Sign in Agent Mode
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

Reviews from AWS customer

47 AWS reviews

External reviews

237 reviews
from and

External reviews are not included in the AWS star rating for the product.


    Abhinandan Yadav

Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches

  • March 31, 2026
  • Review provided by PeerSpot

What is our primary use case?

I have been using Fortinet FortiGate for the last two years, specifically models like 60F and 200F.

My main use case for Fortinet FortiGate involves using models like 60F, 100F, and 200F, while not utilizing models 48, 49, and 50F.

In day-to-day operations for tickets, Fortinet FortiGate is much more than just a basic firewall; it functions as full unified threat management. I use it to configure security policy, layer 2, layer 7, SNAT, DNAT, zone-based and policy-based routing, complete series management, and VPN management, including IPsec. I have multiple branches, so I create IP site-to-site tunnels, and some users require remote access VPN.

What is most valuable?

The best features Fortinet FortiGate offers include secure SD-WAN, intelligent ISP selection, and load balancing with application awareness.

These features have made a significant difference for my organization by improving day-to-day user experience and business continuity. At SD-WAN load balancing, we experience the real impact. Fortinet FortiGate distributes traffic across multiple ISPs using load balancing, link health checks, and application awareness. Before implementing SD-WAN, when one ISP became slow, the internet performance suffered or failover was manual and delayed, leading to user complaints about slow internet. After SD-WAN completion, traffic automatically shifts to the best performing link, with critical application-to-application traffic using the lower latency path and backup link. If the primary link fails, it switches immediately to the secondary link with no business impact or losses. ISP issues are now better handled for the applications.

Regarding additional features, they do not always get highlighted by big vendors, but in real deployment, the all-in-one simple operation advantage is evident. Instead of a separate firewall, a separate SD-WAN, and separate devices, this firewall provides all capabilities in a single appliance, with all abilities available on one device.

Fortinet FortiGate has positively impacted my organization in three major areas: security, efficiency, and cost. Security has become stronger with fewer malware and phishing incidents, IPS blocking attacks in real time, and web filtering that stops risky user behavior. The real impact is in blocking users from clicking malicious links, shifting from firefighting by the IT team to threat blocking at the firewall level, resulting in minimal endpoint infection and lower security incidents, reduced downtime, and a better overall security posture. Operation efficiency has improved due to centralized control policy, VPN logging, SD-WAN automation failover, load balancing, and faster troubleshooting through visibility tools, replacing manual ISP failover and time-consuming debugging with automated traffic steering, quick root cause analysis, and better logs plus dashboard. User experience has also improved, which is often overlooked. With stable internet provided by SD-WAN, priority for business applications, and a reliable VPN connection, we no longer experience frequent internet slow complaints, allowing smooth video calls with Teams and Zoom, and consistent access to SaaS applications, resulting in happier users and improved productivity over time.

What needs improvement?

Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.

Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.

For how long have I used the solution?

I have been working in my current field for the last three years.

What do I think about the stability of the solution?

We have seen specific numbers indicating that with SD-WAN plus high availability, there is typically a 60 to 90 percent reduction in internet-related downtime. For example, before implementation, I had two days of downtime per month due to ISP issues, but now it is reduced to one to two hours a month with auto failover. Regarding network performance and user experience, we are seeing 30 to 50 percent faster application performance, a 70 to 90 percent reduction in malware and phishing incidents after applying security measures, and troubleshooting that is 40 to 60 percent faster in resolution.

Fortinet FortiGate is stable.

What do I think about the scalability of the solution?

Fortinet FortiGate's scalability is one of its strong areas, designed to scale from small branch offices all the way to high-scale data centers and cloud environments.

How are customer service and support?

Customer support is poor. Sometimes I open a critical ticket only to have customer support respond in four to five hours, reflecting that customer support is very weak. I rate customer support a seven out of ten.

Which solution did I use previously and why did I switch?

Before using Fortinet FortiGate, I was using a SonicWall firewall, and I switched mainly due to the need for SD-WAN capabilities, which SonicWall did not provide.

Before choosing Fortinet FortiGate, I evaluated other options including Sophos firewall and Palo Alto. With Palo Alto, the challenge was the cost, and Fortinet was the lower-cost solution, leading me to choose Fortinet.

How was the initial setup?

My experience with pricing for Fortinet FortiGate includes hardware and subscription, with typical costs ranging from about seven hundred dollars to one thousand five hundred dollars for a small firewall and one thousand five hundred dollars to four thousand dollars or more for mid-size SMB. The initial setup cost, which requires an engineer for the initial partner network, is competitive compared to other vendors, particularly given the number of features included. However, the licensing model can be complex, and ongoing subscription costs require careful planning. The setup is straightforward for basic deployment, although advanced configurations like SD-WAN and VPN require expertise. Overall, it offers good value for money, but organizations should evaluate the total cost of ownership, including yearly licensing, with a typical pattern of 50 to 60 percent hardware cost and yearly subscription.

What was our ROI?

I evaluate the changes in return on investment after implementing Fortinet solutions for my SD-WAN and hybrid workforce as significant and valuable. Real metrics for management include reducing reliance on MPLS and shifting traffic to broadband links, typically resulting in a 30 to 50 percent WAN cost saving. For example, the impact of using hybrid MPLS and broadband SD-WAN for intelligent route traffic is to drive cheaper WAN with better performance. There is also security incident reduction leading to higher ROI. With IPS, web filter, and zero trust, we see a typical impact of 70 to 90 percent fewer security incidents. After implementing Fortinet FortiGate, Fortinet SD-WAN, and unified SASE, we observed significant ROI through reduced WAN costs by around 30 to 40 percent, improved uptime with nearly 70 to 80 percent reduction in downtime, and lower operational overhead by consolidating multiple security and networking functions into a single platform, which has also led to a reduction in total cost of ownership by 25 to 30 percent.

