Fortinet FortiOS vs WatchGuard Firebox comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Number of Reviews
309
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (2nd), WAN Edge (1st)
Fortinet FortiOS
Ranking in Firewalls
15th
Average Rating
8.4
Number of Reviews
73
Ranking in other categories
No ranking in other categories
WatchGuard Firebox
Ranking in Firewalls
13th
Average Rating
8.4
Number of Reviews
83
Ranking in other categories
Unified Threat Management (UTM) (4th)
 

Mindshare comparison

As of June 2024, in the Firewalls category, the mindshare of Fortinet FortiGate is 22.6%, up from 20.2% compared to the previous year. The mindshare of Fortinet FortiOS is 0.6%, down from 1.1% compared to the previous year. The mindshare of WatchGuard Firebox is 4.1%, up from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
Unique Categories:
Software Defined WAN (SD-WAN) Solutions
21.5%
WAN Edge
24.4%
No other categories found
Unified Threat Management (UTM)
18.3%
 

Featured Reviews

Viraj Fernandopulle - PeerSpot reviewer
Mar 7, 2024
Includes built-in APIs, is easy to deploy, and provides good insight into our network
FortiGate offers visibility into the types, brands, versions, and users of connected devices. This visibility is crucial for our industrial devices, as their reliable operation is essential to our business. Fortinet Security Fabric empowers us to comply with regulations, governance, and compliance requirements across regions like the US and Europe, ensuring smooth operations for our global business. FortiGate's built-in APIs enable us to integrate with the vendors of our choice. Fortinet's FortiGate is easy to deploy in our environment thanks to its well-written and easy-to-follow documentation. FortiGate is a highly benchmarked product that improves efficiency and adds value to our organization. Although we don't see a benefit overnight, we gradually see the benefits of FortiGate over the years. It has provided a lot of insight into our organization's activities. FortiGate significantly helped reduce the risk of cyberattacks that could disrupt our production. This has protected us against financial losses. Fortinet has its management suite so it helps to centralize the management of network and security operations in our company. This helps us easily manage the issues and solutions that are required. Fortinet FortiGate provides us with actionable data to inform our decisions about the most appropriate course of action. It delivers insights into resource consumption and compromised hosts, helping us identify the source of unauthorized login attempts. This comprehensive view allows us to understand what's entering our network. Fortinet Security Fabric improved security across our industrial control systems. Fortinet FortiGate helped reduce our mean time to remediate. Fortinet FortiGate helped to mature our approach to cybersecurity for protecting our industrial equipment. The level of detail we can see regarding incoming traffic and ongoing activities is quite high. This detailed visibility extends to host configuration and other such aspects, providing us with valuable insights. As a result, Fortinet can provide a clear understanding of how to manage our network and quickly mitigate any issues that may arise.
Xin He - PeerSpot reviewer
Jul 22, 2022
Flexible, easy to use, and meets our requirements
You can have virtual domains. On top of each virtual domain, you can see the independent system. When comparing Fortinet with other vendors, the good part is you can set different priorities. It depends on different VDOMs. In my case, I have two VDOMs. One is called a VPN VDOM; the other is called a web filter VDOM. Usually, for other vendors, no matter how many domains, just one primary device is always a primary one. However, for FortiGate, you can separate them. In my case, I have machine one, and machine two. FortiGate one, Fortigate two. And for each FortiGate, we can have multiple VDOMs. In my case, I have two VDOMs. If you want to save money, you can split the workload, and this capability helps us save on costs.
GV
May 30, 2024
Controls internet access and offers DNS protection and geofencing features
The solution is transparent and easy to set up and maintain. WatchGuard Firebox has always been very effective for many customers who use Firebox to connect their remote sites. Additionally, many customers log in to a Firebox using the WatchGuard Mobile VPN with multi-factor authentication. This setup has proven to be very stable, high quality, and easy to configure. Customers find WatchGuard Firebox to be an expensive solution, but some of them recognize its necessity. However, some customers initially fail to see the need for a firewall. Yet, when it comes time for renewal, after a year or three, they begin to understand its importance, often aided by a chart explaining its benefits. Just like a car requiring periodic servicing, a firewall also necessitates attention. I recommend WatchGuard Firebox to others because it's a very good product. Firstly, it boasts numerous nice features. It's straightforward to implement, maintain, and understand. One particularly appealing feature is the real-time traffic monitoring. Overall, I rate the solution a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"​Easy to implement, and it is also reliable.​"
"Fortinet FortiGate's most valuable features are ease of use, flexibility, and most of the configuration we can be done using the GUI. When we compare Fortinet FortiGate with other solutions the firewall policy are very easy to understand."
"FortiGate SD-WAN facilitated a smooth transition for our customers between their two internet service providers, ensuring uninterrupted connectivity without any downtime."
"Its user interface is good, and it is always working fine."
"With FortiClient, you can easily connect when you are home, check out what you want to do, and connect to your network when you are not at work. You can switch on servers and you can check what is wrong."
"UTM/NGFW features and FortiCloud for logs and backups are awesome."
"The technical support in our region is excellent."
"We use a lot of function on the IPS and it works well for us."
"The most important feature of Fortinet FortiOS is the IPS."
"For my organization, it has become much easier to scan the firewalls because the solution is more user-friendly than competitors."
"The most valuable features of Fortinet FortiOS are the SD-WAN, SSL inspection, and IDS/IPS functions."
"There are many useful features, such as web security and advanced threat detection."
"We found the initial setup to be straightforward."
"The technical support on offer has always been quite good."
"The main features I find useful are intrusion prevention and web filtering. Additionally, the solution is easy to manage."
"We've been happy with the pricing."
"They've done a lot of work with their SD-WAN, which we do use, to have our old internet service with our new internet service. If anything goes down on a particular interface, I can have different rules applied. Most of my users don't even know when our primary internet goes down anymore... I don't have to be here to do anything to switch it to our backup internet or to switch it back."
"We experienced that WatchGuard is easy to setup regarding VPN compared to other firewalls of other brands."
"There are no problems with the technical support. If a problem occurs it gets resolved immediately with our technical support partners."
"The Dimension control, the one-spot reporting and control, has been nice. It's been easy to go in and make sure people are doing what they're supposed to be doing and that only the right stuff is getting in."
"​Efficient to setup, run, and maintain. Saving man hours and cost in the process."
"Their support is excellent, and the stability is very good."
"Simple to move settings between WatchGuard boxes."
"The features that I have found most valuable are the FireWall features. The management side of WatchGuard is quite easy because it supports two ways to manage it - by the web and the other one they call WatchGuard systems manager. I used to be familiar with WSM only, but they improved their GUI in the web browser and now it is much easier to do it within the web browser."
 

