We use it for managing access to our data center, regulating the communication tools employed among servers, and ensuring overall security.
Fortinet FortiGate Next-Generation Firewall
Fortinet Inc.External reviews
External reviews are not included in the AWS star rating for the product.
Has robust security features, comprehensive threat protection, intuitive user interface, and seamless integration
What is our primary use case?
What is most valuable?
Its performance in fulfilling our requirements has been satisfactory. The graphical user interface is straightforward to navigate.
What needs improvement?
There is room for improvement related to the logging and reporting aspect. It was somewhat challenging as I delved into the logs during an incident. Navigating through the logs to trace the specific information we needed, as well as generating the corresponding report, proved to be less intuitive. In comparison, when considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
For how long have I used the solution?
I have been working with it for two years.
What do I think about the stability of the solution?
It offers good stability capabilities.
What do I think about the scalability of the solution?
We have approximately two hundred users within our company.
How are customer service and support?
I would rate its customer service and support ten out of ten.
How would you rate customer service and support?
Positive
What was our ROI?
Its performance justifies the cost, there is a prominent ROI.
What's my experience with pricing, setup cost, and licensing?
The pricing is very reasonable.
What other advice do I have?
I would highly recommend it. Overall, I would rate it eight out of ten due to the reporting and logging issues.
Which deployment model are you using for this solution?
FortiGate Cloud Review
Excellent Security Solution- FortiGate Cloud
Review for Fortigate Cloud
Fortigate Cloud is a blessing for medium enterprises
Impressive in fending off various threats
What is our primary use case?
We use FortiGate NGFW to secure our network gateways. These devices, functioning as UTM solutions, were impressive in fending off various threats. FortiGate excelled with its anti-spam, antivirus, and firewall features at the network level. Beyond security, it is seamlessly integrated with networking tools like Zendesk.
What is most valuable?
The most valuable aspects of FortiGate NGFW are its top-notch reputation in peer reviews, user-friendly interface, and excellent support. It stood out during external penetration tests, proving its effectiveness compared to our previous firewall. The seamless integration with other tools and thorough testing set FortiGate apart. Replacing our old firewall with Fortinet was a game-changer, especially as it helped us improve our performance in subsequent penetration tests.
What needs improvement?
FortiGate has been solid for us, but I see room to explore its integration with Secure Service Automation for a more comprehensive security view. The initial migration had some challenges, but they were manageable. Now, my focus is on automating responses to alerts, especially during nighttime attacks. I want to investigate how FortiGate can connect with other solutions, like SIEM, to enhance our security measures while offline.
For how long have I used the solution?
I have been using FortiGate NGFW for a year.
What do I think about the stability of the solution?
It is quite stable.
What do I think about the scalability of the solution?
FortiGate is scalable, and we currently use it for approximately 300 internal users, with additional offshore teams connecting via VPN. The total user count, including the offshore teams from different countries and continents, is around 400 to 500 people.
How are customer service and support?
We contacted Fortinet's technical support during a firmware upgrade issue. They guided the upgrade process, and their support was capable and helpful. I would rate them as a ten out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
In comparing FortiGate with other solutions like Cyberoam, I have found Fortinet to excel in various aspects. For instance, its intrusion detection capabilities stand out, providing instant alerts compared to some firewalls that take up to 24 hours. While I can't quantify percentages, Fortinet's performance, especially in areas like responsiveness, has been notably better in my experience.
How was the initial setup?
Setting up FortiGate NGFW was straightforward, with some considerations during the migration process. Migrating from an old firewall required meticulous rule review and manual configuration. Ensuring adherence to best practices and testing in a beta environment were crucial steps. We also coordinated with our ISP to clear the ARP cache for a smooth transition. Despite a minor misconfiguration leading to an issue, we swiftly addressed it over a weekend with minimal impact. Regular backups and failover tests added an extra layer of assurance. A team of three people deployed it. The deployment and migration from the old firewall to FortiGate took approximately one month. To ensure a smooth transition for our 24/7 operations, we invested extra time for thorough testing and rule validation.
What's my experience with pricing, setup cost, and licensing?
The pricing and licensing costs for FortiGate are quite reasonable, especially for an SMB like ours. While solutions like Check Point and Palo Alto are excellent, Fortinet's affordability played a significant role in our decision-making process.
Which other solutions did I evaluate?
