We integrate SD-WAN capabilities with Fortinet FortiGate frequently. Integrating SD-WAN is very easy and almost plug and play. In many cases, it's accomplished by using the built-in features. For more advanced SD-WAN configuration, it's very well documented and described in the Fortinet documents, which helps significantly. It works flawlessly most of the time and is very easy to administer.

I haven't worked extensively with Fortinet Unified SASE yet. We will probably work more with it, but since Norway is quite a small country, we don't have the same use cases as America has, which has many branches of their customers. Our big clients are usually what the US refers to as a small business. We have many smaller locations, which have fewer security needs in a SASE way, as of yet. We are starting to see that the thinking about SASE is changing and more companies are actually starting to open up for the idea of having SASE. I still haven't actually implemented it. I've done several labs with Fortinet and workshops with them. I don't have the experience to actually say how it works because I haven't implemented it with a working customer yet.

I have used Fortinet FortiGate's data center solution. In some cases, we use the high-end data center Fortinet FortiGate. We currently don't utilize machine learning in our data center solutions. We have not implemented any AI capabilities in our production environments due to security concerns. We prefer to avoid using newer and potentially untested technologies in critical environments. Our focus is on maintaining security, and we believe in having a hands-on approach to fully understand the processes involved. Although we’re not using AI, we have had a lot of success with FortiGate for data centers. They are very effective, and I personally enjoy using them. One of the advantages of FortiGate for data centers is that it operates exactly the same way as a regular FortiGate. This means you don't have to relearn everything just because you’re using a higher-end product; it's extremely powerful without requiring a significant adjustment. Overall, we appreciate the ease of transitioning to these systems.

We’re not necessarily a bigger part of the development as a partner, but I feel we’re more informed and more welcomed into the process of actually building the Fortinet FortiGate features because we can easily create a feature request and they will actually take it seriously if it’s something that they see a use case for, and they will publish it. I feel we have a great say in what could be improved feature-wise. I also feel they are very attentive when we’re giving them constructive criticism and they actually take it seriously, which not all vendors are. Being that we’re a small country, it speaks volumes that they care what we say because we’re not that big of a deal in the global picture of Fortinet sales, but they still care what we mean and what we say. It’s very nice to feel that.

The best features of Fortinet FortiGate would be the throughput for the value for money in regards to throughput and security. Many companies have security, many companies have throughput, but very few have throughput and security bundled together in the same price range. It's very easy to use compared to competitors, easy to understand, and the training material is readily available and not hidden behind paywalls as much as many competitors have chosen to do. It's easier to get knowledge, easier to get understanding, and it's a wide portfolio of training material, which is easy to access, which is very good for new technicians. It's also very good for the customer if they want to get a deeper understanding of the product they are actually buying, which they often do.

There's not much to improve except getting rid of more bugs earlier in the software versions so you don't have to be one and a half years behind on software because you're afraid of bugs in the newer releases. I do understand why they have feature releases, which are the newer software releases, but when Fortinet themselves say, don't use feature releases if you don't need the features in production environments, I would really prefer to have more stable software releases, so you don't have to be scared when upgrading.

I have worked on and off with Fortinet FortiGate for about seven years. My main focus has been Fortinet FortiGate for around four years now. It was a part of my work day earlier and now it's one of my main responsibilities to develop our Fortinet FortiGate use for customer cases in our company.

Considering the last three years, I would put Fortinet FortiGate at a seven out of ten because there have been many bugs and vulnerabilities, which forces us to do updates very hastily. I do understand that other competitors also have vulnerabilities. I just feel that Fortinet FortiGate has had many vulnerabilities in the last three years, which forces us to do unscheduled downtime for upgrades. Most of the time in large data center installations, you don’t really notice the downtime because it’s high availability, so the other one takes over. We have many customers that don’t have high availability, so it really sends a message that we are using a product that’s maybe not the most secure regarding vulnerabilities, which is unfortunate. Most customers understand it, but it’s still a nuisance to have unscheduled downtime because of a vulnerability.

