and offers all the features they are likely looking for. I gave this review a rating of nine out of ten.
Improved real-time threat visibility has reduced incidents and simplifies daily security management
What is our primary use case?
My main use case for Fortinet FortiGate has been to enhance our network security.
What is most valuable?
The best features of Fortinet FortiGate are the intuitive dashboard and the strong firewall policy management that is really easy to configure. It gives a complete real-time overview of your network traffic, and I also really appreciate the deep packet inspection features. Fortinet FortiGate has positively impacted my organization by significantly improving our network security. We have seen a substantial drop in security incidents and unauthorized access attempts, and it also saved us time because managing and monitoring the network is much faster and easier now compared to before.
What needs improvement?
One thing I wish was better in Fortinet FortiGate is the initial setup and configuration, which can be a bit complex for a new user. The reporting features could also be more detailed and customizable, and sometimes the interface feels a little overwhelming with so many options. Better documentation and simpler onboarding would really help.
For how long have I used the solution?
I have been using Fortinet FortiGate in my organization for one year.
What do I think about the stability of the solution?
Fortinet FortiGate has been very stable for us. In one year, we have had almost no downtime, and it just runs smoothly in the background without any major issues.
What do I think about the scalability of the solution?
We have not faced any scalability issues with Fortinet FortiGate so far. It handles our current load well, and we did not need to expand it.
How are customer service and support?
I have contacted customer support for Fortinet FortiGate a couple of times, and the experience was good overall. They responded fairly quickly, and we were able to solve our issue without much back and forth. I am satisfied with the support.
I give customer support for Fortinet FortiGate a solid 10 out of 10. Every time I reached out, they were responsive, knowledgeable, and resolved my issue completely. No complaints at all.
Which solution did I use previously and why did I switch?
Fortinet FortiGate is the first dedicated firewall solution we implemented in our organization.
How was the initial setup?
The pricing for Fortinet FortiGate is a bit on the higher side, but honestly, it is worth it for what you get. The setup cost was reasonable, and the licensing is straightforward with annual renewals without much hassle.
What about the implementation team?
Before choosing Fortinet FortiGate, we evaluated other options such as Cisco ASA and Palo Alto. We went with Fortinet FortiGate mainly because of the better pricing and easier management interface.
Fortinet FortiGate is deployed on-premises in my organization.
What was our ROI?
I have definitely seen a return on investment since we switched to Fortinet FortiGate. We have saved about 20 to 25% of IT maintenance costs, and we no longer need a dedicated person just for network monitoring. The time we spend troubleshooting issues is about 30% faster now.
Which other solutions did I evaluate?
Before choosing Fortinet FortiGate, we evaluated other options such as Cisco ASA and Palo Alto. We went with Fortinet FortiGate mainly because of the better pricing and easier management interface.
What other advice do I have?
On a daily basis, I log in to the Fortinet FortiGate dashboard to check traffic logs and monitoring and suspicious activity on our network. For example, if any unauthorized website or application is being accessed by an employee. Fortinet FortiGate is a go-to tool for keeping our network safe and under control. It is straightforward to use once you get the hang of it.
We have seen about a 40 to 50% reduction in security incidents since we deployed Fortinet FortiGate, and in terms of managing network policy, we are at least 30% faster compared to our previous setup.
I definitely recommend Fortinet FortiGate to anyone looking for a reliable network security solution. I give this review a rating of 8 out of 10. Just make sure you spend some time during the initial setup and configuration.
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
What is our primary use case?
My main use case for Fortinet FortiGate involves using models like 60F, 100F, and 200F, while not utilizing models 48, 49, and 50F.
In day-to-day operations for tickets, Fortinet FortiGate is much more than just a basic firewall; it functions as full unified threat management. I use it to configure security policy, layer 2, layer 7, SNAT, DNAT, zone-based and policy-based routing, complete series management, and VPN management, including IPsec. I have multiple branches, so I create IP site-to-site tunnels, and some users require remote access VPN.
What is most valuable?
These features have made a significant difference for my organization by improving day-to-day user experience and business continuity. At SD-WAN load balancing, we experience the real impact. Fortinet FortiGate distributes traffic across multiple ISPs using load balancing, link health checks, and application awareness. Before implementing SD-WAN, when one ISP became slow, the internet performance suffered or failover was manual and delayed, leading to user complaints about slow internet. After SD-WAN completion, traffic automatically shifts to the best performing link, with critical application-to-application traffic using the lower latency path and backup link. If the primary link fails, it switches immediately to the secondary link with no business impact or losses. ISP issues are now better handled for the applications.