I have seen a strong ROI impact from Fortinet FortiGate SD-WAN, with reduced costs.

What's my experience with pricing, setup cost, and licensing?

My experience with pricing for Fortinet FortiGate includes hardware and subscription, with typical costs ranging from about seven hundred dollars to one thousand five hundred dollars for a small firewall and one thousand five hundred dollars to four thousand dollars or more for mid-size SMB. The initial setup cost, which requires an engineer for the initial partner network, is competitive compared to other vendors, particularly given the number of features included. However, the licensing model can be complex, and ongoing subscription costs require careful planning. The setup is straightforward for basic deployment, although advanced configurations like SD-WAN and VPN require expertise. Overall, it offers good value for money, but organizations should evaluate the total cost of ownership, including yearly licensing, with a typical pattern of 50 to 60 percent hardware cost and yearly subscription.

Which other solutions did I evaluate?

Before choosing Fortinet FortiGate, I evaluated other options including Sophos firewall and Palo Alto. With Palo Alto, the challenge was the cost, and Fortinet was the lower-cost solution, leading me to choose Fortinet.

What other advice do I have?

My advice for others considering Fortinet FortiGate is to properly size the appliance as the most important factor, design SD-WAN correctly from day one, enable security features gradually, and properly learn FortiOS concepts. Using centralized management tools like FortiAnalyzer and FortiManager is also crucial. Planning for high availability, whether active-passive or active-active, is important, as is monitoring properly and regularly. My advice would be to size the appliance correctly based on real traffic with security features enabled, design SD-WAN policy carefully, and enable features in phases, with a solid grasp of FortiOS and centralized management tools being vital for long-term success.

Fortinet FortiGate is a powerful, scalable, and cost-effective next-generation firewall solution that delivers excellent value, especially for SD-WAN and multi-site deployment. Achieving the best results depends on proper design, sizing, and ongoing optimization, making Fortinet FortiGate a reliable and feature-rich solution of great value for the money. I have rated this review a nine out of ten.


    Sachin-Yadav

Unified security gateway has streamlined monitoring and troubleshooting for faster resolutions

  • March 30, 2026
  • Review provided by PeerSpot

What is our primary use case?

Fortinet FortiGate serves as my gateway device where I manage all my security. I use Fortinet FortiGate as a gateway for the NATing part for LAN to WAN communication. Along with that, I manage security profiles from the gateway only, and all my switches and Wi-Fi also work with Fortinet FortiGate.

I work on RE VPN and SSL RE VPN on Fortinet FortiGate.

What is most valuable?

In my opinion, the best features Fortinet FortiGate offers are monitoring and troubleshooting. Along with that, its security services are also a key point for me. For example, I need to manage features including IPS, antivirus, web filtering, and application control via Fortinet FortiGate only.

I appreciate the security feature of Fortinet FortiGate. For example, I can take real-time logs and session monitoring along with VPN, event logs, data usage monitoring, and related features.

I have noticed faster troubleshooting and reduced downtime of around fifty percent. My operational efficiency has improved. For a real example, a client experienced frequent internet drops, and this was resolved more efficiently.

What needs improvement?

One suggested improvement I would recommend is more simplified troubleshooting. Although logs are powerful, troubleshooting can sometimes be complex for new users. A more guided or AI-based troubleshooting feature would help reduce resolution time. Fortinet FortiGate should incorporate AI-based solutions to improve the troubleshooting experience.

For how long have I used the solution?

I have been using Fortinet FortiGate for two years.

What do I think about the stability of the solution?

Fortinet FortiGate is stable. It demonstrates excellent stability in various terms including network utilization.

What do I think about the scalability of the solution?

Fortinet FortiGate offers strong scalability and can support environments ranging from small businesses to large businesses. There is a wide range of models from entry level to high end levels. Flexible deployment options include physical appliances, virtual, and cloud deployments, which is beneficial.

How are customer service and support?

Customer support needs improvement. I have had to take the direct internal sources, such as sales contacts, and after that I rarely see support response.

I would rate the customer support at a six out of ten.

Which solution did I use previously and why did I switch?

I have used Sophos before, and several of my criteria were missing with that solution. Fortinet FortiGate achieved the features I was looking for, which is why I shifted to Fortinet FortiGate firewall.

How was the initial setup?

My experience is very positive regarding pricing, setup cost, and licensing for Fortinet FortiGate. The pricing is also competitive compared to other vendors in the market. Along with that, setup is very easy. I implemented it in my network myself. For the licensing part, it is somewhat confusing, but overall it is good.

What was our ROI?

Fortinet FortiGate has saved me both money and time. It is easy to manage and the troubleshooting part is also very easy, making it more time-saving than money-saving.

What's my experience with pricing, setup cost, and licensing?

In terms of cost savings, it has reduced the need for multiple tools. Fortinet FortiGate combines firewall, VPN, IPS, web filtering, and SD-WAN into a single device, which has given me lower operational overhead.

Which other solutions did I evaluate?

Before choosing Fortinet FortiGate, I tried various options. I obtained the POC from Palo Alto as well as Check Point. After that, I switched to Fortinet FortiGate because it was the best option for my network.

What other advice do I have?

My advice for others looking into using Fortinet FortiGate is that focusing on proper planning, sizing, and understanding of features before deployment will be a good approach.

Integrating SD-WAN with Fortinet FortiGate has allowed me to create an SLA according to which my ISPs define the traffic and the best path utilized.

I would rate this product a ten out of ten overall.


