Fortinet FortiGate VM Next-Generation Firewall

My main use case for Fortinet FortiGate is as a UTM to distribute our IP DHCP, to segment our VLAN, and to manage our network infrastructure.

I also use Fortinet FortiGate as a VPN and for site-to-site connection between our multiple sites, such as my head office, our developer office, and data center. It acts as a network security tool where we use an IPS to filter attacks from the outside public to our server.

Regarding my main use cases, I would like to add that it has quite a good GUI and dashboard, making it easy to use. Additionally, we use DNS filtering and application filtering to filter the applications that users can access to the internet.

The best features Fortinet FortiGate offers include reliability and a good user interface and user experience.

The user interface is the most valuable to me because it is easy to use, easy to manage, and quite easy for a newcomer to operate. The features are quite good for filtering applications and for addressing our needs, such as blocking social media or other unwanted content.

Fortinet FortiGate has positively impacted our organization by improving our security workflow and network security, as it is quite reliable compared to traditional routers or traditional switch cores from MikroTik or Cisco.

A specific example of how my workflow and network security has improved is that because we have multiple sites, Fortinet FortiGate has a multitude of signature-based features and multiple default policies, so we only have to add that to the profile. It is quite simple and easy to manage.

I think Fortinet FortiGate is quite good for now, though it could improve with the virtual IP, as it occasionally has a bug. They have a lot of CVE and updates to their system, and they need to be more concerned about their security.

I have been using Fortinet FortiGate for about one year.

In my experience, Fortinet FortiGate is quite stable.

When the RAM or memory reaches 70% or 80%, the firewall is more likely unstable and may struggle to forward traffic. I think that is one of the areas where Fortinet FortiGate has room for improvement.

Fortinet FortiGate's scalability is limited because it is on-premises, so we would have to change the type of Fortinet FortiGate as we grow.

The customer support is really helpful for their principle, but they lack technical competency at layer one, as they tend to only look for logs before promoting issues to layer two for resolution.

Previously, we used Aruba as a firewall and switch core, but it lacked security features, so we had to move to the next-generation firewall.

I am afraid I cannot say that I have seen a return on investment.

My experience with pricing, setup cost, and licensing is that I think the price is quite good besides the leader in Gartner's next-generation firewall.

Before choosing Fortinet FortiGate, we evaluated a lot of competitors at that moment, and we chose Fortinet FortiGate.

My advice to others looking into using Fortinet FortiGate is that you need to think carefully about your usage and calculate your business needs. If you miscalculate, you might end up buying a Fortinet FortiGate that cannot meet your needs, leading to potential downtimes or failures.

I have no additional thoughts about Fortinet FortiGate except that I mentioned the easy user interface and experience for beginners. However, I noted that when the memory reaches up to 80%, the firewall does not function as well. I would rate this product a 9 out of 10.

My main use case for Fortinet FortiGate is content filtering, and content filtering is the primary function. I am also doing East and West traffic filtering.

I use content filtering and East-West traffic filtering by creating groups based on separate projects in Active Directory, and on the firewall side, I create policies, web application profiles, and category-based profiles tailored to each project's requirements.

We have separate projects, and I isolate those subnets from one subnet to another so that both subnets do not communicate directly and only communicate via Fortinet FortiGate itself, with policies created to manage the East and West traffic.

Some of the best features of Fortinet FortiGate are its ease of use compared to other vendors, and from a troubleshooting point of view, it is also very useful and easy to troubleshoot. It stands out as easy to use and troubleshoot because I do not need to create separate NAT policies; with Fortinet FortiGate, I align my NAT policies and content filtering within a single policy, making management straightforward, and the logs are clearly visible, making troubleshooting much easier.

Compared to other firewalls, Fortinet FortiGate offers easily manageable features such as vulnerability profiles and threat profiles, which I believe is one of its main advantages.

Fortinet FortiGate has positively impacted my organization with its cost-effectiveness because it provides features that are very similar to others, but at a much lower cost, and everything my organization needs is available with Fortinet FortiGate.

Being cost-effective has allowed us to save a lot of money, which is particularly useful since I was exploring firewalls to secure my internal labs, and finding Fortinet FortiGate was a revelation as I could achieve my requirements without the additional costs of other firewalls.

