We use FortiGate NGFW to secure our network gateways. These devices, functioning as UTM solutions, were impressive in fending off various threats. FortiGate excelled with its anti-spam, antivirus, and firewall features at the network level. Beyond security, it is seamlessly integrated with networking tools like Zendesk.

The most valuable aspects of FortiGate NGFW are its top-notch reputation in peer reviews, user-friendly interface, and excellent support. It stood out during external penetration tests, proving its effectiveness compared to our previous firewall. The seamless integration with other tools and thorough testing set FortiGate apart. Replacing our old firewall with Fortinet was a game-changer, especially as it helped us improve our performance in subsequent penetration tests.

FortiGate has been solid for us, but I see room to explore its integration with Secure Service Automation for a more comprehensive security view. The initial migration had some challenges, but they were manageable. Now, my focus is on automating responses to alerts, especially during nighttime attacks. I want to investigate how FortiGate can connect with other solutions, like SIEM, to enhance our security measures while offline.

I have been using FortiGate NGFW for a year.

It is quite stable.

FortiGate is scalable, and we currently use it for approximately 300 internal users, with additional offshore teams connecting via VPN. The total user count, including the offshore teams from different countries and continents, is around 400 to 500 people.

We contacted Fortinet's technical support during a firmware upgrade issue. They guided the upgrade process, and their support was capable and helpful. I would rate them as a ten out of ten.

Positive

In comparing FortiGate with other solutions like Cyberoam, I have found Fortinet to excel in various aspects. For instance, its intrusion detection capabilities stand out, providing instant alerts compared to some firewalls that take up to 24 hours. While I can't quantify percentages, Fortinet's performance, especially in areas like responsiveness, has been notably better in my experience.

Setting up FortiGate NGFW was straightforward, with some considerations during the migration process. Migrating from an old firewall required meticulous rule review and manual configuration. Ensuring adherence to best practices and testing in a beta environment were crucial steps. We also coordinated with our ISP to clear the ARP cache for a smooth transition. Despite a minor misconfiguration leading to an issue, we swiftly addressed it over a weekend with minimal impact. Regular backups and failover tests added an extra layer of assurance. A team of three people deployed it. The deployment and migration from the old firewall to FortiGate took approximately one month. To ensure a smooth transition for our 24/7 operations, we invested extra time for thorough testing and rule validation.

The pricing and licensing costs for FortiGate are quite reasonable, especially for an SMB like ours. While solutions like Check Point and Palo Alto are excellent, Fortinet's affordability played a significant role in our decision-making process.

FortiGate for SMBs impressively covers most features, and in my experience with Cisco, Symantec, SonicWall, and others, FortiGate stands out. It has exceeded my expectations. While I haven't explored Check Point due to budget constraints, FortiGate's pricing makes it a top choice. Palo Alto and Check Point are excellent but would likely have been my preference if pricing aligned. Overall, FortiGate has been a standout performer in terms of features and value.

For those starting with FortiGate NGFW, my advice is to thoroughly explore its features. I recently recommended it to a healthcare entity due to its effectiveness and user-friendly interface. The fact that they already had Fortinet in another enterprise speaks volumes about its reliability and performance. Overall, I would rate it as an eight out of ten.

Our primary use case is for protection. We have general use cases.

It is a very user-friendly solution. Moreover, Foritgate offers good performance, where it outperforms Cisco Firepower in various ways.

The solution doesn't cover all aspects of protection. There should be better customization in the IPS. The Intrusion Prevention System (IPS) and FortiGuard could benefit from enhancement. 

So, in future releases, I want to see improvements in IPS, particularly in terms of customization.

I have been using this solution for ten years. 

The firewall is very stable and reliable.

I would rate the stability a nine out of ten. There's always room for improvement.

We have around three to four customers using this solution.

I can't use the technical support because of some sanctions in Iran. 

The setup process is easy and very fast. The setup process is very fast, typically taking only one to two days.

The purchasing process is straightforward, and then the normal deployment process. 

Moreover, a single person can handle the deployment and maintenance tasks.

There is a licensing fee; it is on a yearly basis. The pricing iss actually quite normally priced. 

I have used Cisco. I find impressive about Cisco is its powerful enterprise-grade solution, comparable to Fortinet firewall. FortiGate is not superior to Cisco, but it stands out for its user-friendly interface.

Overall, I would rate the solution an eight out of ten. It is a suitable solution for medium-range companies due to its well-designed user interface.

We use FortiGate Next Generation Firewall mainly for network security.

The solution's application control is very powerful. Another valuable feature is the integration between the firewall and the switches we have. The FortiSwitch extended security fabric is one of the things that we like about the solution.

The solution's stability should be improved because it is extremely unstable.

I have been working with FortiGate Next Generation Firewall (NGFW) for eight years.

FortiGate Next Generation Firewall is a very scalable solution. Approximately 32 customers are working with the solution.

The solution's technical support team needs more improvement. The technical support team has a slow response and needs more experienced support agents to interact with the customers.

The solution's initial setup is easy and straightforward.

