Fortinet FortiGate vs Juniper Contrail SD-WAN comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
13,719 views|10,274 comparisons
90% willing to recommend
Juniper Logo
829 views|432 comparisons
83% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Fortinet FortiGate and Juniper Contrail SD-WAN based on real PeerSpot user reviews.

Find out in this report how the two Software Defined WAN (SD-WAN) Solutions solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Fortinet FortiGate vs. Juniper Contrail SD-WAN Report (Updated: March 2024).
769,976 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"We are using the FortiGate 100D series. VPN, firewall, anti-malware, OTM, and intrusion prevention are useful features.""Unified Threat Management (UTM) features.""The solution is stable.""The initial setup of Fortinet FortiGate was straightforward.""You can create multiple Virtual Domains (VDOMs), which are treated as separate firewall instances.""The security features are about the best that I've seen anywhere.""We purchased Fortinet because of the pricing, its functionality, because it met our requirements, and the total cost of ownership over five years was quite reasonable. In the market, Fortinet is rated quite well.""Its stability is the most valuable."

More Fortinet FortiGate Pros →

"The solution is more specific about what's happening since it explains where the problem may lie and points out areas where there is a problem. So, we like that it provides more visibility.""It gives you that level of visibility to understand what's going on between layer four and layer seven.""It supports desktop management, network management, and SD-WAN policies.""My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH.""The support is very good from Juniper and from the local distributors.""I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provisioning tool. Unlike solutions from Palo Alto or other SD-WANs orchestrated by a SaaS solution, Juniper Contrail SD-WAN already had the files and built their SaaS to orchestrate the configuration. Initially, you didn't do much, but then it started adding some routing capabilities."

More Juniper Contrail SD-WAN Pros →

Cons
"Its reporting capabilities can be improved. It should have some out-of-the-box reporting capabilities and some degree of customization. The basic reporting that it currently has is not sufficient to create more usable reports. It needs some sort of out-of-the-box reporting. They try to make customers purchase FortiAnalyzer for this kind of reporting, which is an additional cost. Other firewall vendors, such as SonicWall and Sophos, provide this sort of reporting without any additional cost.""The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware.""Technical support needs to be improved.""There are mainly two areas of improvement in Fortinet FortiGate— the licensing cost and the timing of upgrading licenses for boxes.""Usually, we sell the bundle with the UTM or threat management piece with IPS, IDS. Other providers, such as Palo Alto, are ahead in terms of safe functionality. So, for me, delivering truly safe service is probably something that still needs to be improved.""I don't really have anything negative to say as far as Fortinet firewalls are concerned. If anything, they can support a user a little bit better. They can stop being so time-sensitive about how much time the support call has taken, and they can help you do it yourself.""I haven't had a single issue since using Fortinet.""They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."

More Fortinet FortiGate Cons →

"The only issue was the switch we got, which was a little problematic because it was PoC equipment, and we had a little problem with that.""The solution installs similarly to competitors. It is not more difficult or easier. However, it could be easier and take less time for the installation.""Areas for improvement in the Juniper Contrail SD-WAN solution include the on-premises deployment process.""The solution is expensive. Its support can be better.""Implementing new branches or changing existing ones in Juniper Contrail SD-WAN wasn't as straightforward as with other solutions like Meraki SD-WAN, which is almost plug-and-play with its zero-touch provisioning. In Juniper Contrail SD-WAN, it was more challenging.""The training could be better. When it comes to the demo dashboard capability, I feel like it could be much easier for our customers to use. Our last customer complained about this."