I wish Fortinet would explore SASE solutions more, as it has become very popular and people are increasingly using it.

I have been using Fortinet FortiGate for around the last seven years.

Fortinet FortiGate is stable, and I have never experienced issues similar to those from the ASA.

Fortinet FortiGate's scalability is very good, and I believe there are no issues.

I have faced challenges related to support, as I have encountered issues where support engineers are not aligned within the time frame, and sometimes they request multiple logs unnecessarily, causing delays and leaving a bad impression on my end users.

I have had a bad experience with customer support many times.

I previously used a Cisco ASA but switched due to certain performance-related issues.

My experience with pricing, setup cost, and licensing went smoothly, with no issues related to licensing or installation, and the overall cost is definitely cheaper than other prominent firewalls along with phenomenal features.

I do not have a business relationship with the vendor other than being a customer, but I do have partners to buy network equipment such as firewalls and switches.

I cannot share exact numbers for ROI, but I saved a lot of money, which made management very happy, especially knowing that I achieved my functional goals with Fortinet FortiGate that might have incurred more costs with other firewalls.

Fortinet FortiGate has positively impacted my organization with its cost-effectiveness because it provides features that are very similar to others, but at a much lower cost, and everything my organization needs is available with Fortinet FortiGate.

My experience with pricing, setup cost, and licensing went smoothly, with no issues related to licensing or installation, and the overall cost is definitely cheaper than other prominent firewalls along with phenomenal features.

I evaluated options including Palo Alto, Cisco, and other products before choosing Fortinet FortiGate.

I would rate Fortinet FortiGate a nine overall, as I only deduct one point for the support issues I have experienced.

I selected nine because, feature-wise, the product is excellent and cost-effective compared to others, but I deducted a point due to the disappointing support from Fortinet.

I advise others looking into using Fortinet FortiGate to check their requirements first, as it provides all kinds of services other firewalls do and is very cost-effective.

People looking for a firewall should definitely evaluate Fortinet FortiGate, as it is very cost-effective and offers all the features they are likely looking for. I gave this review a rating of nine out of ten.

Fortinet FortiGate serves as my gateway device where I manage all my security. I use Fortinet FortiGate as a gateway for the NATing part for LAN to WAN communication. Along with that, I manage security profiles from the gateway only, and all my switches and Wi-Fi also work with Fortinet FortiGate.

I work on RE VPN and SSL RE VPN on Fortinet FortiGate.

In my opinion, the best features Fortinet FortiGate offers are monitoring and troubleshooting. Along with that, its security services are also a key point for me. For example, I need to manage features including IPS, antivirus, web filtering, and application control via Fortinet FortiGate only.

I appreciate the security feature of Fortinet FortiGate. For example, I can take real-time logs and session monitoring along with VPN, event logs, data usage monitoring, and related features.

I have noticed faster troubleshooting and reduced downtime of around fifty percent. My operational efficiency has improved. For a real example, a client experienced frequent internet drops, and this was resolved more efficiently.

One suggested improvement I would recommend is more simplified troubleshooting. Although logs are powerful, troubleshooting can sometimes be complex for new users. A more guided or AI-based troubleshooting feature would help reduce resolution time. Fortinet FortiGate should incorporate AI-based solutions to improve the troubleshooting experience.

I have been using Fortinet FortiGate for two years.

Fortinet FortiGate is stable. It demonstrates excellent stability in various terms including network utilization.

Fortinet FortiGate offers strong scalability and can support environments ranging from small businesses to large businesses. There is a wide range of models from entry level to high end levels. Flexible deployment options include physical appliances, virtual, and cloud deployments, which is beneficial.

Customer support needs improvement. I have had to take the direct internal sources, such as sales contacts, and after that I rarely see support response.

I would rate the customer support at a six out of ten.

I have used Sophos before, and several of my criteria were missing with that solution. Fortinet FortiGate achieved the features I was looking for, which is why I shifted to Fortinet FortiGate firewall.

My experience is very positive regarding pricing, setup cost, and licensing for Fortinet FortiGate. The pricing is also competitive compared to other vendors in the market. Along with that, setup is very easy. I implemented it in my network myself. For the licensing part, it is somewhat confusing, but overall it is good.

