FortiGate-VM NGFW Reviews & Product Details

What I like most about FortiGate NGFW is that it combines network security and network management in a single platform. I can manage firewall policies, VPN connections, routing, SD WAN, IPS, and web filtering through both the GUI and CLI. The logging and FortiView features help me investigate traffic problems and security events quickly. I also appreciate the consistency of FortiOS across different FortiGate deployments, which makes configuration and troubleshooting more efficient. The platform provides good performance and a user friendly management experience. It also integrates well with other Fortinet solutions, such as FortiManager, FortiAnalyzer, and FortiSwitch, which simplifies centralized monitoring and management. Review collected by and hosted on G2.com.

Some advanced technical configurations can only be performed through the CLI and are not available in the GUI. This increases the time and manual effort required for configuration, especially for less experienced administrators. Expanding GUI support for advanced settings and providing clearer contextual guidance would improve usability and reduce configuration errors. Review collected by and hosted on G2.com.

I like FortiGate-VM NGFW for its robust REST API and Infrastructure as Code (IaC) support, which integrate perfectly with automation tools like Terraform and Ansible. This allows me to fully automate network configuration without touching a manual dashboard. The REST API and IaC support are incredibly valuable because they let me treat network security just like software code. Using Terraform, I can automate the deployment and setup of the firewall directly inside our CI/CD pipelines, removing all manual configuration. Review collected by and hosted on G2.com.

Running multiple firewall instances simultaneously across parallel CI/CD pipelines demands a high amount of CPU and RAM, which quickly inflates our cloud infrastructure cost. I think this can be looked at and improved. Additionally, the REST API documentation sometimes lags behind major FortiOS firmware updates, forcing me to spend extra time troubleshooting broken API endpoints in my test scripts. The initial setup has a steep learning curve due to complex enterprise routing and licensing. Review collected by and hosted on G2.com.

What I like best about FortiGate-VM NGFW is its comprehensive security capabilities combined with ease of deployment in cloud environments like Microsoft Azure. It provides advanced features such as IPS, application control, web filtering, SSL inspection, and IPsec/SSL VPN within a single platform, reducing the need for multiple security solutions. I also appreciate its intuitive management interface, detailed logging, and seamless integration with Azure networking. The firewall has been reliable in securing virtual workloads while maintaining good performance, and creating or modifying firewall policies is straightforward once the initial setup is complete. Review collected by and hosted on G2.com.

While FortiGate-VM NGFW is feature-rich, the initial deployment and advanced configuration can be complex for users who are new to Fortinet products. Features such as SSL inspection, advanced routing, and policy-based NAT require a solid understanding of networking concepts. The licensing model can also be confusing, as some security services require separate subscriptions. Additionally, the management interface, although powerful, could be more intuitive for navigating advanced settings. Troubleshooting in large deployments may sometimes require deeper CLI knowledge alongside the GUI. Review collected by and hosted on G2.com.

I love the flexibility and fast deployment. Being able to spin up a full-featured enterprise next-generation firewall using an OVF/OVA template, or directly in cloud environments like AWS or Azure, in just a matter of minutes is a major advantage. The licensing model is also very adaptable, so you can scale security resources as network demands grow without being locked into rigid physical hardware refresh cycles.

What is most helpful about FortiGate-VM NGFW? What are the upsides? For me, the biggest benefit is its robust API support and overall automation friendliness. In modern infrastructure, the ability to bootstrap configurations and manage policies programmatically is a huge plus. It also provides top-tier threat intelligence (via FortiGuard Labs) that helps catch zero-day vulnerabilities effectively. On top of that, the built-in VPN capabilities—both SSL and IPsec—have been very stable, delivering secure, high-performing endpoints for remote teams without noticeably degrading system performance. Review collected by and hosted on G2.com.

Because the platform is so feature-rich, the web GUI can sometimes feel cluttered and overwhelming, especially for newer administrators. Locating specific advanced settings may require clicking through multiple sub-menus, and some granular configurations can only be performed through the Command Line Interface (CLI). Although the CLI is powerful, it comes with a steeper learning curve for teams transitioning from more visual-centric firewall platforms. Review collected by and hosted on G2.com.

