TrustRadius: an HG Insights company

Cisco ASA 5500-X with FirePOWER Services vs. Fortinet FortiGate

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco ASA 5500-X with FirePOWER Services

    Score7.3 out of 10
    N/ACisco offers a threat-focused next-generation firewall (NGFW), the ASA 5500-X Series. The ASA 5500 Series platforms can run either the Cisco ASA Firewall or Cisco Firepower Threat Defense (FTD). The series features appliances in a variety of form factors, including standalone options for small and midsize businesses, ruggedized appliances for extreme environments, midsize appliances for security at the Internet edge, and high-performance appliances for enterprise data centers.N/A

    FortiGate

    Score8.2 out of 10
    N/AFortiNet FortiGate is a firewall option with high integrability. It offers a variety of deployment options and next-gen firewall capabilities, including integration with IaaS cloud platforms and public cloud environments.N/A
    Pricing
    Cisco ASA 5500-X with FirePOWER ServicesFortiGate
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Cisco ASA 5500-X with FirePOWER ServicesFortiGate
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional DetailsCisco ASA 5500-X pricing starts at ~$400 and scales up to $20,000 for higher capacity appliances.FortiGate pricing starts at $250 for home office use, up to $300,000 for large enterprise appliances. Must contact sales team for pricing.
    More Pricing Information
    Community Pulse
    Cisco ASA 5500-X with FirePOWER ServicesFortiGate
    Considered Both Products
    Cisco
    Chose Cisco ASA 5500-X with FirePOWER Services
    Cisco ASA 5500-X with FirePOWER Services provides a robust product, and one of its advantages over other devices is Cisco's support. The devices have a long lifespan and rarely fail. They are easy to configure and manage, and do they do not require any additional licensing to …
    Incentivized
    Chose Cisco ASA 5500-X with FirePOWER Services
    The network is homogenous to Cisco and the integration with Cisco products is very easy (e.g. Identity Services Engine). As I am a certified engineer in Cisco Security, it feels very easy to handle Cisco products especially as more and more support docs are available across the …
    Incentivized
    Chose Cisco ASA 5500-X with FirePOWER Services
    The [Cisco ASA 5500-X with FirePOWER Services] does compete okay when compared to other devices. This model is begging to age and does not perform as well as the newer models but that is to be expected. I think their interface is okay but again I think ASDM is aging more …
    Incentivized
    Chose Cisco ASA 5500-X with FirePOWER Services
    It has also good customer service and excellent TAC support.
    Incentivized
    Chose Cisco ASA 5500-X with FirePOWER Services
    Cisco technically has better support on things like VPN, but the Fortinet seems slightly cheaper.
    Incentivized
    Fortinet
    Chose FortiGate
    We migrate from Cisco ASA solution to Fortinet FortiGate solution.
    The technical feactures and easy operation were the most driver of our evaluation.
    Finally the high level of Cost over Benefit was very relevant in the project evaluation.
    Incentivized
    Chose FortiGate
    Integrated security features multiple security in one platform, cost effective, centralized management, saclability like its models are availble from small to large enterprise for provide proper throughput according to size we can select model.documentation of all features are …
    Incentivized
    Chose FortiGate
    We have both devices Fortinet FortiGate and ASA with firepower services, but [the] main difference is price. The price is [less for] Fortinet FortiGate and we are getting the all features. Email filtering and DLP is extra features and very advanced which we will get only in …
    Incentivized
    Chose FortiGate
    [Fortinet] Fortigate saved us with raising our availability a lot.