The scalability of Fortinet FortiGate rates a perfect ten out of ten. Scalability is one of the biggest upsides of it. It doesn’t create a problem if the customer wants to upscale or extend or do anything to scale the solution. Even downscaling works very well.

We're taking the large customers in Norway. In the last eight months, we had the two biggest Fortinet sales in Norway's history, so we're focusing on high-end customers.

Most of the time, vendor support for Fortinet FortiGate rates a ten out of ten. They’re very helpful and sincere. They really try their best to help us with our problems and challenges, and they never back down from wanting to help. Sometimes it’s an eight out of ten because we sometimes get in the same cases as a competitor of ours, not a competitor of Fortinet, and they tend to say that they’re treating us equally, while we know they are not. I know they’re trying their best to be equal, but there are many levels of why it’s hard. Most of the time, it would be a ten out of ten with no issues at all.

Positive

As a company, we've gone from only selling Fortinet FortiGate as an accessory to creating an entire department in our business dedicated to selling Fortinet products in the span of three years.

I find that with the proper experience using Fortinet FortiGate, the deployment process is quite straightforward. However, it does take some time to become familiar with the deployment tools like FortiManager. While FortiManager is highly beneficial, mastering it requires considerable time and effort since it operates differently than FortiGate. Therefore, you need to learn a new product in order to use it effectively. Also, a lot of technicians use that as an excuse to not learn it that well and continue to use Fortinet FortiGate, which kind of eliminates the purpose of FortiManager. The skill requirements for using FortiManager are somewhat high. This perspective is based on our Norwegian segment, where most of our customers have fewer than ten Fortinet FortiGate. In many cases, they likely don't need FortiManager at all.

The initial deployment takes days. There’s tuning and everything, but the initial deployment and getting it up in production is usually completed in days. Most of the time we actually do it in one day. After hours on a weekday, we usually deploy big Fortinet FortiGate for the biggest customers. We usually finish that before the next work day. The initial setup takes days, not weeks. Completing the setup completely is a continual thing, so that’s never really done because we’re fine-tuning everything all the time. It’s not something I can put a time estimate on.

It's easy to maintain, but it does require upkeep, as all security products do. You can't just deploy and forget about it. This is especially true for security systems, since new vulnerabilities and methods of exploitation arise every day. However, this is not unique to Fortinet; it's a reality across the entire industry. Keeping that in mind, maintaining a Fortinet FortiGate is still quite straightforward, and there are no significant issues in doing so.

Implementation is usually done internally with highly trained staff in our department dedicated to Fortinet FortiGate, without extensive use of external consultants.

We're starting a new division, a group of FortiGate and Fortinet specialists. Right now, I'm focused on creating and launching this group. Currently, we have ten experts on board, with four or five who are very familiar with the product. I would categorize five to six of them as high-level experts. The remaining team members are also knowledgeable; they may not all be classified as experts by Fortinet, but I consider them to be. These individuals are well-versed in FortiGate and are capable of handling complete installations for large customers independently. I would estimate that there are about seven of them with this level of expertise.

I don't have many insights on numbers, but we’ve gone from only selling Fortinet FortiGate as an accessory to creating an entire department in our business dedicated to selling Fortinet products in the span of three years. That’s very quick in our business, which signals it’s a very good return on investment. We have a very big focus internally on getting more people on board with Fortinet, even moving people from other vendors to Fortinet to create a better understanding of the entire Fortinet portfolio to be able to take those cases because we see the customers really want Fortinet FortiGate and we want to deliver it. That’s one of the main focuses we have now, getting more people on board.

There are levels to it, but the newer FortiGate models offer a very good value for money. It's not too cheap but also not too expensive. I find it to be fairly priced and almost the standard of what the competitors should offer as well.