FortiGate for SMBs impressively covers most features, and in my experience with Cisco, Symantec, SonicWall, and others, FortiGate stands out. It has exceeded my expectations. While I haven't explored Check Point due to budget constraints, FortiGate's pricing makes it a top choice. Palo Alto and Check Point are excellent but would likely have been my preference if pricing aligned. Overall, FortiGate has been a standout performer in terms of features and value.
What other advice do I have?
For those starting with FortiGate NGFW, my advice is to thoroughly explore its features. I recently recommended it to a healthcare entity due to its effectiveness and user-friendly interface. The fact that they already had Fortinet in another enterprise speaks volumes about its reliability and performance. Overall, I would rate it as an eight out of ten.
Helps reduce our cybersecurity risks, enhances security, and performs well
What is our primary use case?
We utilize the Fortinet FortiGate firewall to safeguard our network and provide secure VPN access from external locations.
We implemented FortiGate because we needed a firewall to protect our data.
How has it helped my organization?
FortiGate helped us meet our ISO requirements.
In the time we have been using FortiGate, we have not had any security breaches.
FortiGate has reduced the risk of cyberattacks that can disrupt our production. Since implementing FortiGate we have not dealt with any such attacks.
I'm unsure whether centralized FortiGate management enhances efficiency, but our experience with it has been exceptional. We haven't encountered any issues, and the operational aspects have been seamless. Additionally, there was no downtime, which is crucial for our operations.
Our Fortinet security fabric has enhanced security across our industrial control system. By safeguarding our production environment and ensuring the security of VPN access granted to individuals, we have achieved comprehensive data protection. We have not experienced any incidents that would have occurred if our firewall was inadequate.
FortiGate does a lot of research, and the product is regularly updated, especially in the ransomware area. I know of a couple of other companies around us that had some ransomware incidents, but we never have. From that perspective, FortiGate has helped mature our approach to cybersecurity a lot.
What is most valuable?
The email protection and VPN features are the most valuable.
What needs improvement?
The process of configuring firewall rules appears excessively complex. While FortiGate offers greater functionality than other firewall solutions, its user interface could benefit from simplification.
I would like the log viewing process to be improved to provide a clearer understanding of the logs.
For how long have I used the solution?
I have been using Fortinet FortiGate for five years.
What do I think about the stability of the solution?
I would rate the stability of FortiGate ten out of ten. We have never had any issues.
What do I think about the scalability of the solution?
We used the limit of our FotiGate firewall which was around 150 users and we never noticed any performance issues.
I would rate the scalability of FortiGate eight out of ten.
How are customer service and support?
The technical support is good.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Our decision to switch from FortiGate to Sophos was solely driven by the seamless integration with our existing Sophos antivirus system. Had this integration not been an advantage, we would have maintained our FortiGate system.
How was the initial setup?
The initial deployment was straightforward due to our understanding of the product and its operation. It was completed in one day by a team of two.
What's my experience with pricing, setup cost, and licensing?
The price of FortiGate is comparable to that of most other firewall solutions and is more affordable than Cisco.
What other advice do I have?
I would rate Fortinet FortiGate eight out of ten.
Except for the firmware updates we have to do now and then, there is no other maintenance required for FortiGate.
We had FortiGate deployed in one location in a big server room. We have 150 users.
I would recommend FortiGate to anyone. FortiGate is an out-of-the-box firewall with good pricing and excellent features.
Which deployment model are you using for this solution?
Enables me to easily see the events and make a decision about next steps
What is our primary use case?
It's mainly used to secure our clients' network access because they do not have any servers. The only things we have connected to the FortiGate firewall are access points, CCTVs, and a printer. It's just used for web browsing and internet access.
How has it helped my organization?
It definitely helps with intrusion prevention. When managing a firewall, you need to create policies to dictate the traffic flow within your environment. And once you enforce a policy, it has an intrusion prevention assistant that you can activate, so it's not just acting as a firewall.
Like most next-generation firewalls today, it helps control network traffic. I don't have any problem managing the network traffic within our network. It's very easy to access and manage.
FortiGate has also helped reduce the risk of cyberattacks. If such an attack happened, the main consequences for us would be data breaches, where some of our company's most important information might be leaked and used by other people. That would endanger our production and security.
And with the System Events page, I can easily access and see the events that are happening within the device and the network. It's easy to track if something has happened and, based on that, make a decision about the next step that I should take. I can see if it is severe or if it is just something that is not critical but more than a nuisance. Even in that case, I have to think about the steps that I will take to prevent it from happening again.
