I am using Fortinet FortiGate as a firewall and for IDS. We also use FortiSIEM.

The firewall is pretty good if you understand how to use it. It performs at a very high level, and we are loving it. The SASE and ZTNA features are quite good as well. 

It does extensive work for our organization. It provided additional policies we were not aware of and gave us an overview and knowledge about those policies. I have had a good experience. It's not difficult to manage. The software is good.

It is particularly effective when it comes to integration, as it can be integrated with many other vendors.

Since everyone is talking about AI, they should consider having AI embedded or working with developers in terms of AI to improve Fortinet FortiGate. 

The issue lies with features available in GUI versus CLI during configuration. When using GUI, I want to accomplish everything there, but sometimes it requires using CLI to ensure proper configuration.

It has been almost two to three years.

It has its ups and downs but they are minor things. One can work around them with proper knowledge of the system. We never had many incidents with it. I have had a good experience.

The scalability is quite good.

I am very satisfied with their technical support. They are very supportive, though sometimes they can be a bit busy.

I have not used any other solutions. The deciding factors were the price, technology, effectiveness of the solution, and the skill that we had for it.

It was easy to deploy. It took us a week to deploy it.

It is very effective and provides value for money. After a month, we could see from our reporting when the system was up and running that it was very effective.

I would rate Fortinet FortiGate a seven out of ten.

I'm using it for web filter and then using it for VPN connection user to site, and I'm using it to make a virtual ID to link a real ID from the server to provider to my servers to publish servers.

I work with Fortinet FortiGate SD WAN. I configure the SD WAN to use two Internet service providers from two different service provider links. When one of them is down, the SD WAN goes down. I have to go to the SD WAN and remove this link from the SD WAN member. I confirmed that with the local provider and it's working. Sometimes, when a member of the SD WAN link is down, the SD WAN is down, and this is not the solution. I made the SD WAN for redundancy, however, when a member of the SD WAN link is down or I finish the quote of the Internet, all the SD WAN stops working and users experience problems.

With the web filter, when I go to post some websites under certain categories and open these categories, I experience some problems. 

Additionally, I face difficulties integrating Fortinet FortiGate with Active Directory. When I set preferences to use Active Directory users, it sometimes works and sometimes does not work. When I integrate Fortinet FortiGate with Active Directory and use this integration to make a web filter policy, the functionality is inconsistent. I have tried restarting the Active Directory domain controller and the firewall, but the problem persists. As a workaround, I use the MAC address of the user to define the settings.

I have been using the solution for about five years.

I haven't configured or experienced any stability issues.

It's safe and secures my network and applications in some sites. However, I have significant problems when implementing web filters, which is a very problematic issue for me.

I often ask for help from the local provider. I haven't found the required efficient help. Currently, I have problems connecting to some banking systems and departmental Texas portals. I have asked for help but haven't found assistance through the site or through the local provider. When trying to open a ticket, they reply with solutions that are not applicable to my situation.

Positive

I didn't have a firewall previously. That said, I did have a VPN gateway.

I haven't configured or used the initial setup.

I didn't choose or have knowledge about the implementation team.

The return on investment was good.

The setup cost was good. The Egyptian pound is declining, and upgrading Fortinet FortiGate yearly costs about $2000 USD, which equals one hundred Egyptian pounds. I maintain a business relationship with the vendor and receive support from them.

I considered switching to Sophos. Due to my previous experience with Fortinet FortiGate, I preferred to stay with Fortinet FortiGate.

The solution requires careful attention, and when problems occur, they typically don't repeat once resolved. 

I miss having local provider support here in Egypt. International support is difficult to obtain. Local support is preferable yet has become very expensive due to currency devaluation in Egypt. 

The main use cases for Fortinet FortiGate are mostly for an industrial company firewall, focusing on firewall, web server, and new-gen, next-gen firewall.

What I appreciate about Fortinet FortiGate is that the UI is easier than what I've previously known from Sophos. Compared to Sophos, I prefer Fortinet, and the system and configuration settings are easier.

The main benefits I have seen from using Fortinet FortiGate for the organization are due to the other branch in another country, as the connection is smoother than the previous firewall.

For Fortinet FortiGate, I am not sure yet what can be improved or enhanced because currently, I am comfortable with this solution.

I have been working with Fortinet FortiGate for less than six months.

I think Fortinet FortiGate is stable because previously it had a hiccup around a bug within the authentication VPN due to the firmware, but after updating, it's easier to control.

In terms of scalability, I find Fortinet FortiGate scalable. There are no issues yet with scalability in Fortinet FortiGate.