Regarding additional features, they do not always get highlighted by big vendors, but in real deployment, the all-in-one simple operation advantage is evident. Instead of a separate firewall, a separate SD-WAN, and separate devices, this firewall provides all capabilities in a single appliance, with all abilities available on one device.
Fortinet FortiGate has positively impacted my organization in three major areas: security, efficiency, and cost. Security has become stronger with fewer malware and phishing incidents, IPS blocking attacks in real time, and web filtering that stops risky user behavior. The real impact is in blocking users from clicking malicious links, shifting from firefighting by the IT team to threat blocking at the firewall level, resulting in minimal endpoint infection and lower security incidents, reduced downtime, and a better overall security posture. Operation efficiency has improved due to centralized control policy, VPN logging, SD-WAN automation failover, load balancing, and faster troubleshooting through visibility tools, replacing manual ISP failover and time-consuming debugging with automated traffic steering, quick root cause analysis, and better logs plus dashboard. User experience has also improved, which is often overlooked. With stable internet provided by SD-WAN, priority for business applications, and a reliable VPN connection, we no longer experience frequent internet slow complaints, allowing smooth video calls with Teams and Zoom, and consistent access to SaaS applications, resulting in happier users and improved productivity over time.
What needs improvement?
Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
For how long have I used the solution?
What do I think about the stability of the solution?
Fortinet FortiGate is stable.
What do I think about the scalability of the solution?
How are customer service and support?
Which solution did I use previously and why did I switch?
Before choosing Fortinet FortiGate, I evaluated other options including Sophos firewall and Palo Alto. With Palo Alto, the challenge was the cost, and Fortinet was the lower-cost solution, leading me to choose Fortinet.
How was the initial setup?
What was our ROI?
I have seen a strong ROI impact from Fortinet FortiGate SD-WAN, with reduced costs.
What's my experience with pricing, setup cost, and licensing?
Which other solutions did I evaluate?
What other advice do I have?
Fortinet FortiGate is a powerful, scalable, and cost-effective next-generation firewall solution that delivers excellent value, especially for SD-WAN and multi-site deployment. Achieving the best results depends on proper design, sizing, and ongoing optimization, making Fortinet FortiGate a reliable and feature-rich solution of great value for the money. I have rated this review a nine out of ten.
Unified security gateway has streamlined monitoring and troubleshooting for faster resolutions
What is our primary use case?
Fortinet FortiGate serves as my gateway device where I manage all my security. I use Fortinet FortiGate as a gateway for the NATing part for LAN to WAN communication. Along with that, I manage security profiles from the gateway only, and all my switches and Wi-Fi also work with Fortinet FortiGate.
I work on RE VPN and SSL RE VPN on Fortinet FortiGate.
What is most valuable?
In my opinion, the best features Fortinet FortiGate offers are monitoring and troubleshooting. Along with that, its security services are also a key point for me. For example, I need to manage features including IPS, antivirus, web filtering, and application control via Fortinet FortiGate only.
I appreciate the security feature of Fortinet FortiGate. For example, I can take real-time logs and session monitoring along with VPN, event logs, data usage monitoring, and related features.
I have noticed faster troubleshooting and reduced downtime of around fifty percent. My operational efficiency has improved. For a real example, a client experienced frequent internet drops, and this was resolved more efficiently.
What needs improvement?
One suggested improvement I would recommend is more simplified troubleshooting. Although logs are powerful, troubleshooting can sometimes be complex for new users. A more guided or AI-based troubleshooting feature would help reduce resolution time. Fortinet FortiGate should incorporate AI-based solutions to improve the troubleshooting experience.
For how long have I used the solution?
I have been using Fortinet FortiGate for two years.
What do I think about the stability of the solution?
Fortinet FortiGate is stable. It demonstrates excellent stability in various terms including network utilization.
What do I think about the scalability of the solution?
Fortinet FortiGate offers strong scalability and can support environments ranging from small businesses to large businesses. There is a wide range of models from entry level to high end levels. Flexible deployment options include physical appliances, virtual, and cloud deployments, which is beneficial.