Mostly, it's about protecting the internet access of our end users in the production area of our company. It protects us during our web browsing and from internet-related activities.
What is most valuable?
The feature I like most is the SD-WAN. It allows you to manage more than one ISP at the same time. And there is a high-availability mode, so if one of your ISPs is down, you still have a backup.
It also provides us with visibility because we are able to track the IP addresses, as well as the type of device, OS, vendor name, and the name of the devices.
In addition, Fortinet Security Fabric helps us meet regulations and compliance requirements.
The built-in APIs enable us to integrate with different vendors, such as TP-Link and Luigi. We did not have any problems with the integration. It's very easy to configure and connect. This helps reduce deployment time, but that has more to do with network knowledge than with the product. If you're familiar with basic networking, it would be easy for you to understand the application of a certain device and integrate it with the API of your choice.
For how long have I used the solution?
I've been working with Fortinet FortiGate for about 10 months.
How are customer service and support?
I would like to see improvements in the support from Fortinet. Here in the Philippines, whenever we have problems with a Fortinet product, we mostly ask for support from distributors and resellers and not directly from Fortinet.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I don't know why our company acquired FortiGate because I'm not the account manager. I'm just the technical person who installed the product. But I can assume they just looked at other companies that are securing their networks and decided to secure their internet access like those companies do.
How was the initial setup?
Including the reconfiguration of the network setup, the deployment took at least five days. But the actual deployment of the device only took one day. There were four people involved.
What's my experience with pricing, setup cost, and licensing?
I have no idea what the difference in pricing is if you buy it from a reseller or distributor compared to Fortinet, or even if Fortinet gives that option. The pricing is justified. It's a little pricey, but what you pay for is what you get.
What other advice do I have?
I can't say how much it has reduced MTTR because I have not experienced any issues with FortiGate.
When I first built the FortiGate firewall, it enabled me to learn more about the network security field.
Which deployment model are you using for this solution?
Helpful support, good UI, and provides excellent visibility
What is our primary use case?
We've deployed FortiGate on some customer premises. We've also deployed other Fortinet products, such as FortiMail and FortiManager. We often bundle Fortinet devices. We use FortiGate as a firewall. It is for security and protection.
How has it helped my organization?
The solution has helped our clients secure their network efficiently. It offers security across multiple sites and helps monitor traffic effectively.
What is most valuable?
It's very good and very stable for businesses. It works very well.
The UI is better than the alternatives.
We like using Fortinet devices. They integrate well with one another.
Fortinet provides good visibility and segmentation.
Fortinet's devices are purpose-built to operate in various environments. It operates well across clouds. We can run Fortigate as an MSP.
It helps with intrusion prevention specific to various environments. It provides us with details about the traffic for better monitoring.
FortiGate has helped reduce the risk of cyberattacks that might disrupt our client's production.
The product provides policies for strict monitoring to make the network secure. If something hits against a policy, it will be blocked.
What needs improvement?
We'd like to see the product offer higher discounts to users. They should offer special pricing to premium partners and customers.
For how long have I used the solution?
The company has been using the solution for the last five or so years. I've maybe used it for three years.
What do I think about the stability of the solution?
The stability depends on the FortiGate model. You need the right model for the amount of GB traffic. If a customer deploys a smaller model on more traffic, there may be issues. Otherwise, it handles traffic well. Overall, it's a stable solution. I'd rate stability nine out of ten.
What do I think about the scalability of the solution?
Our clients are quite sizable. One of them is one of the biggest telecoms in our country. We also have smaller customers that deal with smaller FortiGate models. We have a variety of customers of different sizes from around the country.
It's a scalable solution. I'd rate it nine out of ten.
How are customer service and support?
Technical support is good. They offer very accurate solutions. We learn a lot from them. We're happy with their level of service.
How would you rate customer service and support?
Positive
How was the initial setup?
We typically deploy the solution to our client's VMs. The deployment sometimes takes about a month. We have a team of 12 people who work on the FortiGate side.
What's my experience with pricing, setup cost, and licensing?
Their services are good, and we are happy to work with them, however, the pricing could be cheaper.
What other advice do I have?
We're a Fortinet partner.
If we have the option of which firewall to choose, whether Fortinet, Cisco, Juniper, et cetera, we will choose Fortinet. We're very comfortable with their devices. We have a very skillful team, and we've become very comfortable with Fortinet. They have good support as well.
