For FortiGate Next Generation Firewall (NGFW), I use it primarily to connect with other companies through IPsec VPN. Any other security measures are on AWS itself, not on FortiGate. I'm someone who's familiar with FortiGate from previous jobs, so I use that, but it's how we're using it right now.

The IPsec feature of FortiGate Next Generation Firewall (NGFW) is valuable to our company because we need to connect quickly VPN connections with other companies in our networks, and there are many connections in some cases. We need to keep it as secure as possible, maybe one-way connections or particular ports. FortiGate is the best option, at least that I'm familiar with, that can answer all of that in one product that is mostly easy to use.

In our case, the deployment options of FortiGate Next Generation Firewall (NGFW) are not scalable, but in terms of connectivity to other companies, that's exactly what we needed, and that's exactly what it does perfectly, what is needed.

The most valuable feature for our company using FortiGate Next Generation Firewall (NGFW) is the IPsec feature, but actually FortiGate is known for good UTM products such as application filter and web filtering. We don't use it here, but in previous companies I used it on a daily basis.

One of the benefits I've realized from using FortiGate Next Generation Firewall (NGFW) is that it's secure and allows functions such as VPN. You can control Wi-Fi and other things from within, if you have FortiNet devices. It's an easy to use product, yet it allows you all that is needed, or at least all that you can do. Whenever there is a security breach, FortiGate is known to patch it very quickly from what I've seen.

Since FortiGate Next Generation Firewall (NGFW) was implemented, there was a thought in the company about using the VPN that AWS itself provides, but it's far from being as good as FortiGate.

The process can be improved in terms of explaining exactly how the installation should be done step-by-step on AWS, because there are network considerations such as security groups. From what I could find, I didn't do extensive research, but it didn't seem obvious enough in that case.

I do not utilize the intrusion prevention and web filtering features of FortiGate Next Generation Firewall (NGFW).

The ability of FortiGate Next Generation Firewall (NGFW) to inspect SSL encrypted traffic is not applicable in the current position, but in previous companies, it was really seamless whenever we used it. It just worked seamlessly.

I don't recall if we use a centralized management console for FortiGate Next Generation Firewall (NGFW) in maintaining oversight across distributed networks.

In my opinion, FortiGate Next Generation Firewall (NGFW) could be better by having specific models for home usage. I'd wish to have a FortiGate in my home, but the licensing isn't something that I want to purchase for home usage.

I have been using FortiGate Next Generation Firewall (NGFW) almost since day one at this company, which I have been with for three years and something.

I experienced the stability and availability of FortiGate Next Generation Firewall (NGFW) more in the previous company. In terms of stability, mostly it is okay; however, in some cases, there are features, especially the UI, that tend to have issues. In some cases, you need to restart it, but mostly, it's working flawlessly, especially if you have an HA environment, high availability.

In our case, the deployment options of FortiGate Next Generation Firewall (NGFW) are not scalable, but in terms of connectivity to other companies, that's exactly what we needed, and that's exactly what it does perfectly, what is needed.

I'm certain that what it allows us in terms of connections to other companies is a straightforward solution that you don't have to use something else. It's easy to configure a new connection, and it works in a few minutes if everything works fine.

In this company, I may have worked with FortiGate Next Generation Firewall (NGFW) support one time, but in my previous company, I actually worked with them extensively. We had multiple FortiGate devices across multiple offices around the world, and we needed to switch them from one account to another sometimes. So I encountered FortiGate support quite frequently.

I would evaluate the level of support for FortiGate Next Generation Firewall (NGFW) somewhere between seven and eight. My experience might be outdated because lately, I haven't had much experience with that. In some cases, you need to come prepared because the people there work by the book and ask for particular things. If you don't have them, you cannot proceed, but if you know what they need, after some time, it's pretty easy to get support or whatever you need.

Neutral

I don't have enough information on other products that I can tell the pros and cons of FortiGate Next Generation Firewall (NGFW) versus its competitors.

The setup was already done, but from what I read, we considered putting it in another environment that we have, yet we didn't because we didn't actually need the environment at all.

I don't know if my company has seen return on the investment from FortiGate Next Generation Firewall (NGFW), but I'm certain that what it allows us in terms of connections to other companies is a straightforward solution that you don't have to use something else. It's easy to configure a new connection, and it works in a few minutes if everything works fine.

Pricing isn't something applicable for me regarding FortiGate Next Generation Firewall (NGFW) because it was already set up once I came to this company.

