FortiGate
By Fortinet
Fortinet's NGFW appliance line, running FortiOS on purpose-built security processing units that offload TLS decryption and threat inspection — including FortiGuard's native inline IPS — for higher throughput per dollar than software-only competitors. Models scale from desktop branch devices to chassis-based data-center firewalls under one management fabric, FortiManager.
Verified Source: 1
- Product type
- Software
- Deployment
- On-premHybrid
- Organization size
- SMBMid-marketEnterprise
- Pricing tier
- $$
Capability checklist
NGFWHow FortiGate measures up against the full Next-Generation Firewall taxonomy.
- Application awareness — supported
- Identifies and controls traffic by application, not just by port or protocol.
- Built-in intrusion prevention — supported
- Blocks known exploit attempts and attack patterns inline, without a separate box.
- Encrypted traffic inspection — supported
- Decrypts and inspects TLS traffic to catch threats hidden inside encrypted sessions.
- URL & content filtering — supported
- Blocks access to malicious, risky, or policy-violating web categories.
- Cloud sandboxing — supported
- Detonates suspicious files in an isolated environment to catch unknown malware.
- Centralized policy management — supported
- Manages rules and logs across many firewalls and sites from one console.
- VPN & remote access — supported
- Terminates site-to-site and remote-user VPN connections on the same appliance.
Alternatives
Other Next-Generation Firewall tools with overlapping capabilities, sized for similar teams.
Appears in stacks
Real-world stacks that include FortiGate.