Fortinet FortiGate-VM vs Juniper vSRX comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Number of Reviews
306
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (2nd), WAN Edge (1st)
Fortinet FortiGate-VM
Ranking in Firewalls
9th
Average Rating
8.4
Number of Reviews
113
Ranking in other categories
No ranking in other categories
Juniper vSRX
Ranking in Firewalls
24th
Average Rating
7.8
Number of Reviews
33
Ranking in other categories
Virtualization Security (3rd), Unified Threat Management (UTM) (8th)
 

Market share comparison

As of June 2024, in the Firewalls category, the market share of Fortinet FortiGate is 22.9% and it increased by 13.2% compared to the previous year. The market share of Fortinet FortiGate-VM is 2.4% and it increased by 54.8% compared to the previous year. The market share of Juniper vSRX is 0.2% and it decreased by 47.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
Unique Categories:
Software Defined WAN (SD-WAN) Solutions
21.5%
WAN Edge
24.4%
No other categories found
Unified Threat Management (UTM)
3.8%
 

Featured Reviews

MP
Jan 9, 2021
Stable with an easy initial setup and good documentation
We primarily use the solution for edge protection as well as the VPN and SD-WAN The solution has many valuable features. We tend to use all of them. The initials setup is pretty easy. The solution offers very good documentation. The solution can scale well. We've been happy with the technical…
Abdelzaher Ahmed - PeerSpot reviewer
Dec 19, 2023
Provides protection from a broad array of network threats
The setup is straightforward for me, but our customers might find it a bit challenging. Overall, following the provided steps and consulting the official materials or documentation makes the FortiGate-VM setup relatively easy.Firstly, we establish a console connection to the firewall and access its default IP. In the second step, we create rules to enable the firewall to access the internet. Following these two steps, we register a rule with Fortinet Broadcom, download the necessary licenses, and upload them. After uploading the license, we set up an interface rule, check the license, and configure interfaces such as LAN, WAN, and VPN. Subsequently, we create profiles, including web filter, application, antivirus, and IPS profiles. The last steps involve configuring interfaces like LAN, WAN, and VPN, as well as attaching profiles to outbound policies. We also consider additional configurations, like server publishing, destination netting, or integrating with PBM for Alibaba Cloud. The final three configurations are optional and depend on the customer's requirements.
JonathanHowell - PeerSpot reviewer
Apr 12, 2024
Provides access to route traffic with virtualization allowing you to leverage computing resources
The key dependency lies in the hardware. If you're hosting it in a virtual environment, it relies on the underlying hardware supporting that environment. Physically, you rely on the circuitry, chips, power, and other components. Therefore, using a virtualized platform introduces an additional layer of abstraction. You'll end up wasting money if you don't know what you're doing and use cases. It's not about buying a virtualized firewall. You're getting a virtualized router and a switch combined into one unit capable of performing telco-grade routing at a layer two level. It's a very complex piece of equipment used for threat management. It is capable of much more. We use it for its versatility; it can serve multiple purposes effectively. You can monitor the hypervisor for key performance indicators and understand how it's running and functioning. It integrates well with the most well-known operational toolsets. Overall, I rate the solution a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The base firewall features are quite valuable to us."
"The technical support in our region is excellent."
"The most valuable features of Fortinet FortiGate are the APIs. They are the most widely known."
"The product is very stable, easy to troubleshoot, and configure, so it has reduced the time it takes for support."
"The inspection and web security features are most valuable."
"The pipe filter application is an outstanding feature."
"We have been able to offer several services to customers in a single box."
"The most valuable feature of this solution is the analytics."
"The most valuable feature is that its IPsec works perfectly."
"The most valuable feature is the WAN optimization."
"The tool improved the security in our company's virtualized environment, as it was helpful in creating an additional layer of security for the organization and for the use of the internet."
"Overall, it's an excellent solution."
"The initial setup is very user-friendly."
"The most valuable features are network security, VLAN, network protection, and encryption are very valuable to us."
"It's almost perfect. It's very stable. We don't have many hardware issues."
"The most valuable features are site-to-site connections and UTM."
"The features we found most valuable are using the IDS and IPS during protection. The application filtering feature is great."
"The dashboard, customization, API, and pricing are good."
"We like the solution’s protocol and its dashboard system."
"Juniper is more flexible with the commit check and the commit confirmed command. The design of the forwarding and contract plan in the operating system is very important for the performance when we have very big traffic."
"It's a very powerful solution and the firewalls offer high performance"
"The pricing is reasonable."
"It's basic functionality is probably the most valuable feature."
"One of Juniper vSRX's most valuable features is its integration with safety applications. It keeps the software secure from developers without relying on third-party solutions."
 

