The Good Stuff

The detection engine is legitimately excellent, Perception Point now Fortimail Workspace Security built one of the smartest email and browser threat platforms out there, with CPU-level sandboxing that catches zero-days and evasive malware that slide right past traditional tools. You're getting AI-powered detection, recursive file unpacking to beat obfuscation tricks, and near-real-time scanning of everything without the performance hit of older sandboxes. Independent labs consistently gave it top marks. The browser extension itself is light, works across Chrome, Edge, Firefox, and Safari, and doesn't tunnel all your traffic through some clunky proxy, it just sits there quietly blocking bad stuff at the point of click.

The real standout feature is the included 24×7 managed IR service. You're not just buying software only, you get an actual security team that handles triage, fine-tunes your policies, chases down false positives, and remediates incidents across your email, browser, and collaboration apps. For smaller SOCs or MSPs, this is a game-changer, like having extra hands without hiring headcount.

The Reality Check

This isn't plug-and-play consumer security. If you push aggressive DLP rules or lock down every website category out of the gate, your users will rebel, your help desk will hate you, and people will find workarounds. You need to run a proper pilot with real users,developers, salespeople, executives, and tune policies to match how your organization actually works, not how the default security template thinks you should work. Browser security that blocks legitimate tools or flags every screenshot as "data exfiltration" becomes shelf-ware fast.

Also, Fortinet just acquired Perception Point in December 2024, so the integration into the Security Fabric is still happening, docs reference old Perception Point APIs, and some workflows feel like they're in transition but going the right direction. You'll lean on your SE and that managed IR team more than usual during setup.

Who Should Use This

If you're already invested in Fortinet, need serious browser threat and DLP control beyond basic web filtering, and have the patience to pilot and tune thoughtfully, this is one of the best tools in the market, better detection than most SWG vendors, less user pain than full browser isolation, and the managed service actually delivers value. It's perfect for hybrid work environments where users are all over the place and you need consistent policy across managed and BYOD devices.
​

If you want zero-touch deployment or don't have time to manage policies, you'll waste the technology's potential and create more problems than you solve. This tool rewards teams that treat security controls as something you actively operate, not just switch on