FORTINET FortiGate FG-40F Network Security/Firewall Appliance - 5 Port - 10/100/1000Base-T - Gigabit Ethernet - 5 x RJ-45-1 Year Forticare and Fortiguard Unified (UTM) Protection - Wall Mountable -

I bought it for small office. FortiGate offers one of the best protection. 3 years UTP is reasonable. Price was very competitive. Shipping was from USA, took just few days. Pretty easy to install and configure if you know the stuff. FW was 2 versions behind, upgraded with no issues. I definitely recommend both the product and the seller. One of the best features is that I manage it remotely via FortiCloud portal.

I bought this to replace our Netgate. I don't think I can ever have a non-NGFW again. It functioned great out of the box, has a very easy management console, I love the console port that I can use to connect to it if I screw up some configuration and get locked out of the GUI, the subscription to give me updated rules is amazing value compared to trying to configure everything from scratch on my Netgate running OpenSense, and I feel it has really made my network when working remotely from home far more secure for my work.

I was looking at a Palo Alto 400 series, but the cost is much higher, and they only sell to businesses. The LAB firewall does not have all the features. Fortinet is starting to get more of the market share in security, so I wanted to work with them. Cisco ASA is no longer the market leader in firewalls.

Second try at a Fortigate and another trainwreck. Web/DNS filtering absolutely doesn't work - blocked categories are either allowed right through or give an incorrect security error, with only a few actually working correctly. Specifically blocked sites, wildcard blocked sites, i.e. youtube.com, ebay.com, etc. all get right through. Presumably one of the categories blocked Windows updates, so *microsoft.com is whitelisted and it still gets blocked. Under web filtering categories, "Hacking", "Illegal Activies", and "Violence" will not stay blocked even when saved - they keep reverting to "Allow". PEOPLE - IF THE WEB AND DNS FILTERING COMPLETELY DON'T WORK, WHY WOULD THE INTRUSION PROTECTION / ANTIVIRUS / EXTERNAL SECURITY BE ANY DIFFERENT???