Sign in Agent Mode
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

Reviews from AWS customer

25 AWS reviews

External reviews

231 reviews
from and

External reviews are not included in the AWS star rating for the product.


4-star reviews ( Show all reviews )

    Haridos

Extensive web controls enhance our security posture

  • May 29, 2025
  • Review from a verified AWS customer

What is our primary use case?

We use Fortinet FortiGate for the firewall as well as for the VPN. Any of the users outside the organization use the VPN. Any staff members working outside the office headquarters or our office location use the VPN.

The main aspect that I deal with is URL blocking and web access. I don't work with other aspects of this firewall.

How has it helped my organization?

It has upscaled our security posture, especially regarding external connectivity, because any access or connection from the company has to go through the Fortinet FortiGate firewall. It's doing a pretty good job. We do not have any complaints there.

Anything that we don't want to allow is not coming in. Anything we want to allow is not being blocked. We always have the granular control where we can block malicious IPs or subnets if needed.

Geofencing allows us to limit the countries from which we allow IP connections. There are many features that I may not even know or haven't explored, but in general, Fortinet FortiGate is doing a pretty good job for us.

What is most valuable?

The web controls are what I appreciate about Fortinet FortiGate. We have extensive controls over areas where we could block external-facing IPs, external URLs. We can do geo-fencing with the firewalls, which is a good feature.

What needs improvement?

There are too many updates coming for VPN, and the VPN keeps disconnecting frequently, which I find problematic. It does what it's supposed to do, but I practically face reconnection issues with the VPN.

Regarding the Fortinet FortiGate firewall, I don't have any input. My scope is limited.

For how long have I used the solution?

I have been using Fortinet FortiGate for around three years.

What do I think about the stability of the solution?

Fortinet FortiGate is stable. We haven't seen any latency issues related to it, though we do experience latency from ISPs.

What do I think about the scalability of the solution?

I would rate the scalability as eight out of ten based purely on my exposure to security controls relating to URL blocking and website access.

How are customer service and support?

I haven't had a chance to work with Fortinet FortiGate technical support, but from my colleagues' experience, they say the Fortinet FortiGate people are easy to reach but hard to schedule time with. It's not as easy as having the Fortinet FortiGate engineer on the call and getting other teams involved; it requires careful arrangements to join in with the Fortinet team. I would give their support a neutral score of maybe five.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

I don't know why we switched to Fortinet FortiGate from Juniper; it's a management decision.

How was the initial setup?

I was not involved in the deployment. I think it's not that difficult; there's no complexity involved as long as we are clear on what we want to do.

We have it on both cloud and on-premises.

What was our ROI?

I was not part of the team that implemented it. I don't know how much they invested, but it would be worth the investment.

What other advice do I have?

My overall experience with Fortinet FortiGate rates as eight out of ten.


    Brian M.

A solid firewall with straightforward management and robust capabilities

  • May 28, 2025
  • Review provided by PeerSpot

What is our primary use case?

We primarily use Fortinet FortiGate as endpoint firewalls for our campuses. Nothing too extravagant, just providing access out and limiting access to certain applications and restricting unauthorized access from external sources. I have recently been using it also as the controller for the wireless access points.

What is most valuable?

It is pretty straightforward to manage and has robust capabilities. I appreciate that Fortinet FortiGate can be a central controller for other Fortinet products, such as switches and access points. I have used its VPN abilities a little bit, but not a great deal. I appreciate that it has some SD-WAN capabilities, though I've only used that to a limited degree. It is a solid, usable, reliable solution.

What needs improvement?

It's one of the more expensive brands.

FortiManager has not been my favorite. I don't use it and cannot say I really care for FortiManager for managing the firewalls. I primarily just access and manage the firewalls individually. Nothing else particularly comes to mind, as it has been a pretty good experience.

For how long have I used the solution?

I have about four and a half years of experience with Fortinet FortiGate.

What do I think about the stability of the solution?

The stability has been very good. I have had very few issues. I had one unit that required some reboots and eventually needed a factory reset. But outside of one issue, I've never had stability issues or problems with them going down or disconnecting or having other issues. They have been very stable and reliable.

