My use cases for Fortinet FortiGate mostly involve perimeter-based security and fire-walling.

I find that Fortinet FortiGate is pretty easy to use and integrated, offering many features in one box at a decent price compared to other enterprise vendors. When I first used it as a one-for-one replacement, the functionality was basically the same, but the ease of use compared to the old solution increased, so I definitely saw benefits immediately.

Fortinet FortiGate could improve by enhancing FortiManager, which is the centralized management system. It has many inconsistencies and errors with respect to pushing policies, especially when we have a large network team that needs to push different rules. Improving the consistency and allowing proper stability with many users managing hundreds of firewalls would be beneficial. Regarding cloud deployment in public cloud, it is less flexible and scalable, and customers need to provide and take care of resiliency, scalability, and redundancy. This could be a future improvement for Fortinet FortiGate to better adhere to cloud philosophies.

I have been using Fortinet FortiGate for approximately 10 years.

The stability and performance of Fortinet FortiGate have been good, as it has been running at the company for quite a few years since we first implemented it.

Regarding scalability, we have hundreds of physical appliances deployed, which are running adequately. However, in cloud deployment such as public cloud, it is less flexible and scalable. Customers need to provide and take care of resiliency, scalability, and redundancy, which could be a future improvement for Fortinet FortiGate to better adhere to cloud philosophies.

I have contacted technical support regarding FortiSwitch integration issues with Fortinet FortiGate. They are good at responding, though I don't need to call support often. For myself, the experience has been good. On a scale from 1 to 10, I would give Fortinet FortiGate's support an eight. I did have some minor issues with the person I talked to, but overall, they were able to resolve the issue.

I have used alternatives to Fortinet FortiGate.

For someone with a network background deploying Fortinet FortiGate for the first time, the switch is very easy and the UI is easy to navigate. However, their CLI is very difficult to learn, though changes and configurations in the UI are very understandable.

For the deployment of Fortinet FortiGate, it depends on the project, but for smaller or even bigger deployments, one person can easily handle it, excluding data center rack installation.

Fortinet FortiGate requires maintenance, including updates and firmware updates to fix bugs and security vulnerabilities. Overall, it runs fine, but it has security vulnerabilities with respect to some features that may have affected its reputation. Keeping up to date is a normal part of having any product vendor, and their upgrade process has been smooth.

I don't necessarily know directly about their pricing, but Fortinet tends to be lower than Cisco based on the separate projects I've been involved with. In general, Fortinet FortiGate has very competitive pricing.

Cisco Firepower is one alternative to Fortinet FortiGate. Comparing both, ease of use is a major difference. Cisco Firepower's ease of use is very poor, with many bugs and issues that made it non-functional - some things break and pushing policies is very slow.

Previously, I was a customer of Fortinet, but now I am also a reseller partner. I rate Fortinet FortiGate 8 out of 10.

My main use case for Fortinet FortiGate is controlling our incoming and outgoing traffic as it's installed in our data center. We're managing all the VPNs, IPsec VPNs, over 48 VPNs with our Fortinet FortiGate. We are also controlling network attacks and threats using IPS/IDS, using web filter, and URL filtering. We are bounding users to access the relevant sites only by using the URL.

Fortinet FortiGate has positively impacted our organization by providing stronger network security as it's a next-generation firewall. The IPS we have blocks known threats and vulnerabilities in real-time. Application control detects and controls thousands of applications, blocks P2P, and limits social media.

SSL inspection scans encrypted traffic, even TLS 1.3 for hidden threats, advanced web filtering, antivirus, and anti-malware. The result is fewer breaches, blocked attacks, better compliance, and simplified and secure WAN connectivity, intelligent link selection based on latency, load balancing across multiple ISPs, and automated failover.

We can run routing protocols very easily, such as BGP. We are using BGP over IPsec VPN for our multiple branches and different stations. We are using BGP over Fortinet FortiGate so it's automated. If one ISP goes down, it will shift automatically without requiring human or network administration involvement. It improves VPN and remote access, including SSL VPN and IPsec VPN as well.