Since FortiGate Next Generation Firewall (NGFW) was implemented, there was a thought that crossed in the company about using the VPN that AWS itself provides, but it's far from being as good as FortiGate.

I would rate FortiGate Next Generation Firewall (NGFW) as a solution a 10 out of 10. I do love FortiGate.

I give it a 10 because, in my experience, FortiGate Next Generation Firewall (NGFW) is a product that allows you to do many things very easily. If you don't appreciate something about the way it works, you have enough playground to change it to suit your needs.

For someone considering FortiGate Next Generation Firewall (NGFW) for their company, there was a demo online version that they have on their website that is easy to access. You can play with it and see almost all the features in action. That's an easy thing to actually test. Obviously, you cannot connect it to your network and see things live in your case, but it is still a good example of how things work.

Public Cloud

Amazon Web Services (AWS)

I have experience with Fortinet solutions.

I have had experience recently with FortiGate as well.

All the basic and important features needed for perimeter solutions to protect branches and headquarters are valuable with the FortiGate Next Generation Firewall (NGFW).

The FortiGate Next Generation Firewall (NGFW) is deployed in a company that is a carrier of telecommunication services, providing solutions to all kinds of companies around the world, especially in Mexico.

It addresses new and emerging security threats in the telecommunications industry, as we recognize that it is a highly effective solution that provides robust protection. That's the reason it was the main product we used to sell for perimeter security.

We use FortiGate Next Generation Firewall (NGFW) for the access points and their switches.

All the basic and important features needed for perimeter solutions to protect branches and headquarters are valuable with this solution.

The antivirus, malware, anti-malware, anti-spam, IP VPN connections, and firewall rules bring the most value for me and my clients. 

The segmentation capabilities enhance our security posture because they work effectively combined with the switching solutions, allowing us to easily combine switching with the firewall, as we could segregate the VLANs. They were powerful and appropriate for the solution we needed while supporting all the adequate features we required.

I'm not completely sure how Fortinet can improve the FortiGate Next Generation Firewall (NGFW), however, there were situations of availability related to their switching solutions due to box errors. Fixing the bugs in their switching solutions is necessary because I have faced several situations where we lost connectivity because of their firmware.

I have almost 12 years of experience with FortiGate Next Generation Firewall (NGFW).

Regarding next-generation firewalls, I would give the FortiGate Next Generation Firewall (NGFW) a rating of ten out of ten for stability.

The scalability of the FortiGate Next Generation Firewall (NGFW) is quite good; it is easy to make it scalable.

I would place the scalability between nine and ten on a scale of one to ten.

I would rate Fortinet's support a ten out of ten. They are excellent and very available whenever we needed their help.

Positive

We used to struggle with Cisco because it didn't have most of the features that Fortinet has, and when comparing with Palo Alto or Check Point, the prices are higher, which is important for solutions needed by mid-sized companies.

Their deployment team is substantial, consisting of between 100 and 150 people.

Most clients realize the benefits from deployment immediately. They look for internet availability and the security needed for their endpoints.

Fortinet has good prices compared to other vendors; there were cheaper options, and when we compared Cisco, Fortinet's prices were lower.

I don't remember how I bought the FortiGate Next Generation Firewall (NGFW), so I can't say if it was purchased through AWS Marketplace.

The FortiGate Next Generation Firewall (NGFW) helps with the economic aspect because it effectively protects what we needed with the companies in designing the products and solutions.

I'm not familiar with how the FortiGate Next Generation Firewall (NGFW) utilizes artificial intelligence or if it has AI-driven features to improve threat detection and response, so I cannot detail its existence or help.

I would recommend FortiGate Next Generation Firewall (NGFW) to others. It is a very good product. In my position, I sold approximately 1,000 units.

On a scale of one to ten, I rate this solution a ten.

On-premises

Other

We put FortiGate Next Generation Firewall (NGFW) after the ISP; we use the internet, and before we put our server through the internet, we put FortiGate Next Generation Firewall (NGFW) as a firewall in our internal network.

We follow ISO 27001, which includes web filtering, spam, and IPS functionality.

We sometimes face challenges if we have new server configurations and need to consider compatibility with FortiGate.

We hope that FortiGate uses AI to carefully identify something abnormal, and we believe that will be helpful.

The multi-threat protection feature helps us secure our organization.

We understand that FortiGate cannot be standalone without others, such as FortiManager, so for small businesses, if FortiGate can provide something similar to FortiManager, it will be better.

