My customers use Fortinet FortiGate for their branches and campuses; we have provided it for small retail and industrial networks. 

Chennai is totally based on MND and BFSI for the factories, and since Fortinet FortiGate provides OT Security, they have numerous features. In the same single firewall, they can use SD-WAN as well as OT signatures to have visibility for partners.

The best features of Fortinet FortiGate include selling a perpetual license as a primary benefit, and the license cost is not much compared to Cisco, Meraki, or HP. 

Feature-wise, I can rate Meraki over Fortinet FortiGate a seven or eight since they have micro-segmentation and application routing. They can detect real-time threats with FortiGuard, which is similar to Palo Alto. Now they are implementing AI features, and I recently went through the demo, which is amazing.

The main benefits that Fortinet FortiGate brings to customers include that if you're going for a single fabric with core switches, access switches, and APs, compared to legacy Cisco or Aruba, te Fortinet FortiGate does not require a controller for the access points. Fortinet FortiGate itself acts as a controller.

Similarly, they have FortiLink, which connects all appliances in a single stack, allowing maintenance with FortiManager and FortiAnalyzer. In comparison, Cisco requires a separate controller for SD-WAN and Nexus ACI controller, and other things require a Cisco DNA controller. However, with Fortinet FortiGate, it's simple to maintain using FortiManager and FortiAnalyzer, thus being very much easier and cost-efficient.

In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. 

In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.

I have been working with the Fortinet FortiGate for three years.

My impression of FortiGate's performance is that it performs quite well; when performance issues arise, it's not the box, it's the users, traffic, and bandwidth overloading. Apart from that, whatever the capacity of the hardware is, it is performing quite well.

Regarding the scalability of the Fortinet FortiGate, if it is a VM, it is easy. However, if we're talking about hardware, in the designing phase, we need to consider being about 30% or 20% higher to make scaling easy. Otherwise, they need to change the entire hardware. That's why we are pushing managed services, so the ISP and MSSP partner will take care of scalability. Still, in terms of scalability, it is quite difficult; if they are expanding, they need to change the hardware for the new hardware.

I would rate the technical support of Fortinet FortiGate as a five because it is not as strong as Cisco. Additionally, the turnaround time is very high compared to Cisco.

Positive

My impressions of the setup costs are that they are reasonable; definitely, they are reasonable.

The change in return on investment after implementing Fortinet FortiGate solutions for the SD-WAN for hybrid workforces is evident; we did it five years ago for one customer, and now the end of support and end of sale life has come. I can see a 10% to 20% infrastructure change. We received 2% to 3% higher than the original sales, and we have also done the renewals. They are also increasing branches, and overall, the RMS has increased by 50% to 60%.

My impressions of the setup costs are that they are reasonable.

For users who would like to start working with Fortinet FortiGate, my recommendation is that it will not create a problem, but once it has been programmed correctly, and all the use cases are rightly fitted, you can forget the issues. The only thing that needs updating is the threat intelligence and network configurations. Apart from that, maintaining FortiGate is easy.

I work with the dynamic segmentation feature in the Fortinet FortiGate. The dynamic segmentation feature plays a significant role in preventing the lateral spread of different threats within the data center environments; for example, for web hosting, there are multiple OEMs who have different warehousing solutions, and they don't want to mix the data between their OEMs. In this case, dynamic segmentation comes into the picture, allowing me to create multiple VRs for the data center within a single tunnel for data segregation.

I work with some customers who are going to integrate the unified SASE capabilities in Fortinet FortiGate, and we are working actively on that, but up until now, I've not taken any deployment on the SASE part. We are working with multiple customers, but they are not suggesting it yet. As of now, I just went through the demo for the AI regarding the SD-WAN part, and I didn't go for the data center things. If you ask me about the SD-WAN front for deployment or integrating the SASE along with that, it is comparatively easy. Within minutes, I can see it in real-time; they can deploy five branches or 10 branches within 10 minutes or 20 minutes. I haven't worked with the hardware-assisted DDoS protection in the Fortinet FortiGate; instead, I have worked with Radware or Arbor for DDoS solutions.

On a scale of one to ten, I rate Fortinet FortiGate a nine.

I am a network engineer implementing Fortinet FortiGate firewalls. We have implemented this firewall for various government departments, small organizations, and hotels.