The best features Fortinet FortiGate offers include the SD-WAN, which really stands out, and the comfortable GUI. The IPsec VPN configuration is very user-friendly. Compared to Huawei firewall, Fortinet FortiGate offers more features and is more user-friendly.

In terms of security features, Fortinet FortiGate has Deep SSL/TLS inspection, which is very limited in Huawei NGFW firewall. The AI-powered features in Fortinet FortiGate are more advanced compared to Huawei's basic filtering. The SD-WAN is built-in and mature, while Huawei's support is less feature-rich.

Application control is very granular with signatures, while Huawei is less extensive. The management and usability of Fortinet FortiGate is clean and user-friendly, compared to Huawei's more complex user interface. FortiOS CLI is popular and well-documented, while Huawei, Cisco, and Juniper differ from standards. Fortinet FortiGate offers centralized management through FortiManager and FortiAnalyzer. The reporting, logs, and firmware updates are excellent and stable in Fortinet FortiGate.

Fortinet FortiGate can be improved, specifically in the user interface and UX enhancement. The GUI, especially in older FortiOS versions, can be cluttered or slow. Improvements could make the UI more modern and responsive with a quick dashboard, real-time visibility, health checks, and improved policy editing with bulk changes and better search filters.

Policy management in a large environment becomes complex when managing dozens or hundreds of policies. This could be improved by introducing better policy grouping and tagging for more intelligent policy optimization suggestions, such as unused rules or shadow rules.

The built-in logging and reporting is limited without FortiAnalyzer. Internal reporting tools should be enhanced with graphs, trends, PDF exports, alert-based thresholds, and real-time traffic summaries without requiring FortiAnalyzer, which requires additional payment.

User identity integration with LDAP, AD, and user-based rules can be tricky or limited. Additionally, SSL users cannot change their passwords themselves, which should be included in the OS functionality.

I have been using Fortinet FortiGate for six years.

Fortinet FortiGate's scalability is good, and it can handle our organization's growth and needs as it's expanding.

When choosing Fortinet FortiGate, you must know your network size and use case. Choose a FortiGate model that fits your current network and allows for future growth. For small offices and branches, you can use 40, 48, 40F, and 60F series. For medium offices, 80F and 100F are suitable. For large enterprises, you need 200F, 400F, 600F. For data centers, 1000F is recommended.

It's advisable not to buy a model that barely fits; choose one with headroom for future expansion. Always check key specs based on your needs, such as firewall throughput, threat protection throughput, VPN throughput, maximum concurrent sessions, and ports. Check if you need SFP, PoE, or 10G ports.

Consider the features you actually need, such as SD-WAN, SSL VPN, application IPS, AV scanning, Wi-Fi AP support, or central management. If you need central management, you can use FortiManager. Look for FortiOS version compatibility as the F-series offers clear advantages. Make sure your team can operate and manage it with experienced Fortinet engineers.

My review rating for Fortinet FortiGate is three out of ten.

A typical use case for this solution is that we have small to medium-based customers, and we need a central firewall, which should provide firewall and next-generation features, VPN for home office, and for mobility users, mobile users, and this is what we all use with the Fortinet FortiGate firewall.

Fortinet FortiGate has positively impacted my client's organization because we have know-how of FortiGate; we could debug problems, we could set up our settings as planned, and I appreciate the easy way of configuration, that we can use parallel GUI and CLI, or CLI and web interface, which we can use in parallel. It is a product that we can use very easily.

Fortinet FortiGate can be improved because we have some smaller customers, and with the SMB or small customer solutions with the two letters, 50, 70, 90, they sometimes cause problems. They could improve the smaller devices. One issue is that they have retired SSL VPN for existing devices. This causes significant effort for us to change customer setups. Additionally, they changed features when we only make a patch update and not only a major update. This is really a problem.

