Cisco Software-Defined Access (SD-Access) vs. Fortinet FortiGate

It's well suited in our corporate offices, where all our business users resides and where we can control all their accesses. What doesn't really fit well is when we have our branch fronts, where all the software domain access features aren't utilized to its fullest, due to the fact that customers and users don't really need to have all the security features that SDA provides.

Incentivized

We reviewed many different vendors product offerings, we found the Fortinet FortiGate to best fit our needs. We upgraded from a previous firewall, the migration was a fairly easy process. We were also able to consolidate multiple firewalls into one unit using vdoms. It's been helpful to have one pain of glass, one support contract and easy to work with support. These firewalls are feature rich which is great, but the support contracts are expensive.

Incentivized

• Automation, pushing template-based configuration to multiple devices in one push saves time and manpower.
• Assurance [helps trace] issues related to devices, clients, and provide the troubleshoot as [the] best practices.
• Segmentation, with the use of the SGT tags, we are able to achieve segmentation and micro-segmentation securely.

Incentivized

• It is the most reliable NGFW that we have ever been touch with it.
• You can easily upgrade the firewall cluster firmware without user attention!!!
• User IDentity based feature is fantastic and intrusion prevention just works with least false-positive possible.
• Very reachfull and intuitive GUI, just love it

Incentivized

• Documentation: Working in this solution I realized there were missing information details about the fusion device support for nexus.
• Fusion router: This roll in the fabric should be already integrated in the solution, right now it is configured manually.
• Bugs: Unfortunately the solution still present a lot of bugs, mainly in the controller.

Incentivized

• When we switched to Fortinet Fortigate, it took some time getting used to and become familiar with the new interface. Being used to strictly command-line interfaces, a full GUI-based firewall was something brand new. Careful planning had to be done when creating rules to ensure we didn't miss anything. However, once we got used to the new GUI interface, going from one Fortinet product to another was simple, as Fortinet used the same interface for all of its devices.

Incentivized

Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.

Incentivized

It is difficult to start using the product due to its unfamiliar name and acronyms. ,The task should be accomplished in a specific order to ensure success

Incentivized

The user interface shared among many simultaneous users is very easy to get around. With shared favorites among users, most tasks are easily bookmarked and can quickly be found and edited. Their strategy for web filter integration is easy to understand and manage as well. With some general direction, setup and maintenance were easy to do and easy to teach others in the organization to do as well.

Incentivized

We had didn't any hardware failures at our two main office locations and upgraded our units last year after using them for about 5-6 years

Incentivized

Good performance and really good integration. We have integration with Microsoft AD.

Incentivized

As far as my experience with SD-Access -I'd say things that can be improved are - better functionality with ISE, ease to understand licensing and better documentation for configuration (add-ons, etc), and licensing.

Incentivized

We live in Turkey. Fortinet's Turkey office [dealt] constantly with us in our every problem or our experience. In addition, global support teams also supported every ticket we opened in every problem we encountered. They support innovative approaches and evaluate and offer solutions. In this context, they were very supportive of the problems we encountered in previous versions.

I received it a couple years afters use it and it was just to confirm my knowledge about the tool.

Incentivized

I rated the training an 8 because overall, it was well-structured, and the instructor was highly knowledgeable on the subject matter. The content was relevant, and I appreciated the clear explanations of complex topics. However, I felt that some sections were covered too quickly, making it difficult to fully absorb the information before moving on. Additionally, I would have liked more time dedicated to Q&A, as there were moments when I had questions but didn’t get the opportunity to ask them due to time constraints. Adding more interactive discussions or hands-on exercises could further enhance the learning experience and make it even more engaging

Incentivized

At the beginning, we had to open a TAC case for every single step during the implementation phase.

Incentivized

Make sure that you have the most current version of FortiOS. Make sure all Fortigates are on the same version

Incentivized

Basically, we have various devices and solutions from Cisco and we are more focused on the next generation networks with the best support. We knew that Cisco has the best team sitting to support [any] issues and help us to troubleshoot whenever we need it. So we go with Cisco for this solution.

Incentivized

One of the biggest advantages over competitors that Fortinet FortiGate leverages well is its remote virtual private networks options. Licensing is included with Fortinet FortiGate units at no extra cost. We find that the telemetry is easier to compile and most importantly communicate with non technical members of staff. The Fortinet FortiGate unit is also extremely stable for long periods of time without showing signs of needing a reboot.

Incentivized

My environments are pretty small (less than 100 users per location) so no issues here.

Incentivized

• Positive: Less time to provisioning a device in the campus Lan network
• Positive: Less time to troubleshoot the network
• Negative: the implementation phase itself was too long because of a lot of bugs in the oldest versions.

Incentivized

• SD-WAN : Can't stress it further that we are very happy with this functionality and outcomes in the org. We have multiple WAN and MPLS links and traffic switching becomes an important in order to utilize the best performing line.
• QoS : We use QoS for almost all internet traffic, be it Web browsing by users, IOT segment, Application based traffic policy and VIP and normal user based bandwidth allocation.
• SSL and IPSec VPN, both features are fully used to it absolute capacity. IPSec tunnels with multiple sister companies across globe.