G2

Mohamed M.

Freelance Software & Cybersecurity Consultant

Small-Business (50 or fewer emp.)

8/6/2026

"Powerful Virtual Firewall with a Great UI, but Complex Licensing"

4/5

What do you like best about FortiGate-VM NGFW?

The biggest advantage of FortiGate-VM is how easy it is to deploy in a virtualized cloud environment, without needing to purchase expensive physical hardware. The FortiOS GUI is very intuitive and feels much cleaner than older Cisco firewalls I’ve worked with. Creating standard IPv4 policies, managing NAT, and setting up SSL VPNs for remote workers can be done in just a few clicks, rather than having to wrestle with complex CLI commands. I also like that routing, SD-WAN features, and deep packet inspection are integrated into a single pane of glass, which makes it easier to monitor threats and investigate logs. Review collected by and hosted on G2.com.

What do you dislike about FortiGate-VM NGFW?

The licensing model for the VM versions can be confusing and expensive, especially when you’re trying to scale CPU or RAM allocations in a virtualized cluster. Another pain point is that firmware upgrades can be buggy at times. It’s a common rule among network engineers to wait for more mature patch releases, since early firmware updates can sometimes break existing VPN or routing configurations.

Finally, while the GUI is excellent for day-to-day tasks, it doesn’t expose all of the advanced diagnostic logs. When you need to do deeper troubleshooting for dropped packets or complex IPSec VPN failures, you’re forced to switch to the CLI, which comes with a fairly steep learning curve. Review collected by and hosted on G2.com.

What problems is FortiGate-VM NGFW solving and how is that benefiting you?

Before implementing FortiGate-VM, it was challenging to maintain consistent security policies across our on-premise servers and cloud environments. After deploying the virtual NGFW, we were able to integrate security controls smoothly throughout our hybrid network. The initial setup and onboarding were surprisingly straightforward, largely thanks to the strong Fortinet documentation and the helpful support forums. Now we can manage traffic inspection and SD-WAN routing from a single place, which saves us hours of configuration time each week. In addition, the FortiGuard AI-driven threat intelligence feed automatically blocks malicious IPs and zero-day signatures without manual intervention, which has significantly reduced the day-to-day workload for our SOC team. Review collected by and hosted on G2.com.