    Nitin Yadav

Centralized security management has improved policy control and simplified daily operations

  • March 30, 2026
  • Review from a verified AWS customer

What is our primary use case?

I use Fortinet FortiGate in security and policy for security profiles, blocking and allowing for certification on a day-to-day basis.

I block Gmail and personal mail along with other applications. We block webmail and allow corporate mail, Microsoft 365, and block unwanted categories such as pornography and weapons while implementing URL filtering.

Global systems use standard Fortinet terminology. We use FortiManager and FortiAnalyzer, where FortiAnalyzer is used for logging and FortiManager is used for centralized management across multiple gateway devices.

By implementing Fortinet FortiGate in our organization, we can control applications and block unauthorized apps.

Control security platform features such as policy enforcement and SD-WAN streaming particularly improve our work by reducing manual configuration across multiple devices, allowing faster change implementation, and reducing troubleshooting time.

This control typically leads to measurable outcomes across operations, security, and performance.

We use Fortinet FortiGate on-premises and in the public cloud.

What is most valuable?

In my experience, the best feature Fortinet FortiGate provides is its impressive logging system, which is very easy to read to understand what the issue is.

The SD-WAN feature is very valuable for us. By integrating SD-WAN, we can manage our ISP links and SD-WAN rules.

Using SD-WAN on Fortinet FortiGate provides lower latency and stability improvements, critical application routing via lower latency links, reduction in jitter and packet loss, with both links actively used instead of one idle backup, leading to better bandwidth utilization.

The biggest strength is the consolidated platform that combines firewall, SD-WAN, VPN, and security stack in one device.

What needs improvement?

We can improve the UI readability when working with large configurations. I chose a rating of nine because of the troubleshooting power and launch issues. We need CLI debug capabilities in addition to the UI.

For how long have I used the solution?

I have been working in my current field for the last three years.

What do I think about the stability of the solution?

Fortinet FortiGate is a stable and scalable firewall.

What do I think about the scalability of the solution?

Fortinet FortiGate is manageable on one platform, but scalability depends on how we scale. Model ranges for small branches and high-end applications are delivered easily by moving to a higher model.

How are customer service and support?

Support is also good.

Which solution did I use previously and why did I switch?

I previously used Sophos firewall before moving to Fortinet FortiGate.

What about the implementation team?

We evaluated other options such as Palo Alto before choosing Fortinet FortiGate. We evaluated both Palo Alto and Sophos firewalls during our selection process.

What was our ROI?

It is a time-saving product.

What's my experience with pricing, setup cost, and licensing?

My experience with pricing, setup cost, and licensing for Fortinet FortiGate is generally positive from a value perspective.

What other advice do I have?

I advise others to use Fortinet FortiGate, considering the firewall size, throughput including IPS, SSL-VPN, web filtering throughput, VPN load, and UTM versus Enterprise bundle.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?


    Srinivasan Arumugam

Security has improved with deep inspection and vpn access, but reporting and upgrades need work

  • March 11, 2026
  • Review provided by PeerSpot

What is our primary use case?

I have been using Fortinet FortiGate for the past six years.

I have been using Fortinet FortiGate to provide security for network and perimeter networks and gateways, and I rely on Fortinet FortiGate to protect my applications from various Layer 4 and Layer 7 attacks and traffic from malicious IPs while blocking traffic from unwanted IPs.

Fortinet FortiGate is also mainly used to establish IPsec tunnel connectivity with other networks, and users from outside the office network can connect to resources via IPsec VPN as well as site-to-site and client-to-site VPN, which leverages access and resource availability across various networks and simplifies resource accessibility worldwide.

One of the main features that I use in real time with Fortinet FortiGate is web filtering and App IDs based on application control. Previously, I allowed application access policies based on ports, but it could not prevent traffic based on the same application port with different use cases. For example, port 443 can be used for various purposes, but it could not restrict access for some specific applications. The App ID based control is useful for me to restrict traffic based on application usage and user access, which is the primary purpose of Fortinet FortiGate in real time.

What is most valuable?

Fortinet FortiGate offers next-generation firewall features and security features that restrict access for malicious traffic, URLs, and IPs, which is a major feature that Fortinet FortiGate offers.

The next-generation firewall capabilities including deep packet inspection and application controls via App IDs, Intrusion Prevention Systems, web filtering, URL filtering, and anti-malware protections are essential features that are present in Fortinet FortiGate to prevent various cyber attacks and threats in the network.

Fortinet FortiGate is also mainly used to establish IPsec tunnel connectivity with other networks, and users from outside the office network can connect to resources via IPsec VPN as well as site-to-site and client-to-site VPN, which leverages access and resource availability across various networks and simplifies resource accessibility worldwide.

What needs improvement?

The security features could have been more similar to those in the Palo Alto firewall with major data protections and WildFire, and deeper inspection capabilities, which Fortinet FortiGate lacks. Additionally, I notice that Fortinet FortiGate often experiences resource utilization problems where memory is heavily occupied regularly, necessitating cleanup tasks.

During firmware upgrades, the process is not smooth; one of the VMs often goes out of sync and exits the HA cluster. Therefore, I separate the HA between the firewalls and perform upgrade activities one by one manually. The graphical dashboard representation of the data is frequently inaccurate, leading me to rely on syslogs for more dependable information. The log retention period on the device seems too short despite having ample memory and disk capacity, which is a major issue.

For how long have I used the solution?

I have been working in my current field for the past seven years.

What do I think about the scalability of the solution?

The scalability experience indicates that if I need additional features or security capabilities, such as sandbox features, I can add them by opting for separate licenses, making it convenient for me.

How are customer service and support?