I have experience working with Fortinet FortiGate for 20 years, and I wanted to see if we have the right product because we have some problems currently with Fortinet.

I find Fortinet FortiGate to be a stable solution.

It is definitely a scalable solution.

I rate technical support seven out of ten because we made a migration from a FortiGate 200 on another customer side, and we wanted to switch a FortiToken from one model to another one, which was only possible with support. It worked, but we needed about 10 different calls; it was really complicated. Support helped, but people changed every time. Every call, we had a call number, and in each call, people changed, so we had to explain again what we wanted to do. For a similar process, we had to make two different calls, one for mobile token, one for hardware token. This was really challenging. Support is working and good, but it's not perfect.

Positive

We've used Sophos firewalls, but we don't use them anymore because they cause too many problems for us.

The initial setup of Fortinet FortiGate is straightforward.

I haven't seen an ROI with Fortinet FortiGate.

My experience with pricing, setup costs, and licensing of Fortinet FortiGate is okay. We won a deal in comparison to Check Point where FortiGate was much cheaper. Compared to Sophos, the base models seem to be cheaper with Sophos, but the services seem to be cheaper with FortiGate.

I remember doing research on peerspot.com about IT solutions. I wanted to investigate differences between firewall competitors or firewall vendors and Google led me to their site. I have checked a few reports, and they have not been very useful for us. For comparing different vendors, I was also led to their site. They have different types of reports, including user voices and Palo Alto Networks review tips and advice from real users in an 80-page long report. They have market shares and rankings and customer voices, but the customer voices point to a single feature, so I don't get an overall picture of the comparison.

My relationship with Fortinet is that we are a reseller. We have made some tests with SD-WAN but have not introduced this product into production. We use Fortinet FortiGate firewalls and some next-generation fire features proxy, but we don't use SASE. We utilize NPS services, FortiGuard services, antivirus, and malware protection. My clients are typically small to medium businesses, with customers from about 20 to 500 people. I would rate Fortinet FortiGate overall as a seven based on my experience in the last year. Before it would be an eight, but now it's seven because of the problems with the SSL VPN. Additionally, we bought some 50G models that still have a 7.0 firmware, which is really old, and this is not good.

My customer's main use cases for Fortinet FortiGate are mainly for threat blocking, compliance requirements, firewall functionality, and basic security.

It's focused on defending against advanced threats and providing better throughput. Additionally, it can accommodate both enterprise companies and independent users. Bandwidth is one of the issues, but there are many benefits. Overall, it's a solid solution that is scalable in terms of throughput.

The best features of this tool include threat protection, email filtering, and web filtering. FortiAnalyzer's integration with the firewall and FortiSASE is beneficial. The integration helps detect the most advanced threats, such as APTs. 

Fortinet FortiGate stable solution has made systems more compliant in the cyber industry for several customers.

They can improve the backend functionality of Fortinet FortiGate, particularly how the policies work in a real-time environment. Improving this aspect can ensure that policies work effectively.

I have been working with this solution for around one year.

The stability can be rated as eight out of ten.

Fortinet FortiGate has very good scalability in terms of bandwidth, throughput, and everything else. It's scalable without any problems.

I would rate Fortinet support a six out of ten. The immediate response is not that good, particularly when raising a critical or P1 ticket; they lag in the immediate response. They can improve on that front, especially in their support service.

The initial setup of Fortinet FortiGate is straightforward.

My customers have seen ROI with Fortinet FortiGate. The investment they made has provided returns.

I'm not sure about the exact license cost, but generally, it's a reasonable price. If the hardware or the machine is advanced, it will be expensive. However, for medium-sized machines or hardware, it maintains a reasonable price.

I recommend that those who want to use Fortinet FortiGate need to plan ahead. If they are upgrading or expanding their user base in their company, they should purchase a one-level higher version. It would provide good throughput and withstand the number of users in their company.

Fortinet FortiGate can be a bit expensive, but the price is reasonable. I would rate this solution an eight out of ten.