What do I think about the scalability of the solution?

I have experienced no scalability problems thus far. We expand out with other campuses as needed. If there are any scalability problems, I think that would probably be with making FortiManager a little bit better. Otherwise, scalability is fine.

We are a medium-sized business with 17 campuses. We plan to increase its usage. We'll probably continue with FortiGate for any other campuses that we extend out to, as well as keeping them when we do our hardware refresh.

How are customer service and support?

Fortinet FortiGate has very good support. I've been able to contact them on a couple of things for FortiGate and other products, and I've never had an issue. They've always been polite and helpful and worked to get me to solutions. I've had a good experience with Fortinet support.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We've always had Fortinet FortiGate in place, so I don't have a previous firewall here to compare it to, but it has basically done its job. It's manageable, and it has not created a lot of problems. Only once, I had to call their support to apply a patch update across a couple of them. One of the best features is that it does not require a lot of extra attention for me to fix problems. It's not a problem generator, so that's probably the best quality.

How was the initial setup?

I've set up several Fortinet FortiGate firewalls, and it's a pretty straightforward setup. I haven't ever really had any particular issue with getting them in place.

It's deployed physically at the locations for our campuses. To deploy one, it takes approximately an hour to program and then another hour or so to install. It can get deployed within three hours.

Just one person can manage Fortinet FortiGate; I'm able to manage everything by myself.

What about the implementation team?

The implementation was done by me, one person. Sometimes I need to walk through someone else to physically install it because it might be at a site remote from me. If I'm not physically there, it requires a second person. However, if that was not the case, I could do it as a single person.

What's my experience with pricing, setup cost, and licensing?

It's one of the more expensive brands.

The 100 series costs around $4,000. They are similar in pricing to what you might get from Cisco solutions and probably other similar ones. They're not more expensive than other similar solutions, but they're certainly not cheaper either.

What other advice do I have?

The advice is to go ahead and try it out and see how it works. The product speaks for itself.

I would rate Fortinet FortiGate a nine out of ten, as I always prefer to leave a little bit of room for improvement.


    Yaw Agyare

Ensures business continuity with reliable internet connectivity and robust security features

  • May 28, 2025
  • Review provided by PeerSpot

What is our primary use case?

We are using it for perimeter security. By implementing Fortinet FortiGate, we wanted to have secure internet access to our network and prevent cyber risks.

How has it helped my organization?

The content filtering and URL filtering capabilities, along with packet content filtering, are very good. It helps us restrict internet traffic during working hours to legitimate work-related traffic. Workers are only able to access social media, YouTube, and similar sites after work hours.

It helps in protecting the edge significantly because we are able to determine what must be accepted and what must not be accepted. We also have FortiAnalyzer, which is the log analyzer for Fortinet FortiGate. Being AI-driven, it helps us see what is happening and new emerging threats quickly. We are able to make the necessary interventions to protect the network.

We are using QRadar as a SIEM, and Fortinet FortiGate integrates with it seamlessly. FortiAnalyzer picks all logs from Fortinet FortiGate, integrates with QRadar, and allows us to see everything. It also integrates beautifully with our EDR from WithSecure.

It also helps reduce power consumption. Fortinet FortiGate is a greener listing in terms of power consumption.

What is most valuable?

Stateful packet inspection is valuable. It also does SSL packet inspection. It is able to provide a VPN for remote users with secure connectivity. Being a next-generation firewall, it helps.

It has been able to host internet feeds from two different ISPs, with one as a backup. We've two internet services on Fortinet FortiGate. We have been able to deploy it in a high-availability mode. We have redundancy. When there is a problem with one, the other picks up quickly, ensuring business continuity.

What needs improvement?

I wish that they could integrate zero-trust technology into Fortinet FortiGate. I am not sure whether it has been done already, but if they could implement that, it would help significantly.

For how long have I used the solution?

I have been using it for about ten years now.

How are customer service and support?

Their support is good.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I didn't use any similar solution previously.

How was the initial setup?

I wasn't involved in the recent deployment.

It was quite quick. The last deployment was more of a migration, where we migrated from an old platform to a new platform. It was a matter of hours because the configs had been backed up. In eight hours, we were done completely.