Fortinet FortiGate customer support appears somewhat good, but for complex cases or major incidents, I often do not receive prompt support from the OEM, resulting in multiple follow-ups to get the necessary assistance.

Which solution did I use previously and why did I switch?

Previously, I used to have a Cisco ASA firewall, which had fewer security features for protecting the network from day-to-day attacks and threats. Fortinet FortiGate firewall has next-generation capabilities with various security features including deep inspections, filters, URL filters, URL categories, and IPS protections while controlling application access based on application IDs, along with anti-malware protections to safeguard applications from malicious threats and attacks. By using Fortinet FortiGate, I significantly reduced major attacks that could exploit my network.

What other advice do I have?

I would advise others considering Fortinet FortiGate, particularly those concerned about budget and pricing with decent performance and support, to proceed with Fortinet FortiGate, as compared to other next-generation firewall products, Fortinet FortiGate has lower license support costs, which is a significant advantage. Moreover, from my experience, it performs its job effectively with no major issues related to performance or functionalities including policy control, VPN, and security features. I would rate this product a 7 out of 10.


    reviewer2808123

Long-term deployment has supported flexible security services for diverse customer needs

  • March 11, 2026
  • Review provided by PeerSpot

What is our primary use case?

I integrate service with Fortinet FortiGate. I integrate service, and some manage service, so the customer already has the firewall and we manage them, or we sell the hardware. But mostly for hardware, there are a lot of sellers, so mostly we do the services.

If the customer wants Fortinet FortiGate, I give Fortinet FortiGate. If the customer wants Sophos, I give Sophos. Both have a different market and different customer profile.

Whatever the customer asks, we provide. I'm running Fortinet FortiGate now because a customer wants that in my data center.

What is most valuable?

I find Fortinet FortiGate valuable due to Fortinet's ASIC, as I have known Fortinet FortiGate since a long time ago, from the first time they ran. They use ASIC. While Sophos also has a special hardware solution such as Xstream, they have all different purposes and different advantages, so I can utilize both. It depends on the customer.

I don't have any problem with Fortinet Unified SASE. Mostly in Indonesia, in our market, customers buy the brand without knowing the full capability of it. So actually with Fortinet FortiGate, you also have to implement FortiManager, FortiAnalyzer and for hardware control, FortiNAC and so on. But because it's so modular, sometimes customers mistakenly just buy the firewall. The firewall doesn't work right. That's a problem. I understand that this product design philosophy of Fortinet FortiGate is meant to serve very big corporations which have established SOC teams. They put segmentation of who is the manager and who is the analyzer. That's why they put the separate server for that. But because the brand is so famous, even small customers want to buy it.

What needs improvement?

I think Fortinet FortiGate could learn from its competitors that there's nothing to change. Perhaps they could just launch a lightweight version of the SIEM and SOAR tool, which is cloud-based. This would be for small organizations who cannot afford to build the full scale SOC facility and team.

For how long have I used the solution?

I have been working with Fortinet FortiGate for maybe five or six years, or maybe longer than that. It could be 10 years as well.

What other advice do I have?

I have been working with Fortinet FortiGate for quite a long time, but I am not a partner yet. Last year I took partnership with Sophos, so we do both.

I don't have experience integrating SD-WAN capabilities with Fortinet FortiGate yet, as we had a case but the project didn't go. SD-WAN is not mostly firewall. Yesterday, I just had a discussion with a new customer that wants to buy ZTNA and NAC.

I think the pricing of Fortinet FortiGate is affordable to some small customers, but they can only afford the firewall without the other components. Mostly firewall, so it's just selling products, not selling a security system.

In my opinion, Fortinet FortiGate doesn't need to be improved. It's because it has a different market. I had a case maybe five or six years ago. There was a tender of SD-WAN implementation for 10,000 mini marts. A company that has 10,000 outlets of mini marts needs security. In the data center at their headquarters, they need a very big firewall, up to 500 Gbps. But in the outlet, which is a small store or mini mart, they need a very small firewall that's capable to do SD-WAN, authentication, security, VPN and so on. Fortinet FortiGate has it all. Fortinet FortiGate is suitable for that kind of organization. They have a special SOC, so they buy FortiManager, FortiAnalyzer and so on. I rate this review an 8.


    reviewer2292894

Security platform has strengthened multi-purpose protection and supports AI-driven threat defense

  • March 10, 2026
  • Review from a verified AWS customer

What is our primary use case?

There are many main use cases for Fortinet FortiGate for my clients, including network firewall, VPN, ZTNA, and SD-WAN. The firewall is basically the primary function and one of the best features in Fortinet FortiGate.

How has it helped my organization?

The AI aspect has helped to protect data centers at scale by improving the reduction of false positive errors and handling unknown threats.

What is most valuable?

I have hands-on experience with demos and implementation of Fortinet FortiGate. The AI and ML enhanced FortiGuard services are quite new, and I have some experience but not much since they are a new feature.

What needs improvement?

The stability and performance of Fortinet FortiGate are mixed, as some features are quite good and very stable while others are quite new and very buggy.

There are quite a lot of bugs in Fortinet FortiGate, and they introduce new features every day that come with problems. I think they introduce them too fast.

Fortinet brings in new products every year and acquires new companies while inventing new products, which is good but also bad because they introduce a lot of workload and problems or bugs onto the table.

For how long have I used the solution?

I have been using Fortinet FortiGate for almost three years.

What do I think about the stability of the solution?

The stability and performance of Fortinet FortiGate are mixed, as some features are quite good and very stable while others are quite new and very buggy.

What do I think about the scalability of the solution?

Scalability highly depends on the purchase decision. If the user bought the appliance, then it is not scalable, but for the VM on the software side, it can expand.