I'd rate the solution ten out of ten.
Which deployment model are you using for this solution?
Helped reduced our cybersecurity risks, is user-friendly, and stable
What is our primary use case?
We use Fortinet FortiGate to safeguard our online users, who are primarily students, around the clock.
Over the past seven years, we've utilized Fortinet FortiGate to address a wide range of security challenges. Initially, we implemented a firewall to secure our network perimeter. Subsequently, we sought to protect internal network segments. Next, we implemented application-level security measures. And most recently, we've implemented selective service controls to manage access to applications like Google services, WhatsApp, and video conferencing platforms. These measures have addressed evolving security needs over time. Currently, we're focused on enhancing authentication and remote access security. To achieve this, we're implementing security tokens to verify user identities and ensure authorized access.
How has it helped my organization?
Fortinet FortiGate enables us to comply with regulatory governance and compliance requirements.
FortiGate is one of the security solutions we have implemented to enhance and protect our network infrastructure, including devices, across the campus for all users. Specifically, FortiGate has shielded us from Internet security threats, application threats, and unwanted websites or access to unauthorized web services. For instance, access to classified websites is restricted based on user permissions. This has resulted in a cleaner network environment, not just from a security standpoint but also in terms of overall network performance. Secondly, FortiGate has significantly alleviated the burden on network administrators and server managers. The product has proven to be highly reliable.
It has effectively reduced our risk of cyberattacks. We have experienced a very small number of incidents, primarily due to configuration loopholes. However, FortiGate has been successful in preventing intrusions from the Internet. It has effectively thwarted hacking attempts, making it a valuable tool for our computer and network security.
We operate in an educational setting and do not rely solely on online connectivity. Therefore, an internet outage would only impact academic activities. While some internet services are utilized within our campus primarily for business purposes, they are not entirely internet-dependent. Consequently, the impact of equipment failure is minimal. In the event of equipment malfunction, we have established contingency plans and alternative facilitating services in place. Additionally, our devices are designed for high availability, with two devices functioning as a backup in case one fails. We have not experienced any device failures to date.
It has streamlined the management of our network and security operations. While the machine itself doesn't provide an out-of-the-box solution, its effectiveness hinges on the expertise and security knowledge of its users. Therefore, engineering and security proficiency are paramount to maximizing the benefits of FortiGate.
FortiGate offers a lot of reporting logs and reports. By continuously monitoring these resources, we can gather sufficient information to take immediate action and implement necessary changes. However, the effectiveness of this approach hinges on having dedicated personnel to review and respond to the provided insights. The device itself cannot act autonomously without human intervention and analysis.
FortiGate has helped us reduce our mean time to remediation by 60 percent. Its user-friendly interface facilitates rapid issue resolution.
What is most valuable?
Fortinet FortiGate is an extremely user-friendly product. In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable. Additionally, we have not experienced any downtime, which is of utmost importance.
What needs improvement?
The log analyzer, for instance, is a product being developed as a common solution for multiple FortiGate devices. Consequently, the log analyzer's functionalities are not fully integrated into the individual FortiGate products. I would prefer to have more detailed logs within the FortiGate products themselves rather than relying on a separate tool.
While Fortinet claims to offer a comprehensive network solution, it falls short in addressing computer application issues, particularly server security. Fortinet's capabilities are primarily focused on network security.
For how long have I used the solution?
I have been using Fortinet FortiGate for over seven years.
What do I think about the stability of the solution?
I rate the stability of Fortinet FortiGate ten out of ten.
What do I think about the scalability of the solution?
Fortinet FortiGate is a fixed configuration that depends on the number of nodes and devices.
How are customer service and support?
The support from Fortinet and its vendors is good.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial deployment can be completed in a few days. Two to three people are involved in the deployment.
What's my experience with pricing, setup cost, and licensing?
In the Asian economy in which we operate, FortiGate is expensive.
What other advice do I have?
I would rate Fortinet FortiGate eight out of ten.
I'm not involved in the operation of industrial devices. We do, however, have devices that are part of laboratories, and they may be flagged during searches because we belong to the education sector. In any case, FortiGate provides protection, and I wouldn't know the extent of visibility there because it's primarily concerned with providing security for those devices. If they are connected to the network, alright.
We have around 1,500 users and over 3,000 devices that utilize FortiGate.