We use Fortinet FortiGate SWG to secure both Internet-facing and internal applications.

The web solutions are the most important features.

The solution could add API protection.

I have been using Fortinet FortiGate SWG for a year.

The product is stable.

The solution is scalable.

Support is good.

Positive

The deployment depends on the requirements. It takes a minimum of one day to complete.

The initial setup is managed by a partner.

Three to four people are enough for setup, depending on the tools. You need a network engineer, a partner, and a firewall engineer to install.

The product is expensive. It comes with a yearly subscription, which includes support and everything.

Maintenance is easy. One person is enough to do the regular maintenance, but two are suitable for feasibility.

The product is good. It does the job of what is said. It is very stable and reliable. One should consider based on the POC and their requirement, but for our requirement, FortiGate was the one to go for.

We use it for Internet-facing applications and web-based applications. We use it more as a web solution. There might be other use cases or other requirements for other companies.

Overall, I rate the solution a seven out of ten.

FortiGate has a lot of things that you can do. You have VPN, VRRP, and VDOM tools. FortiGate also makes GRE tunneling possible. Those are a few things that I like the most about FortiGate.

We are in an era of cloud-based things, so most need a simpler pay-as-you-go model. That might be effective for SMBs, where small organizations can afford features. FortiGate needs to be elastic to the market's trends. It should be easy for SMBs to get the solution. A cloud or SaaS model would be effective. FortiGate should bring a solution that allows smaller companies to use firewalls. Very small or medium companies do not focus on security, but it is the major concern of every organization. To tap that market, FortiGate must bring an innovative product everyone can adopt.

I've used the solution for six to seven years and currently use the latest version.

I rate the stability an eight out of ten.

Scalability is not an issue, but it's difficult for small organizations. The devices that have FortiGate are the issue. I rate FortiGate a seven out of ten.

FortiGate is deployed in a centralized way. The way it is deployed in our organization, all the employees benefit from the security features.

FortiGate's technical support depends on the region. FortiGate's support in my region is very helpful.

Positive

I rate the initial setup a seven out of ten. Deployment takes a few months, but no more.

I rate FortiGate's pricing a five out of ten.

FortiGate, as per my usage, is good. It's a very nice, sophisticated, and realistic firewall. I don't have any issues with FortiGate. It's a good UTM and has very simple dashboards. I rate FortiGate a seven out of ten.

We use FortiGate on-prem, but now we are trying to adopt it on the cloud. I'm not sure how it is because I have not seen a cloud-based FortiGate.

We use the solution for security.

User identification and application identification are valuable features.

The product keeps hanging. One of our customers was unhappy because it didn’t work sometimes.

I have been using the solution for six years.

The solution is not stable for small companies.

The tool is scalable. Our customers are small, medium, and enterprise-level businesses.

The technical support is good.

Positive

I also work with Palo Alto and Cisco. Each product has its advantages and disadvantages. Palo Alto has a lot of features. It provides application identification features and big data analysis. Palo Alto is more stable than FortiGate.

The initial setup is very easy. It takes us some days to deploy the solution.

We need about six people to deploy the solution. It is easy to maintain the product.

I would recommend the solution to others. The product is for commercial clients like the oil and gas sector. It might not be suitable for banking. Overall, I rate the product a seven out of ten.

We use the FortiGate IPS solution to analyze malware. When we receive attacks, we analyze the IPs.

The product has an inbuilt IPS software. We can configure it to block specific anonymous attacks that are happening.

They should provide us with a CSV number for patch updates. It will help us block specific signatures as well.

I have been using Fortinet FortiGate IPS for four years. We are using the latest version.

The product is stable, but we need to monitor IPs as new patches are released daily. Attackers will use these new patches to develop new attack methods and signatures. We need to ensure that our FortiGate IPS is up-to-date with the latest patches. We can get the logs and see if anything we have detected is suspicious. It includes programs, applications, files, or anything else. We investigate suspicious activity and act appropriately, such as blocking IP addresses or updating policy analytics.