I have been using FortiGate Next Generation Firewall (NGFW) for about nine years.

I would rate the stability of FortiGate Next Generation Firewall (NGFW) as a nine.

I would rate the scalability as a nine also.

I would rate the technical support as a seven.

The installation of FortiGate Next Generation Firewall (NGFW) is actually moderate; it depends on the needs, so it's not so easy but it's not so difficult.

The installation requires a couple of days, and actually, it takes about one day because some parameters need to be set, especially if there are a lot of users.

I have a person in charge of that.

From a cost perspective, I think it's quite reasonable, not so cheap, but I think it's quite similar compared to others.

Two people are involved in the maintenance.

We use many FortiGates. We are using the 60F and 100F, which are the newest versions.

Our staff handles maintenance ourselves; we are not using a third-party service.

About 30 people are using this product in our organization.

We are payroll outsourcing consultants, so basically they calculate payroll.

I would recommend FortiGate Next Generation Firewall (NGFW) to others.

I would rate FortiGate Next Generation Firewall (NGFW) in general as an eight.

On-premises

In a scenario where FortiGate Next Generation Firewall (NGFW) notably enhanced my customer's network performance, we discussed many points. The graphical user interface is very good, both feature-wise and technology-wise.

The effective feature in FortiGate Next Generation Firewall (NGFW) is DLP.The FortiGate Next Generation Firewall (NGFW) has the feature image of 7100 D.

In FortiGate Next Generation Firewall (NGFW), my concern regarding improvements is the licensing model. In the latest versions, everything moves to licensing only, and to work from SSL VPNs and integrate those features, it is similar across all vendors, but my main concern is the DLP part, which has not advanced significantly.Regarding the AI capabilities of FortiGate Next Generation Firewall (NGFW), these AI features are not present in the latest versions, which is why we are working on those versions. They aren't suitable in a live environment, and while AI features exist, I don't have details about their availability in versions after 7.0, as I believe only versions 6.0 and below have those features.For future improvements in FortiGate Next Generation Firewall (NGFW), features-wise, SD-WAN enhancements are expected, especially in configuration or viewing SD-WAN monitoring, as some minor enhancements would be beneficial.The complexity in configuring the policies needs improvement, and the SD-WAN template should be available in the tunnel. When we create the tunnel, we need to add in SD-WAN, allowing the creation of VPN tunnels from SD-WAN, which requires technical expertise to configure. Automating that would strongly enhance it, as SD-WAN is number one now with FortiGate, and going forward, more customers will move to FortiGate.

FortiGate Next Generation Firewall (NGFW) is recommended for various industries, and its GUI has many enhancements in the latest version, making everything good.In FortiGate Next Generation Firewall (NGFW), we are expecting the effective DLP feature with threat detection capabilities, which works with deep inspection. Some customers are not accepting to install the applications, and sometimes in the guest tunnel, content filtering should be blocked, such as domain blocking for Gmail, as users access only their particular consumer account. If they try to access personal accounts, it should be blocked, requiring configuration settings with deep inspection that needs certificates installed in all systems, which is a time-consuming process that some customers do not accept, questioning the need for installing certificates without deep inspection.The licensing model for FortiGate Next Generation Firewall (NGFW) depends on various types such as the earlier UTM license, FortiCare, and Enterprise license. The Enterprise license includes all features such as FortiManager, FortiAnalyzer, and converter. The UTM licenses include only UTM features such as AV, web filtering, application control, and IPS, while FortiCare is only for hardware.

In our organization, FortiGate Next Generation Firewall (NGFW) serves as the main security system for our firewall needs. I have utilized it to manage the firewalls and some other security appliances, such as VPNs. Currently, my usage focuses primarily on firewall management. I set up rules, search for logs, and consult logs when issues arise. This approach covers most of our security management tasks.

One of the most valuable features of FortiGate Next Generation Firewall (NGFW) is the ease of usability it offers. It is quite easy for me to learn to use. Additionally, FortiGate Next Generation Firewall (NGFW) has improved our efficiency in setting up security and provided us with more visibility over some issues and incidents we previously faced.

FortiGate Next Generation Firewall (NGFW) could be improved by including more templates for setting rules or regular jobs. I do not recall if the software includes any AI features.

I have had experience with FortiGate Next Generation Firewall (NGFW) for about five or six years.