How are customer service and support?

I have some experience with Fortinet's customer service and technical support. I would rate the technical support of Fortinet on a scale of 1 to 10 around a 7 or 8, primarily because they have local operations in Thailand, so they have at least some people who can speak Thai.

Which solution did I use previously and why did I switch?

I do have experience in working with technologies other than email security solutions.

How was the initial setup?

If talking about the general product, the initial setup of Fortinet FortiGate is quite straightforward, simple, and easy. However, it depends on the DNA of the product. If the Fortinet product was acquired from another company, that is a different story.

What about the implementation team?

My role is usually on the pre-sales and the POC role in integrating SD-WAN capabilities with Fortinet FortiGate. I am not involved in the implementation side and cannot tell much about it.

What other advice do I have?

In Thailand, the concept of unified SASE is not very popular because the traffic has to go through the cloud, and they are not very afraid of the cloud or highly adopting it at this time.

I know about dynamic segmentation in Fortinet FortiGate from the book and theory side, but on the implementation side, there are not many projects that implement it that way. It is probably never done.

There are several benefits that Fortinet FortiGate brings to the table, and I cannot speak of only one or two as it is too extensive. It highly depends on the use case, and the only word I can tell is that it is very multi-purpose or all-purpose and highly usable in many use cases.

Fortinet FortiGate is quite a mix for organizations considering it, as some products are very easy and straightforward to start, making it easy to sell, and then they can expand to other more complex and advanced products.


    reviewer1929939

Reliable security has improved internet routing and optimized multi-site traffic performance

  • March 03, 2026
  • Review provided by PeerSpot

What is our primary use case?

As a customer, we work with Fortinet FortiGate. Our major use case for Fortinet FortiGate is our Internet, serving as the main device for routing, firewall features, and everything.

What is most valuable?

Fortinet FortiGate is one of the best firewalls in the market currently, with a lot of next generation firewall features embedded into it, including SD WAN, which is one of the best services for traffic steering, managing packet log jitter and latency for any applications, making it unbeatable in terms of pricing compared to other firewalls.

It has a significant impact on our network performance as we are a health care company where users access health care business website URLs, and any latency is managed by SD WAN without manual intervention, benefiting the operation as we have more than a thousand users across different locations.

Fortinet FortiGate Unified SASE is effective in providing security policies across multiple locations, incorporating zero touch provisioning that is very impactful and beneficial in managing network problems.

In terms of hardware-assisted DDoS protection with Fortinet FortiGate, it is performance-based, depending on the number of concurrent sessions, users, and the specifications of the hardware product.

What needs improvement?

The one concern I have with Fortinet FortiGate is the firmware versions, which often have many bugs when upgraded, leading us to revert back to older versions multiple times in my lifecycle.

For example, when upgrading the firmware version, we noticed that one of the services was not working, resulting in no packet flow for a VLAN until we reverted back.

The main area for improvement in Fortinet FortiGate is the firmware versions, as we face uncertainties regarding upgrades and frequent bugs that require self-fixing of problems.

For how long have I used the solution?

We have been using Fortinet FortiGate since two thousand three.

What do I think about the scalability of the solution?

Fortinet FortiGate is very much scalable, with all models from Fortinet being impactful.

How are customer service and support?

Technical support from Fortinet is generally good, though there are times when it could be better.

Which solution did I use previously and why did I switch?

We have used other firewalls, including Palo Alto, which we find to be very pricey compared to Fortinet FortiGate.

How was the initial setup?

The deployment process for Fortinet FortiGate is straightforward.

What about the implementation team?

We conducted the deployment ourselves without the help of an integrator or consultant.

What was our ROI?

The return on investment with Fortinet FortiGate is very good, as it is one of the best products available in the market.

What's my experience with pricing, setup cost, and licensing?

In terms of price for Fortinet FortiGate, it is not considered that expensive when compared to other products; it is medium priced for SMB businesses.

Which other solutions did I evaluate?

Palo Alto is a premier product, but both solutions have their unique advantages, making it difficult to declare one superior to the other.

What other advice do I have?

We have Fortinet FortiGate in different locations, where every location serves as a data center using hub and spoke technology, connecting all spokes to a primary hub and a secondary hub for reliability.

We use segmentation in core switches; however, the segmentation features are primarily managed by Cisco switches and not by Fortinet FortiGate firewall.

The effects of SD WAN integration on remote users and application performance are very positive, as we integrate all traffic through Fortinet FortiGate SD WAN and aim for configurations that enhance efficiency across locations.

We have been using SD WAN with Fortinet FortiGate for more than five or six years.

Fortinet FortiGate Unified SASE is effective in providing security policies across multiple locations, incorporating zero touch provisioning that is very impactful and beneficial in managing network problems.

The effects of SD WAN integration on remote users and application performance are very positive, as we integrate all traffic through Fortinet FortiGate SD WAN and aim for configurations that enhance efficiency across locations.

With Fortinet FortiGate, the SD WAN feature is included with no additional costs, which stands in contrast to other products like Cisco and Palo Alto, which charge extra for similar features.

I would rate this review an eight out of ten.


    reviewer2803671

Unified security has protected diverse environments and supports consistent policies everywhere

  • March 03, 2026
  • Review from a verified AWS customer

What is our primary use case?

I used to work with Fortinet FortiGate and I am using Fortinet solutions as well. I still use Fortinet FortiGate. Everything regarding Fortinet FortiGate, I was working in a telecom operator who was a partner to Fortinet FortiGate and we were reselling Fortinet solutions to our enterprise customers. Plus, Fortinet has a lot of solutions for telecom network operators as well. So we have deployed a Fortinet solution for protecting our infrastructure as well. In my current role also, we are using Fortinet solutions as security operation center tools.