Regarding the technical support of Fortinet FortiGate, I have already tried to contact them previously for a problem. I would evaluate the technical support of Fortinet FortiGate as friendly and easily understandable for our problem, as they have a high understanding of the Fortinet FortiGate system.

Positive

I prefer Fortinet FortiGate over Sophos because of the connection system, the web GUI, and I think Fortinet is much more secure than Sophos.

The initial setup of Fortinet FortiGate was easy. The setup needs around a few days to test before deploying to the customer, and while deploying, it's easy to contact customer service to help us with it.

We are utilizing SD-WAN capabilities in Fortinet FortiGate, but not extensively, just a few times. I have not yet seen any impact on the network performance with the SD-WAN, as we're just monitoring it.

My experience with integrating SD-WAN capabilities within Fortinet FortiGate is that the project for SD-WAN is not very long, approximately one month of testing, so for now, the connection is clear with a bit of misconnection. 

I would personally recommend Fortinet FortiGate.

On a scale of one to ten, I rate this solution an eight.

We are a systems integrator in Paraguay, and my task is usually to configure Fortinet FortiGate as a perimeter firewall and provide all the security features to our clients.

Some of the best features of Fortinet FortiGate include the next-generation firewall features. Before Fortinet FortiGate, we usually used Juniper, which is very good for routing and switching, but in security, Fortinet FortiGate is far better than Juniper, especially with deep inspection and data leak prevention. We have nearly every financial institution in Paraguay as a client, putting special focus on preventing leaks of credit card numbers.

The field I’m interested in is the courses we provide to our clients. The PDFs available in the learning system are fantastic. The features they implement are exactly what everyone is looking for. To me, Fortinet is very good and useful.

From my perspective, every day is a new opportunity for improvement. I believe that the continual improvement is Fortinet’s best feature. I’m very happy with their ability to consistently improve.

I've been using this solution for about ten years.

Fortinet FortiGate is stable. Based on my experience, whenever we faced an attack, many other brands, including Juniper, often had vulnerabilities. However, Fortinet consistently delivered the best performance and effectively stopped any threats.

Since we are a small country, our clients usually have minimal security requirements due to relatively slow network speeds. The entry-level versions of Fortinet FortiGate are good enough for our top clients.

We work with both enterprise and SMB clients. We are also an Internet provider. We provide the connectivity and the equipment to bring security to the client. We have all kinds of clients.

I would rate Fortinet's customer service or technical support as an eight out of ten. We have many skilled technicians for Fortinet FortiGate configurations. We only require support for a very advanced feature. People representing Fortinet here in Paraguay are very friendly and work well with us.

The initial setup of Fortinet FortiGate was easy. The setup is easy because most companies don't have complex requirements and just need a basic firewall to shield against external threats and filter internal connections, making the basic configuration good enough until they ask for advanced features.

I cannot say definitively about the return on investment with Fortinet FortiGate because I have always been in the technical field, but most of our clients are very happy since threats were stopped, generating confidence in the Fortinet brand among our clients.

I do not consider it an expensive solution. It's not cheap, but it's not expensive, especially compared to Cisco, which is the de facto standard here in Paraguay. Cisco suppliers often set high prices, allowing us to enter the security field easily, thanks to our pricing.

Another team handled the SD-WAN capabilities with Fortinet FortiGate. I know that FortiGate can do that. From my knowledge, it is for the balance between two ISPs, but I don't know about performance tests.

I would rate Fortinet FortiGate an eight out of ten.

Most of our clients are SMB. We have several support contracts, and as a way to standardize all the products and processes, we ask our clients to switch to Fortinet FortiGate as a firewall, and that's how we standardize our process. Most of our clients we support with a support contract have Fortinet FortiGate as a firewall on-premises.

It's easy to manage. The GUI is very simple, and what is very good is that every product, regardless of size, has the same interface. Most features are in every single product irrespective of the size. 

Their support's response time can be better. In the past six months, they took quite a long time to respond to the support tickets. I don't know if they are overwhelmed with too much activity, but for the last six months, the support has not been very good. Previously, it was very good.

I have dealt with Fortinet FortiGate for four or five years.

I would say that Fortinet FortiGate is stable. We have several appliances installed, but we encountered some trouble with the smaller models on three occasions, which somehow limited the inbound traffic. We had to send one in for a Return Merchandise Authorization (RMA), and Fortinet sent us a new appliance, which resolved the issue. The only downside is that the replacement process takes about two to three weeks. That has been the only problem we've experienced with the smaller model.