When deploying FortiGate Next Generation Firewall (NGFW), it required one week for the initial setup and just two hours for effective deployment. There were no significant issues during this process.

In my experience, there are usually no significant stability issues with FortiGate Next Generation Firewall (NGFW). However, updating the software during issues can be quite convoluted, especially if there is an unexpected attack, such as on a Saturday.

Customer service with Fortinet for FortiGate Next Generation Firewall (NGFW) has been quite good. We experienced a major issue during one of the upgrades, and it took about an hour to reach support and rectify the problem.

Positive

Before using FortiGate Next Generation Firewall (NGFW), we used Cisco for our firewall needs. Cisco presented a lot of usability challenges. Setting up firewalls and rules with Cisco was difficult and required extensive knowledge of their system, which led us to switch to FortiGate Next Generation Firewall (NGFW).

The initial setup of FortiGate Next Generation Firewall (NGFW) was relatively smooth. It took about one week for the complete setup and two hours for the actual deployment.

The deployment involved two people from my side, and we also had assistance from a vendor during the setup.

In terms of return on investment, FortiGate Next Generation Firewall (NGFW) has been straightforward. It has notably improved our efficiency and visibility.

The pricing of FortiGate Next Generation Firewall (NGFW) is reasonably affordable. It is suitable for mid-level and high-level companies, though it might not be cheap for small companies.

I would recommend FortiGate Next Generation Firewall (NGFW) to others. Despite some issues with upgrades and vulnerabilities, Fortinet quickly addresses concerns. Overall, on a scale of one to ten, I would rate FortiGate Next Generation Firewall (NGFW) as an eight.

I am reselling FortiGate Next Generation Firewall (NGFW) or handling the administration of this product for various customers such as universities and those in the hospitality industry.

FortiGate Next Generation Firewall (NGFW) is more realistic in application, allowing for more specific, customized security policies without the extensive work involved with static rules. This feature is what I desire from the next-generation product. Its segmentation capabilities allow me to apply rules based on team needs or social networks, automatically updating for new networks. This removes worry about what happens when a new social network appears.

It would be better if there was more transparency regarding what the automatic rules do. When a site is blocked, it is necessary for me to consult the logs to understand what the Next Generation Firewall policy has blocked. There is usually no information about what is included or not included in these automatic rules.

I have had about five years of experience with FortiGate Next Generation Firewall (NGFW).

The support is not good because I generally search for solutions online. When I open a case, they usually identify it as a bug they are working on. I must study the best version to install to avoid previously found bugs.

Neutral

The initial setup of FortiGate Next Generation Firewall (NGFW) is pretty straightforward and easy.

For one implementation, only one person is needed for configuration. However, for tasks like interconnecting, putting the device in a rack, and other physical requirements, more people are required.

The licenses are expensive, and whenever a customer needs to renew the license, it becomes a significant expense. However, the hardware itself is relatively inexpensive compared to the license costs.

Netgate pfSense and FortiGate Next Generation Firewall (NGFW) differ significantly in terms of pricing and features, with FortiGate offering many more features.

On a scale of one to ten, I would rate FortiGate Next Generation Firewall (NGFW) a seven.

I use the FortiGate firewall for ordinary firewall functions, including SSL inspection, VPN, and site-to-site VPN.

The most valuable features of the FortiGate firewall include SSL inspection, VPN functionality, and threat intelligence features for preventing threats. These features are essential and provide significant functionality for our organization.

There should be more testing before releasing software since it can be a little buggy sometimes when new features come out after updates.

I have been working with the FortiGate firewall for many years.

I am satisfied with Fortinet support. Usually, it is fast and provides advice effectively.

The initial setup of FortiGate was an easy process. It took about three months for a full deployment across the entire organization.

The FortiGate firewall provides good value for the money. It usually is cheaper than the competition, contributing to cost savings.

The pricing of the FortiGate firewall is good. It offers cost savings as it is generally cheaper than the competition.

Palo Alto is an alternative solution. While it may be better for filtering and category white-listing, especially in areas like banking, it is more expensive than FortiGate.

Overall, I would rate FortiGate an eight out of ten. 

For some use cases like banking, Palo Alto may perform better due to its filtering capabilities.

We use different solutions from FortiGate, focusing primarily on their firewalls within our department. However, due to a reorganization, the operational maintenance of FortiGate is now managed by someone else.