What about the implementation team?

We had two people from my side and two from Fortinet's side.

What was our ROI?

If we look at the average revenue loss due to downtime, even if I conservatively put it at $10,000 an hour, we have paid back the investment within six months.

Compared to a sister company that did not take security seriously and lost significant money through ransomware attacks and outages, we have not experienced a single successful ransomware attack. In one instance, we were able to thwart an attack by detecting the initial steps quickly through EDR and FortiAnalyzer. We saw the footprints and stopped it before it reached the encryption phase of the ransomware attack.

The analysis being AI-based helped us quickly pick up unusual activity. Once alerted, we were able to quickly identify the affected nodes, isolate them, and stop the attack.

It has reduced the total cost of ownership by 10%.

What's my experience with pricing, setup cost, and licensing?

For the performance that we get, the price is reasonable. There are cheaper options, but they may not deliver the same kind of performance that we want. For the performance they provide, the price is acceptable.

What other advice do I have?

Currently, there is a project we are doing to converge OT and IT using Fortinet FortiGate, because of the cluster we have. Fortinet FortiGate is going to broker the convergence between IT and OT. We want to make the convergence one-way, with only read-only data coming from OT into IT.

They keep bringing new versions and firmware updates, making sure that their products are always relevant. They are always providing what the industry needs.

We have implemented FortiAnalyzer. We are also looking seriously at FortiIdentity to help us with enterprise single sign-on and multi-factor authentication. Because we already have Fortinet FortiGate in the system, we are seriously considering other Fortinet solutions.

I would rate this solution a nine out of ten.


    Paul-Drew

Cloud features enhance security measures and simplify network management

  • May 22, 2025
  • Review provided by PeerSpot

What is our primary use case?

We use Fortinet FortiGate for any of our customers or clients that need to have more security features built-in, whether licensed or not.

For instance, if it's a medical firm doing VPN to ensure no traffic leaks, that would be a use case. We use Fortinet FortiGate for anything that needs specific features, such as SD-WAN or other security features, including malware checking and blocking. We also use it for Zero Trust.

How has it helped my organization?

It differs for everyone with Fortinet FortiGate, but one benefit was checking for malware on incoming traffic or security issues, compared to a users using a residential router off the shelf.

The second benefit was properly dividing up the network, which helps us significantly.

Users benefit from a recognizable brand and good security features.

What is most valuable?

Ease of use is one feature of Fortinet FortiGate, and the Cloud Controller and Cloud Connector are the second one; these are the two main features that are quite useful. For example, with the Cloud Connector in Fortinet FortiGate, if a user has an issue, we can see it directly without having to build a VPN tunnel or something of that nature.

From time of deployment, users tend to see benefits once there's a major event that stops. From my end, I see benefits right away.

What needs improvement?

For Fortinet FortiGate, their code development would definitely be something they need to improve on to reduce vulnerabilities that need to be patched.

Additionally, if I were to suggest another improvement, it would be their competitive pricing.

For how long have I used the solution?

I have had experience with Fortinet FortiGate for six years.

What do I think about the scalability of the solution?

With Fortinet FortiGate, scalability is good; it's very easy to scale with them.

The only downside is sometimes you can't just cut over, so if you go from a bigger model. Or if you need to upgrade the model, you would have to reprogram it, compared to just importing and exporting, which can be time-consuming.

The scalability is easy with switches and access points that are basically plug-and-play for the most part.

How are customer service and support?

I've never had a problem with Fortinet FortiGate support, so I'd rate it ten out of ten. However, if you don't have a support contract, it's not easy to get support.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I've dealt with many firewalls, such as SonicWalls, UniFi, pfSense, and Cisco. We found SonicWall very confusing for the average network engineer or network administrator. I don't recommend SonicWall due to its hard-to-find auditing process for exploits. Although they have fewer exploits, when they do occur, they're significant.

With Fortinet FortiGate, you can access the whole firewall, with no hidden spots. pfSense is great, however, it requires a lot of manual work and has no Cloud Connect or easy management from an MSP's perspective.

