Cisco Catalyst SD-WAN vs. Fortinet FortiGate

The best case, what I recommend to others and to clients to use is Cisco Catalyst SD-WAN one for is the case when you have a huge number of branches or small offices or remote offices, you name it. Even home offices, you have a large number and you want this whole infrastructure to be extremely easy to set up and also to have everything almost the same, not to have deviations from the standard configuration. This is the sweet spot for introducing Cisco Catalyst SD-WAN.

Incentivized

We reviewed many different vendors product offerings, we found the Fortinet FortiGate to best fit our needs. We upgraded from a previous firewall, the migration was a fairly easy process. We were also able to consolidate multiple firewalls into one unit using vdoms. It's been helpful to have one pain of glass, one support contract and easy to work with support. These firewalls are feature rich which is great, but the support contracts are expensive.

Incentivized

• I will say the ease of use. I know it's very much a template based with feature templates and device templates when deployed properly. I truly believe that the tool can be very, very effective and actually quite robust for us to leverage for globally because we manage a lot of distribution centers and it's all over the world and a different environment in each and every location and obviously across the global markets as well. We've got a wide range of use cases and how it would be very beneficial to each of our business units that we support.

Incentivized

• It is the most reliable NGFW that we have ever been touch with it.
• You can easily upgrade the firewall cluster firmware without user attention!!!
• User IDentity based feature is fantastic and intrusion prevention just works with least false-positive possible.
• Very reachfull and intuitive GUI, just love it

Incentivized

• The initial setup and configuration of the software can be somewhat complex, especially if you are not familiar with SD-WAN technology
• It has many advanced features and capabilities and as so it can be difficult to find the specific setting or option that you are looking for in the interface

• When we switched to Fortinet Fortigate, it took some time getting used to and become familiar with the new interface. Being used to strictly command-line interfaces, a full GUI-based firewall was something brand new. Careful planning had to be done when creating rules to ensure we didn't miss anything. However, once we got used to the new GUI interface, going from one Fortinet product to another was simple, as Fortinet used the same interface for all of its devices.

Incentivized

I would rate SD-WAN highly because it has significantly improved network performance, reliability, and cost-efficiency for my organization. Its ability to optimize traffic dynamically, enhance security, and simplify management across multiple locations has been invaluable. With SD-WAN, we’ve reduced dependency on costly MPLS, improved cloud application performance, and gained greater control over our network infrastructure.

Incentivized

Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.

Incentivized

No very intuitive for none trained customer, very complicated to assure a day to day operations if you don't have a strong knowledges on network routing OSPF BGP RIP etc... The different platforms and range of furnitures with specific options is very complicated for the integration and consolidation of the solution.

Incentivized

The user interface shared among many simultaneous users is very easy to get around. With shared favorites among users, most tasks are easily bookmarked and can quickly be found and edited. Their strategy for web filter integration is easy to understand and manage as well. With some general direction, setup and maintenance were easy to do and easy to teach others in the organization to do as well.

Incentivized

I think if we could afford, we could have HA inplace but we planned out outage and workaround to avoid any outages.

Incentivized

We had didn't any hardware failures at our two main office locations and upgraded our units last year after using them for about 5-6 years

Incentivized

It does slow down over the period but it's same with other product. you need to clear/reboot services.

Incentivized

Good performance and really good integration. We have integration with Microsoft AD.

Incentivized

Initial setup of any SD-WAN is complicated and difficult because there is so much to do and it is so very granular. Because of this, Cisco has a number of free onboarding help setups. I worked one-on-one with a couple of engineers during our POC, and those relationships continued afterwards into the Pilot. And that's not even counting the Cisco TAC experience or the number of How-To videos and documents they have uploaded on their sites.

We live in Turkey. Fortinet's Turkey office [dealt] constantly with us in our every problem or our experience. In addition, global support teams also supported every ticket we opened in every problem we encountered. They support innovative approaches and evaluate and offer solutions. In this context, they were very supportive of the problems we encountered in previous versions.

I received it a couple years afters use it and it was just to confirm my knowledge about the tool.

Incentivized

I was late to participate but my team was very happy with the outcome.

Incentivized

Make sure that you have the most current version of FortiOS. Make sure all Fortigates are on the same version

Incentivized

We've used the old Cisco SD-WAN, which no longer exists. It was a lot more complex to configure what is now called Cisco Catalyst SD-WAN. So they've definitely come a long way in that it is a lot less complicated to set up and template based.

Incentivized

One of the biggest advantages over competitors that Fortinet FortiGate leverages well is its remote virtual private networks options. Licensing is included with Fortinet FortiGate units at no extra cost. We find that the telemetry is easier to compile and most importantly communicate with non technical members of staff. The Fortinet FortiGate unit is also extremely stable for long periods of time without showing signs of needing a reboot.

Incentivized

Really strength in scalability. Only thigs it's depends on some prototype Cisco product which you can't work with other Cisco products.

Incentivized

My environments are pretty small (less than 100 users per location) so no issues here.

Incentivized

• It had a very positive experience, especially for the power plants that have actually already transitioned into Cisco Catalyst SD-WAN. I think Cisco Catalyst SD-WAN is a very powerful tool for them because again, it allows peace of mind for redundancy purposes. Most power plants are located in a very remote area where before they used to have only certain choices for circuits to get out. So this allows to integrate any choice that you have there, not just point to point. So no, it is been great. Again, we're still in the process of transforming the whole network into Cisco Catalyst SD-WAN, so yeah, no, so far so good.

Incentivized

• SD-WAN : Can't stress it further that we are very happy with this functionality and outcomes in the org. We have multiple WAN and MPLS links and traffic switching becomes an important in order to utilize the best performing line.
• QoS : We use QoS for almost all internet traffic, be it Web browsing by users, IOT segment, Application based traffic policy and VIP and normal user based bandwidth allocation.
• SSL and IPSec VPN, both features are fully used to it absolute capacity. IPSec tunnels with multiple sister companies across globe.