I use Fortinet FortiGate primarily as a physical appliance; the VM deployment is minimal. My impression of the dynamic segmentation feature in Fortinet FortiGate is that while some customers use it, I believe it is not granular enough. It can separate VLANs, but it cannot separate individual users. We use it with FortiSwitch or AP to expand Fortinet FortiGate ports to every switch port.
Regarding stability, I have experienced performance issues with Fortinet FortiGate. Sometimes it does not work correctly in certain situations, such as DNS or URL categories, where it might block incorrectly.
In assessing the performance of the hardware-assisted DDoS protection in Fortinet FortiGate, I think it does not work effectively in critical events, as DDoS protection is challenging due to the number of attackers.
My clients use Fortinet FortiGate in the boundary and border gateway as a border firewall, positioned between the internet and the company. We also use it for VPN and IPsec VPN to connect remote office sites. Additionally, I have a use case for MES in high technology where it blocks malware in machines such as those used for producing semiconductors.
In the future, I would like to see improvements with Fortinet FortiGate, especially as all firewalls emphasize AI or machine learning. I do not see significant use of AI in Fortinet FortiGate, whereas I can see how AI improves functionality in Palo Alto.
I mainly work with firewalls from Palo Alto Networks.
Apart from Palo Alto, I have worked with Check Point, but I used it very minimally. I would rate this review with an overall score of nine.