Palo Alto is another option that's great, but their price point isn't for everyone, especially for medium and small businesses; a $10,000 investment doesn't necessarily fit into most budgets.

UniFi is another product we've started to use more alongside Fortinet FortiGate, as they have almost all features without a license, with advanced rules that are relatively inexpensive compared to Fortinet FortiGate's $1,500 a year.

Fortinet FortiGate and UniFi are the two firewalls we primarily deal with. My opinion is that UniFi has better integration and oversight of the environments compared to Fortinet FortiGate.

How was the initial setup?

From an average user's perspective, setting up Fortinet FortiGate is quite complex; most people don't understand the terminology, so I'd rate that complexity at a high nine out of ten. From an MSP's perspective, it's probably about a five or six out of ten in terms of difficulty; it's easy for us as an MSP. For the end-user, it would be really complicated.

For Fortinet FortiGate, deployment takes approximately two to three hours.

What about the implementation team?

From our side, as an MSP, we require one person for Fortinet FortiGate. That job role is network administration.

What was our ROI?

For Fortinet FortiGate, calculating the return on investment is complex.

The ROI is seen almost immediately in terms of security and protection against malicious attacks. While you never really get your money back in terms of direct investment, you get the security and protection benefits immediately.

Fortinet FortiGate provides cost savings since you wouldn't need extra security features; you don't have to have four other programs for all the other parts of the environment, as it takes care of most of that.

What's my experience with pricing, setup cost, and licensing?

I'd rate the pricing eight out of ten.

The Fortinet FortiGate security features cost approximately $1,500 a year. The firewall itself doesn't have a recurring cost. It's the security features on top of that that you pay for.

What other advice do I have?

I recommend Fortinet FortiGate.

It's always updating the security package and security features.

I have not looked into the solution's AI features.

Overall, on a scale of one to ten, I would rate Fortinet FortiGate a nine. I'd recommend the solution to others. It's always updating its security features.


    reviewer2706036

Offers good security and ease of use and integration

  • May 21, 2025
  • Review provided by PeerSpot

What is most valuable?

It is easy to use and update the software version. It is also useful for integration with other Fortinet products, because my office and company use Fortinet solutions. We are also using Fortinet FortiManager and FortiMail.

Fortinet FortiGate is considered the best in the European market for security reasons. I wouldn’t want to change to any other firewall.

What needs improvement?

At the moment, the main concern is the pricing and the type of licensing. Fortinet offers different types of licensing, and my idea is that the best approach is to have only one, two, or a maximum of three types of licensing.

What do I think about the stability of the solution?

It is very easy to use, and I don't have any issues at the moment. I also don't anticipate having any issues in the future.

There has not been any impact on my network performance by implementing SD-WAN.

Which solution did I use previously and why did I switch?

I have only used Fortinet FortiGate.

Which other solutions did I evaluate?

I have evaluated some options that could be tested in the future, but at this moment, I only use Fortinet FortiGate.

What other advice do I have?

Fortinet is currently one of the five top players for security firewalls.

I would rate Fortinet FortiGate an eight out of ten.


    Mazhar Rafi

Meets various needs and it's cost-effective and simple

  • May 21, 2025
  • Review provided by PeerSpot

What is our primary use case?

We are using Fortinet FortiGate for enterprises. We are a partner of Fortinet.

How has it helped my organization?

Its features are very good for the price. Their support is also very good. A lot of expertise is available in the market in terms of engineers.

What is most valuable?

The best features of Fortinet FortiGate are its simplicity, ease of installation, and ease of functionality. It is very easy to learn and implement, and everything is clear. The deployment of Fortinet FortiGate is very straightforward.

What needs improvement?

I would like to see improvements in Fortinet FortiGate regarding the active-active scenario. The active-active scenario is supported but not recommended, whereas other vendors are implementing active-active without issues. Perhaps in the future, we could effectively use both firewalls to increase the throughput. If there are two boxes, they both should be able to work.

Other than that, I don't have anything. I'm very happy with the features.

For how long have I used the solution?

I have been working with Fortinet FortiGate regularly for a few months only, though I have previously encountered one or two installations.