The product is scalable. I sometimes have enterprise clients, but my client base is mostly small businesses. We have to implement the entire setup for them. In addition to the endpoint solution and firewall, we need to create IP addresses for users and define their services. Then, we can protect these resources from FortiGate by enabling the IPS upgrade.

There is a customer support portal number. We can create a case there and upload our details. They provide support services instantly.

Neutral

The initial setup is easy. The default CSV is already updated so that we can block those threats. We have to update the block list from the policy settings.

The product is expensive. I rate its pricing a six out of ten.

Enterprises use Fortinet FortiGate IPS because it protects government or critical infrastructure networks. For small businesses, IPS may be sufficient. Overall, I rate it a six out of ten.

We use the solution as an internal gateway to protect some of our data center solutions.

The solution has the best group filtering features.

The solution's technical support could be better. Also, its hardware features need improvement as well.

We have been using the solution for five years.

It is a stable solution.

The solution is scalable. We have medium and small businesses as our clients.

The solution's technical support team's response could be faster.

The solution's initial setup process is easy. A new environment takes two to three days, while an existing one takes more time to implement. Also, it requires ten executives to deploy it and three to six executives to maintain it.

The solution's price is average. We have its yearly license. There are additional costs for support and license renewal.

It is a good solution. I rate it a seven out of ten.

The primary use case is branch network security.

The solution has helped our organization to secure a network and connect remote sites. 

The most valuable feature is the technical support by FortiGate.

There is an area of improvement in the pricing model and vulnerability management. 

In future releases, I would like to see partnering with cloud suppliers. 

I have been using this solution for less than a year. 

I would rate the stability a seven out of ten. 

I would rate the scalability of this solution a seven out of ten. 

Customer service and support are good. 

Positive

The initial setup was complex. 

I have not seen an ROI yet. We do have plans to increase the usage in near future.

I would suggest not to look for a single solution for all your security requirements and compare the pricing. 

Overall, I would rate the solution a seven out of ten. 

We implemented Fortinet FortiGate SD-WAN for a small company that had two internet service providers. The goal was to configure the two links to operate independently, ensuring that they don't share the load. This way, when one link reaches a certain threshold, we can seamlessly switch to the other without any issues. 

We have FortiManager, which enables us to have a unified view for monitoring and managing our devices centrally, as well as dispatching policies.

The solution enables us to consolidate tools and applications and manage them all through FortiManager. You can configure your SD-WAN from Forti Manager, which gives you management functionality. 

The interoperability of the solutions is good because it allows for compatibility with brands other than Fortinet, and we don't encounter issues with it.

FortiGate SD-WAN facilitated a smooth transition for our customers between their two internet service providers, ensuring uninterrupted connectivity without any downtime.

The solution has helped us remediate threats more quickly by enabling real-time monitoring of both links, providing complete visibility into our end links. You can monitor both links on one platform. It's just one single pane of glass where you watch in real-time what is happening. It's easy to manage that way. It helps you to easily remediate issues. 

As long as our policies are granular we are able to use the solution to reduce our MTTD. 

The solution has helped to reduce our MTTR from what used to be five minutes down to 45 seconds.

The solution has helped to reduce the number of help desk tickets because it is now extremely rare for both links to be down simultaneously.

SD-WAN, regardless of the OEM being used, is a beneficial technology that is increasingly adopted by businesses due to its positive impact on business security. It allows us to maintain uninterrupted operations without concerns about past issues.

Fortinet FortiGate is user-friendly.

The support we receive when we need to upgrade is not satisfactory and has room for improvement.

I have been using Fortinet FortiGate for two years.

The solution is stable and we have not had any issues.

The solution is highly scalable.

The technical support is good, but they take a long time to respond and resolve the issues.