    Incentivized
    Chose FortiGate
    ASA Firewall
    PaloAlto
    Sophos
    Incentivized
    Chose FortiGate
    Ongoing costs and licensing options - the FortiGate product line comes out a winner every time. We especially like the granularity and licensing options compared to something like Meraki that is mostly "all or nothing" or the SonicWall which is less granular and just not as …
    Incentivized
    Chose FortiGate
    Feature to feature comparisons, Cisco and Fortinet are on par with each other. Both have great service and support. Both have robust security features that protect your network from various threats and exploits. Both have great logging and reporting capabilities. Both are high …
    Incentivized
    Key User Insights
    Would buy again
    78%
    Would buy again
    18 Answers
    100%
    Would buy again
    48 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    23 Answers
    100%
    Delivers good value for the price
    47 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    22 Answers
    100%
    Happy with the feature set
    48 Answers
    Lived up to sales and marketing promises
    95%
    Lived up to sales and marketing promises
    19 Answers
    100%
    Lived up to sales and marketing promises
    43 Answers
    Implementation went as expected
    85%
    Implementation went as expected
    17 Answers
    98%
    Implementation went as expected
    46 Answers
    Features
    Cisco ASA 5500-X with FirePOWER ServicesFortiGate
    Firewall
    Comparison of Firewall features of Cisco ASA 5500-X with FirePOWER Services and Fortinet FortiGate
    Feature
    Cisco ASA 5500-X with FirePOWER Services
    9.0
    30 Ratings
    4% above category average
    Fortinet FortiGate
    8.9
    40 Ratings
    3% above category average
    Identification Technologies8.428 Ratings8.638 Ratings
    Visualization Tools9.324 Ratings8.538 Ratings
    Content Inspection8.429 Ratings9.439 Ratings
    Policy-based Controls10.028 Ratings9.040 Ratings
    Active Directory and LDAP10.029 Ratings9.039 Ratings
    Firewall Management Console9.830 Ratings8.640 Ratings
    Reporting and Logging7.629 Ratings7.440 Ratings
    VPN10.030 Ratings8.640 Ratings
    High Availability10.028 Ratings9.535 Ratings
    Stateful Inspection8.14 Ratings9.538 Ratings
    Proxy Server7.23 Ratings10.028 Ratings
    Best Alternatives
    Cisco ASA 5500-X with FirePOWER ServicesFortiGate
    Small Businesses
    SonicWall NSA Series
    Score8.5 out of 10
    SonicWall NSA Series
    Score8.5 out of 10
    Medium-sized Companies
    Barracuda CloudGen Firewall
    Score9.4 out of 10
    Barracuda CloudGen Firewall
    Score9.4 out of 10
    Enterprises
    Cisco Adaptive Security Appliance (ASA) Software
    Score9 out of 10
    Cisco Adaptive Security Appliance (ASA) Software
    Score9 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco ASA 5500-X with FirePOWER ServicesFortiGate
    Likelihood to Recommend
    9.2
    (30 ratings)
    9.0
    (67 ratings)
    Likelihood to Renew
    9.7
    (3 ratings)
    9.9
    (4 ratings)
    Usability
    7.2
    (2 ratings)
    9.0
    (8 ratings)
    Availability
    10.0
    (1 ratings)
    10.0
    (2 ratings)
    Performance
    9.2
    (26 ratings)
    10.0
    (1 ratings)
    Support Rating
    9.9
    (29 ratings)
    8.6
    (26 ratings)
    In-Person Training
    -
    (0 ratings)
    10.0
    (1 ratings)
    Implementation Rating
    10.0
    (2 ratings)
    8.0
    (4 ratings)
    Configurability
    -
    (0 ratings)
    9.0
    (1 ratings)
    Ease of integration
    9.0
    (1 ratings)
    7.0
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    9.8
    (2 ratings)
    Vendor post-sale
    -
    (0 ratings)
    10.0
    (1 ratings)
    Vendor pre-sale
    -
    (0 ratings)
    9.0
    (1 ratings)
    User Testimonials
    Cisco ASA 5500-X with FirePOWER ServicesFortiGate
    Likelihood to Recommend
    Cisco
    This firewall is best suited for the network edge/perimeter deployment. The next gen features works very well and the remote access VPN is also very much suitable for the organizations which have a huge user base working remotely. The Remote Access VPN is very much customizable and the authentication integration option like LDAP and RADIUS provides and addon.