The scalability of Fortinet FortiGate is mostly with the bigger appliances. It's not quite flexible once you buy one appliance; to scale up, you have to buy a new appliance, and there's no way to upgrade the appliance. The challenge is that you don't want to oversize the appliance because that is tied to the subscription. The price of the subscription is tied with the size of the appliance, so you have to size it very precisely, considering the future growth of the company.

Their technical support is pretty good. Over the last six months, there has been a delay in response, but previously, it was very good.

Positive

The initial setup for Fortinet FortiGate is pretty straightforward.

My experience with the pricing, setup cost, and licensing for Fortinet FortiGate is quite good. I don't have a public site, such as in Azure, where I can see the pricing. I always have to go through the distributor, and that could take some time to get the real price for each appliance. 

When our client has two internet connections, we do Fortinet FortiGate SD-WAN configuration, and it works very well. I can't determine if there is better performance using SD-WAN, but it's much more stable. We did have some trouble with certain types of traffic that doesn't work well with SD-WAN, and we had to implement rules to stick to one of the connections, but those are exceptions. The traffic is much more fluent, but mostly it makes the connection much more stable.

I would rate Fortinet FortiGate an eight out of ten.

The main use cases for Fortinet FortiGate are in the data centers, mainly for web filtering, IPS, and IDS.

The best features of Fortinet FortiGate are UTM, web filtering, and IPS. We have Palo Alto firewalls in place. The ease of integrating SD-WAN capabilities depends on the requirements of the customer.

Fortinet FortiGate is a very light product. It's easy to understand.

Fortinet should improve its software, as we are seeing lots of firmware versions generated for each vulnerability issue. It becomes difficult for us to keep updating the firmware frequently due to bugs. 

We would like to see the SSL VPN feature included again in Fortinet FortiGate since it was removed from version 7.6.3 onwards. 

For DDoS protection, there can be more features in Fortinet FortiGate.

We have been using Fortinet FortiGate for about 15 years.

It is stable.

As implementers, we find it easy to scale up.

We have about 100 people, and we are using Fortinet FortiGate 60.

I would rate Fortinet tech support a nine out of ten based on my experience.

Positive

We also work with Palo Alto firewalls. The main difference is in the software. Palo Alto's database is also updated for threat analysis. If you are installing a Palo Alto firewall for the first time, it is a bit complex, but with Fortinet FortiGate, the implementation is easiest, as the tabs are easy to understand.

I would recommend it. It is user-friendly.

I would rate Fortinet FortiGate as an eight out of ten.

Fortinet FortiGate is among the best firewall solutions, having a significant market share in Egypt. Fortinet FortiGate has a very simple configuration, is easy to set up, and includes SD-WAN features at no additional cost. I recommend Fortinet FortiGate to act as an internet or perimeter firewall.

Features such as URL filtering, intrusion detection, and threat prevention make it suitable as a perimeter firewall. It also includes free SD-WAN features. It is recommended when any customer has more than one site, as it can act as an SD-WAN solution without any extra licenses, with SD-WAN being a built-in feature. It is a very easy solution.

From my experience, I see that the datasheets of the Fortinet FortiGate portfolio need to be more accurate because correct sizing is essential. The datasheets should provide clear information when deploying features. 

When comparing Fortinet to all other vendors, I believe most features are available in Fortinet. I'm not sure if the DNS security license is available in Fortinet; if not, it is important to add Fortinet DNS security and sandboxing licenses. I know Fortinet has a separate sandbox solution, but I am unsure about sandbox features in the firewall. In contrast, Palo Alto has a DNS security license, email security, and WildFire license that serves as a sandbox solution.

I have been working with Fortinet FortiGate for around eight years.

I find Fortinet FortiGate to be very stable.

The scalability of Fortinet FortiGate depends on the project. If the project meets accurate sizing, it can be scalable, but if the presales engineer does not accurately size it, Fortinet FortiGate can have limited resources to scale. It depends on the project.

I evaluate Fortinet's technical support as a seven out of ten. They aren't the best support, but when we need assistance with any features or field activities, we can utilize the internal support team of the vendor located in our country.

Neutral

I believe it is cost-effective. With Fortinet FortiGate, we can pay once for every renewal period, and there are no CAPEX expenses because Fortinet FortiGate is easy to configure, easy to manage, and familiar to most engineers. 

It is not the cheapest one, but its price is very competitive.

When comparing Fortinet FortiGate to Palo Alto or other firewalls I've worked with, Fortinet is more stable, easy to configure, easy to manage, and is competitive in price. 