Regarding how I compare Fortinet FortiGate to other solutions on the market or other vendors, I feel we’re not necessarily a bigger part of the development as a partner, but I feel we’re more informed and more welcomed into the process of actually building the Fortinet FortiGate features because we can easily create a feature request and they will actually take it seriously if it’s something that they see a use case for, and they will publish it.

I would absolutely recommend Fortinet FortiGate. It makes a complex area easy to understand and easy to administer. It’s a very complex world protecting from the scary outside internet, but Fortinet FortiGate makes it very easy and they do have easy to use guidance built into the Fortinet FortiGate itself that helps you make good choices. You can also use the built-in features to scan your deployment to see if anything is done out of the norm. If you’ve misclicked something and done anything wrong, you would get a message if you just use the tools in the gate. It’s a quick and easy way to deal with something very complex.

My overall rating for Fortinet FortiGate would be a nine out of ten.

The main use cases for Fortinet FortiGate usually include security to filter traffic to inside the network, load balancing and QoS for the user side, as well as Zero Trust Network Access, allowing users outside and inside the network fabric to connect to our application that is under the firewall.

The most useful features in Fortinet FortiGate are the security features, where we can analyze what kind of traffic is inside our network, and we also utilize ZTNA for limiting and managing our network access. 

The issue with Fortinet FortiGate is the many security CVEs around; I have read there are probably multiple critical CVEs above 9.0 in Fortinet FortiGate products. There appear to be fewer issues with other brands such as Palo Alto or Check Point, but especially with Fortinet FortiGate, there are many vulnerabilities that can be found. The way we manage this is by applying updates whenever new ones are available, but the high critical CVEs generate concern, as we buy security products for our safety and when we find that attackers can easily breach them, it makes us question the safety of the product itself. 

I hope we can deploy the product in an active-active configuration since we currently have two units in an active and passive setup. There are limitations when trying to install it with active-active, but we hope to run it that way.

I have been working with the Fortinet FortiGate firewall for two years.

Stability wise, Fortinet FortiGate is quite good; we rarely have issues with stability, and compared to the previous solution we had, which was much worse, Fortinet FortiGate has had no issues so far.

Fortinet FortiGate is not very scalable. We use the appliance, and once we are out of capacity, we have to buy a new one, as there is no way through scalability. I would rate scalability as a seven out of ten.

I rarely use customer support, but there are a few cases where I tried to reach out before, and it was handled and closed properly, so I had no issues. I would rate the support as nine, based on my experience.

The previous solution we used was Sophos. Sophos had stability problems.

The setup is not complex. It's quite straightforward.

The return on investment after implementing Fortinet FortiGate has been quite okay, allowing us to get the value of what we paid for.

The benefit is more like we are buying insurance. All of the security products may be optional, but having them helps us feel safer and assures us that our network is protected from attackers.

It's affordable. We usually pay about 10K USD annually for the license on a yearly basis.

We have experience with integrating SD-WAN capabilities in Fortinet FortiGate. It is only useful if we have multiple internet operators; if we use a one-to-one connection, there are no benefits. Some of our sites do have multiple internet access, allowing us to use SD-WAN to manage the connection, making it easier to treat it as a single connection while SD-WAN helps manage and load balance between those two.

We do not use Fortinet Unified SASE now, but we are considering implementing it. In the data center, we actually have another solution, but Fortinet FortiGate is used only for our customer-facing side.

My advice to those planning to use Fortinet FortiGate is to check for updates often. We had several issues before due to the firmware we used, but after upgrading to the 7.4 firmware, a lot of issues were resolved just by applying the update regularly. Actually, compared to other firewalls, it is on the very affordable side.

I would rate Fortinet FortiGate an eight out of ten.

My use cases for Fortinet FortiGate mostly involve perimeter-based security and fire-walling.