Fortinet FortiGate is quite popular in my region, so we are implementing Fortinet FortiGate firewalls. Fortinet FortiGate is the best option on the market when it comes to firewalls. It's straightforward to deploy and has good stability and performance.

In an incident, after a restart, Fortinet FortiGate did not connect to FortiGuard servers. Due to that reason, on the customer end, all websites got blocked. I don't know why this happened. The firewall of a bank in Sri Lanka rebooted yesterday, and after that, FortiGuard servers did not connect properly, blocking all customer environment websites.

I have been working with Fortinet FortiGate for around three years.

I have not faced any other issues with Fortinet FortiGate. The performance for Fortinet FortiGate is good.

The scalability of Fortinet FortiGate is good.

We are able to resolve most issues on our own. We raise a case through a partner portal. If the local distributor cannot resolve it, it's routed to another country. The response time for their technical support is not always good. It also depends on the license that the customer has.

Positive

We are partners with both Sophos and SonicWall. I have implemented Sophos firewall myself, but not SonicWall. Our other engineers handle SonicWall implementations. I implemented Sophos SG and recently migrated from SG to SGS, all the firewalls.

The implementation process for Fortinet FortiGate is straightforward. We don't get much error with FortiGate because it's straightforward. We can implement it easily. Sometimes, when we implement through the portal, there are some errors, but we can manage it.

I have implemented 900D firewall and 400D firewall clusters, and many Fortinet FortiGate firewalls. I have also implemented FortiADC once, following step-by-step guides.

We are a partner of Fortinet.

Some of our customers are using Sophos and SonicWall due to price concerns, as they can't manage the pricing of Fortinet FortiGate.

I mostly recommend Fortinet FortiGate when it fits the customer's budget. I would rate Fortinet FortiGate an eight out of ten.

A use case for Fortinet FortiGate includes connecting nine to ten different sites to the main Fortinet FortiGate firewall and diversifying the traffic with two-way traffic. It functions as a load balancer to balance loads between different sites.

The main benefits of Fortinet FortiGate, especially in India, are its economic value, scalability, and different sizing options. When compared to Cisco or Juniper, upgrading to a higher class involves a substantial cost increase, whereas with Fortinet FortiGate, the next class is only marginally higher.

The best feature of Fortinet FortiGate is SD-WAN. It ensures continuous connectivity by taking over during link failures, preventing any downtime for the company. One of my clients faced many problems with the primary internet provider and requested multi-path functionality. We implemented the SD-WAN facility and added another three-link WAN link, converting the normal port into SD-WAN and assigning weightage. When there is no response from the primary connection after a certain number of milliseconds, it switches to the secondary and then to the tertiary connection. The impact on network performance with the SD-WAN is very good, provided it is sized properly based on throughput. It is necessary to calculate how much data is transferring daily or per minute, then size the firewall accordingly and select a particular model.

The Fortinet FortiGate solution offers ease of use, not requiring highly skilled workers. General users with two or three experienced team members can read the manual and implement the needed configurations.

Hardware-assisted DDoS protection in Fortinet FortiGate is very easy to implement with single-click options, though care must be taken not to burden bandwidth. Certain ACL units should be used, applying rules only to interesting or exposed traffic.

Some features in Fortinet FortiGate need improvement as we discover when calling support that certain actions must be done from the command line. Not all features are available in the web UI. Features such as enabling multiple MPLS circuits can only be accomplished through the command line, so these need to be made available in the web UI.

Fortinet needs to improve customer support and documentation.

I have been working with Fortinet FortiGate for more than 15 years.

Fortinet FortiGate is very stable, but the person procuring the firewall needs to ensure it is sized properly. If the sizing is not proper, it will create many problems.

The scalability of Fortinet FortiGate is very good. It has improved significantly compared to five years ago when it was not as scalable.

When we encounter struggles, they perform actions from the backend, taking control and resolving issues. This becomes a black box for us because we do not know what actions they took.

Neutral

The initial setup of Fortinet FortiGate is straightforward and easy. HA is the deployment model we always recommend.

While we have not calculated it specifically, we found the ROI to be good, approximately 97% to 98%.

I utilize the Fortinet FortiGate hardware and have never tried the VM version, working only with normal VPN configuration, user configuration, normal routing, and multiple WAN links. While we are using the dynamic segmentation feature, we have not tested it thoroughly enough to analyze its benefits.