Fortinet FortiGate has saved me both money and time. It is easy to manage and the troubleshooting part is also very easy, making it more time-saving than money-saving.

In terms of cost savings, it has reduced the need for multiple tools. Fortinet FortiGate combines firewall, VPN, IPS, web filtering, and SD-WAN into a single device, which has given me lower operational overhead.

Before choosing Fortinet FortiGate, I tried various options. I obtained the POC from Palo Alto as well as Check Point. After that, I switched to Fortinet FortiGate because it was the best option for my network.

My advice for others looking into using Fortinet FortiGate is that focusing on proper planning, sizing, and understanding of features before deployment will be a good approach.

Integrating SD-WAN with Fortinet FortiGate has allowed me to create an SLA according to which my ISPs define the traffic and the best path utilized.

I would rate this product a ten out of ten overall.

I have been using Fortinet FortiGate for the past six years.

I have been using Fortinet FortiGate to provide security for network and perimeter networks and gateways, and I rely on Fortinet FortiGate to protect my applications from various Layer 4 and Layer 7 attacks and traffic from malicious IPs while blocking traffic from unwanted IPs.

Fortinet FortiGate is also mainly used to establish IPsec tunnel connectivity with other networks, and users from outside the office network can connect to resources via IPsec VPN as well as site-to-site and client-to-site VPN, which leverages access and resource availability across various networks and simplifies resource accessibility worldwide.

One of the main features that I use in real time with Fortinet FortiGate is web filtering and App IDs based on application control. Previously, I allowed application access policies based on ports, but it could not prevent traffic based on the same application port with different use cases. For example, port 443 can be used for various purposes, but it could not restrict access for some specific applications. The App ID based control is useful for me to restrict traffic based on application usage and user access, which is the primary purpose of Fortinet FortiGate in real time.

Fortinet FortiGate offers next-generation firewall features and security features that restrict access for malicious traffic, URLs, and IPs, which is a major feature that Fortinet FortiGate offers.

The next-generation firewall capabilities including deep packet inspection and application controls via App IDs, Intrusion Prevention Systems, web filtering, URL filtering, and anti-malware protections are essential features that are present in Fortinet FortiGate to prevent various cyber attacks and threats in the network.

Fortinet FortiGate is also mainly used to establish IPsec tunnel connectivity with other networks, and users from outside the office network can connect to resources via IPsec VPN as well as site-to-site and client-to-site VPN, which leverages access and resource availability across various networks and simplifies resource accessibility worldwide.

The security features could have been more similar to those in the Palo Alto firewall with major data protections and WildFire, and deeper inspection capabilities, which Fortinet FortiGate lacks. Additionally, I notice that Fortinet FortiGate often experiences resource utilization problems where memory is heavily occupied regularly, necessitating cleanup tasks.

During firmware upgrades, the process is not smooth; one of the VMs often goes out of sync and exits the HA cluster. Therefore, I separate the HA between the firewalls and perform upgrade activities one by one manually. The graphical dashboard representation of the data is frequently inaccurate, leading me to rely on syslogs for more dependable information. The log retention period on the device seems too short despite having ample memory and disk capacity, which is a major issue.

I have been working in my current field for the past seven years.

The scalability experience indicates that if I need additional features or security capabilities, such as sandbox features, I can add them by opting for separate licenses, making it convenient for me.

Fortinet FortiGate customer support appears somewhat good, but for complex cases or major incidents, I often do not receive prompt support from the OEM, resulting in multiple follow-ups to get the necessary assistance.

Previously, I used to have a Cisco ASA firewall, which had fewer security features for protecting the network from day-to-day attacks and threats. Fortinet FortiGate firewall has next-generation capabilities with various security features including deep inspections, filters, URL filters, URL categories, and IPS protections while controlling application access based on application IDs, along with anti-malware protections to safeguard applications from malicious threats and attacks. By using Fortinet FortiGate, I significantly reduced major attacks that could exploit my network.

