AWS Database Migration Service vs. FortiConverter

As stated previously, AWS Database Migration Service excels when replicating very specific data elements between environments. AWS Database Migration Service handles replication tasks to load equipment assets or customer job sites from production to QA databases very well. Full load replication - e.g., we need an exact copy of the production database in another region - works well. But when we need to load the QA database with the latest production data - it does work as well. AWS Database Migration Service comes up short because we do not want to wipe the QA database completely and make an exact copy. We want to keep what's already in the QA database and add production data so that we can QA with that level of volume. And at least with our database design, we end up having to do a lot of manual data manipulation and de-duplication.

Incentivized

Unless you are rebuilding rules from scratch, FortiConverter is a must-have when migrating legacy rulesets from competing platforms such as Cisco ASA, CheckPoint, Juniper, etc. to FortiGate Appliances. Without FortiConverter, guaranteed there will be some flows you missed and you will be troubleshooting them during your cutover maintenance window. Utilizing FortiConverter, you will minimize such issues as cutover time because you have the ability to stage the new ruleset in advance. Complex topologies and multi-platform migrations require highly skilled consultation from experts that [have] done this several times before.

Incentivized

• Audit existing rulesets from CheckPoint, Cisco, Juniper and other platforms
• Build migration rulesets to FortiGate
• Stages migration before actual cutover
• Reduces or eliminates obsolete and shadow rules
• Simple logic

Incentivized

• Programming or scripting skills are not needed but highly recommended
• Requires excellent command of REGEX
• Interface Mapping from complex topologies requires a deep understanding of FortiGate interface capabilities and scripting

Incentivized

FortiConverter is currently the best option to assist in migrating legacy firewalls to FortiGate firewalls. FortiConverter is flexible enough to be the single tool to use when migrating Check Point, Cisco ASA, Juniper and other platforms to FortiGate Firewalls. FortiConverter is not a multi-user software however it is easy for multiple engineers to work on a single or multiple migration projects.

Incentivized

FortiConverter is the easiest of the firewall migration tools to use compared to Checkpoint SmartMove, Cisco Firewall Migration Tool, FWMIG, etc. It has a more robust user interface and allows you to customize the rule imports as needed. Rulebase analysis, hit count, NAT, and dynamic routing are presented in an easy to understand format with FortiConverter.

Incentivized

• Set it and forget it for maintaining data consistency - moderate cost, zero to minimal maintenance
• High touch production data loads into QA - negative ROI engineering time investment far exceeded our predictions

Incentivized

• Streamlined migrations successful on the first try
• Simple and fast cutover maintenance window
• Audit and tune existing rule base
• Quickly identify shadow rules
• Quickly identify rules with elevated access

Incentivized