People generally go with the recommendations of high-level architects. For core networks, they typically suggest Cisco or Juniper. In India, the market follows whatever the chief architect suggests without quantifying whether it is worth it.

My advice for others considering Fortinet FortiGate implementation is to focus on its ease of use. 

Based on my experience, I would rate this solution an eight out of ten.

We are IT MSPs, and we provide solutions for clients based on their requirements and expectations. 

We are a Fortinet FortiGate partner, reselling products such as FortiGate 100F, 60F, and 70F. We are currently exploring newer versions including 70G, 90G, and 120G. I have also worked with Fortinet FortiGate F200. The UI is similar across all these firewalls, with differences mainly in capacity limitations.

The best features of Fortinet FortiGate include its easy configuration and user interface. 

Its firmware is very stable, which is a significant advantage. I have experienced many challenges while configuring Sophos during firmware upgradation, where changes occur and certain features stop working, requiring reconfiguration. However, Fortinet FortiGate has a very stable Linux-based operating system that is easy to use.

One drawback of Fortinet FortiGate is that they provide two types of models: one with a hard disk and another without. The model without a hard disk has very low ROM where you can store very few logs, after which you need to upload it to the cloud or purchase a firewall with SSD. That's the only drawback.

I have been working with Fortinet FortiGate for the last 4 to 5 years.

It is very stable.

Fortinet FortiGate is highly scalable because it is easy to allocate resources. It is very flexible, especially when using a VM base, as you can easily increase any configuration you want to upgrade. Scalability is now a common feature in all firewalls.

I have had positive experiences with both Sophos and Fortinet as service providers. When we face any issues with firmware or other things, we can directly approach them for assistance.

As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.

Positive

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations.

I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet.

Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

The initial setup of Fortinet FortiGate is straightforward. It involves step-by-step configuration, setting up rules, configuring network interfaces, WAN, LAN, and creating basic rules.

Most of our clients are using on-premises firewalls. If they have a private cloud, they typically establish a site-to-site tunnel. However, in general, they rely heavily on on-premises firewalls.

Fortinet FortiGate is a premium product. From a cybersecurity perspective, the ROI typically comes within 1.5 to 2 years. When investing in cybersecurity with Fortinet FortiGate 200, which costs more than $10,000, companies that are growing directly can expect ROI within 1.5 to 3 years. This calculation considers future planning and monthly security spending, including license upgrades every 3 years. This refers to new procurement only, as license upgradation is a separate consideration.

If you are looking for a quality product, it will come at a higher price. Expecting them to be significantly cheaper is unrealistic. In terms of pricing, it is a bit costly. However, the functionality and support offered are worth it. 

Regarding SD-WAN capabilities with Fortinet FortiGate, I have configured and merged WAN lines. There are two options: round-robin and session-based, and I typically prefer the session-based connection. With Fortinet Unified SASE, for multiple locations, we configure site-to-site tunnels where all data transmits directly to the Central Office.

I would rate Fortinet FortiGate a nine out of ten because AI is still in development and constantly evolving. Nothing is perfect, which is why I chose that rating. There is definitely room for improvement.

The use case for Fortinet FortiGate primarily refers to firewall functionality. 

The best features of Fortinet FortiGate include the simple user interface. The GUI is in English with intuitive navigation. It is very easy to find solutions, meaning it is simple to locate what we need and which settings we need to modify through the GUI.

We have integrated FortiGate SD-WAN. It's working pretty well.

Areas that have room for improvement in Fortinet FortiGate include support and GUI enhancement. While the GUI is already simple, further improvements would greatly benefit them.

I have been working with Fortinet FortiGate for one year in this organization.

I would rate the stability of Fortinet FortiGate as eight out of ten, as it has proven to be reliable.

Fortinet FortiGate is scalable. We primarily deal with small and medium businesses, and for our clients in this segment, it works effectively.

The technical support that Fortinet provides is not satisfactory. When we call Fortinet technical support, it takes too much time to connect with them. The process is complicated, requiring us to hold for many minutes, and when we visit clients, we are not satisfied with their technical support.

Neutral

We work with five firewall vendors, including Fortinet, Cisco, Palo Alto, SonicWall, and Sophos. We have specialists for their products.