I find that Fortinet FortiGate is pretty easy to use and integrated, offering many features in one box at a decent price compared to other enterprise vendors. When I first used it as a one-for-one replacement, the functionality was basically the same, but the ease of use compared to the old solution increased, so I definitely saw benefits immediately.

Fortinet FortiGate could improve by enhancing FortiManager, which is the centralized management system. It has many inconsistencies and errors with respect to pushing policies, especially when we have a large network team that needs to push different rules. Improving the consistency and allowing proper stability with many users managing hundreds of firewalls would be beneficial. Regarding cloud deployment in public cloud, it is less flexible and scalable, and customers need to provide and take care of resiliency, scalability, and redundancy. This could be a future improvement for Fortinet FortiGate to better adhere to cloud philosophies.

I have been using Fortinet FortiGate for approximately 10 years.

The stability and performance of Fortinet FortiGate have been good, as it has been running at the company for quite a few years since we first implemented it.

Regarding scalability, we have hundreds of physical appliances deployed, which are running adequately. However, in cloud deployment such as public cloud, it is less flexible and scalable. Customers need to provide and take care of resiliency, scalability, and redundancy, which could be a future improvement for Fortinet FortiGate to better adhere to cloud philosophies.

I have contacted technical support regarding FortiSwitch integration issues with Fortinet FortiGate. They are good at responding, though I don't need to call support often. For myself, the experience has been good. On a scale from 1 to 10, I would give Fortinet FortiGate's support an eight. I did have some minor issues with the person I talked to, but overall, they were able to resolve the issue.

I have used alternatives to Fortinet FortiGate.

For someone with a network background deploying Fortinet FortiGate for the first time, the switch is very easy and the UI is easy to navigate. However, their CLI is very difficult to learn, though changes and configurations in the UI are very understandable.

For the deployment of Fortinet FortiGate, it depends on the project, but for smaller or even bigger deployments, one person can easily handle it, excluding data center rack installation.

Fortinet FortiGate requires maintenance, including updates and firmware updates to fix bugs and security vulnerabilities. Overall, it runs fine, but it has security vulnerabilities with respect to some features that may have affected its reputation. Keeping up to date is a normal part of having any product vendor, and their upgrade process has been smooth.

I don't necessarily know directly about their pricing, but Fortinet tends to be lower than Cisco based on the separate projects I've been involved with. In general, Fortinet FortiGate has very competitive pricing.

Cisco Firepower is one alternative to Fortinet FortiGate. Comparing both, ease of use is a major difference. Cisco Firepower's ease of use is very poor, with many bugs and issues that made it non-functional - some things break and pushing policies is very slow.

Previously, I was a customer of Fortinet, but now I am also a reseller partner. I rate Fortinet FortiGate 8 out of 10.

We use Fortinet FortiGate as edge protection for the customer site. Right now, we are trying FortiNAC before deploying it for our customer. We link Fortinet FortiGate Firewall to our SIEM solution. We have a cybersecurity department, and we aggregate all the logs of the firewall, the proxy, the PC, virtual machine, and other systems.

The interest of the Fortinet FortiGate appliance is the ability to manage quickly and easily the different functionalities. It's easier to use rather than Palo Alto, for example. AI should be a good improvement. The only difficulty that I have today with the Fortinet FortiGate is that on the Forti appliance, there are many functionalities.

As we are trying FortiNAC right now, there is some improvement needed on the product. For the rest, perhaps having more packages would be beneficial. We do not use FortiManager for our own usage. We have developed some scripts using Ansible and we automate everything.

We have been using the solution for more than 10 years.

The question concerns failures on the appliance or security breaches.

Not all functionalities are scalable.

The access to the support is good. When specific information or professional services support is needed, the professional services are very expensive.

Most of the time we are implementing the UTP service.

The implementation is handled by my team. They are involved in the deployment for the customer and use it day by day. We have three people dedicated to the security part on the Fortinet FortiGate and roughly eight people working on it in the security team.

The cost reduction potential exists but is difficult to quantify.