    Incentivized
    Read full review
    Fortinet
    Fortinet FortiGate addressed an immediate security issue we had a few years ago. The device gave us a much clearer picture of the activities on our network and also more importantly, increased our awareness of threats from the internet as a whole. Fortinet FortiGate helps us to mitigate these threats with regular signature updates from Fortiguard labs, identifying certain characteristics which, once recognised by Fortinet FortiGate, can be harnessed to deploy powerful 'playbooks'.
    Incentivized
    Read full review
    Pros
    Cisco
    • The Cisco ASA with FirePOWER Services model works perfectly for network edge protection scenarios.
    • It allows for the creation and connection of sites through site-to-site VPN configuration.
    • It enables remote connection and home office with remote SSL or IPSEC VPN.
    • It has layer 7 traffic protection and visibility.
    • It has anti-malware protection from start to finish.
    • The configuration is easy to perform.
    Incentivized
    Read full review
    Fortinet
    • SD-WAN - Load balancing of Internet traffic is a USP of Fortigate and makes it stand tall in the competition. Be it 3 or more Internet Links, multiple Subnets/segments of users to distribute and bandwidth load balancing for links and users. SLA based monitoring of Internet Links / MPLS links, makes it even better to choose the links on the basis of performance (Latency, packet loss, Jitter etc).
    • SSL VPN configuration - As we all have WFH force (to some extend or all employee) during Covid-19, it is impossible to plan BCP without having a SSL VPN. In Fortigate, the SSL VPN configuration is very easy with the help of wizard. The deep CLI-level debugging is also very helpful in troubleshooting. Type of tunnel can be easily configured - Full Tunnel or Split Tunnel for SSL.
    • Explicit Proxy - This is also a great feature to shape and re-route the traffic, configuring the Proxy on the Firewall itself. We are using this feature in Pilot for now, and planned to rollout in few weeks looking at the success rate of the POC.
    Read full review
    Cons
    Cisco
    • URL Filtering feature could be easier to utilize for beginners
    • I'd like to see a visual of VPN networks setup and show the functioning or malfunctioning status to assist in making troubleshooting easier
    • Recommendations on ACLs for beginners based on their account creation date
    Incentivized
    Read full review
    Fortinet
    • Documentation is missing a great deal of detail and assumes the customer and just guess and fill in the blanks themselves
    • Fortinet has lots and lots of video guides on topics that only a small percentage of customers would ever need
    • The documentation and video guides do not get updated so most is only relevant to older software versions
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    Ever since we installed Cisco ASA 5500-X with FirePOWER Services we have never had to deal with an attack. We can see in the logs almost every day hackers attempting to break into our networks and failing. We also have the ability to blacklist every IP address that attempts to break into our firewalls
    Incentivized
    Read full review
    Fortinet
    Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.
    Incentivized
    Read full review
    Usability
    Cisco
    Cisco firepower provides automatation for an organisations security operations to detect and stop the most advanced threats fast. It also assists in preventing attacks in using intelligence and innovative solutions.
    Incentivized
    Read full review
    Fortinet
    The firewall runs very well, firmware updates are fairly quick but you must follow the upgrade path. Neglecting this step will cause a lot of pain. If you decide to go with Fortinet FortiGate switches and/or access points, they can be managed within the firewall which is great. We're also using the FortiAnalyzer which easily plugs into the firewall for any reporting you may require.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    We have never had an outage caused by firewall failure. We have had a few outages caused by the internet failing or cloud applications going offline but never a firewall breaking down. When making changes we have a very strong change control, major software updates are always carried out out of working hours. At places where we have two firewalls in HA, we are able to do upgrades in working ours and the users will never know that an upgrade is taking place, that how great these firewalls are
    Incentivized
    Read full review
    Fortinet
    We had didn't any hardware failures at our two main office locations and upgraded our units last year after using them for about 5-6 years
    Incentivized
    Read full review
    Performance
    Cisco
    The Cisco ASA 5500X with Firepower performance needs consideration before deploying. Although the solution is Pay as you grow, adding additional features to the system has a negative impact on overall throughput. I would more like now only to deploy the Cisco FPR units as they have better performance and will last the test of time.
