We performed a comparison between Fortinet FortiGate, OPNsense, and Zscaler Internet Access based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."One of the valuable features is a standardized OS."
"The SD-WAN feature is the most valuable. This feature evolved from link load balancing. It has helped us in terms of our uptime and privatizing applications whenever we experience an outage. The SD-WAN feature has been a plus for us. Two-factor authentication has allowed us to add more users in terms of remote working. We have two-factor authentication for remote workers to authenticate them before they get on the network."
"We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."
"This product is definitely scalable."
"We can detect any attack of viruses or malware at the first point of contact."
"One of the nice things about FortiGate is that it can be deployed on the cloud or on-premises. You can actually do both. That's the biggest reason why I stick with this solution as opposed to something like Cisco Meraki. Another nice thing is that I can log directly into a FortiGate or get to it through their FortiCloud access products. They're pretty reliable and consistent. One of the reasons why I started using the product was their single pane of management. I can deploy their line of firewalls in conjunction with their switching and access points, and I can manage the entire network from one interface. I don't have to log into one interface for the firewall, another one for the access points, and another one for the switches. These firewalls have access point controller functionality built right into the system, so I don't even have to purchase additional devices to manage them."
"The security on offer is very good."
"FortiGate's web and URL filtering are unlike any other firewall I've used. The functionality of URL filtering in those solutions is problematic because everything is encrypted, and firewalls can't break that encryption protocol. Fortinet has an SSL proxy, so the encryption is done before the packet ever leaves the FortiGate. The URL filter is definitely one of the most helpful features."
"We can open a new VPN connection easily. It's much easier than with Fortinet in our experience."
"The interface and the dashboard are the most valuable features of this solution."
"The initial setup is easy. It only takes 15-30 minutes to deploy."
"OPNsense is easy to scale when running on the hardware."
"What I like best about OPNsense is that, as a firewall, it's pretty good. I'm quite impressed with it. I had an excellent experience with OPNsense, which helped me achieve the targets I wanted."
"OPNsense could improve by making the configuration more web-based rather than shell or command-line-based."
"The graphic user interface is very good and it is user-friendly which makes the product easy-to-use."
"The VPN server feature is the most valuable. It is integrated with Radius and AAA for doing accounting and authentication. Insight view is also an important feature for me at this time. It allows me to assess our network traffic. I also like the firewall feature. The BSD kernel has a packet filter. It is one of the most solid frameworks for firewalls. Its user interface is one of the best interfaces I have used."
"The security is excellent."
"One on the main benefits is protection all time from anywhere."
"The most valuable feature of Zscaler Internet Access is that it is a consolidated solution, it comes with many features, such as DLP."
"For our needs, the cloud-native proxy architecture is a very good solution. We are moving away from on-prem appliances and moving more toward cloud-based solutions. Zscaler is a good fit for our strategy. This architecture helps with cyber threats because we inspect most of the traffic and we can see that a lot of threats are stopped directly in the secure web gateway."
"Whether you are in a hotel somewhere, or in Africa, it does not matter. You will get the Zscaler protection presence anywhere."
"After a proper implementation, the maintenance is very low."
"The protection is most valuable."
"There is no lag in service when accessing the internet."
"Application management can be improved."
"Fortinet FortiGate can improve by integrating the web application firewall and the DDoS protection part of the solution. Having a WAF feature, web application firewall, and proxy together would be a good benefit."
"I would suggest that Fortinet add sandboxing to their solution."
"Usually, we sell the bundle with the UTM or threat management piece with IPS, IDS. Other providers, such as Palo Alto, are ahead in terms of safe functionality. So, for me, delivering truly safe service is probably something that still needs to be improved."
"The stability of Fortinet FortiGate could improve."
"There is room for improvement related to the logging and reporting aspect."
"Currently, without the additional reporting module, we only have access to basic reporting."
"The initial setup and configuration are not intuitive and require training."
"There should be more technical documentation."
"The user interface could be improved, and the DNS section should be more intuitive."
"While they do have paid options that actually gives better features, for most of the clients, if they tend to take a paid option will instead opt for Fortinet."
"They should improve IPEs for security in the future."
"I think the most important thing is that it should be easily accessible, but currently, that doesn't seem to be the case. We need a hardware platform that's based on common standards and open computing principles, which would be like a commodity and benefit us greatly."
"We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much."
"The IPS solution could be more reliable."
"There are a few weaknesses. For example, there is a lack of some features that I have in certain commercial products."
"Zscaler Internet Access needs to integrate more ISPs. It is good to have more than three ISPs."
"We'd like for them to include some sort of antivirus tool."
"Sometimes, support isn't available."
"The tool should improve the predefined dictionaries."
"I would like to see more training and video documentation."
"The interface for administration could be better. They should upgrade the management portal."
"The OS capabilities and WSL support could be improved."
"The performance needs improvement. Some areas create performance issues and, depending on the use cases, require reconfiguration to perform again."