We first recommend Fortinet FortiGate or Palo Alto. If a customer cannot afford Palo Alto, we recommend Fortinet FortiGate. If they cannot afford Fortinet FortiGate, we recommend Sophos or SonicWall.

When comparing security policies, Palo Alto is superior to Fortinet FortiGate, but Fortinet FortiGate is adequate. For businesses with higher requirements, we recommend Palo Alto due to its advanced security features, while for small and medium businesses, we suggest firewalls based on their specific requirements.

Deployment of Fortinet FortiGate is straightforward. If the customer requires, we can configure it from our end and deploy it directly.

Our clients are small and medium-sized businesses. They can't afford the cloud. They take the device and install it on-premises.

Fortinet FortiGate is cost-efficient. Palo Alto is expensive, but Fortinet FortiGate is not.

I would recommend Fortinet FortiGate because the GUI is understandable for English speakers, and the configuration is straightforward. 

I would rate Fortinet FortiGate an eight out of ten.

We have configured it in our data center.

The best feature of Fortinet FortiGate is the IPS or IDS implementation. I appreciate most the agility or the flexibility to create hashes to block incoming threats, and I can integrate with third-party threat intelligence with our FortiGate.

SD-WAN is another beneficial feature of Fortinet FortiGate. It offers flexibility in terms of adding multiple network connectivity and building your own network. It's the replacement for traditional VPN solutions. With SD-WAN, I can connect my remote office quickly and add additional or multiple network connectivity to provide redundancy on my network. This is the simple part of that.

The effectiveness of Fortinet unified SASE in providing consistent security policies across multiple locations is very good. In FortiSASE, they have integration with FortiGate. As a network security individual in a company, you can provide a single view of policy, monitor them, audit them, or in one screen, you can see the activity of your users, the behavior of your users, and in contrast, you can see the possibility of tracing the users whenever they have some threats.

Whenever I perform a firmware upgrade or any upgrade on a VM, there are instances where the routing gets lost in the configuration itself on the running VM. 

They have recently acquired a CNAP solution which should be integrated into FortiGate boxes natively for protection at any application layer. Since Fortinet FortiGate has Layer 7 protection, they should integrate that as soon as they can for threat detection and network detection. At the moment, if you don't integrate any third-party solution with a simple Fortinet FortiGate box, the box would not function as expected for superb protection. Compared to others, Palo Alto has more integration. 

I'm waiting for Fortinet FortiGate to be more mature in terms of integrating AI. They already have AI automation in the configuration, but that's just the configuration. They need to address AI in threat intelligence and how they integrate with threat intelligence sources to protect customers using their Fortinet FortiGate boxes or Fortinet FortiGate VM instances.

I have been working with Fortinet FortiGate for more than six years.

Whenever I perform a firmware upgrade or any upgrade on a VM FortiGate, there are instances where the routing gets lost in the configuration itself on the running VM. Whenever we do any upgrade or patch, we ensure we have a latest backup, and then validate every single configuration whenever we finish the upgrade or deploy the patch. This ensures there are no concerns in terms of connectivity or services that get impacted after the upgrade.

This is not a criticism of FortiGate; it reflects my experience deploying several FortiGate instances across different public clouds such as AWS, OCI, Azure, and GCP. My main concern with FortiGate in OCI is its lack of support for features like auto-scaling. When you need additional CPU or bandwidth, it doesn't automatically provision those resources. Currently, in OCI, if you want to scale your FortiGate deployment, you have to shut down the instance and rebuild the virtual machine to accommodate increased capacity. For instance, when you purchase a VM instance, it may come with only four CPUs and a limited bandwidth of four Mbps. In scenarios where you need to scale up quickly, this can be a significant drawback compared to what can be achieved with Azure, AWS, and GCP.

However, I've deployed FortiGate on physical appliances in data centers in the past without any issues, as long as proper planning is done regarding the capacity of your firewall requirements. For example, if you need ten gigabits per second throughput, you should change the module and connect a ten-gig interface to the switch. The key lies in anticipating your design from the ground up, taking into account the growth in the number of users and the increase in the services you provide to your customers. This is my primary concern.

Their support is very good. They respond quickly through their hotline number with an active subscription.