Cons

"FortiLink is the interface on the firewall that allows you to extend switch management across all of your switches in the network. The problem with it is that you can't use multiple interfaces unless you set them up in a lag. Only then you can run them. So, it forces you to use a core type of switch to propagate that management out to the rest of the switches, and then it is running the case at 200. It leaves you with 18 ports on the firewall because it is also a layer-three router that could also be used as a switch, but as soon as you do that, you can't really use them. They could do a little bit more clean up in the way the stacking interface works. Some use cases and the documentation on the FortiLink checking interface are a little outdated. I can find stuff on version 5 or more, but it is hard to find information on some of the newer firmware. The biggest thing I would like to see is some improvement in the switch management feature. I would like to be able to relegate some of the ports, which are on the firewall itself, to act as a switch to take advantage of those ports. Some of these firewalls have clarity ports on them. If I can use those, it would mean that I need to buy two less switches, which saves time. I get why they don't, but I would still like to see it because it would save a little bit of space in the server rack."
"They should improve high CPU and memory usage that occurs."
"There are some license issues. Not every feature must have a separate license. There must be some of kind synergy between the license so we don't have to pay for every individual license that we would like to have."
"They are doing good, but they can improve the distributor assignment. The availability of the product and the timeline of delivery are the main things. The distribution should be swift, and the distributor should not reach out to end customers directly. They should work as a distributor. There should also be one more local distributor. Currently, there is only one distributor in Pakistan, and the rest of them are in UAE. It is difficult to work with only one distributor. Sometimes, you don't get along with the same distributor, and that's why they should have one more distributor. Their licensing should also be improved. The activation or renewal of the product should be done from the date of renewal, not from the date on which the license expired."
"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."
"The captive portal could be improved."
"The visibility of the network can be better. The GUI can be improved for better visibility of the network flow. Other solutions have better GUI in terms of network visibility."
"The command line is complicated, and the interface could be better."
"They need to integrate more with the SD-WAN."
"The solution's graphic interface could be a bit more responsive and include notations when changes are made."
"The pricing model makes this product far more expensive than similar solutions."
"SD-WAN configuration could be easier."
"Some features I have found to be hidden and cannot be accessed through the graphical user interface, you can only access them through the command-line interface(CLI). All the features should be accessible through the graphical user interface."
"FortiOS's interface and monitoring could be improved."
"The support is not very good, but the product is stable so it is not so much of a problem."
"There is room for improvement in the reporting part. The reporting is only for logging data, and it's just a tabulation of the log in the report. I would like to be able to take down more information in the event of an incident."
"Sometimes, the writing rules are a little confusing in how am I doing them."
"The level of support from WatchGuard is not as good."
"We were able to take from an older configuration, build a new one quickly, and get it up and running, which didn't take long, but there was some pain around it."
"The product's technical support services need improvement."
"The usability could be better, but it is definitely manageable. If we have to go to a backup internet connection, that could be a little bit easier."
"The VPN aspect of the WatchGuard Firebox is an area that could potentially benefit from improvement. We encountered difficulties while attempting to integrate Windows 11 laptops into the system, which resulted in unreliable connections. After some research, we discovered that this was primarily due to compatibility issues with Windows 11 and required a patch. However, it was still a challenge as it seemed that even when we tried to keep the laptops on Windows 10, they still exhibited the same issues as Windows 11 machines. Despite WatchGuard attributing the problem to Microsoft, we were eventually able to find a solution and all the machines are now functioning seamlessly."
"I don't think I can get a full-blown DNS client from it. I've been trying to have DNS services. It has forwarding, but I don't get the services of a full DNS client. My main difficulty with it is that I can't run a complete service. I need NTP. I need DNS. I need DHCP for my domain, but I only get forwarding. As far as I can tell, I don't get caching and the kinds of reporting and registration needed to host a DNS for a domain. I have to have a separate solution for that."
"The area where I think this product can be improved is the user interface and the reporting. It can be quite difficult to find the correct logs and to actually find out what is going on. The digging can be time-consuming."
 