Since it's a security solution, it needs considerable time to deploy. We need to analyze the network, the customer requirements, and the policies we need to add, which can take a couple of days.

For any security solution, there is no straightforward deployment process. It depends on the survey on the customer side and what we are doing for the customer. One security engineer is required for the deployment and maintenance of the solution.

Since FortiGate Next Generation Firewall is a slightly expensive solution, the use case determines the ROI. However, since it's quite expensive for general usage, it has a lower ROI.

FortiGate Next Generation Firewall is an expensive solution with a yearly subscription. There are no extra costs in addition to the standard licensing fees.

The solution has a lot of features that we like. We don't need additional features because they compromise the solution's stability when they add more features. As a security gateway, we need to be much more stable than adding more features.

FortiGate Next Generation Firewall comes in two versions, namely, the hardware version and the cloud version. For the on-premises version, hardware is to be implemented on-site; for the cloud, it's a cloud security solution. So it depends on which version your customer is using. The licensing is very different for the on-prem and the cloud solution.

When it comes to complex solutions, I highly recommend FortiGate Next Generation Firewall.

Customers looking for SD-WAN and good application control should go for FortiGate Next Generation Firewall. Customers looking for high stability should avoid the solution.

Overall, I rate FortiGate Next Generation Firewall an eight out of ten.

We use the product for security and filtering purposes.

The product helps block multiple ports during ransomware attacks.

FortiGate Next Generation Firewall (NGFW) 's most valuable features are reporting and filtering.

The product's data guard feature should support a USB port when the internet connection is unavailable.

We have been using FortiGate Next Generation Firewall (NGFW) for three years.

I rate the platform's stability a ten out of ten.

Our organization has 500 FortiGate Next Generation Firewall (NGFW) users. We utilize the platform 24/7. I rate its scalability a ten out of ten.

The platform's initial setup process is easy. I rate the process a ten out of ten. It takes a couple of days. The deployment involves integrating it with SSO in FortiGate. It helps with filtering access to user accounts through Active Directory. One executive is required for deployment. Additionally, one executive is needed to take care of packet updates for maintenance.

We implemented the product with the help of our in-house team.

I rate FortiGate Next Generation Firewall (NGFW) an eight out of ten.

The most valuable features we found are the SD-WAN, FortiGate SD-WAN, and the standard UTM protection, among others.

If someone doesn't have a certified or skilled technician/engineer, certain configurations, like setting up VLANs and SD-WANs, might not be difficult but can be simplified within FortiGate. The areas that might require more expertise are related to setting up VLANs and configuring SD-WANs, among others.

Therefore, the setup process could be made simpler. 

I've been working with FortiGate Next-Generation Firewall for three years. We are currently working with its latest version.

I would rate it as a nine. It is a stable solution.

I would rate the scalability a five out of ten. It is not very scalable because scalability depends on the model. For instance, the FortiEdge, which is the entry-level model (the smallest model), supports up to about 15 users. Then the next model supports up to around 30 to 40 users, and the following one supports a hundred users. The price increases significantly with more users, which can be a concern.

If I make a guesstimate, I'd say about 20 to 30 of our clients, but they all have multiple branches. So, in total, we have about 200 FortiGate firewalls deployed for our customers, spread across 20 to 30 clients.

Most of our clients fall under the medium to enterprise category. We have clients from financial institutions and big corporate organizations. It's not an entry-level solution, as it might be challenging for small businesses to afford.

Based on the support we receive from our supplier, who is a reseller or vendor of FortiGate, I would rate it at about six. Because it takes time to get support from the vendor. So it is not very fast.

Neutral

I rate my experience with the initial setup six on a scale of ten, where one is difficult and ten is easy. The initial setup of the solution is not difficult; if you have an engineer with certification and experience on other firewalls. For them, it's relatively easy. However, someone without certification and experience with other firewalls might find it a bit more challenging to grasp the FortiGate format and its platform layout.

FortiGate is primarily deployed on-premises. We also have a cloud option for certain referrals with tier-three engineers. We have it in our own data center in our cloud, and we also provide it to some of our customers. However, most of the ones I sell are for end customers, and they typically choose the hardware for on-site deployment.

The duration of the deployment can vary depending on different factors. The timeline can involve various stages, such as ordering from overseas, ensuring stock availability, and finally, setting it up for a specific project. As such, the duration can differ based on these factors. 

Eventually, once we have the stock, we can set up the firewall within about an hour.

I would rate the pricing in the middle, around five out of ten. It also depends on how you sell it. If you want to sell it as a one-time purchase, then I'd put it at a seven. But if you amortize it, it can go down to a four because some customers prefer to pay it off over thirty-six months, as the licensing is for that duration.

There are additional costs to the standard license. While the standard licensing fees include UTM and a few other features, for additional features like FortiAnalyzer, FortiManager, and other PCs that you might need, there are additional costs. For features like FortiManager and FortiAnalyzer, the additional costs do add up. So, while getting the entry-level firewall with basic UTM protection and web filtering is not too bad if you want to add features like analyzer reporting, cloud managers, and FortiManager, the costs can become significantly higher.