How are customer service and support?
Customer support needs improvement. I have had to take the direct internal sources, such as sales contacts, and after that I rarely see support response.
I would rate the customer support at a six out of ten.
Which solution did I use previously and why did I switch?
I have used Sophos before, and several of my criteria were missing with that solution. Fortinet FortiGate achieved the features I was looking for, which is why I shifted to Fortinet FortiGate firewall.
How was the initial setup?
My experience is very positive regarding pricing, setup cost, and licensing for Fortinet FortiGate. The pricing is also competitive compared to other vendors in the market. Along with that, setup is very easy. I implemented it in my network myself. For the licensing part, it is somewhat confusing, but overall it is good.
What was our ROI?
Fortinet FortiGate has saved me both money and time. It is easy to manage and the troubleshooting part is also very easy, making it more time-saving than money-saving.
What's my experience with pricing, setup cost, and licensing?
In terms of cost savings, it has reduced the need for multiple tools. Fortinet FortiGate combines firewall, VPN, IPS, web filtering, and SD-WAN into a single device, which has given me lower operational overhead.
Which other solutions did I evaluate?
Before choosing Fortinet FortiGate, I tried various options. I obtained the POC from Palo Alto as well as Check Point. After that, I switched to Fortinet FortiGate because it was the best option for my network.
What other advice do I have?
My advice for others looking into using Fortinet FortiGate is that focusing on proper planning, sizing, and understanding of features before deployment will be a good approach.
Integrating SD-WAN with Fortinet FortiGate has allowed me to create an SLA according to which my ISPs define the traffic and the best path utilized.
I would rate this product a ten out of ten overall.
Centralized security management has improved policy control and simplified daily operations
What is our primary use case?
I use Fortinet FortiGate in security and policy for security profiles, blocking and allowing for certification on a day-to-day basis.
I block Gmail and personal mail along with other applications. We block webmail and allow corporate mail, Microsoft 365, and block unwanted categories such as pornography and weapons while implementing URL filtering.
Global systems use standard Fortinet terminology. We use FortiManager and FortiAnalyzer, where FortiAnalyzer is used for logging and FortiManager is used for centralized management across multiple gateway devices.
By implementing Fortinet FortiGate in our organization, we can control applications and block unauthorized apps.
Control security platform features such as policy enforcement and SD-WAN streaming particularly improve our work by reducing manual configuration across multiple devices, allowing faster change implementation, and reducing troubleshooting time.
This control typically leads to measurable outcomes across operations, security, and performance.
We use Fortinet FortiGate on-premises and in the public cloud.
What is most valuable?
In my experience, the best feature Fortinet FortiGate provides is its impressive logging system, which is very easy to read to understand what the issue is.
The SD-WAN feature is very valuable for us. By integrating SD-WAN, we can manage our ISP links and SD-WAN rules.
Using SD-WAN on Fortinet FortiGate provides lower latency and stability improvements, critical application routing via lower latency links, reduction in jitter and packet loss, with both links actively used instead of one idle backup, leading to better bandwidth utilization.
The biggest strength is the consolidated platform that combines firewall, SD-WAN, VPN, and security stack in one device.
What needs improvement?
We can improve the UI readability when working with large configurations. I chose a rating of nine because of the troubleshooting power and launch issues. We need CLI debug capabilities in addition to the UI.
For how long have I used the solution?
I have been working in my current field for the last three years.
What do I think about the stability of the solution?
Fortinet FortiGate is a stable and scalable firewall.
What do I think about the scalability of the solution?
Fortinet FortiGate is manageable on one platform, but scalability depends on how we scale. Model ranges for small branches and high-end applications are delivered easily by moving to a higher model.
How are customer service and support?
Support is also good.
Which solution did I use previously and why did I switch?
I previously used Sophos firewall before moving to Fortinet FortiGate.
What about the implementation team?
We evaluated other options such as Palo Alto before choosing Fortinet FortiGate. We evaluated both Palo Alto and Sophos firewalls during our selection process.
What was our ROI?
It is a time-saving product.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for Fortinet FortiGate is generally positive from a value perspective.
What other advice do I have?
I advise others to use Fortinet FortiGate, considering the firewall size, throughput including IPS, SSL-VPN, web filtering throughput, VPN load, and UTM versus Enterprise bundle.