I would advise others considering Fortinet FortiGate, particularly those concerned about budget and pricing with decent performance and support, to proceed with Fortinet FortiGate, as compared to other next-generation firewall products, Fortinet FortiGate has lower license support costs, which is a significant advantage. Moreover, from my experience, it performs its job effectively with no major issues related to performance or functionalities including policy control, VPN, and security features. I would rate this product a 7 out of 10.

I integrate service with Fortinet FortiGate. I integrate service, and some manage service, so the customer already has the firewall and we manage them, or we sell the hardware. But mostly for hardware, there are a lot of sellers, so mostly we do the services.

If the customer wants Fortinet FortiGate, I give Fortinet FortiGate. If the customer wants Sophos, I give Sophos. Both have a different market and different customer profile.

Whatever the customer asks, we provide. I'm running Fortinet FortiGate now because a customer wants that in my data center.

I find Fortinet FortiGate valuable due to Fortinet's ASIC, as I have known Fortinet FortiGate since a long time ago, from the first time they ran. They use ASIC. While Sophos also has a special hardware solution such as Xstream, they have all different purposes and different advantages, so I can utilize both. It depends on the customer.

I don't have any problem with Fortinet Unified SASE. Mostly in Indonesia, in our market, customers buy the brand without knowing the full capability of it. So actually with Fortinet FortiGate, you also have to implement FortiManager, FortiAnalyzer and for hardware control, FortiNAC and so on. But because it's so modular, sometimes customers mistakenly just buy the firewall. The firewall doesn't work right. That's a problem. I understand that this product design philosophy of Fortinet FortiGate is meant to serve very big corporations which have established SOC teams. They put segmentation of who is the manager and who is the analyzer. That's why they put the separate server for that. But because the brand is so famous, even small customers want to buy it.

I think Fortinet FortiGate could learn from its competitors that there's nothing to change. Perhaps they could just launch a lightweight version of the SIEM and SOAR tool, which is cloud-based. This would be for small organizations who cannot afford to build the full scale SOC facility and team.

I have been working with Fortinet FortiGate for maybe five or six years, or maybe longer than that. It could be 10 years as well.

I have been working with Fortinet FortiGate for quite a long time, but I am not a partner yet. Last year I took partnership with Sophos, so we do both.

I don't have experience integrating SD-WAN capabilities with Fortinet FortiGate yet, as we had a case but the project didn't go. SD-WAN is not mostly firewall. Yesterday, I just had a discussion with a new customer that wants to buy ZTNA and NAC.

I think the pricing of Fortinet FortiGate is affordable to some small customers, but they can only afford the firewall without the other components. Mostly firewall, so it's just selling products, not selling a security system.

In my opinion, Fortinet FortiGate doesn't need to be improved. It's because it has a different market. I had a case maybe five or six years ago. There was a tender of SD-WAN implementation for 10,000 mini marts. A company that has 10,000 outlets of mini marts needs security. In the data center at their headquarters, they need a very big firewall, up to 500 Gbps. But in the outlet, which is a small store or mini mart, they need a very small firewall that's capable to do SD-WAN, authentication, security, VPN and so on. Fortinet FortiGate has it all. Fortinet FortiGate is suitable for that kind of organization. They have a special SOC, so they buy FortiManager, FortiAnalyzer and so on. I rate this review an 8.

There are many main use cases for Fortinet FortiGate for my clients, including network firewall, VPN, ZTNA, and SD-WAN. The firewall is basically the primary function and one of the best features in Fortinet FortiGate.

The AI aspect has helped to protect data centers at scale by improving the reduction of false positive errors and handling unknown threats.

I have hands-on experience with demos and implementation of Fortinet FortiGate. The AI and ML enhanced FortiGuard services are quite new, and I have some experience but not much since they are a new feature.

The stability and performance of Fortinet FortiGate are mixed, as some features are quite good and very stable while others are quite new and very buggy.

There are quite a lot of bugs in Fortinet FortiGate, and they introduce new features every day that come with problems. I think they introduce them too fast.

Fortinet brings in new products every year and acquires new companies while inventing new products, which is good but also bad because they introduce a lot of workload and problems or bugs onto the table.

I have been using Fortinet FortiGate for almost three years.

The stability and performance of Fortinet FortiGate are mixed, as some features are quite good and very stable while others are quite new and very buggy.