So we were using SD-WAN of Fortinet FortiGate as well and we used to sell Fortinet FortiGate SD-WAN to our enterprise clients as well, and the feedback is pretty good. The box is quite good, especially on the throughput. So usually for other vendors and the market leader vendors, whenever SD-WAN is activated on the box, the throughput of the box reduces while in Fortinet FortiGate boxes, the throughput remains consistent and you can turn on and off the features as you want, and it is quite intuitive to use Fortinet FortiGate solutions.

So we use Fortinet FortiGate data center firewall and with IDPS functionality. FortiAI is the add-on on top of Fortinet FortiGate firewall. So we use those solutions which help us to protect our setup from cyber attacks and in near real time it gives a lot of visibility using machine learning and helps us remediate the incident in near real time basis.

I work with other solutions such as VMware, Cisco, and a few more SD-WAN vendors.

What is most valuable?

Fortinet FortiGate has started as a firewall solution for branch locations and protecting a smaller branch of say 50 or 100 users to start with. Then Fortinet FortiGate has enhanced their offerings and now they are offering solutions for protecting data centers, branches, head offices, cloud infrastructure and everything. So Fortinet is one of the players who is having the full bucket of solutions for protecting applications across the deployment locations, being a branch or a head office or a data center or in the cloud as well.

Regarding Fortinet FortiGate, one of the key fundamental principles they are following while creating products is affordability. Second one is a uniform software code which they use for creating products and the interoperability with the Fortinet ecosystem. So as I said, Fortinet has started as a firewall vendor and then now Fortinet is offering SD-WAN, software-defined LAN, Wi-Fi, plus a lot of solutions for protecting cloud-based deployments and applications. I understand that I am using a few of the solutions which are required for running a managed security service provider setup and security operations center. So those products are also quite promising. To summarize, one is affordability and the efficacy of solutions. Plus I understand Fortinet keeps on investing high in their R&D budget. So that's where they are able to bring a lot of innovation and they make their product quite contemporary in that sense.

Regarding the effectiveness of Fortinet unified SASE, it provides necessary uniform security policies across multiple locations, being in the cloud or in a branch location or in some data center or anywhere in the world actually. So that's where SASE plays a pretty important part and Fortinet has achieved that objective very well.

Regarding the experience with the unified agent in Fortinet unified SASE, it impacts our operations mostly positively. That helps us reduce our overhead for managing the endpoint deployment. With the agent, it is a single agent that does multiple jobs. And this agent signals very well with Fortinet FortiGate SASE deployments and the overall experience is pretty good. It is easy to deploy, easy to manage, and most effective.

Regarding the dynamic segmentation feature, it is a very fantastic feature and one has to have that feature for protecting the lateral movement of cyber threats or maybe when hackers are trying to orchestrate the larger cyber attacks. So this dynamic segmentation really helps us provide a segregation of the application landscape as well as ensuring that the cross talk between the applications does not go uncontrolled. Secondly, if any malware is deployed somewhere, it helps us protect those malware implications within a certain segment only and not span across the data center.

Regarding DDoS protection for managing data center traffic, I understand Fortinet has solutions for DDoS but I do not see those being used in the market. The market is controlled, rather dominated by two or three vendors, and I guess Fortinet is not a preferred vendor for having DDoS solutions.

What needs improvement?

I would say 8 out of 10 regarding the stability of Fortinet FortiGate. It requires a lot of bug fixing and what I understand, Fortinet is fast enough to provide bug fixes and patches, but usually I suggest Fortinet should do thorough testing of their releases and software releases and once probably they can reduce the frequency of new releases but make it stable. That's what my recommendation is.

As far as the core objective of Fortinet FortiGate is concerned, I think they are meeting the targets but I guess for rolling out new features and new updates, they are doing a bit of hurry just to cope with the market dynamics. But possibly, I understand that they are compromising on the quality of the software and stability. So over there they have to improve. Rest of the aspects, I guess they are doing pretty good. We are happy.

Regarding my experience with Fortinet FortiGate in comparison to maybe some other vendors such as CyberArk, Fortinet is in the top three and they give a lot of competition to their nearest peers in the market. But I guess Fortinet is really struggling in software-defined LAN, Wi-Fi, and FortiSwitches space. So they have to make their products more affordable in Forti-switching and Forti-WiFi space. They are not able to compete effectively with the nearest competitor HP Enterprise and HP Aruba.

For how long have I used the solution?

Around now it's almost 18 years that I've been working specifically with Fortinet FortiGate.

What do I think about the stability of the solution?

Regarding technical support from Fortinet, whenever the bug has been reported or stability issues are reported, we see the support provided by Fortinet is good. But again, rather than controlling damage, I guess they should be working more towards preventing the damage rather than controlling the damage.

What do I think about the scalability of the solution?

Regarding scalability for Fortinet FortiGate, my experience says for branch networking, the product is excellent and it supports the scalability of 2X or 3X at times. But for data centers, one has to size the components and size the solution very carefully because these components are deployed one time and remain in life for at least five to seven years. So one has to keep in mind, it is not so easy to replace the boxes. For Fortinet cloud solution, I guess they have achieved the required elastic scales. One has to only upgrade the licenses and go for a higher tier of subscription and then the scalability is achieved in a very seamless way. But for hardware products, especially in data center and head office environments, one has to carefully size the products because they are not so elastic actually. One has to size it well.

How are customer service and support?

I would rate them seven.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I work with HP to some extent.

How was the initial setup?