    Incentivized
    Read full review
    Fortinet
    Good performance and really good integration. We have integration with Microsoft AD.
    Incentivized
    Read full review
    Support Rating
    Cisco
    I would recommend the purchase of the Smartnet 24x7 service in the case of a unit and the Smartnet 8x5NBD in the case of only one appliance installed on site. This service is important to always have the latest firmware updates, corrective updates and especially the hardware warranty and maintenance service in case of problems. The service is done by phone or on the official Cisco website and I can say that it is very good and efficient.
    Incentivized
    Read full review
    Fortinet
    The Support team at Fortinet is excellent. They can not only help you configure the device for what you are trying to do, they offer suggestions on improving rules, and troubleshooting issues. Their response time is fast, ensuring you are up and running immediately with no questions asked. We had a hard drive failure in one of our Fortinet Fortigate appliances. The tech answered immediately, and started rebuilding the drive after some preliminary investigations. After rebuilding, there were still errors and issues, so they dispatched a brand new Fortinet Fortigate appliance. The tech then backed up the configurations for when the new device came in, which showed up in a few hours. A restore of the configuration took less than a minute, and there were no more errors or issues.
    Incentivized
    Read full review
    In-Person Training
    Cisco
    No answers on this topic
    Fortinet
    I received it a couple years afters use it and it was just to confirm my knowledge about the tool.
    Incentivized
    Read full review
    Implementation Rating
    Cisco
    We implemented a centralized management of all our Cisco ASA 5500-x with FirePOWER Services so that we can have a holistic view of all our sites in London and other European countries. This also helps when making changes, instead of login on to each firewall we can use Firepower Management Center (FMC) to central deploy changes across all devices
    Incentivized
    Read full review
    Fortinet
    Make sure that you have the most current version of FortiOS. Make sure all Fortigates are on the same version
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    Previous],] I was using the [pfSense] in my organization but when i switched to [Cisco ASA 5500-X with FirePOWER Services] I realized there are lots of issue and missing security features in [pfSense]. The deployment and configuration is very easy as compare to [pfSense]. I highly recommend this product to everyone.
    Incentivized
    Read full review
    Fortinet
    [Fortinet] FortiGate is not only cost effective but it gives the comprehensive security against the APT attacks and gives the complete traffic visibility and granular control. You can easily create the VDOMs (Virtual firewall) within a Fortigate firewall and customize the dashboard as per your requirement if you have multiple VDOMs within a single firewall.
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    Cisco
    No answers on this topic
    Fortinet
    No changes needed to terms and conditions.
    Incentivized
    Read full review
    Scalability
    Cisco
    No answers on this topic
    Fortinet
    My environments are pretty small (less than 100 users per location) so no issues here.
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • Working of remote workforce made easy
    • Security was enhanced on the data traffic shared with the vendors due to the use of VPNs
    • Inbound attacks were mostly blocked on the edge and saved a lot of resources (which could had been used in case of attacks getting successful on the application servers)
    Incentivized
    Read full review
    Fortinet
    • The pricing given to us for our firewall was well within what we were already spending for other vendors solutions and had the added value of eliminating a separate expense for a dedicated web filtering appliance.
    • We have also adopted Fortinet's security fabric approach and thus changed vendors for our switch and AP devices. These devices have come at reduced prices as compared to another previous vendor we were using, particularly in relation to ongoing annual maintenance costs.
    Incentivized
    Read full review
    ScreenShots