High quality experience of network security and traffic control in a single appliance
Kewyn Medina profile photo
Updated August 27, 2018

High quality experience of network security and traffic control in a single appliance

Score 8 out of 10
Vetted Review
Verified User
Review Source

Overall Satisfaction with Fortinet FortiGate

We use it as our internal and external firewall. It is also used with all security options, including DDOS protection, in our branches.
  • Web filtering, which protects the users browsing to non-secure websites
  • Network security between different networks
  • Traffic shaping control for users and applications
  • Traffic shaping options based more on layer 7, so you could have a more detailed control over the exact sites users are browsing
  • The transition between different major updates
  • More option in fast reports and dashboards
  • A more exact measure of bandwidth to show in dashboard and FortiView
  • Very positive because it helps us reducing cost by avoiding the acquisition of additional network equipment
  • It helps us to easily reach our internal security objectives
  • Bandwidth control
We selected it because it is a good balance between a very well positioned company and good pricing
Very good in the firewall protection between different networks, and also for external protection. It also gives a really good experience in the browsing protection for users, which keep them safe from unsecured websites.

On the other hand, you could have some issues when you are tracking a user in the forward traffic log because is not easy to troubleshoot or find some browsing information because of the main graphical interface.

Using Fortinet FortiGate

200 - They are part of the user who receive fortigate security protection and also the administrator which fortigate helps to solve security in a friendly and simplistic way.
2 - We need people with advanced knowledge in network configuration and support, but most of the admin task of the fortigate appliance are very user friendy to configure, admin and support.
  • Security protection
  • WAN links load balance
  • Traffic Shaping
  • Wan link Load balance and high availability configuration for main ISP connections at the same time in active mode
  • Different ways to apply traffic shaping to the users
  • Load balancing options
  • Remote site connections
It is a friendly user technology, with a simplistic dashboard to manage and control the daily operation with a high grade of trust in security.

Evaluating FortiGate and Competitors

Yes - Cisco Router doing a bad combination of security and shaping
  • Price
  • Product Reputation
  • Analyst Reports
  • Third-party Reviews
Fortinet is a very well ranked security company in the market giving to the company a good balance between security and pricing.
I still will keep it as my option.

FortiGate Implementation

Easy to configure and with a very intuitive manual to follow.
Change management was a small part of the implementation and was well-handled - There is a lot of testing implicit with the migration to the fortigate to tune as much as possible the browsing experience for the users, it does not matter how much do you test to avoid user issues in production you will have to deal always with small quantity.
  • Load balance between WANs connections

FortiGate Training

  • In-person training
  • Self-taught
I received it a couple years afters use it and it was just to confirm my knowledge about the tool.
Yes, it was easy, there are a lot of resources in internet that are easy to follow.

Configuring FortiGate

Fortigate Cookbook it is definitely a good guide to start and follow
Yes - we have customized the interface extensively - Very easy to do and manage
No - we have not done any custom code

FortiGate Support

Perfect is a complicated rate. But they are good in what they do and also give a really good through their local vendor channels
ProsCons
Quick Resolution
Good followup
Knowledgeable team
Problems get solved
Kept well informed
No escalation required
Immediate help available
Support understands my problem
Support cares about my success
Quick Initial Response
None
Yes - It is a good option always have available premium support hours in case you have a failure, In the last 3 years i never had a major issue that need to request big support help
Yes - yes, definetely.
In some occasion during this year, we experienced a big issue that was causing a degradation in our internet, initially we created several cases requesting support to factory to try to find the origin of the bad internet performance and experience for the users especially in videoconference, after hours of troubleshooting and testing we found that the issue was caused by a security protection of DOS that only was automatically applied during high traffic hours during the day.

Using FortiGate

I consider a good security appliance wit h a good bundle for network to use as a concentrated network appliance configured in a good high availability configuration
ProsCons
Relatively simple
Technical support not required
Well integrated
Consistent
Quick to learn
Convenient
Feel confident using
Familiar
Difficult to use
  • Policy creation to allow communication between networks
  • Application traffic Shaping
  • Make traffic shaping troubleshooting

FortiGate Reliability

I ti is very stable appliance with a very trustable service
1 significant failure in 3 years, and it was solved with a rebooot.
Good performance and really good integration. We have integration with Microsoft AD.

Relationship with Fortinet

it was a good process because they follow and guide since the acquisition to the configuration
They gave us a really good support
Additional hour of support in case of an emergency failure or advanced support

Upgrading FortiGate

Yes - It is very easy to do an upgrade of version and also a rollback in case you have any problem. There is a lot of information even in the same console before executing all the process.
  • New Features available
  • having access to las network tendencies in market like SDWAN without doing an appliance replacement