Regarding deployment process, Fortinet has a component called FortiManager and FortiAnalyzer. So these two platforms are providing many templates to automate workflows and achieve zero-touch provisioning. So that way deployment is pretty straightforward and easy.

What about the implementation team?

I have deployed a lot of Fortinet solutions on AWS cloud using FortiManager's FortiAnalyzer, Manager, and FortiGate virtual appliances on the AWS Marketplace.

What was our ROI?

This is clear good ROI wherever Fortinet is used as a security product, but not in the Forti-WiFi and Forti-Switching products for sure.

What's my experience with pricing, setup cost, and licensing?

It's quite affordable for Fortinet FortiGate. It's quite affordable for branch networking for sure. For core security components such as firewall, IDPS, and all those things, they are pretty affordable. That's why they won the market and are now market leaders. But some solutions, such as running SOC tools, Fortinet SIM, or Forti-WiFi and Forti-switches, they are coming on a higher side. They're more expensive than their better competitors.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?


    Yati Gharat

Unified security management has simplified data center protection and optimized branch connectivity

  • March 02, 2026
  • Review provided by PeerSpot

What is our primary use case?

The key use case that we and our clients work with Fortinet FortiGate is mainly the firewall part, the management part, and monitoring. These are the three aspects on which we are using Fortinet FortiGate.

We are using SD-WAN with Fortinet FortiGate, and it works pretty well. Multiple branches are connected to the head office.

We utilize Fortinet FortiGate data center solutions in most of the data center. Most of our clients are using data centers, so we use Fortinet FortiGate in the data centers.

On a regular basis, we help our clients to deploy the security fabric because compliance governance and audit come into the picture, and responsibility has to be decided.

What is most valuable?

In my opinion, the unique or most useful functions of Fortinet FortiGate are that it has a pretty simple deployment. It does not have any complex plugins or anything. It is very straightforward for configuration purposes. All of the configuration parameters are there in a single dashboard. Depending on your licenses, you can just configure them and then they are ready to go. The testing part is pretty easy. It is not more difficult than other firewalls.

My impression of the effectiveness of Fortinet Unified SASE is that it is pretty good, and all the products of Fortinet FortiGate are available in a single dashboard. There is less complexity for that.

I have experience with the Unified Agent in Fortinet Unified SASE. Most of the time, it is used with Unified Forti. We have multiple devices which we can connect through that. Most of the time when we deploy this, we have to deploy the agent. The agent has less overhead on the systems. Performance does not degrade for the end users. That is beneficial.

What needs improvement?

In my opinion, a potential area of improvement for Fortinet FortiGate is that while it has a pretty good dashboard, which is not an issue as such, when we talk about hardware parameters, sometimes the hardware gets pretty heated up. Given the amount of traffic going through it, that is fine. However, the heat of the hardware has to be looked into. Fortinet FortiGate firewall is good, but other products like the switching part and all that fabric, in handling very audio-video traffic, sometimes it struggles on the switching part, but on the routing part, it is fine. On the firewall part, it is good; there is no issue as such up till now.

Additionally, I suggest that Fortinet can add software which is in a controlled way, particularly regarding AI and ML. It should not happen that the AI/ML takes certain decisions which are not beneficial for the organization. The control should remain with the team members who are responsible for configuring this firewall.

For how long have I used the solution?

I have been working with Fortinet FortiGate for more than 10 years, probably around 13 years.

What do I think about the stability of the solution?

For Fortinet FortiGate stability, I can say nine. It is pretty stable.

What do I think about the scalability of the solution?

Regarding scalability, the ability to expand, I also rate it as nine. It is easily scalable.

How are customer service and support?

Regarding technical support from Fortinet vendor support, I would place it at nine.

Which solution did I use previously and why did I switch?

I have been with Fortinet for a pretty long time and with Sophos, as I mentioned previously. If I compare Sophos and Fortinet, I would consider Fortinet FortiGate for critical segments and Sophos for small and medium segments.

How was the initial setup?

The initial setup for Fortinet FortiGate is pretty simple.

What about the implementation team?

We are partners with Fortinet, and I can confirm that we are not just integrators, but we are also resellers for Fortinet.

We sell the product directly for the vendor, not through some marketplaces; we sell directly to our end users.

What was our ROI?

In my opinion, the main benefits that end users receive from Fortinet FortiGate are that the return on investment is good. Whatever money we invest in Fortinet FortiGate product, we get it back in two years' time. It is pretty secure, having very robust hardware and software. Updates are pretty good, and in the event of an issue, updates are pretty quick. It is a pretty solid product, with the amount of money we are paying out there.

The dynamic segmentation feature in Fortinet FortiGate is working fine. We have used it, and it is pretty good. The configuration timelines have reduced because of this particular product.

What's my experience with pricing, setup cost, and licensing?

In terms of pricing, I would say it is pretty good, so we can say ten for that.

I confirm that it is reasonable money for that solution.

Which other solutions did I evaluate?

Regarding the integration of SD-WAN with Fortinet SASE on application performance for remote users, right now we are not using SASE from Fortinet FortiGate.

What other advice do I have?

We will recommend Fortinet FortiGate to other users. It is totally up to the client requirements. I rate this review overall as nine.


    Hassan Wali Khan

Comprehensive security has simplified multi-site deployments and protected remote users

  • February 04, 2026
  • Review provided by PeerSpot

What is our primary use case?

I have worked on multiple products including Fortinet FortiGate VM, Fortinet FortiGate firewalls of different models, FortiSwitch, FortiAP, FortiADC, FortiWeb, FortiAuthenticator, and some other products as well.