Pricing and Cost Advice

"Its pricing is fine. It is on a yearly basis. Other than the licensing fee, there is no extra fee."
"Fortinet FortiGate is reasonably priced."
"The pricing is fair."
"The price of Fortinet FortiGate is reasonable."
"Price-wise, it's at a good price point for our market."
"It's very affordable."
"I give the pricing a nine out of ten."
"The price of FortiGate support is too expensive."
"The price of Fortinet FortiOS is reasonable and it is paid annually. You are able to select the features that you want."
"The support contracts are usually about $100 - $200 a device."
"We had a three-year license to use Fortinet FortiOS and we are going to renew it this year."
"Pricing depends on implementation and licensing choices and is usually not a practical budget choice for small businesses."
"FortiOS is affordable, but its price could be lower."
"A yearly subscription might be around $20,000 to $30,000."
"The price of Fortinet FortiOS has been reasonable."
"Be sure to choose a licensing plan that leaves a little headroom so performance is not an issue."
"It is an entry-level product, so the price is cheap."
"WatchGuard had a very competitive price. It was only 10 to 20 percent more than a single instance device but with that extra cost it provided a second load balancing device... unlike other brands whose method of hardware and software licensing would have doubled our cost."
"WatchGuard offers competitive pricing with attractive margins, benefiting both the company and its partners."
"I would rate the pricing at seven out of ten. As for the licensing costs, we typically have yearly licenses for our clients, but there are no additional costs beyond the standard licensing fees."
"It costs me about $800 a year."
"It's an affordable tool"
"We only license our corporate one and the one we have at our DR site, we don't worry about the branches. It doesn't pay for us to license the ones at the branches. What they charge for what they call basic maintenance is extremely high for those little fireboxes."
"The cost three years ago was about $800."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
787,779 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
15%
Comms Service Provider
7%
Manufacturing Company
6%
Computer Software Company
17%
Financial Services Firm
8%
Government
7%
Manufacturing Company
7%
Computer Software Company
18%
Comms Service Provider
10%
Government
6%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
What do you like most about Fortinet FortiOS?
The SSL VPN is fee for use is most attractive.
What is your experience regarding pricing and costs for Fortinet FortiOS?
The solution is cost effective. I would rate the pricing a five out of ten.
What is your primary use case for WatchGuard Firebox?
We are providing our services to all WatchGuard customers in the region.
What is your primary use case for WatchGuard Firebox?
We just use it as a secondary WiFi device. We're a small office and we needed to set up a WiFi device for a few of ou...
What is your primary use case for WatchGuard Firebox?
We're a hospital and we use it for developing our incoming and outgoing policies, and we also use it for VPN.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
No data available
No data available
 

Overview

 

Sample Customers

1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Ellips, Diecutstickers.com, Clarke Energy, NCR, Wrest Park, Homeslice Pizza, Fortessa Tableware Solutions, The Phoenix Residence
Find out what your peers are saying about Fortinet FortiOS vs. WatchGuard Firebox and other solutions. Updated: May 2024.
787,779 professionals have used our research since 2012.