Fortinet FortiGate Valuable Features

Chingiz Abdukarimov
Director at a integrator with 11-50 employees
Good VPN, both IPSEC and SSL (web-mode, tunnel-mode). An engineer/network administrator has tools to debug VPN issues that can occur during tunnel setup with other vendors' equipment. SD-WAN feature at no cost. This is really great feature for remote locations (branch offices) and HQ, application steering between many ISP links becomes a simple task. Steering can be done dynamically by measuring link quality (latency, jitter, packet loss, available bandwidth). Wi-Fi and Switch controller at no cost. FortiSwitch and FortiAP can become a kind of port extender of the firewall, all its ports can be referenced in firewall policies. When you have such management plane consolidation it gives you a simpler way to operate. Security Fabric Framework is helping in analyzing sudden and rapid changes in whole infrastructure, and gives the ability to simplify daily operations (e.g. address objects synchronization between all firewalls in Fabric, estimating overall security rating, single-sign-on for admin access and many more) Single Sign On support with deep LDAP integration (several variants for environments with different scales), RADIUS authentication. Can work as transparent and explicit web-proxy, the last option supports Kerberos authentication which requires no agents installed on any windows server. Human readable firewall policies with editable security policies and addresses in single page. This is very useful and time saving feature. Firmware upgrade process is very simple, even for cluster configurations it is fully automated by default. Straightforward SNAT and DNAT; you may work in two ways: with Central NAT rules configuration and by applying translation directly inside firewall policies. Bulk CLI commands are uploaded via gui in script file (portions of config file). VDOMs are very useful when you need to grant admin role to clients separately. VDOMs in FortiGate can be represented in FortiAnalyzer's ADOMs (administrative domain), which can have different log storage policies, event handling and alerting configurations. You can create one VDOM working in NAT/Route mode, and another VDOM working in Transparent mode. If you don't want to create and use second VDOM you can still transparently inspect traffic at layer 2 level while having only one VDOM in NAT/Route mode. This is achived by configuring Virtual Wire Pair ports that work like a separate bridge. Ability to capture packets going through any interface of device (and VM too). You can set number of packets, filter out packets by IP and port number for particular troubleshooting purposes, then download a .pcap file from web gui and analyze it in your favorite programm. Advanced routing (RIP, OSPF, BGP, PBR). It gives you a seamless and simple integration into a large network. IPS, AV, Web Filter, AppControl profiles are working very well. SSL Inspection and CASI (Cloud Access Security Inspection) profiles. Rich logging options allow you troubleshoot most problems. Straightforward HA with different redundancy schemas. IPv6 support. View full review »
Neal Tipton
Consultant at MT Pockets Computers
There's an all-inclusive appliance where all of the logs, registers, and everything is customizable as far as the way reporting comes back. View full review »
Branch Manager at a tech services company with 51-200 employees
One of the most valuable features for us is that it is easy to configure. It is also very easy to manage. One of the things we were looking at was a product that is user friendly, and this helps us to generate and analyze the reports we need. View full review »
Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: April 2020.
438,944 professionals have used our research since 2012.
Vineeth Babu P
IT System Administrator at emirates hospital
The most important features with FortiGate are the web filter and application controls. We can control our internet usage and use the web filter for application purposes. All branch FortiGate devices are integrated with FortiAnalyzer and easy to download and monitor the logs from all other locations. It's easy to change the configurations using CMD-SSH. FSSO is also another good feature. View full review »
Emmanuel Salamat
Solutions Architect at UAS
First and foremost, Fortinet FortiGate is a security device. It can optimize security on the networks of a company. It actually protects the company from attacks from outside. With Fortinet FortiGate, you can categorize the users. You can create a group of users that can access all of the websites for their work. You can limit other users' access. It can also do detailed reporting and analytics that comprise information from recorded events on the network by traffic location, device, IP address, etc. View full review »
Director, CFO at IT Green Public Company Ltd.