What do I think about the stability of the solution?

Fortinet FortiGate is very stable.

What do I think about the scalability of the solution?

There are multiple options available for small, mid-sized, and large-scale deployments.

How are customer service and support?

My experience with the technical support for Fortinet FortiGate is very good. I only had one bad experience. I would rate them a nine out of ten.

How would you rate customer service and support?

Positive

How was the initial setup?

It is very straightforward to deploy.

In terms of maintenance, many features are automated, including antivirus updates that happen regularly without intervention. Simply connecting the firewall to the internet enables automatic downloads of everything.

What was our ROI?

It was recently implemented, so it is too early for that assessment.

What's my experience with pricing, setup cost, and licensing?

It is very cost-effective. You get features similar to other firewalls, such as Palo Alto, but at a lower price.

Which other solutions did I evaluate?

I have not worked extensively with Palo Alto, but from various comparisons, Fortinet FortiGate is understood to be a cost-effective version of Palo Alto. While Palo Alto has more features, Fortinet FortiGate offers similar functionality.

What other advice do I have?

Currently, we are not using SD-WAN, but we will implement it as it is a very impressive built-in feature. We will implement it for one of our customers in the near future.

Fortinet FortiGate is a very good next-generation firewall. It is not very expensive and offers plenty of models to suit various needs. The licensing options are extensive. The day-zero protection is very good. FortiCloud is also excellent. The geo-protection is effective and serves its purpose.

I would rate Fortinet FortiGate a nine out of ten.


    Sutjipto Budiman

User-friendly features boost network security and threat prevention

  • May 19, 2025
  • Review provided by PeerSpot

What is our primary use case?

We put FortiGate Next Generation Firewall (NGFW) after the ISP; we use the internet, and before we put our server through the internet, we put FortiGate Next Generation Firewall (NGFW) as a firewall in our internal network.

We follow ISO 27001, which includes web filtering, spam, and IPS functionality.

What is most valuable?

We sometimes face challenges if we have new server configurations and need to consider compatibility with FortiGate.

We hope that FortiGate uses AI to carefully identify something abnormal, and we believe that will be helpful.

The multi-threat protection feature helps us secure our organization.

What needs improvement?

We understand that FortiGate cannot be standalone without others, such as FortiManager, so for small businesses, if FortiGate can provide something similar to FortiManager, it will be better.

For how long have I used the solution?

I have been using FortiGate Next Generation Firewall (NGFW) for about nine years.

What do I think about the stability of the solution?

I would rate the stability of FortiGate Next Generation Firewall (NGFW) as a nine.

What do I think about the scalability of the solution?

I would rate the scalability as a nine also.

How are customer service and support?

I would rate the technical support as a seven.

How was the initial setup?

The installation of FortiGate Next Generation Firewall (NGFW) is actually moderate; it depends on the needs, so it's not so easy but it's not so difficult.

The installation requires a couple of days, and actually, it takes about one day because some parameters need to be set, especially if there are a lot of users.

What about the implementation team?

I have a person in charge of that.

What's my experience with pricing, setup cost, and licensing?

From a cost perspective, I think it's quite reasonable, not so cheap, but I think it's quite similar compared to others.

What other advice do I have?

Two people are involved in the maintenance.

We use many FortiGates. We are using the 60F and 100F, which are the newest versions.

Our staff handles maintenance ourselves; we are not using a third-party service.

About 30 people are using this product in our organization.

We are payroll outsourcing consultants, so basically they calculate payroll.

I would recommend FortiGate Next Generation Firewall (NGFW) to others.

I would rate FortiGate Next Generation Firewall (NGFW) in general as an eight.


    FatmaSamy

Comprehensive traffic management and explore improve initial setup processes

  • May 15, 2025
  • Review provided by PeerSpot

What is our primary use case?

I'm using Fortinet FortiGate for consultancy, implementation, and troubleshooting after device implementation. We serve as both reseller and consultant, providing search support and consultancy support. I usually recommend Fortinet FortiGate for small and small-sized businesses.

How has it helped my organization?