I would rate the support from Fortinet FortiGate as a nine out of ten. Sometimes if I don't escalate to our account manager, it will take the next business day for the interaction.

Positive

I previously used Cisco ASA firewall but didn't find it to be as straightforward as Fortinet FortiGate. 

The initial setup for Fortinet FortiGate is very straightforward. As long as you have the foundation of networking and understand the east-west and north-south firewall terminology, it's quick and easy. 

The deployment would take a maximum of 30 minutes for edge layer protection and end-user protection. After that, you can enrich or enhance the policy, IPS, IDS tweaking, the built-in DDoS or UDP flooding integration.

I performed the deployment of Fortinet FortiGate myself, and it was very easy.

I appreciate how Fortinet FortiGate, particularly in Saudi Arabia, is not as expensive compared to other competitors. The investment value is good, and technically, the value invested is worthwhile. It's a very useful tool to mitigate and protect your enterprise. I cannot speak to the financial analysis as I'm not involved in finance.

It is cheaper and more competitive compared to other options. For example, when comparing Palo Alto products to others, Palo Alto tends to be more expensive. If you compare Cisco's platform, including Cisco Meraki, with Fortinet products, you'll notice that Cisco's offerings are generally higher priced than Fortinet's firewall solutions.

Before working with Fortinet FortiGate, I evaluated other firewalls such as the open-source firewall pfSense. pfSense is suitable only for small startup companies that need more financial consideration. However, in the long run, it's difficult to maintain and support without a subscription. 

I also evaluated Sophos UTM, which was acquired by Sophos from Vyatta Networks, which began as open source but was later locked down for commercial purposes.

The biggest benefit of Fortinet FortiGate among other firewalls is the community. Many adopters and companies globally are already using FortiGates. Everyone in the community is sharing, and their support is very good.

I can recommend Fortinet FortiGate. It's a very stable next-generation firewall where the majority of the firewall features and services are in one box.

My total rating for Fortinet FortiGate is nine out of ten because there are still some missing pieces that need to be integrated with the box itself.

The main use case for Fortinet FortiGate is as a perimeter firewall between the internet and the LAN to protect the networks from the internet.

We are using Fortinet FortiGate in the education industry.

One of the best features of Fortinet FortiGate is that it's a very powerful equipment that gives many security features in a single box with good performance, and the user interface is friendly to use and configure. The performance is good compared to other vendors that I have used, and the price is competitive. 

I am utilizing Fortinet FortiGate's SD-WAN, and my experience in integrating the SD-WAN capabilities with Fortinet FortiGate in my network has been good. It was easy to integrate the SD-WAN capabilities with Fortinet FortiGate, and from my experience and background, it was easier with Fortinet FortiGate compared to other vendors. The monitoring after installing the SD-WAN is also easier. It is easy to see how it behaves and how the traffic goes through the different links. It's improving our performance with SD-WAN.

If you want to conduct some statistics or generate a report to understand the status of your configuration or filtering, you need FortiGate Analyzer for long-term data retention. FortiGate can only retain logs for 24 hours or 7 days. I'm not sure if it holds them for a longer period, such as for a month. It will be useful for assessing our strategy and monitoring our environment without investing in FortiGate Analyzer. It would be beneficial if Fortinet could enhance the FortiGate by providing more statistical and monitoring views for a longer timeframe, rather than requiring access to FortiGate Analyzer. Without Fortinet Analyzer, currently, I cannot see past events.

I have had more than 10 years of experience with Fortinet FortiGate.

Fortinet FortiGate is very stable, and I have never seen a Fortinet FortiGate get stuck because of performance or memory issues. They have good hardware and ASICs, and I have not experienced any performance issues with all the features I have implemented in it.

Fortinet FortiGate scales effectively, and even though I can't recall a specific use case regarding scalability, I am sure it is very scalable.

Their support is very good. I would rate them a nine out of ten. When I open a case or provide feedback, they are very responsive. If I don’t get the answer I need, I can call them directly, which also deserves a nine.

Positive

The initial setup is straightforward and easy.

The duration depends on the size of the installation and the features you want to implement. It can take anywhere from one day to several days. In our case, we had to install it across all our campuses. We have 12 campuses with FortiGate devices installed at the central location. The main setup took about two to three days at the main site. After that, I prepared the templates for the other sites, which took about half a day to install once they were ready. Overall, if you are trained and familiar with the FortiGate environment, it can be quite straightforward. If you're not familiar, it may take some time to read and prepare everything; however, it’s not particularly difficult.