Fortinet is increasing its value in this area. It's easier to use compared to Palo Alto.

The functionality is acceptable but nothing really impressive. For some customers, we are using Fortinet FortiGate, FortiNAC, FortiAnalyzer. FortiMonitor is used for one customer. For FortiMonitor it's FortiAnalyzer. We don't use FortiAnalyzer on AWS. For both, we need the approval of the head office.

On a scale of 1-10, I would rate this solution between seven and eight.

Fortinet FortiGate provides combined features. Some firewalls do not provide many features, but Fortinet FortiGate provides them at a reasonable price. Their pricing has been increasing over time. We can have a low-cost solution with all integration supported, providing a full package cost-effective manager. The solution offers SD-WAN capability, web filtering, application filtering, WAF, and authentication features. Most customers use Fortinet FortiGate for internet facility and outbound traffic. They implement it in high availability mode on their data center side and at the perimeter level.

Fortinet FortiGate provides combined features that other firewalls do not offer. The solution offers these features at a reasonable price, though prices have been increasing over time. They provide a low-cost product with all integration supported, offering a full package cost-effective manager. Most customers use Fortinet FortiGate for internet facility and outbound traffic.

When they release security updates, functionality needs to be cross-checked thoroughly. The firmware updates and patch updates for particular issues can affect other features. Patch testing should be more comprehensive before deployment. The solution could be improved compared to higher-end products in the Fortinet FortiGate line.

I have been using FortiGate for more than 15 years.

For stability, Fortinet FortiGate scores eight out of ten with mature versions. However, when dealing with vulnerabilities and security updates, performance can be affected at the application level and other functionalities. With mature OS versions, the stability rating remains above eight, but during vulnerability and security issues, the rating drops to six or seven. This sometimes requires seeking alternative solutions rather than patching.

The customer service is good. They can easily identify issues and provide solutions efficiently when dealing with bugs.

I previously worked with Aruba Instant.

The initial setup is easy to implement.

Implementation was done through an implementer.

FortiGuard is included in the setup. When deploying Fortinet FortiGate, it is recommended to check which functionalities are required and enable only those needed. This approach ensures optimal performance from the Fortinet FortiGate firewall.

There are other providers available such as Sophos that provide similar features at a lower cost. However, for stability, Fortinet FortiGate provides combined features in a cost-effective manner.

The solution is primarily used for data center solutions, specifically for NGFW and authentication. Most customers use Fortinet FortiGate for internet facility and outbound traffic. The SD-WAN features are commonly used for connectivity, and the bandwidth and ISP connectivity performance is good. There have been no issues with VPN connectivity for site-to-site connections. Multiple load balancing mechanisms show good performance. On a scale of 1-10, this solution receives a rating of 8.

The solution is used for protecting offices for outbound traffic.

To be brutally honest, it wasn't my choice of vendor, but it seems to be able to do everything, though its configurations have to be quite specific. This is neither a positive nor a negative aspect, it is simply how the solution functions.

The operational logic is not as straightforward as a Sophos XGS device. When creating rules in the Sophos firewall, they are more intuitive than in the Fortinet FortiGate IPS device. The Fortinet FortiGate IPS device is more complicated.

The solution needs to be simplified.

I have been using Fortinet FortiGate IPS for six months.

The initial setups are acceptable, though I have not been the one implementing them.

The solution is stable.

It is crucial to size your hardware correctly to avoid problems.

The solution serves about five users.

The support package being an additional extra, even with an enterprise package purchase, is pathetic.

Though I haven't had direct experience with support, the fact that it doesn't come by default, which is very misleading compared to other brands, warrants a rating of two out of ten.

Negative

A basic setup can be accomplished in a few hours, but significant customization is required to achieve the desired configuration.

I view it from the perspective that making an investment in the product prevents potentially larger costs when something goes wrong.

The solution is more affordable compared to alternatives.