I have experience with Fortinet FortiGate SD-WAN, as it is a method for routing traffic. We can assign profiles with specific conditions to create best practices or optimal experiences for customers. These profiles can manage traffic balance or link balancing. We can detect users or specific links for particular services, including load balancing.

What is most valuable?

Fortinet FortiGate provides superior protection compared to other firewalls, with high processing capabilities. In comparison to Sophos devices, Fortinet FortiGate offers enhanced protection through network protection, IPS, and application protection.

What needs improvement?

They could simplify their deployment process, especially when customers have existing devices. The configuration approach depends on whether customers need to start from scratch or can utilize existing backups and rules.

I would seek to improve Fortinet FortiGate by exploring additional features, such as SASE solutions that we are currently studying and implementing. The configuration could be made easier, particularly during initial setup. We need to ensure comprehensive utilization of all device features and learn best practices from other cases.

For how long have I used the solution?

I have been working with Fortinet FortiGate for approximately one year.

What do I think about the stability of the solution?

Fortinet FortiGate is overall stable. When compared with Sophos, particularly regarding remote access and SSL VPN, Fortinet FortiGate proves much easier to use. While Sophos presented port-related challenges in Egypt, Fortinet FortiGate operates more smoothly.

What do I think about the scalability of the solution?

Fortinet FortiGate is scalable, with capacity depending on firewall sizing. We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published. We consider parameters such as VPN requirements, remote access needs, side-to-side VPN configuration, and overall traffic volume to determine device capacity.

How are customer service and support?

We tend to handle support.

Which solution did I use previously and why did I switch?

I have experience with Fortinet products and limited experience with Cisco.

I provide other firewalls, such as Sophos, and I have worked with endpoint protection solutions. I have experience with backup solutions such as Veeam, and endpoint security solutions including Kaspersky and ESET.

How was the initial setup?

I have created many profiles for SD-WAN capabilities while integrating with Fortinet FortiGate. We assess customer needs and make recommendations accordingly. If customers aren't using SD-WAN, I suggest implementing it due to its effective load balancing capabilities and additional firewall features.

What was our ROI?

Regarding the evaluation of changes in return on investment after implementing the Fortinet solution for SD-WAN hybrid workforce, we work on a case-by-case basis. ROI is monitored by management, and we do not directly track ROI in the systems.

Which other solutions did I evaluate?

Fortinet FortiGate is among the best options in the market, though alternatives exist, including Sophos. Fortinet FortiGate demonstrates stronger performance and protection compared to Sophos, though its device and license costs are higher.

What other advice do I have?

I'd rate the solution eight out of ten.


    AymenAdhami

A robust, secure, and reasonably priced firewall

  • May 12, 2025
  • Review provided by PeerSpot

What is our primary use case?

We use Fortinet FortiGate 100F, which is one of two firewalls that we have, one at the entrance of the DMZ and one just outside. One is facing the internet, and the other is at the entrance of the DMZ. We use the one outside to essentially work as a VPN.

How has it helped my organization?

As compared to our previous firewall, WatchGuard, which is a good firewall, the successful hacking attempts were far fewer and further with the Fortinet FortiGate, but at the same time, I don't know if the credit goes to only FortiGate, as we have two firewalls versus one in the second implementation. Overall, it is more secure. The VPN is also more stable than the offering from WatchGuard at that time.

What is most valuable?

Fortinet FortiGate is one of the most solid and secure firewalls as long as you keep it up to date. The price is right; it's not very expensive.

It's quite feature-rich. While we've mostly used the VPN, we've also utilized it to create high availability.

What needs improvement?

We are pretty happy with it. If anything, I believe the web interface could be simpler, especially for someone who has limited networking experience. I mostly do administration, and I found Cisco to be the hardest major firewall manufacturer to deal with, with Fortinet FortiGate being the second hardest for me. In comparison, there's a bit of an easier and more user-friendly interface with WatchGuard.

For how long have I used the solution?

I have about three years of experience with the Fortinet FortiGate firewall. We also use FortiClient VPN.

What do I think about the stability of the solution?

The VPN was more stable than the offering from WatchGuard at that time.

How are customer service and support?