Fortinet offers multiple product sizes suitable for various enterprises, including small, medium, and enterprise customers. Compared to Palo Alto, Fortinet offers a free SD-WAN feature while Palo Alto requires an SD-WAN license with more costs and several licenses. However, Palo Alto does offer more advanced features than Fortinet. A notable difference is that when the Fortinet FortiGate license expires, the box still works until the customer renews the license, while with Palo Alto, the box stops entirely and the customer must renew the license to continue functioning.

My experience in integrating SD-WAN capabilities with Fortinet FortiGate in the network shows that the integration is very simple and has a straightforward configuration.

The Fortinet SD-WAN solution consists of multiple products. To create or set up a full SD-WAN solution, it needs two products from Fortinet: FortiGate and FortiManager, which is a centralized management solution, and FortiAnalyzer, which is a log management solution. SD-WAN connects more than one site. It centralizes management and logs. Fortinet FortiGate with SD-WAN does not require any extra license, but to have the full SD-WAN solution, it is required to have FortiManager and FortiAnalyzer for several reasons. Fortinet products can be VM or hardware.

I have worked with the hardware-assisted DDoS protection in the Fortinet FortiGate, and I think it's good.

I recommend the Fortinet FortiGate when acting as a perimeter firewall, and some customers use it in the data center. I recommend another vendor in the data center, but our customers are very satisfied with Fortinet FortiGate when acting as a data center firewall.

I have limited experience with the AI and machine learning enhanced FortiGuard services, but I know that Fortinet is leading this trend. 

Fortinet FortiGate provides SD-WAN and SASE solutions to secure any type of user and any type of traffic. It has many features, including a secure web gateway and secure service edge, helping users access the internet and applications, whether inside or outside.

I would rate Fortinet FortiGate an eight out of ten.

I use Fortinet FortiGate to secure our infrastructure, user data, data encryption, and to prevent DDoS attacks. 

I also have experience with FortiManager and FortiCloud. I have experience in integrating SD-WAN capabilities with Fortinet FortiGate because I am using SD-WAN with multiple ISP lines, using it as a load balancer and for specific route traffic.

Fortinet FortiGate has positively impacted our organization by preventing hackers from accessing our network.

The performance of hardware-assisted DDoS protection in Fortinet FortiGate when managing data center traffic is very good.

One of the best features of Fortinet FortiGate is VLAN. Dynamic Segmentation and SD-WAN are also very good. 

It is stable and easy to use. There are a lot of good resources available on the web.

Fortinet FortiGate could be improved in terms of user friendliness at the policy level and assigning URL based and keyword based features.

I have been working with Fortinet FortiGate for around three years.

Fortinet FortiGate is a stable solution and the best solution.

The scalability of Fortinet FortiGate is good.

I would rate technical support from Fortinet a ten out of ten.

Positive

Before choosing Fortinet FortiGate, I was using Sophos Cyberoam, which is outdated. I switched from Sophos to Fortinet FortiGate because the Sophos device was outdated, not providing the same SD-WAN features at the same cost and central level.

We got our ROI in the second year due to its stability.

The licensing cost is at the intermediate level.

I would rate Fortinet FortiGate a ten out of ten. 

My customers use Fortinet FortiGate for their branches and campuses; we have provided it for small retail and industrial networks. 

Chennai is totally based on MND and BFSI for the factories, and since Fortinet FortiGate provides OT Security, they have numerous features. In the same single firewall, they can use SD-WAN as well as OT signatures to have visibility for partners.

The best features of Fortinet FortiGate include selling a perpetual license as a primary benefit, and the license cost is not much compared to Cisco, Meraki, or HP. 

Feature-wise, I can rate Meraki over Fortinet FortiGate a seven or eight since they have micro-segmentation and application routing. They can detect real-time threats with FortiGuard, which is similar to Palo Alto. Now they are implementing AI features, and I recently went through the demo, which is amazing.

The main benefits that Fortinet FortiGate brings to customers include that if you're going for a single fabric with core switches, access switches, and APs, compared to legacy Cisco or Aruba, te Fortinet FortiGate does not require a controller for the access points. Fortinet FortiGate itself acts as a controller.

Similarly, they have FortiLink, which connects all appliances in a single stack, allowing maintenance with FortiManager and FortiAnalyzer. In comparison, Cisco requires a separate controller for SD-WAN and Nexus ACI controller, and other things require a Cisco DNA controller. However, with Fortinet FortiGate, it's simple to maintain using FortiManager and FortiAnalyzer, thus being very much easier and cost-efficient.

In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. 

In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.

I have been working with the Fortinet FortiGate for three years.