The solution is suitable for small-medium customers, provided they have the ability to set it up.

The implementation has been successful so far.

On a scale of 1-10, I rate Fortinet FortiGate IPS a seven.

We deal with messaging, specifically A2P, P2P, and RCS, a rich communication service.

We use Fortinet FortiGate 500, 600, and 900E, which are mainly used for data center activities.

Fortinet FortiGate has helped us significantly in many ways. Previously, we had multiple data centers interconnected over IPsec tunnels. Each IPsec tunnel was individual, and if that tunnel went down, manual intervention was needed to reroute the traffic to the available path. To avoid such cases, I introduced the SD-WAN concept using ADVPN (auto-discovery VPN). With this solution, I have almost four sites where critical traffic flows, avoiding many impacts. The reason we prefer Fortinet FortiGate SD-WAN is that it enables automatic establishment of the next available VPN if any connectivity goes down, ensuring all hub and spoke connectivity flows through the hub. Using ADVPN, spoke-to-spoke communication is established so that hub bandwidth or hub firewall does not get overloaded.

The best features in Fortinet FortiGate are the SD-WAN, IPsec tunnel, and the SSL VPN. It is very user friendly, and we can integrate multiple underlay links to the firewall. From there, you can manage it, and by using this SD-WAN concept, the device itself will make decisions about which path to take to reach the destination. If there are any issues on the desired path, it will automatically select the best path based on the configuration defined in the SLAs. This feature is particularly impressive. Before introducing SD-WAN, I had perimeter devices such as independent routers where intelligent routing across the underlay links was not possible.

It is very informative and easy to implement. The GUI is very user friendly. Using this solution, we can easily integrate security profiles based on needs and requirements of internal stakeholders to avoid malicious traffic or security-related issues.

When onboarding any Fortinet FortiGate to your production platform with active internet connectivity, the device connects to FortiGuard to fetch all signatures and behavioral patterns based on your security policy. It detects anomalous traffic and packets undergo deep inspection. If there are any anonymous or malicious activities, it immediately blocks them based on defined policy actions and alerts the end user and network administrator via FortiManager or via the cloud.

I don't have any areas for improvement in terms of features. With the introduction of AI/ML, they are performing behavioral pattern checks in terms of security. They have removed the SSL web-based and tunnel-based features, and they are improving in many aspects including the UI. However, throughout this year, their support has been very poor.

We have been using Fortinet FortiGate for more than 10 years.

It's stable. I would rate it a ten out of ten for stability.

It's scalable. I would rate it a ten out of ten for scalability. 

We have clients with more than 2,000 users.

Their support needs improvement. When raising a service request on the portal, it normally takes two to three days for a response. Even for production issues, they do not initiate contact. The customer has to call the TAC before they schedule calls, which is problematic.

Neutral

The deployment is very easy. People who are familiar with Fortinet FortiGate can implement it through CLI and GUI. It is very user-friendly for deploying complex configurations. There is also a tool called FortiExporter, which can convert all configurations from any OEM to Fortinet FortiGate.

It doesn’t require much maintenance. The only maintenance activity required is firmware updates.

We have approximately 84 devices in production, demonstrating our investment in Fortinet FortiGate and its usefulness in many ways.

We have invested almost 60% to 70% in Fortinet FortiGate as we don't have any other firewall apart from it. In some cases where we had Palo Alto, we removed it and purchased Fortinet FortiGate. We are using Fortinet FortiGate as our production firewalls in our organizations, corporate offices, and all locations.

It's economical.

In terms of cost, features, and security, everything is top-notch. I would recommend everyone to use Fortinet FortiGate instead of purchasing expensive firewalls such as Palo Alto and other OEMs. It is more economical and provides more flexibility and granularity in terms of access.

Fortinet is a market leader. It is phenomenal in terms of price and kind of services.

I would recommend Fortinet FortiGate to others. I would rate it a ten out of ten.

