FORTINET FortiGate-40F Firewall Appliance - 5 Gigabit Ethernet RJ45 Ports, Ideal for Small Businesses (Appliance Only, No Subscription) (FG-40F)

Best item, best product. Thanks A+

This says it all.Factory Sealed, Valid Support Entitlement, Seller BlueAlly listed as an authorized seller. with 1 year as described. Half the price of othersBeen using some older ebay fortigates for a long time they work great, but I needed VPN access and would like better filtering for my children. Setup for me was easy but this is like my 3rd HA pair of these so I knew what to expect. I enjoyed the UI improvements in 7.4 having come from 6.0.I am able to control dns better and retired my piholes. If it becomes where I am still getting ads then because these support DoH I can always forward to NextDNS. However so far so good using forti dns servers and dns filtering.If the Application control is even just as good as it was in 6.0 I am sure I will be happy with it, as when I was using the ebay models I was able to filter for my children but the application list was years old and took a lot of manual work. However it should be noted pretty good control can be achieved with manual work so even if with a new license and fresh db there is a need I know manual works.

does all the bsic firewall/networking stuff I need at a reasonable price. I tried so many other expensive routers but they all fell short of vlan requirements. this firewall does vlan layer 3 well. it takes a while to get used to the interface and how it manages objects, so be sure you have time to spare for learning before you deploy to prod.logging all has to go to syslog so be sure you can install splunk and/or cacti to get the long term data you need. the appliance has some logging and widget/graphs but does not provide a long enough time range.

Great product. Good price. Setup was easy. Installed and working.

Good so far. Will update review if that changes

For the money I find this to be one of the best SMB firewalls available.Compared to Sonicwall (which we also manage) there are more configuration options (including an inbuilt DNS server and slightly more flexible SSL vpn portal configuration), a more seemless/robust endpoint protection/NAC system, and SSL scanning does not require an additional license.If you require a large number of ipsec tunnels, the Fortigate CLI has a great diagnostic tool set. In mixed router configurations I often lean on those tools when basic logs fail me.I also work with Zywalls, which though great bang for buck in terms of some of the aforementioned features missing from Sonicwall, it doesn't hold a candle in terms of advanced end point NAC. The days of layered security are dwindling and it's vital to consider network access controls where deployment is viable.Also, be sure to check out the Fortinet cookbooks. Object based firewalls can lead to a bit of configuration complexity (a feature implementation can require numerous building blocks), the cookbooks lay out common scenarios well.Over all, Fortigate is my go to when I need full UTM and SSL-vpn in a single package.

Second try at a Fortigate and another trainwreck. Web/DNS filtering absolutely doesn't work - blocked categories are either allowed right through or give an incorrect security error, with only a few actually working correctly. Specifically blocked sites, wildcard blocked sites, i.e. youtube.com, ebay.com, etc. all get right through. Presumably one of the categories blocked Windows updates, so *microsoft.com is whitelisted and it still gets blocked. Under web filtering categories, "Hacking", "Illegal Activies", and "Violence" will not stay blocked even when saved - they keep reverting to "Allow". PEOPLE - IF THE WEB AND DNS FILTERING COMPLETELY DON'T WORK, WHY WOULD THE INTRUSION PROTECTION / ANTIVIRUS / EXTERNAL SECURITY BE ANY DIFFERENT???

Product is as described. Upgraded from 60E, as it is going end of life. Easy to configure for home network protection.