Scalability highly depends on the purchase decision. If the user bought the appliance, then it is not scalable, but for the VM on the software side, it can expand.

I have some experience with Fortinet's customer service and technical support. I would rate the technical support of Fortinet on a scale of 1 to 10 around a 7 or 8, primarily because they have local operations in Thailand, so they have at least some people who can speak Thai.

I do have experience in working with technologies other than email security solutions.

If talking about the general product, the initial setup of Fortinet FortiGate is quite straightforward, simple, and easy. However, it depends on the DNA of the product. If the Fortinet product was acquired from another company, that is a different story.

My role is usually on the pre-sales and the POC role in integrating SD-WAN capabilities with Fortinet FortiGate. I am not involved in the implementation side and cannot tell much about it.

In Thailand, the concept of unified SASE is not very popular because the traffic has to go through the cloud, and they are not very afraid of the cloud or highly adopting it at this time.

I know about dynamic segmentation in Fortinet FortiGate from the book and theory side, but on the implementation side, there are not many projects that implement it that way. It is probably never done.

There are several benefits that Fortinet FortiGate brings to the table, and I cannot speak of only one or two as it is too extensive. It highly depends on the use case, and the only word I can tell is that it is very multi-purpose or all-purpose and highly usable in many use cases.

Fortinet FortiGate is quite a mix for organizations considering it, as some products are very easy and straightforward to start, making it easy to sell, and then they can expand to other more complex and advanced products.

As a customer, we work with Fortinet FortiGate. Our major use case for Fortinet FortiGate is our Internet, serving as the main device for routing, firewall features, and everything.

Fortinet FortiGate is one of the best firewalls in the market currently, with a lot of next generation firewall features embedded into it, including SD WAN, which is one of the best services for traffic steering, managing packet log jitter and latency for any applications, making it unbeatable in terms of pricing compared to other firewalls.

It has a significant impact on our network performance as we are a health care company where users access health care business website URLs, and any latency is managed by SD WAN without manual intervention, benefiting the operation as we have more than a thousand users across different locations.

Fortinet FortiGate Unified SASE is effective in providing security policies across multiple locations, incorporating zero touch provisioning that is very impactful and beneficial in managing network problems.

In terms of hardware-assisted DDoS protection with Fortinet FortiGate, it is performance-based, depending on the number of concurrent sessions, users, and the specifications of the hardware product.

The one concern I have with Fortinet FortiGate is the firmware versions, which often have many bugs when upgraded, leading us to revert back to older versions multiple times in my lifecycle.

For example, when upgrading the firmware version, we noticed that one of the services was not working, resulting in no packet flow for a VLAN until we reverted back.

The main area for improvement in Fortinet FortiGate is the firmware versions, as we face uncertainties regarding upgrades and frequent bugs that require self-fixing of problems.

We have been using Fortinet FortiGate since two thousand three.

Fortinet FortiGate is very much scalable, with all models from Fortinet being impactful.

Technical support from Fortinet is generally good, though there are times when it could be better.

We have used other firewalls, including Palo Alto, which we find to be very pricey compared to Fortinet FortiGate.

The deployment process for Fortinet FortiGate is straightforward.

We conducted the deployment ourselves without the help of an integrator or consultant.

The return on investment with Fortinet FortiGate is very good, as it is one of the best products available in the market.

In terms of price for Fortinet FortiGate, it is not considered that expensive when compared to other products; it is medium priced for SMB businesses.

Palo Alto is a premier product, but both solutions have their unique advantages, making it difficult to declare one superior to the other.

We have Fortinet FortiGate in different locations, where every location serves as a data center using hub and spoke technology, connecting all spokes to a primary hub and a secondary hub for reliability.

We use segmentation in core switches; however, the segmentation features are primarily managed by Cisco switches and not by Fortinet FortiGate firewall.

The effects of SD WAN integration on remote users and application performance are very positive, as we integrate all traffic through Fortinet FortiGate SD WAN and aim for configurations that enhance efficiency across locations.

We have been using SD WAN with Fortinet FortiGate for more than five or six years.