My impression of FortiGate's performance is that it performs quite well; when performance issues arise, it's not the box, it's the users, traffic, and bandwidth overloading. Apart from that, whatever the capacity of the hardware is, it is performing quite well.

Regarding the scalability of the Fortinet FortiGate, if it is a VM, it is easy. However, if we're talking about hardware, in the designing phase, we need to consider being about 30% or 20% higher to make scaling easy. Otherwise, they need to change the entire hardware. That's why we are pushing managed services, so the ISP and MSSP partner will take care of scalability. Still, in terms of scalability, it is quite difficult; if they are expanding, they need to change the hardware for the new hardware.

I would rate the technical support of Fortinet FortiGate as a five because it is not as strong as Cisco. Additionally, the turnaround time is very high compared to Cisco.

Positive

My impressions of the setup costs are that they are reasonable; definitely, they are reasonable.

The change in return on investment after implementing Fortinet FortiGate solutions for the SD-WAN for hybrid workforces is evident; we did it five years ago for one customer, and now the end of support and end of sale life has come. I can see a 10% to 20% infrastructure change. We received 2% to 3% higher than the original sales, and we have also done the renewals. They are also increasing branches, and overall, the RMS has increased by 50% to 60%.

My impressions of the setup costs are that they are reasonable.

For users who would like to start working with Fortinet FortiGate, my recommendation is that it will not create a problem, but once it has been programmed correctly, and all the use cases are rightly fitted, you can forget the issues. The only thing that needs updating is the threat intelligence and network configurations. Apart from that, maintaining FortiGate is easy.

I work with the dynamic segmentation feature in the Fortinet FortiGate. The dynamic segmentation feature plays a significant role in preventing the lateral spread of different threats within the data center environments; for example, for web hosting, there are multiple OEMs who have different warehousing solutions, and they don't want to mix the data between their OEMs. In this case, dynamic segmentation comes into the picture, allowing me to create multiple VRs for the data center within a single tunnel for data segregation.

I work with some customers who are going to integrate the unified SASE capabilities in Fortinet FortiGate, and we are working actively on that, but up until now, I've not taken any deployment on the SASE part. We are working with multiple customers, but they are not suggesting it yet. As of now, I just went through the demo for the AI regarding the SD-WAN part, and I didn't go for the data center things. If you ask me about the SD-WAN front for deployment or integrating the SASE along with that, it is comparatively easy. Within minutes, I can see it in real-time; they can deploy five branches or 10 branches within 10 minutes or 20 minutes. I haven't worked with the hardware-assisted DDoS protection in the Fortinet FortiGate; instead, I have worked with Radware or Arbor for DDoS solutions.

On a scale of one to ten, I rate Fortinet FortiGate a nine.

I am a network engineer implementing Fortinet FortiGate firewalls. We have implemented this firewall for various government departments, small organizations, and hotels.

Fortinet FortiGate is quite popular in my region, so we are implementing Fortinet FortiGate firewalls. Fortinet FortiGate is the best option on the market when it comes to firewalls. It's straightforward to deploy and has good stability and performance.

In an incident, after a restart, Fortinet FortiGate did not connect to FortiGuard servers. Due to that reason, on the customer end, all websites got blocked. I don't know why this happened. The firewall of a bank in Sri Lanka rebooted yesterday, and after that, FortiGuard servers did not connect properly, blocking all customer environment websites.

I have been working with Fortinet FortiGate for around three years.

I have not faced any other issues with Fortinet FortiGate. The performance for Fortinet FortiGate is good.

The scalability of Fortinet FortiGate is good.

We are able to resolve most issues on our own. We raise a case through a partner portal. If the local distributor cannot resolve it, it's routed to another country. The response time for their technical support is not always good. It also depends on the license that the customer has.

Positive

We are partners with both Sophos and SonicWall. I have implemented Sophos firewall myself, but not SonicWall. Our other engineers handle SonicWall implementations. I implemented Sophos SG and recently migrated from SG to SGS, all the firewalls.

The implementation process for Fortinet FortiGate is straightforward. We don't get much error with FortiGate because it's straightforward. We can implement it easily. Sometimes, when we implement through the portal, there are some errors, but we can manage it.

I have implemented 900D firewall and 400D firewall clusters, and many Fortinet FortiGate firewalls. I have also implemented FortiADC once, following step-by-step guides.

We are a partner of Fortinet.

Some of our customers are using Sophos and SonicWall due to price concerns, as they can't manage the pricing of Fortinet FortiGate.

I mostly recommend Fortinet FortiGate when it fits the customer's budget. I would rate Fortinet FortiGate an eight out of ten.