What I like most about FortiGate-VM NGFW is the combination of powerful security capabilities and a user-friendly, intuitive interface. It delivers strong network protection, effective traffic inspection, and a broad set of security features that are straightforward to configure and manage. I also appreciate its flexibility in virtual environments, which makes it easy to integrate into different infrastructures while still maintaining solid performance and clear visibility. Overall, it feels like a reliable, practical solution for securing modern networks. Review collected by and hosted on G2.com.

One area I would improve in FortiGate-VM NGFW is the complexity of some advanced configurations. For users who are new to the platform, certain security features and settings can require additional time and technical knowledge to understand and configure properly. The licensing model and some advanced features could also be made more straightforward and transparent. Overall, these are relatively minor points compared with the platform’s overall capabilities. Review collected by and hosted on G2.com.

I like the centralized management and visibility features of FortiGate-VM NGFW. They make it easier to manage firewall policies and security settings from one place instead of having to handle each environment separately. Review collected by and hosted on G2.com.

I find the initial setup for FortiGate-VM NGFW complex for new users. It requires understanding several networking and configuration concepts like routing, firewall policies, and NAT. I think the documentation should be improved to cover each feature and provide troubleshooting guides, as I didn't find any helpful documentation during my setup. I had to rely on AI assistance instead. Review collected by and hosted on G2.com.

I like how FortiGate-VM NGFW is versatile and easy to use. Setting it up is much more convenient compared to physical devices, where I would need to handle routers, switches, and other end devices. With FortiGate-VM NGFW, it's easier to control things, share, and deploy into a server without the complexity and high cost of physical setups. Review collected by and hosted on G2.com.

currently i am using it, been a few weeks only so cant say much Review collected by and hosted on G2.com.

Ease of Deployment and Virtualization, I appreciate FortiGate-VM NGFW for its easy deployment in virtual environments, user-friendly interface, robust security features, and seamless integration with cloud and other network tools. Review collected by and hosted on G2.com.

The HA setup is little bit complicated also very limited, but it does cover the basics of handling an NGFW. However, it doesn’t go into much depth on policies or on managing VPN IPsec tunnels. That was my experience during the trial. Review collected by and hosted on G2.com.

What I like most about FortiGate-VM NGFW is how it combines strong security features with straightforward management. It gives me useful visibility into network traffic, simplifies firewall policy management, and provides a solid range of security controls in a virtualized environment. The interface is generally easy to work with, and the centralized configuration and monitoring tools are especially helpful for day-to-day network administration. Review collected by and hosted on G2.com.

One area that could be improved is the learning curve around some of the more advanced features and configuration options. Certain settings take extra time to fully understand and troubleshoot, especially for new administrators. Overall, the interface is solid, but finding and navigating some of the advanced options could be more intuitive. The documentation for more complex use cases could also be clearer, with more practical, step-by-step examples to help explain how to apply those settings in real scenarios. Review collected by and hosted on G2.com.

I like FortiGate-VM NGFW for its feature parity and consistent security features across hardware and cloud environments, which makes it seamless to work with. The unified operating system, FortiOS, running the same on both cloud and hardware, is really convenient, eliminating any relearning curve. I appreciate the secure routing with advanced routing protocols and IAC automation, which supports frameworks like Terraform for flexible deployments. The hybrid security and fabric integration, along with real-time threat telemetry, really stands out. The performance offloading capabilities utilizing virtual testing and Intel Quick Assist technology adds great value. Overall, I find these features enhance my experience significantly. Review collected by and hosted on G2.com.

I find the default SIP ALG session helper configuration problematic as it often causes one-way audio or dropped calls on voice platforms until it is manually disabled via CLI. The need to address this for optimal operation can be frustrating. Another issue is the resource and DPI overhead; enabling deep packet inspection and full SSL inspection demands significant vCPU allocation and RAM scaling to prevent throughput bottlenecks. Additionally, the trial evaluation limitations, such as the strict cryptographic and bandwidth constraints on demo licenses, make pre-deployment testing tricky without a proper BYOL/PAYG license, which can be quite inconvenient. Review collected by and hosted on G2.com.