Cons

"With FortiGate, the main complaint that I have heard is about the technical support."
"They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."
"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."
"I would like to see improvements made to the dashboard and UI, as well as to the reporting."
"There are some problems that support cannot give you a logical reason as to why it happened. For example, I had a case where I was dealing with a WhatsApp application that was giving issues. Technical support gave more than one reason it could be giving issues, but none of them solved the problem. Eventually I solved the problem, but it was far from the solutions that support had given."
"The support structure needs to be improved because every time we contact them, there is a delay in the response."
"The support system could be improved."
"FortiLink is the interface on the firewall that allows you to extend switch management across all of your switches in the network. The problem with it is that you can't use multiple interfaces unless you set them up in a lag. Only then you can run them. So, it forces you to use a core type of switch to propagate that management out to the rest of the switches, and then it is running the case at 200. It leaves you with 18 ports on the firewall because it is also a layer-three router that could also be used as a switch, but as soon as you do that, you can't really use them. They could do a little bit more clean up in the way the stacking interface works. Some use cases and the documentation on the FortiLink checking interface are a little outdated. I can find stuff on version 5 or more, but it is hard to find information on some of the newer firmware. The biggest thing I would like to see is some improvement in the switch management feature. I would like to be able to relegate some of the ports, which are on the firewall itself, to act as a switch to take advantage of those ports. Some of these firewalls have clarity ports on them. If I can use those, it would mean that I need to buy two less switches, which saves time. I get why they don't, but I would still like to see it because it would save a little bit of space in the server rack."
"The performance could be better. Some features need to have quality control when the switch is working. The dedicated bandwidth for some users is not reliable."
"We haven't attempted to scale the solution just yet. If we want to scale this solution we may have to look at other models. With certain requirements, we probably wouldn't be able to scale it so well as it is right now."
"The stability could be improved. I find Cisco to be more stable than Fortigate, which is I major differentiator between the two."
"The operating system isn't stable, so it goes to memory counters every night."
"The user interface could be improved."
"The user interface (UI) and the performance of interface both need improvement."
"It would be better if it could provide you with options before completely blocking anything through the web filter. If you are doing a deep SSL inspection on the site if it says it's expired, it doesn't give you the option to continue at your own risk. I can't say that it's bad, but SSL internally isn't really a requirement. However, its security features can help. Right now, we have people going out and spending on purchasing the SSL certificates for internal sites."
"The price model is not transparent by any means and should be made more clear. What's included in the packages is often not very obvious."
"We worked with Cisco's support and Juniper's support and there are some differences, to be honest, Cisco is more available and is more competent at addressing our cases."
"We have some weird errors and some weird behavior on the solution occasionally. The device gets buggy without anyone touching it. It would work and then suddenly stop. Sometimes you need to just move the cards out and restart it again, and it will work. The solution itself, the hardware and the software, there must be some bugs that need to be dealt with."
"The security feature must be improved."
"The reporting can be improved."
"The biggest downside of Juniper vSRX is its pricing, which may be too high for smaller organizations. While it's a decent solution, the cost may limit its accessibility to smaller customers."
"The solution can be improved by allowing automatic updates for the OS devices."
"There are too many types of licenses, which can be confusing."
"The user interface could always be better. They could make it simpler and more intuitive."
 

Pricing and Cost Advice

"Fortinet FortiGate gives you most of the features in one license."
"The pricing is justified. It's a little pricey, but what you pay for is what you get."
"It's a very full-featured and it's priced well solution."
"Our licensing costs are on a yearly basis."
"Compared to other firewall products, it's a little cheaper in terms of pricing."
"The price is high compared to some of the other solutions."
"Fortinet bundles FortiGate with other products and because of this, the price is a little expensive to some SMB enterprises."
"Fortinet FortiGate's price can be reduced."
"There is a benefit in terms of the cost of using this solution because the price is very good."
"This solution is very expensive."
"The license can be purchased at intervals of one, three, and five years."
"The license we pay is a yearly fee. I can't say it's very expensive; it is a good price and is highly suitable for our usage."
"There are yearly or monthly licenses which you can choose from."
"The price falls somewhere in the middle; it's neither cheap nor expensive."
"There is an annual license required to use the solution."
"We are on an annual license for this solution and it could be cheaper."
"It is not that costly."
"After some research, I think that the cost of Juniper is more than Check Point, Palo Alto, and Fortinet."
"The solution could have been cheaper."
"I rate the tool's pricing a five out of ten."
"Our experience purchasing the solution through the AWS Marketplace was good."
"The ongoing licensing cost seems to be pretty standard. There are no additional costs."
"As a customer, the pricing is good for us."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
787,061 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
15%
Comms Service Provider
7%
Manufacturing Company
6%
Computer Software Company
22%
Comms Service Provider
8%
Financial Services Firm
7%
Manufacturing Company
6%
Educational Organization
81%
Computer Software Company
4%
Financial Services Firm
2%
Comms Service Provider
2%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
Which would you recommend - FortiGate VM or Azure Firewall?
Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigat...
What do you like most about Fortinet FortiGate-VM?
An enhanced security solution for any kind of alert that we have configured.
What do you like most about Juniper vSRX?
One of Juniper vSRX's most valuable features is its integration with safety applications. It keeps the software secur...
What is your experience regarding pricing and costs for Juniper vSRX?
The tool is sold in a package. Hence, the individual price is very low.
What needs improvement with Juniper vSRX?
The biggest downside of Juniper vSRX is its pricing, which may be too high for smaller organizations. While it's a de...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
FortiGate Virtual Appliance, FortiGate-VM
No data available
 

Overview

 

Sample Customers

1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
Security7 Networks, COOPENAE
Expedient Data Centers
Find out what your peers are saying about Fortinet FortiGate-VM vs. Juniper vSRX and other solutions. Updated: May 2024.
787,061 professionals have used our research since 2012.