Fortinet FortiGate has many excellent functions and good security. The firewall is the most common function that we have used for a long time. View full review »
Sabyasachi Sen
General Manager with 51-200 employees
The only feature is that I don't have to be worried about categorization of the websites. I am able to put on the policies for the blog because this is an institution.There are several restrictions out there to get onto the websites. It creates a "headache free" environment for us. View full review »
Amgad Soliman
Senior System & Security Administrator at Icon
The main feature that Fortinet FortiGate has that is very useful for me, is that I can connect two sides of the network to each other with Fortinet. I can make two VPNs run side-to-side. VPN is very simple and so easy with FortiGate. View full review »
Sherif Abouelezz
Head of IT at CGP
I like all of FortiGate's features. View full review »
Mohsinoddi Mohammed
Senior Information Security Consultant at Alkhorayef
FortiGate Secure SD-WAN includes best-of-breed next-generation firewall (NGFW) security, SD-WAN, advanced routing, and WAN optimization capabilities, delivering a security-driven networking WAN edge transformation in a unified offering. Fortinet Secure SD-WAN delivered the lowest total cost of ownership (TCO) per Mbps among all other vendors. Antivirus, Application Control, Web Filtering, IPSec, and SSL-VPN are great features with the next-generation Fortinet firewall. They are all very easy to manage. View full review »
Fernando Neto
Network Analyst at Aloo Telecom
The firewall is a valuable feature because it offers more security for end customers. The HA function is fantastic, as the link switching time is almost imperceptible. It also offers dedicated IP, all in one box. View full review »
Naseema Ap
Manager systems at HOCL
The most valuable feature is the threat protection. With many users, I've found an issue where sometimes I need to monitor the traffic that I need to filter. View full review »
Md Mohiuddin
Assistant Manager IT at Urmi Garments Ltd
We are very happy with the general bandwidth agility we have seen from one website to another website. View full review »
Principal Mining Consultant at senhwabio
The feature that prevents internet connections, the filtering, is the most valuable feature because we did not have any internet protection before. View full review »
Miguel Ortiz
Security Solutions Architect at Verizon Communications
Virtual Domains (VDOMs) are a feature that we found valuable. We found the Firewall, VPN, Application Control, IPS, Fortiguard Web filtering, anti-botnet, FortiGuard, Anti Spam Wireless LAN controller, WAN optimization, vulnerability assessment, and endpoint control all to be valuable. Fortinet certifications include NSS Labs for NGFW, firewall, IPS, SSL, antivirus, and antispam. Fortinet provides a consolidated security platform for the market place and certifications with NSS labs prove their security assurance. View full review »
Kevin Stephens
ICT Administrator at a mining and metals company with 11-50 employees
I really like the captive portal feature for our guest network. It has nice VLAN features in terms of separating our network. The anti-virus is also good. View full review »
Network and Security Manager at a consumer goods company with 10,001+ employees
I like the UTM features, including the web filtering and antivirus. View full review »
Rishi Vanarse
Manager - IT at Mosambee - Synergistic Financial Networks
We use the FortiGate Sandbox to detect zero-day vulnerabilities, such as anomalies or malware, that are unknown and have not yet been discovered. View full review »
Directorate at a wholesaler/distributor with 51-200 employees
The most important feature is that it's easy to use. It is user-friendly and has all the features you need. You can have IDS (Intrusion detection systems) and IPS (Intrusion prevention systems) in just one device. You don't need multiples. View full review »
PTL Network Administrator at a non-profit with 1,001-5,000 employees
It gives priority to certain applications compared to others as well because internally all our applications are web based. We use FortiGate to prioritize certain applications to be accessed much faster than the others. For end users, it enables access to the applications and web filtering, as well. That's where we block off most of the sites and we can do scheduling, as well as access to certain sites within certain periods of time. View full review »
Gamal Al-Hamzah
Network Engineer at LinkTech
The most important features of Fortinet FortiGate are the Intrusion Prevention System (IPS) and firewall control applications. View full review »
Kofi Osei-Appaw
Consultant at WorldNet ICT Solutions Limited
This solution has many good features. The security features are about the best that I've seen anywhere. I really like the fact that I am able to generate FortiCloud reports. View full review »
Derrick Slaton
IT Specialist 3 at a financial services firm with 51-200 employees
The ability to set up remote systems is the most valuable feature. View full review »
Narendra Singh
Solution Architect at Brillbean Ventures Pvt ltd
The most valuable feature is the VDOM, which allows the customer to have multiple firewalls in a single campus. Using the FortiGate security solution provides comprehensive visibility and advanced layer 7 security, including threat protection, intrusion prevention, web filtering, and application control. They face a major complexity hurdle managing these point products with no integration and lack of visibility. Thie solution provides a high-performance inspection of clear-text and encrypted traffic. The FortiOS Operating system is robust, and the WAN load-balancing very much transparent. View full review »
Abdy Sanjur
Gerente de Seguridad Informática at a financial services firm with 1,001-5,000 employees
The Fortinet FortiGate product has original features that we use. These features include: * IPS * Anti-Malware * Web Application Firewall View full review »
Network Engineer at a tech services company with 201-500 employees
The most valuable feature is the policy routing and application control. In addition, the firewall will act as a call-switch. So, the performance within the LAN is good. View full review »
Sr. Corporate Marketing Executive at Amity Infosoft Pvt. Ltd.
FortiGate is really strong in the following: * UTM * IPS-like * Antivirus * App control * AntiBotnet * Anti-Spam web content filtering * L3 routing View full review »
Solutions Architect at Focus
It is a good product from a price perspective versus functionality. It is easy to use and performs very well. View full review »
Panos Kre
User at GOldair Handling
The features that we have found most valuable are the SSL VPN and the user Portal. View full review »
IT Management with 11-50 employees
It is easy to use. View full review »
Dave Winkel
President at Ellegent Systems, Inc.
Security Fabric makes VLANs a breeze. It impresses customers, as well as saves them money over the long run when comparing apples to apples. View full review »
Engineering Manager with 1-10 employees
The most valuable feature is the bundled subscription, which is IPS, TV and web filtering. I also like the application control. View full review »
Camilo Benavides
System Administrator at Udenar
The most important feature for me apart from the administrator is the UTM module because it protects the equipment of the entity in a very efficient way. View full review »
Shahab Razak
Network Architect at Finastra
* Live traffic viewer * Packet capture, and * The option of using GUI and CLI interchangeably. FortiManager and FortiAnalyzer helps us manage multiply firewalls. View full review »
Ibrahim El Sayed
Network & Hardware Administrator at Nile Projects & Trading Co.
The most valuable feature is the SD-WAN because I can manage many lines and load balance them all. View full review »
CTO at a comms service provider with 501-1,000 employees
We find the most valuable aspect of this solution is the price. It is affordable and cheaper than other firewalls. View full review »
Mark DeLong
Senior Scientist at Ats, iNC.
SSL-VPN is very useful for us and has been very reliable. View full review »
Zhargal Solovyev
Network Engineer at Concentus
This solution has solid UTM features combined with a nice GUI. View full review »
Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: April 2020.
438,944 professionals have used our research since 2012.