Overall, I rate the solution an eight out of ten.

FortiGate Next Generation Firewall can be described as the most complete solution.

When considering the policy of the vendors, they do not offer much of a discount policy, making the licensing model an area that needs improvement.

I have experience with FortiGate Next Generation Firewall for many years. My company is a reseller of the solution.

It is a stable product.

I recommend FortiGate Next Generation Firewall for small, medium, and enterprise-sized companies.

It is a scalable solution since Fortinet offers many other products.

My customers are satisfied with the technical support provided by Fortinet.

In my opinion, the pricing of the product is reasonable.

FortiGate Next Generation Firewall is a good product.

I rate the overall product between eight to ten out of ten.

We use the solution for multiple firewalls like edge and data center firewalls.

The solution’s interface is pretty user-friendly. It's easy to come up with policies and basic configurations. It is pretty straightforward.

Once in a few months, there is a vulnerability in the OS. The product has to be upgraded every few weeks.

I have been using the solution for three years.

I rate the stability an eight out of ten.

Our customers range from small to medium businesses. I rate the tool’s scalability a ten out of ten.

Support is amazing.

Positive

I rate the ease of setup a nine and a half out of ten.

On average, deployment takes two or three days. Usually, a person from the customer’s side and I deploy the solution.

The product is a good choice. It will not be a headache for the IT team. It is very common on the market. Overall, I rate the solution an eight out of ten.

I use FortiGate Next Generation Firewall for network protection using its DMZ network.

The solution has helped our network security.

There are multiple features I have found to be valuable, such as encryption and integrated security features.

The management consoles can be improved. I have used them before, and they are not so good.

I have been using FortiGate Next Generation Firewall for over two years.

I would rate the solution eight out of ten points for stability.

I rate the solution eight out of ten points for scalability. Over 200 people use it, some of whom are in IT.

I used Palo Alto more than a year ago at my previous job.

The initial setup was easy, I rate it a nine out of ten. Deployment took several days, involving one or two people. The steps involved in the process are design, configuration and implementation, testing and implementation, and also some fine-tuning.

I would rate pricing to be about four or five out of ten, it is reasonable.

I recommend this solution because the price is reasonable and the performance is quite good. Overall I rate the solution an eight out of ten.

The use cases of the solution depend on what the customer wants from the tool. If a customer is looking for a core firewall, I provide them with FortiGate Next Generation Firewall (NGFW). Suppose a customer is looking for a tool from a patch connectivity perspective with multiple branches and wants those branches to be connected to the data center. In that case, we can suggest FortiGate Next Generation Firewall's features to them.

Routing and reporting are two areas where the product has an added advantage compared to any other product.

Vulnerabilities owing to viruses in the OS need to be reduced in FortiGate Next Generation Firewall from an improvement perspective.

Some vulnerabilities get added to the system every two months, which may be code execution or backend and backdoor issues.

In the future, the product should be able to tackle vulnerabilities. Research and development to increase the product's security capabilities is needed.

I have been using FortiGate Next Generation Firewall for a year now. My company has a partnership with Fortinet.

From a stability perspective considering OS and if the vulnerabilities are present, I rate the stability a seven out of ten since it creates a lot of issues in general.

We suggest FortiGate Next Generation Firewall to small and medium businesses.

When it comes to enterprise-level businesses, and considering the need for two-layer security, consider a perimeter firewall, while I can suggest FortiGate only at a level of a core firewall. Suppose an enterprise customer has multiple branches and more branch networks. In that case, they need SD-WAN connectivity with security, for which I suggest they go for FortiGate's SD-WAN feature.

In general, it will not be enough for enterprise companies to have only Next Generation Firewall alone.

I am not familiar with the technical support team because my support team works with them. The solution's technical support is good. We do not face many issues when dealing with the solution's technical support team.

Previously, we were using Check Point in our company.

Compared to Check Point, FortiGate Next Generation Firewall needs to look at how to improve the way it deals with the vulnerabilities which are not there at Check Point and the security effectiveness provided by Check Point.

It is easy to use and implement since anyone can do its configuration part, but there is some requirement for someone with proper technical skills to implement it properly. I can implement anything in any way, but that doesn't mean I can implement any product properly. The implementation requires certain technical expertise.

The implementation of the solution can take two days.

One person is required for the implementation phase.

The solution's pricing is competitive.

The usefulness of the product is an aspect that depends on the customers using the tool. We cannot even compare two products and say one is good for the customer and the other is bad. If a customer asks me to be an architect for their data center, I would say that for a perimeter firewall, they need to go for Check Point. Coming to a core firewall, if a customer says that they need two layers of security and two different vendors, it should be Check Point on the perimeter level. At the core level, a customer can go for Fortinet. Certain customers prefer the SD-WAN feature from Fortinet if they have branch firewalls and want an SD-WAN feature too. FortiGate has an added advantage because they have an SD-WAN feature with security that we can provide to their branch devices.

I don't have any suggestions for those planning to use the solution since we are pretty new to the solution, and we need to devote time to be able to comment on the solution.

I rate the overall product an eight out of ten.