I would evaluate the service and technical support of Fortinet FortiGate as pretty good. Whenever we needed them, they would be there for us. I would rate them a nine out of ten. We had no complaints, although they were sometimes extremely busy.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

Before using Fortinet FortiGate, we were using WatchGuard, which is another good firewall.

How was the initial setup?

The initial setup process was efficient, as it took us less than an hour to set up both firewalls.

What about the implementation team?

I was involved in the deployment of the Fortinet FortiGate, handling the physical deployment myself while our vendor managed the initial setup.

We got the Fortinet FortiGate from Telus, which is a Canadian phone company. Our experience was excellent. They're a major phone company, so the services are never less than stellar.

The maintenance for Fortinet FortiGate involves just the occasional patch update. We have software that informs us whenever there's a new patch, and if it's critical, we run the patch update immediately; if not, we usually run it at the end of the month after it's released.

What was our ROI?

We had uninterrupted service. If one firewall failed, we still had a secure infrastructure. I believe we essentially had a great VPN compared to the alternative offerings, so that's a good return on investment.

What's my experience with pricing, setup cost, and licensing?

It's good. I would rate the price of the Fortinet FortiGate as an eight out of ten. It's not the cheapest, but it's value for money. Given everything we've got out of it: the DMZ port, the VPN, and the high availability, it's a pretty reasonable price.

What other advice do I have?

I would advise others considering or evaluating the Fortinet FortiGate to buy it. It's one of the best products for the price.

I would rate Fortinet FortiGate a nine out of ten.


    ManjunathA

Deep inspection capabilities require improvement while good GUI and features enhance network performance

  • May 12, 2025
  • Review provided by PeerSpot

How has it helped my organization?

In a scenario where FortiGate Next Generation Firewall (NGFW) notably enhanced my customer's network performance, we discussed many points. The graphical user interface is very good, both feature-wise and technology-wise.

What is most valuable?

The effective feature in FortiGate Next Generation Firewall (NGFW) is DLP.The FortiGate Next Generation Firewall (NGFW) has the feature image of 7100 D.

What needs improvement?

In FortiGate Next Generation Firewall (NGFW), my concern regarding improvements is the licensing model. In the latest versions, everything moves to licensing only, and to work from SSL VPNs and integrate those features, it is similar across all vendors, but my main concern is the DLP part, which has not advanced significantly.Regarding the AI capabilities of FortiGate Next Generation Firewall (NGFW), these AI features are not present in the latest versions, which is why we are working on those versions. They aren't suitable in a live environment, and while AI features exist, I don't have details about their availability in versions after 7.0, as I believe only versions 6.0 and below have those features.For future improvements in FortiGate Next Generation Firewall (NGFW), features-wise, SD-WAN enhancements are expected, especially in configuration or viewing SD-WAN monitoring, as some minor enhancements would be beneficial.The complexity in configuring the policies needs improvement, and the SD-WAN template should be available in the tunnel. When we create the tunnel, we need to add in SD-WAN, allowing the creation of VPN tunnels from SD-WAN, which requires technical expertise to configure. Automating that would strongly enhance it, as SD-WAN is number one now with FortiGate, and going forward, more customers will move to FortiGate.

What other advice do I have?

FortiGate Next Generation Firewall (NGFW) is recommended for various industries, and its GUI has many enhancements in the latest version, making everything good.In FortiGate Next Generation Firewall (NGFW), we are expecting the effective DLP feature with threat detection capabilities, which works with deep inspection. Some customers are not accepting to install the applications, and sometimes in the guest tunnel, content filtering should be blocked, such as domain blocking for Gmail, as users access only their particular consumer account. If they try to access personal accounts, it should be blocked, requiring configuration settings with deep inspection that needs certificates installed in all systems, which is a time-consuming process that some customers do not accept, questioning the need for installing certificates without deep inspection.The licensing model for FortiGate Next Generation Firewall (NGFW) depends on various types such as the earlier UTM license, FortiCare, and Enterprise license. The Enterprise license includes all features such as FortiManager, FortiAnalyzer, and converter. The UTM licenses include only UTM features such as AV, web filtering, application control, and IPS, while FortiCare is only for hardware.