Cisco Adaptive Security Appliance (ASA) Software vs. Fortinet FortiGate

We moved our operations entirely to the cloud a few years ago. We loved the stability and scalability of the ASA and wanted to, somehow, keep using it. We discovered that ASA was available in the cloud as well and it was branded ASAv. We tested it and noticed that it was equally robust and a perfect fit for us. During the entire migration period, we used ASAv for cloud operations and put a lot of load on it. ASAv performed very well and gave us an easy transition from on-prem to the cloud.

Incentivized

We reviewed many different vendors product offerings, we found the Fortinet FortiGate to best fit our needs. We upgraded from a previous firewall, the migration was a fairly easy process. We were also able to consolidate multiple firewalls into one unit using vdoms. It's been helpful to have one pain of glass, one support contract and easy to work with support. These firewalls are feature rich which is great, but the support contracts are expensive.

Incentivized

• How we can manage: ASDM the GUI is so much easier to manage it even for a new guy also.
• Traffic handling capacity
• More secure and the different features it gives.
• Support from the TAC team or from the community manages to handle issues very efficiently.

Incentivized

• It is the most reliable NGFW that we have ever been touch with it.
• You can easily upgrade the firewall cluster firmware without user attention!!!
• User IDentity based feature is fantastic and intrusion prevention just works with least false-positive possible.
• Very reachfull and intuitive GUI, just love it

Incentivized

• The Java based ASDM can botch commands and isn't compatible on some more locked down systems.
• Monitoring. Really the same complaint as above, the monitoring available through the ASDM is crappy at best. A much better solution is to send the logs and mirror packets to a SEIM, but that can create issues of its own when looking for realtime analysis.
• Compatibility across other ASA models. ASA 5520s don't play well with 5525X which don't play well with older 5510s. Each is great on it's own, but it's next to impossible to logically stack them or have them as layers of firewalls in an infrastructure.
• Lack of cloud based management. The Cisco Meraki security devices do this well, but the ASAs are still behind in this regard.

Incentivized

• When we switched to Fortinet Fortigate, it took some time getting used to and become familiar with the new interface. Being used to strictly command-line interfaces, a full GUI-based firewall was something brand new. Careful planning had to be done when creating rules to ensure we didn't miss anything. However, once we got used to the new GUI interface, going from one Fortinet product to another was simple, as Fortinet used the same interface for all of its devices.

Incentivized

To be honest there has been now great products out in the market compared to Cisco ASA. I beleieve Cisco has to do a lot of improvement in this area. The other defeiniete factors is the cost when it comes to renewals which is always a premium on Cisco products

Incentivized

Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.

Incentivized

The user interface shared among many simultaneous users is very easy to get around. With shared favorites among users, most tasks are easily bookmarked and can quickly be found and edited. Their strategy for web filter integration is easy to understand and manage as well. With some general direction, setup and maintenance were easy to do and easy to teach others in the organization to do as well.

Incentivized

I generally have not noticed the outages, however since it's a machine it can malfunction, we need to implement the firewall infrastructure in such a way that it is highly available with device failure, region failure etc. Else any solution will be having the issues if they are not build with resiliency.

Incentivized

We had didn't any hardware failures at our two main office locations and upgraded our units last year after using them for about 5-6 years

Incentivized

Good performance and really good integration. We have integration with Microsoft AD.

Incentivized

The support is usually very good and gets back to you very quickly. However I had some instances of when two engineers will give me wildly different answers to what I thought was a simple question. Overall however I do rate the support highly and they are generally always very good.

Incentivized

We live in Turkey. Fortinet's Turkey office [dealt] constantly with us in our every problem or our experience. In addition, global support teams also supported every ticket we opened in every problem we encountered. They support innovative approaches and evaluate and offer solutions. In this context, they were very supportive of the problems we encountered in previous versions.

I received it a couple years afters use it and it was just to confirm my knowledge about the tool.

Incentivized

It was quite a good one, how ever requires an expertise to deploy hence the SMB segment would be finding it difficult to implement this product. The one good reason is that there are lot of ASA certified engineers in compared to the other certified engineers. Hence this resembles positively on the deployment as you have quite a lot of experienced engineer on your deployment

Incentivized

Make sure that you have the most current version of FortiOS. Make sure all Fortigates are on the same version

Incentivized

Cisco has made it easy to buy, set up, and manage all of our firewalls with the central FirePower Management Center. All licensing is done via one license portal too. Tech support is standardized for all ASA devices and like support engineers who know the different models to provide timely help for any issues. Cisco Talos is a premier could platform which scours the internet looking for threats and develops protections for the ASA's and as such provides zero second coverage when it best can detect global issues.

Incentivized

One of the biggest advantages over competitors that Fortinet FortiGate leverages well is its remote virtual private networks options. Licensing is included with Fortinet FortiGate units at no extra cost. We find that the telemetry is easier to compile and most importantly communicate with non technical members of staff. The Fortinet FortiGate unit is also extremely stable for long periods of time without showing signs of needing a reboot.

Incentivized

My environments are pretty small (less than 100 users per location) so no issues here.

Incentivized

• I know a customer who is still using a Pix[.]
• The 5510 is still being used in one of our setups, and still doing its job this is a lot of Return on Investment.
• We have managed to turn around projects quickly because most of our engineers understand this firewall very well. We deploy them in a matter of minutes[.]

Incentivized

• SD-WAN : Can't stress it further that we are very happy with this functionality and outcomes in the org. We have multiple WAN and MPLS links and traffic switching becomes an important in order to utilize the best performing line.
• QoS : We use QoS for almost all internet traffic, be it Web browsing by users, IOT segment, Application based traffic policy and VIP and normal user based bandwidth allocation.
• SSL and IPSec VPN, both features are fully used to it absolute capacity. IPSec tunnels with multiple sister companies across globe.