My main use case for Fortinet FortiGate is controlling our incoming and outgoing traffic as it's installed in our data center. We're managing all the VPNs, IPsec VPNs, over 48 VPNs with our Fortinet FortiGate. We are also controlling network attacks and threats using IPS/IDS, using web filter, and URL filtering. We are bounding users to access the relevant sites only by using the URL.

Fortinet FortiGate has positively impacted our organization by providing stronger network security as it's a next-generation firewall. The IPS we have blocks known threats and vulnerabilities in real-time. Application control detects and controls thousands of applications, blocks P2P, and limits social media.

SSL inspection scans encrypted traffic, even TLS 1.3 for hidden threats, advanced web filtering, antivirus, and anti-malware. The result is fewer breaches, blocked attacks, better compliance, and simplified and secure WAN connectivity, intelligent link selection based on latency, load balancing across multiple ISPs, and automated failover.

We can run routing protocols very easily, such as BGP. We are using BGP over IPsec VPN for our multiple branches and different stations. We are using BGP over Fortinet FortiGate so it's automated. If one ISP goes down, it will shift automatically without requiring human or network administration involvement. It improves VPN and remote access, including SSL VPN and IPsec VPN as well.

The best features Fortinet FortiGate offers include the SD-WAN, which really stands out, and the comfortable GUI. The IPsec VPN configuration is very user-friendly. Compared to Huawei firewall, Fortinet FortiGate offers more features and is more user-friendly.

In terms of security features, Fortinet FortiGate has Deep SSL/TLS inspection, which is very limited in Huawei NGFW firewall. The AI-powered features in Fortinet FortiGate are more advanced compared to Huawei's basic filtering. The SD-WAN is built-in and mature, while Huawei's support is less feature-rich.

Application control is very granular with signatures, while Huawei is less extensive. The management and usability of Fortinet FortiGate is clean and user-friendly, compared to Huawei's more complex user interface. FortiOS CLI is popular and well-documented, while Huawei, Cisco, and Juniper differ from standards. Fortinet FortiGate offers centralized management through FortiManager and FortiAnalyzer. The reporting, logs, and firmware updates are excellent and stable in Fortinet FortiGate.

Fortinet FortiGate can be improved, specifically in the user interface and UX enhancement. The GUI, especially in older FortiOS versions, can be cluttered or slow. Improvements could make the UI more modern and responsive with a quick dashboard, real-time visibility, health checks, and improved policy editing with bulk changes and better search filters.

Policy management in a large environment becomes complex when managing dozens or hundreds of policies. This could be improved by introducing better policy grouping and tagging for more intelligent policy optimization suggestions, such as unused rules or shadow rules.

The built-in logging and reporting is limited without FortiAnalyzer. Internal reporting tools should be enhanced with graphs, trends, PDF exports, alert-based thresholds, and real-time traffic summaries without requiring FortiAnalyzer, which requires additional payment.

User identity integration with LDAP, AD, and user-based rules can be tricky or limited. Additionally, SSL users cannot change their passwords themselves, which should be included in the OS functionality.

I have been using Fortinet FortiGate for six years.

Fortinet FortiGate's scalability is good, and it can handle our organization's growth and needs as it's expanding.

When choosing Fortinet FortiGate, you must know your network size and use case. Choose a FortiGate model that fits your current network and allows for future growth. For small offices and branches, you can use 40, 48, 40F, and 60F series. For medium offices, 80F and 100F are suitable. For large enterprises, you need 200F, 400F, 600F. For data centers, 1000F is recommended.

It's advisable not to buy a model that barely fits; choose one with headroom for future expansion. Always check key specs based on your needs, such as firewall throughput, threat protection throughput, VPN throughput, maximum concurrent sessions, and ports. Check if you need SFP, PoE, or 10G ports.