I have been working on Fortinet FortiGate and Fortinet FortiGate VM for around five or six years. I have deployed it as a perimeter firewall, as a data center firewall, and as a campus firewall in many banking sectors, commercial sectors, and oil and gas sectors. Most of my clients have deployed Fortinet FortiGate firewall on-premises to protect their services.

What is most valuable?

The ease of use and the user-friendly interface are the beauty of this firewall. The UI itself and the documentation are completely available on the internet. The UI is very easy, and you can easily understand the implementation. The product itself has very strong deep features and security features including IPS and malware protection to prevent and save against cyber attacks.

I have very good hands-on experience and very good deployment experience with Fortinet FortiGate SD-WAN. Fortinet FortiGate SD-WAN allows you to use multiple internets and multiple interfaces separately to load balance your internet and to load balance your services between multiple service providers. This is a very good feature in this firewall that you cannot get as a free default feature in other brands.

The network performance after enabling SD-WAN is very smooth and very efficient. I recently deployed this in forty commercial sector sites with stores that previously had MPLS circuits. With the MPLS circuit, they had a very high cost for private connectivity between sites and branches. After deploying SD-WAN, the operational cost was cut down around fifty to sixty percent because of this implementation. All MPLS costing was wiped out from their IT budget and is now dependent on internet circuits, which are normally standard internet connections.

SASE is a very good feature. For example, I recently deployed this for a customer with users in remote locations. The issue was that they wanted users to remain connected and keep monitoring systems after office hours with no malware installed on the laptop while staying protected. The use case of SASE involved implementing the POP itself on the cloud. The users, whether remotely at home or anywhere in the world, are connected to and keep connected with POP. They access the internet securely with secure company policies as defined by IT. They are not allowed to go directly to the internet without IT policies as defined on SASE POP. There is very good integration from SASE to Fortinet FortiGate firewall to access private access.

What needs improvement?

For improving sectors, they need to focus on technical support and work on the technical part. Although it is good, they need to onboard these things and improve the technical part of the support factor. Although it is good, it needs much more improvement to get more business and a bigger footprint in the market. Second, AI in the market and malware detection exist. Fortinet FortiGate already has these features in the Fortinet FortiGate sandbox features with built-in AI features. I prefer that they work on more features that they can provide in Fortinet FortiGate firewall.

I would rate this product ten out of ten. For example, when comparing it with Palo Alto and Fortinet FortiGate, I can provide a very good point. In Palo Alto, some features must be purchased separately. In Fortinet FortiGate, it comes with the Wi-Fi controller built-in. Features that you need to buy a separate license for in Palo Alto do not require additional licenses in Fortinet FortiGate as they are built as complimentary features in this firewall.

What do I think about the stability of the solution?

The network performance after enabling SD-WAN is very smooth and very efficient.

What do I think about the scalability of the solution?

Scalability is the same, and I would rate it ten out of ten.

How are customer service and support?

Technical support can be marked as ten out of eight. There is some lag, but you can find documentation and all things over the internet. They can provide support, and I would rate it eight point five to nine.

What about the implementation team?

My technical team are all technically expert in deployment of Fortinet FortiGate firewall.

My team has around five or six people who are all technically sound in Fortinet FortiGate firewalls.

Which other solutions did I evaluate?

If we are talking about Check Point, Cisco, and Palo Alto, these are the top-tier firewalls and top-tier vendors for providing firewalls. Following the Gartner report, Palo Alto and Fortinet are at the top in the Gartner report. Because of that, Fortinet FortiGate firewall itself does not require management centers as required in Cisco and Check Point. Fortinet FortiGate firewall cannot be managed by a management center. In Fortinet FortiGate case, there is no requirement for these prerequisites to configure or implement Fortinet FortiGate firewall without a management center. We can deploy Fortinet FortiGate firewall without any management center. It is a very web-based firewall and you can access the firewall GUI from the website, and we can easily deploy it without any management center. In Check Point or Cisco cases, a management center is required. In Cisco case, the Firepower Management Center is required to get the advanced features. But in Fortinet case, it does not require these things. This is a very beauty of this firewall.

I suggest buying Fortinet instead of buying Palo Alto, Cisco, or Check Point. I will definitely recommend Fortinet.

What other advice do I have?

Fortinet FortiGate has different models of firewalls which are high capacity and high variant firewalls that you can deploy as data center firewalls to protect your data centers, your server farms, and your services which are hosted inside a data center.

Fortinet FortiGate has embedded services, these FortiGuard services which have machine learning-based and artificial intelligence-based malware analysis. These services analyze malwares and next-generation malwares that are not easily identified by signature-based detection. They have the capability to analyze malware by AI-based methods and can identify zero-day attacks. Before they exploit as a zero-day, they prevent this signature and stop this attack to prevent that this is an attack. Those services are hosted in my data centers, web applications, storage, and SaaS. All are protected by those cyber attacks.

Regarding pricing, we cannot compare it right now because pricing matters based on business size and the business deal. We cannot say whether it is high or low. Sometimes we can easily compete with any brand, and in some cases we cannot compete. For example, if we have a big deal, we can get good discounts from Fortinet team. In some cases, the deal is not big, so we cannot get enough good discount. Deployment from FortiSASE to your Fortinet FortiGate firewall over SD-WAN is very easy. Fortinet gives you multiple connections from SASE POP to your Fortinet FortiGate firewall. They have fully redundant connections on SASE POP if you have the same redundant connections with ISP connection on your Fortinet FortiGate firewalls. They have the secure SPX tunnel from FortiSASE to Fortinet FortiGate firewall. You can easily access from Fortinet FortiGate firewall to SASE applications and SASE users who are connected on SASE POP can access local services from SASE POP to Fortinet FortiGate and access the local services.

My overall rating for this product is nine out of ten.