Typically, we have a variety of roles in our environment, so I deal with multiple tasks. We need someone who understands the network, so I also function as a network engineer. It requires knowledge of both networking and security, hence network security.

It reduces the cost of operations by automating many tasks that I would do manually. It also helps to be proactive by detecting things and proposing features to improve the security posture. In that regard, I have seen a return on investment because it reduces the cost of operations. It saves about 20% of time per month.

The pricing is comprehensive and clear. You can easily understand what you are purchasing, including which features correspond to each license and maintenance contract. Overall, the information is straightforward. Additionally, compared to other vendors, their prices are competitive.

I have not yet tested or installed Fortinet unified SASE, but from what I read and my knowledge, it is something that may be good to integrate with existing systems. However, I cannot confirm its effectiveness as I haven't tested it yet. I do not utilize Fortinet FortiGate's data center solution at the moment.

I didn't work with all the FortiGate equipment. Based on the equipment I worked with, I would rate it an eight out of ten. It's very good.

We use Fortinet FortiGate for gateway security, specifically for VPN access, security control, and filtering of traffic. For net monitoring, it has the capability to put the network traffic over to the analyzer. We use FortiAnalyzer to look at the traffic and to see what's happening, what's hitting our gateway, and what our users are doing. We use filtering rules on top of that.

Fortinet FortiGate is pretty robust. The updates and firmware releases are pretty timely. They have a good product revision and review system, so they are constantly reviewing their configuration and the different mechanisms that are used on Fortinet FortiGate. They review that periodically and provide new definitions and updates. We have quarterly fixes, updates, and releases, and there are constant new CVEs coming out. They are always keeping ahead of the threat monitoring system that notifies us of the latest landscape, what's new in the phishing landscape, botnets, rootkits, and all of those different malicious tools that are out there. We appreciate the filtering capabilities as well.

It integrates well with the SD-WAN capabilities. It works easily, and the transition was quite simple with literally no downtime.

It is very customizable. We have multiple different subnets going into that FortiGate controller. We have used various models and various designs. We can diversify the number of links coming in either the WAN gateways or the local LANs. We can separate various subnets across the LAN segment. It's quite diverse.

We haven't tapped into most of the functionalities that Fortinet FortiGate offers because we're using it just for gateway security. One of the things that I would prefer is a more expansive use of their analyzer. They could do more work on FortiAnalyzer in terms of the data and the information coming from it. I'm not sure if it is because the team managing our analyzer isn't giving us all the information that's required. It could be something based on our own usage of the platform. As we continue to use the appliance, we may learn more about the utility and functionalities that are offered.

I have been using Fortinet FortiGate for about seven years.

Fortinet FortiGate is pretty stable, especially the enterprise version. 

The reliability of Fortinet FortiGate is through the roof. We're experiencing 99.999% availability consistently. Fortinet FortiGate only goes offline for maintenance. I have seen it running for two years nonstop without doing a reboot. They're pretty stable and energy-efficient, and I make a lot of headroom for growth, specifying my units at least 40% greater than what I need. They are working within the requirements of their provision, and usually, the published specifications for the units are within the range of their operational usage.

Scalability is all based on our design. Based on our network design, we can select or pick a product from the product listing that can scale with the growth potential of the organization within a specific time period. We tend to do our planning within time spans, such as the next 10 years, 5 years, or whatever the growth prospect is for that period. We put the units in place that can grow along with that growth development timeline.

I would rate Fortinet's support a solid eight because I'm hard on my support. They're responsive to a greater extent. There are lots of things that I want to get done that aren't done on time. However, the local support that we use for Fortinet FortiGate is pretty technically competent and capable of managing the unit and delivering the functionality we need from the device.

Positive

We outsource the management and configuration of Fortinet FortiGate to a third-party SOC center in Ireland. We don't do that ourselves, but we do manage it and go out to the third party to tell them what we want. They will recommend different methodologies, capabilities, or new features that we can implement, such as SD-WAN, and go ahead with it. We don't manage and do the configuration ourselves. My team's role is pretty much just to operate and utilize the service.