The most helpful features of FortiGate include its firewall policy, specifically the user-based policy, which I find to be quite beneficial in managing our network security effectively. FortiGate has also provided reliable protection against many attacks, although it lacks the ability to detect specific attacks like SQL injection, which usually requires a web application firewall.

The main area needing improvement is the user-friendliness of FortiGate's integration with other Fortinet tools like FortiAuthenticator and VPN services. Configuring these services is quite complex and not very user-friendly, requiring technical steps that are difficult for normal users to understand. Fortinet support's resolution of issues is slow, and the research on making the solution user-friendly needs to progress further.

I have worked with FortiGate for more than eight or nine years.

We have not faced any stability issues with FortiGate since we specified sizable RAM and CPU, and our size was adequate for our traffic.

Fortinet provides a prompt response. However, the resolution process is slow. While their response time is quick, their ability to resolve issues takes a long time.

Neutral

We have previously used a solution called Cyberoam, which has been replaced with a new brand. There are also managed firewalls offered as a cloud solution that we have not considered yet.

In terms of cost-effectiveness, Fortinet tools like FortiGate are costly for us as a higher education institute in India. Our expenditure is focused on minimal levels, however, FortiGate's pricing is positioned for corporate levels, which can be inflexible.

We are considering replacing Fortinet with a different solution, taking about a year to change configurations and rules.

Fortinet should consider developing a pricing scheme for the education segment since educational institutions in India operate on non-profit terms and under government regulations. They could potentially follow Kaspersky's example, which provided a more affordable pricing model for students and educational institutes. 

As a product, I would rate FortiGate around seven out of ten.

On-premises

The company uses FortiGate to offer protection for clients transitioning from MPLS to Internet, ensuring security for this new type of connection. In Brazil, clients typically seek protection, and FortiGate is used to offer such solutions. We start with this new kind of connection, explaining and training clients about the product.

With the FortiGate solutions, I see a benefit in controlling the bandwidth and managing users' access. It's important for leading the market and helping IT managers use the solution.

The common valuable feature for FortiGate is its UTM functionality, which includes various features under a license that is commonly implemented. FortiGate is widely used across fifty percent of the solutions in Brazil, making it a prevalent choice for many clients. It's beneficial because it allows the orchestration of networks with multiple vendors like Huawei, Cisco, and Juniper.

Improvements could be made when companies expand and need better equipment and more licenses. Additionally, a way to upgrade equipment when increasing Internet bandwidth is necessary. Companies often have to quickly close negotiations due to exchange rate changes affecting budgets.

I have had about five years of experience with FortiGate.

FortiGate offers good support, especially for telcos that have engineers inside the SOC to provide solutions to problems.

Positive

Previously, I worked with FortiGate. Now, I am studying to use Huawei. My current company has various solutions, though their firewall is not as developed. FortiGate is known for its firewall solutions, however, with Huawei, it’s a hard work to establish the offering.

The initial setup for FortiGate is straightforward and easy. The company frequently conducts meetings to present their solutions in Brazil, helping to streamline the process.

Using FortiGate has enabled us to increase security, control user access, manage bandwidth, and enhance the ability to provide a variety of operations solutions to clients.

We work with a price list that changes every three or six months, however, we purchase in dollars. The exchange rate between the local currency and dollars affects the budget of our clients, so we need to quickly close negotiations.

The clients in Brazil often use Fortinet, given its familiarity and integration with existing networks comprising vendors such as Huawei, Cisco, and sometimes Juniper.

It’s crucial to understand the client’s necessity first and implement only the solutions needed initially, expanding later with more solutions as required.

I'd rate the solution nine out of ten.

We use the FortiGate Next Generation Firewall for our customers. We mainly utilize firewall and VPN features.

The solution has helped us protect our customers' networks effectively due to its firewall and VPN capabilities.

The firewall and VPN features are the most valuable in protecting our customers' networks. The stability of the product is also appreciated.

I would like to see improvements in the IPS/IDS feature to enhance protection against attacks from attackers, including ransomware protection.

I have been using FortiGate Next Generation Firewall for about five years.

The product is stable.

We don't need scalability because our customers are small companies.

We do not use FortiGate support directly; we must use distributor support.

Positive

The pricing of FortiGate Next Generation Firewall is competitive. The licensing cost is approximately thirteen thousand.

We evaluate Palo Alto against FortiGate, and would be considering it if the price is lower.

I would rate FortiGate Next Generation Firewall an eight out of ten. I would like to see AI capabilities in the future.

I'd rate the solution eight out of ten.

Other