Fortinet FortiGate Unified SASE is effective in providing security policies across multiple locations, incorporating zero touch provisioning that is very impactful and beneficial in managing network problems.

The effects of SD WAN integration on remote users and application performance are very positive, as we integrate all traffic through Fortinet FortiGate SD WAN and aim for configurations that enhance efficiency across locations.

With Fortinet FortiGate, the SD WAN feature is included with no additional costs, which stands in contrast to other products like Cisco and Palo Alto, which charge extra for similar features.

I would rate this review an eight out of ten.

The key use case that we and our clients work with Fortinet FortiGate is mainly the firewall part, the management part, and monitoring. These are the three aspects on which we are using Fortinet FortiGate.

We are using SD-WAN with Fortinet FortiGate, and it works pretty well. Multiple branches are connected to the head office.

We utilize Fortinet FortiGate data center solutions in most of the data center. Most of our clients are using data centers, so we use Fortinet FortiGate in the data centers.

On a regular basis, we help our clients to deploy the security fabric because compliance governance and audit come into the picture, and responsibility has to be decided.

In my opinion, the unique or most useful functions of Fortinet FortiGate are that it has a pretty simple deployment. It does not have any complex plugins or anything. It is very straightforward for configuration purposes. All of the configuration parameters are there in a single dashboard. Depending on your licenses, you can just configure them and then they are ready to go. The testing part is pretty easy. It is not more difficult than other firewalls.

My impression of the effectiveness of Fortinet Unified SASE is that it is pretty good, and all the products of Fortinet FortiGate are available in a single dashboard. There is less complexity for that.

I have experience with the Unified Agent in Fortinet Unified SASE. Most of the time, it is used with Unified Forti. We have multiple devices which we can connect through that. Most of the time when we deploy this, we have to deploy the agent. The agent has less overhead on the systems. Performance does not degrade for the end users. That is beneficial.

In my opinion, a potential area of improvement for Fortinet FortiGate is that while it has a pretty good dashboard, which is not an issue as such, when we talk about hardware parameters, sometimes the hardware gets pretty heated up. Given the amount of traffic going through it, that is fine. However, the heat of the hardware has to be looked into. Fortinet FortiGate firewall is good, but other products like the switching part and all that fabric, in handling very audio-video traffic, sometimes it struggles on the switching part, but on the routing part, it is fine. On the firewall part, it is good; there is no issue as such up till now.

Additionally, I suggest that Fortinet can add software which is in a controlled way, particularly regarding AI and ML. It should not happen that the AI/ML takes certain decisions which are not beneficial for the organization. The control should remain with the team members who are responsible for configuring this firewall.

I have been working with Fortinet FortiGate for more than 10 years, probably around 13 years.

For Fortinet FortiGate stability, I can say nine. It is pretty stable.

Regarding scalability, the ability to expand, I also rate it as nine. It is easily scalable.

Regarding technical support from Fortinet vendor support, I would place it at nine.

I have been with Fortinet for a pretty long time and with Sophos, as I mentioned previously. If I compare Sophos and Fortinet, I would consider Fortinet FortiGate for critical segments and Sophos for small and medium segments.

The initial setup for Fortinet FortiGate is pretty simple.

We are partners with Fortinet, and I can confirm that we are not just integrators, but we are also resellers for Fortinet.

We sell the product directly for the vendor, not through some marketplaces; we sell directly to our end users.

In my opinion, the main benefits that end users receive from Fortinet FortiGate are that the return on investment is good. Whatever money we invest in Fortinet FortiGate product, we get it back in two years' time. It is pretty secure, having very robust hardware and software. Updates are pretty good, and in the event of an issue, updates are pretty quick. It is a pretty solid product, with the amount of money we are paying out there.

The dynamic segmentation feature in Fortinet FortiGate is working fine. We have used it, and it is pretty good. The configuration timelines have reduced because of this particular product.

In terms of pricing, I would say it is pretty good, so we can say ten for that.

I confirm that it is reasonable money for that solution.

Regarding the integration of SD-WAN with Fortinet SASE on application performance for remote users, right now we are not using SASE from Fortinet FortiGate.

We will recommend Fortinet FortiGate to other users. It is totally up to the client requirements. I rate this review overall as nine.