They handle the initial setup in the background. I just give them the requirements, and the engineers respond.

We interacted with two engineers, but I'm not sure what the backend team is like.

It's very hard to measure return on investment with security because security is so dynamic. Based on our plan, the ROI has been pretty good. Whatever we expected and planned for, as far as usage goes, I can extend and push my Fortinet FortiGate up to maybe three or four quarters past its end of life. It has performed as expected in that concern, giving us good ROI for what we planned.

It was pretty affordable. We did go a little bit above MSRP, but the service pack that was included was quite worth the additional costs.

It is competitively priced compared to other major players in the market. It is significantly cheaper than Check Point, which is a primary competitor. Additionally, its pricing is comparable to that of Cisco's ASA and a few other vendors.

Besides the pricing, we chose Fortinet FortiGate because of the service providers that are here locally and the support for the unit and the product.

I would rate Fortinet FortiGate a nine out of ten.

We are using it for security purposes. We have deployed it across multiple locations where we are already using it.

The security features are valuable, particularly the ransomware attack protection features. Fortinet FortiGate provides excellent security against ransomware attacks.

It contains every feature that is required. The things we require are already sorted out, so there isn't any scope for improvement as far as our requirements go. However, its price can be better.

We have been using it for more than one and a half months.

It's stable. I would rate it an eight out of ten for stability.

It's scalable. I would rate it a nine out of ten for scalability.

I am handling all the operations. We have multiple staff members at multiple locations.

Coming from a technical background, there hasn't been any requirement to speak with customer care representatives. The manual provided covers everything comprehensively.

Neutral

I have experience with Sophos, Fortinet FortiGate, and SonicWall.

We purchased it through our vendor. Our company doesn't prefer to make purchases through online shopping platforms such as Amazon and Flipkart.

We have seen a return on investment of more than 20%.

It is somewhat expensive compared to other solutions such as Sophos.

I would recommend it to others. I would rate Fortinet FortiGate a nine out of ten. There isn't a need to compare it with anyone else because Fortinet FortiGate is at the top of the market.

I was involved in deciding on Fortinet FortiGate, but I am not the one who's using it on a day-to-day basis.

We want to make sure that our on-prem servers are protected. We basically use VPN to configure that on Fortinet FortiGate, so that is the major purpose, and that part is working well.

We have not had any incidents where our servers got compromised. It's all good.

For security, it has all the required features, such as the web filter and DNS filter. Also, for accessing the network, we have various rules.

Our IT staff says that some of the security features are better than Sophos's.

Its usability is good. We can easily navigate the system, and we have a very good user experience. It's easier to understand the software compared to Sophos, which I feel is a little more technical and could be difficult for a first-time user.

I want some additional features. For example, I want something to ensure that when we are using Google email or Microsoft email, or Google Workspace, emails can only be accessed on designated machines given to our employees. I would like them to access data from designated machines, not from any machine. It should work for designated mobiles and laptops. I don't know if Fortinet provides something like that out of the box.

We have just installed Fortinet FortiGate, and it has been two months since our installation.

Fortinet FortiGate is stable.

Fortinet FortiGate is scalable.

We are going through the vendor for technical support. If we have any issues, we raise a ticket, and they respond immediately.

Positive

Previously, we were using another firewall device, Sophos. Compared to that, Fortinet FortiGate provides more features and better security. Fortinet FortiGate supports WAN migration. Fortinet FortiGate is also better in terms of speed. In the dashboard, we can get all the stats reports and logs.

Deployment is not very difficult because they have their migration tool.

We are facing some challenges. We are working with a third-party vendor, not FortiGate directly, for the installation and other things. The problem is that their knowledge is very limited. We are facing some challenges. With Sophos, we could enable multi-factor authentication for VPN users. FortiGate also allows that, as per our initial analysis. The people we are working with are not able to configure MFA. They are having some technical issues. Fortinet needs to ensure that its partners are well-trained.

Only two people were involved in the deployment process. The vendor side had their own technician, and we had one person here.

Cost-wise, there is not much difference from Sophos, but feature-wise, we get more features.

We did some comparisons between Fortinet FortiGate and Sophos. We went with Fortinet FortiGate because of the security features and easy-to-understand console.

I would rate Fortinet FortiGate an eight out of ten.