Consider the features you actually need, such as SD-WAN, SSL VPN, application IPS, AV scanning, Wi-Fi AP support, or central management. If you need central management, you can use FortiManager. Look for FortiOS version compatibility as the F-series offers clear advantages. Make sure your team can operate and manage it with experienced Fortinet engineers.

My review rating for Fortinet FortiGate is three out of ten.

The main work for Fortinet FortiGate is the SD WAN solution. They have a good SD WAN solution with the FortiAnalyzer and FortiManager. The company has more than one site, forty-five sites, so we need to connect it altogether.

The main feature in Fortinet FortiGate is the SD WAN functionality. Based on my experience, it was very easy to integrate Fortinet FortiGate with SD WAN. The benefits Fortinet FortiGate provides include easy connectivity, user-friendliness, scalability, and easy configuration management.

I believe Fortinet can make Fortinet FortiGate better with reduced costs, free certification, and improved security.

My experience with Fortinet FortiGate is approximately five to six months.

I would rate the stability of Fortinet FortiGate as eight because there are other solutions that are more secure and more capable.

When talking about scalability for Fortinet FortiGate, I would rate it as nine or higher.

We have not needed technical support from Fortinet until now.

We moved to another vendor. We first moved to Cisco firewall, and then about six months ago, we moved to Fortinet FortiGate.

The initial setup for Fortinet FortiGate was simple. We worked with another vendor, and it was easy to configure and migrate with our current infrastructure.

We implemented through a vendor, through a third party.

There is a feature inside Fortinet FortiGate for AI and ML.

The Sophos XG was only for one branch. We mainly have a HQ Cisco Firepower FMC. I believe Fortinet FortiGate is easier.

There is a feature inside Fortinet FortiGate for AI and ML.

It is acceptable for my feedback about Fortinet FortiGate on PeerSpot to be with my personal name as a personal opinion without contact details or company name.

I am interested in being a reference for the vendor for Fortinet FortiGate, and it would be fine if the vendor contacts me with questions about my review.

In the future, I might have colleagues who can provide reviews about Fortinet FortiGate.

We plan to work with Fortinet Unified Sassy. I can recommend Fortinet FortiGate to other users.

I rate Fortinet FortiGate a nine out of ten overall.

I currently work in the automotive industry, providing software for automotive dealers, and we only use Fortinet FortiGate for corporate purposes.

One of the best features of Fortinet FortiGate is how effectively the software is written; the virtual network interfaces significantly outperform Cisco in my project. I didn't need separate switches or load balancers because I was able to resolve internal FQDNs of the load balancers, which was impressive. The centralized management allowed us to manage 50 devices effectively, which I found better than Cisco.

During a recent upgrade from old devices to the latest ones, corporate IT faced challenges as there was no straightforward migration process, requiring many manual steps. I've completed upgrades with Cisco before where the process was simple, but this time it wasn't the case for corporate IT. I also heard that SSL-based VPN will be discontinued, which could be concerning.

I have used Fortinet FortiGate for several years; initially, I brought FortiGate to my previous company during a project.

Integrating SD-WAN capabilities with Fortinet FortiGate is straightforward, with minimal complexity involved.

My experience with Fortinet FortiGate support has been excellent, as I was fortunate to have an office in Vancouver where Fortinet had staff. We worked closely with tech personnel through the project. While I usually don't give perfect scores, the support was great. However, one area for improvement is that many functions can only be accessed via CLI, which has discrepancies between the web interface and direct connection.

I pushed corporate IT to replace SonicWall with Fortinet FortiGate, and now in my current company, we have FortiGate that we recently upgraded to the latest models.

Managing Fortinet FortiGate involves three corporate IT personnel, and although it initially took them quite a while to handle some tasks, I provided scripts that allowed them to work much quicker. What took them a day or two is now a job of just 10 to 15 minutes. Scripting and utilizing Git repositories would make things smoother, and I intended to publish modules for Terraform but haven't had the time yet.

Overall, I would rate Fortinet FortiGate around an eight, as there is always room for improvement.