Neutral

I have also used Cisco, whose systems are robust and rarely experience downtime. However, with Fortinet, their licensing is highly competitive in terms of pricing. Cisco is primarily geared towards enterprise-level companies, but the learning curve for Cisco is higher compared to Fortinet.

Fortinet's price is very competitive compared to when you look at other brands of equal functionality. The hardware and licensing are compared to the others. It's also simple to use. 

The initial setup is straightforward. I did the deployment and didn't have any issues with it. It took one day to complete. 

The solution provides value and, therefore, offers a return on investment.

The price is highly competitive when compared to other brands that offer similar functionality. Fortinet FortiGate is more affordable both in terms of hardware and licensing, in comparison to its competitors.

I give Fortinet FortiGate a seven out of ten.

I recommend FortiGate SD-WAN because it is easy to implement and simple to use.

The solution is primarily used as a border firewall as well as for internal LAN segregation, internal IPv4 policy management, a VPN for end users, and IPSec tunnels.

Before we implemented this solution, we had only one firewall and old Linux IP tables with no graphical user interface. 

There is no one feature that stands out as most valuable compared to another. All features are correct and no extra items are needed.

The price of licensing could be better. The security of the FortiOS needs improvement, and features are available only in CLI. They could be available also in GUI.

Features like forward traffic capture or NAC in the VPN should take into consideration both Linux devices and Apple devices.

I've used the solution for more than ten years. 

The scalability is okay.

Technical support is not helpful. 

Neutral

We previously worked with Check Point, Palo Alto, Cisco, Watchguard, and PFsense. 

The setup is easy. Support is not helpful.

We handled the initial setup in-house.

The solution is very expensive. 

The price of licensing is too high.

We did not previously evaluate other options before choosing this solution. 

Other Fortinet products are not the best, and Fortinet should take care as this will influence brand reputation.

The use case varies depending on the customer, but we use all of FortiGate's features, including policies, web filtering, routing, etc. 

FortiGate firewalls are easy to manage through a user-friendly web interface. They also have advanced features like DDoS and DLP. However, I wouldn't recommend enabling all these features on one device because it can cause performance issues. 

We sometimes have issues with FortiGate's routing table in the latest firmware update. We had to downgrade the device because our customers complained about bugs. 

I have been working with Fortinet for nearly ten years.

I rate FortiGate an eight out of ten for stability. It is less stable than Palo Alto Networks and Check Point firewalls because there are lots of bugs in the latest firmware. 

FortiGate is scalable. 

I rate Fortinet's support a seven out of ten. We had to open several tickets due to the firmware bugs. We don't have an issue with the support team. It's more of a problem with the testers and developers. 

Neutral

I have also used Palo Alto and Check Point firewalls. Fortinet firewalls are cheaper and easier to manage. Palo Alto is more complex and harder to use, but it's more stable than FortiGate. Palo Alto doesn't didn't have as many models for small and medium-sized enterprises.

FortiGate is easy to deploy. The deployment time varies depending on the customer's network topology. How many policies does the customer require, and what kind of license do they have? FortiGate is easier than Palo Alto Networks and Check Point and takes less time.

We typically start by analyzing the customer's topology and understanding their requirements, including policies, routines, etc. We implement the device once we know what the customer needs. One engineer is usually enough to deploy FortiGate in a small or medium-sized environment. 

An enterprise project requires a more detailed analysis of the network requirements before implementation. That can take two or three days. Once we understand the network, it may take another two or three days to configure the device and one or two days to implement it. 

Fortinet has more device options that are affordable for small businesses than Palo Alto, and its enterprise-level models are also cheaper. Palo Alto also has a separate license for VPN connections and SD-WAN, but FortiGate offers these standard features. 

I rate Fortinet FortiGate a seven and a half out of ten. I deducted a few points because of the device's capacity, stability, support, and routing table issues. I strongly recommend FortiGate if a customer wants to use SD-WAN. Before implementing, you should understand the network's topology to minimize unwanted issues.