Fortinet FortiGate vs. HPE Aruba Networking EdgeConnect SD-WAN

We reviewed many different vendors product offerings, we found the Fortinet FortiGate to best fit our needs. We upgraded from a previous firewall, the migration was a fairly easy process. We were also able to consolidate multiple firewalls into one unit using vdoms. It's been helpful to have one pain of glass, one support contract and easy to work with support. These firewalls are feature rich which is great, but the support contracts are expensive.

Incentivized

Have remote sites and need them to feel local? Want to get all your locations virtually on the same network? This is the way. And if you're like us and need an easy way to manage all your remote locations in one place this is the tool you want to use.

Incentivized

• It is the most reliable NGFW that we have ever been touch with it.
• You can easily upgrade the firewall cluster firmware without user attention!!!
• User IDentity based feature is fantastic and intrusion prevention just works with least false-positive possible.
• Very reachfull and intuitive GUI, just love it

Incentivized

• The software and web interface is nicely designed
• Fewer bugs than some other competing services

Incentivized

• When we switched to Fortinet Fortigate, it took some time getting used to and become familiar with the new interface. Being used to strictly command-line interfaces, a full GUI-based firewall was something brand new. Careful planning had to be done when creating rules to ensure we didn't miss anything. However, once we got used to the new GUI interface, going from one Fortinet product to another was simple, as Fortinet used the same interface for all of its devices.

Incentivized

• There are a lot of menus for items to hide under
• Often there are alarms that are false positives due to bugs in the code - these are usually rectified in the next patch but that seems to be a common occurrence with updates
• Can only have 7 "BIOs" - which are effectively policies that you use to choose how traffic is handled in terms of routing and QoS
• Devices throughput is capped by Aruba licensing meaning that's an additional concern you'll have to monitor and take into consideration when choosing ISPs.
• Alerts sometimes don't tell you things you'd like to know (like when a site is nearing its bandwidth cap)

Incentivized

Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.

Incentivized

The user interface shared among many simultaneous users is very easy to get around. With shared favorites among users, most tasks are easily bookmarked and can quickly be found and edited. Their strategy for web filter integration is easy to understand and manage as well. With some general direction, setup and maintenance were easy to do and easy to teach others in the organization to do as well.

Incentivized

The product and its management as a whole are worth investigating for any kind of people interested in looking at new SD-WAN appliances. The devices possess a lot of capability for granularity which makes them much more advanced than other products I've worked with in the past. Ironically, for all the granularity though, this product is held back that you can ultimately only have 7 different policies for routing decisions. We've ran into instances where we wanted two sites to only share certain routes between each other (through the use of tags which are basically an arbitrary way to say this traffic is special) but then we had to collapse some of our routing decisions in order to make a specific route table for these two to be able which felt like a step back in the advanced routing decisions we had previously made

Incentivized

We had didn't any hardware failures at our two main office locations and upgraded our units last year after using them for about 5-6 years

Incentivized

Good performance and really good integration. We have integration with Microsoft AD.

Incentivized

We live in Turkey. Fortinet's Turkey office [dealt] constantly with us in our every problem or our experience. In addition, global support teams also supported every ticket we opened in every problem we encountered. They support innovative approaches and evaluate and offer solutions. In this context, they were very supportive of the problems we encountered in previous versions.

I received it a couple years afters use it and it was just to confirm my knowledge about the tool.

Incentivized

Make sure that you have the most current version of FortiOS. Make sure all Fortigates are on the same version

Incentivized

One of the biggest advantages over competitors that Fortinet FortiGate leverages well is its remote virtual private networks options. Licensing is included with Fortinet FortiGate units at no extra cost. We find that the telemetry is easier to compile and most importantly communicate with non technical members of staff. The Fortinet FortiGate unit is also extremely stable for long periods of time without showing signs of needing a reboot.

Incentivized

Prisma SD-WAN is a very simple solution to configure and maintain (so much to the point that in that environment, I questioned if my skills as a Network Engineer were needed). However it worked almost primarily on its own with very little input, by default and at the time of review had no way to do fully mesh (which was desired), and constantly suffered from memory leak. Its integrations were through the use of obscure tags and suffered from a "when it works - it works but when it doesn't - it doesn't and you don't know why" mentality. In contrast, HPE Aruba Networking EdgeConnect SD-WAN gives you a lot of insight into what is going on with the site, the integrations are done easily within Orchestrator (the control plane), and ultimately the product is typically a very stable product with many ways to configure and tweak the solution to fit your business needs.

Incentivized

My environments are pretty small (less than 100 users per location) so no issues here.

Incentivized

• SD-WAN : Can't stress it further that we are very happy with this functionality and outcomes in the org. We have multiple WAN and MPLS links and traffic switching becomes an important in order to utilize the best performing line.
• QoS : We use QoS for almost all internet traffic, be it Web browsing by users, IOT segment, Application based traffic policy and VIP and normal user based bandwidth allocation.
• SSL and IPSec VPN, both features are fully used to it absolute capacity. IPSec tunnels with multiple sister companies across globe.

• ROI is still to be determined as you have to calculate the existing hardware costs
• Theoretically you could be saving lots of time managing all the hardware in between sites
• SDWAN is still new and may take an entirely new budget to accomplish

Incentivized