More Juniper Contrail SD-WAN Cons →

Pricing and Cost Advice
  • "Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
  • "These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
  • "Go for long term pricing negotiated at the time of purchase."
  • "Work through partners for the best pricing."
  • "The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
  • "Easy to understand licensing requirements."
  • "​We saved a bundle by not needing all the past appliances from an NGFW.​"
  • "The cost is too high... They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost."
  • More Fortinet FortiGate Pricing and Cost Advice →

  • "The licensing structure is very flexible."
  • "The cost of the solution is a little expensive. The hardware is a one-time purchase fee and the software is purchased on an annual basis. There are additional costs for other software features that are available which are on an annual basis, such as extra capacity."
  • "They are neither very expensive nor cheap. So, we can consider its pricing somewhere in the middle."
  • More Juniper Contrail SD-WAN Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
    769,976 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main hang-ups will be with the VIP/load balancing and SSL. For some reason that completely escapes me, both of these vendors make getting valid certificates onto their boxes unnecessarily difficult -- the Fortinet appliances more so than the Sophos UTM appliances. At one point a Fortinet engineer had to write an entire manual on how to get an SSL certificate uploaded successfully on the 4.x firmware Sophos: The one feature that is missing (and this makes some amount of sense) from the Sophos appliance is BITS caching for updates. Other than that, Sophos offers a full replacement for TMG on UTM9. The XG platform also offers a replacement for the TMG; however, some of the rumblings about upcoming releases suggests that Sophos is going to give XG the Apple iOS treatment and "streamline" the interface...potentially cutting out/hiding some functionality. On the effectiveness of the NGFW, Sophos is mostly good but has a few issues blocking all pieces of an application. For instance, we had to build custom blocking rules for OpenVPN (the vpn was being used to bypass the content filter) because the default Application Control wasn't effectively blocking the application. Fortinet: If it… Read more →
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and usage at large. In my opinion, Fortinet would be the best option and l use Fortinet too.… more »
    Top Answer:From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know the firewalls change every 5 to 7 years as stated but you really do need to… more »
    Top Answer:As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite good. The most valuable features for me are their web and email filtering. I would… more »
    Top Answer:It supports desktop management, network management, and SD-WAN policies.
    Top Answer:My advice regarding setup costs, pricing, and licensing for Juniper Contrail SD-WAN would be to carefully evaluate and position the solution in line with competitive offerings, especially considering… more »
    Top Answer:Areas for improvement in the Juniper Contrail SD-WAN solution include the on-premises deployment process, which can be challenging for customers compared to cloud deployment. Additionally, integration… more »
    Ranking
    Views
    13,719
    Comparisons
    10,274
    Reviews
    42
    Average Words per Review
    690
    Rating
    8.4
    Views
    829
    Comparisons
    432
    Reviews
    3
    Average Words per Review
    544
    Rating
    8.3
    Comparisons
    Also Known As
    FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
    Contrail SD-WAN
    Learn More
    Overview

    Fortinet FortiGate enhances network security, prevents unauthorized access, and offers robust firewall protection. Valued features include advanced threat protection, reliable performance, and a user-friendly interface. It improves efficiency, streamlines processes, and boosts collaboration, providing valuable insights for informed decision-making and growth.

    Contrail SD-WAN delivers a simple, automated multicloud SD-WAN. It enables you to create an evolvable architecture to simplify growth, from secure routers to SD-WAN, SD-Branch, and beyond. It automates the WAN edge across Juniper virtual cloud endpoints and on-premises next-generation firewall or universal CPE platforms. And it provisions and enforces multilevel security policy at scale, across multiple clouds and enterprise sites with diverse topologies.

    Sample Customers
    1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
    Allied Pinnacle
    Top Industries
    REVIEWERS
    Comms Service Provider16%
    Computer Software Company9%
    Financial Services Firm8%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Educational Organization20%
    Computer Software Company15%
    Comms Service Provider8%
    Manufacturing Company6%
    VISITORS READING REVIEWS
    Educational Organization30%
    Computer Software Company11%
    Government8%
    Construction Company6%
    Company Size
    REVIEWERS
    Small Business48%
    Midsize Enterprise23%
    Large Enterprise30%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise32%
    Large Enterprise41%
    REVIEWERS
    Small Business86%
    Large Enterprise14%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise32%
    Large Enterprise45%
    Buyer's Guide
    Fortinet FortiGate vs. Juniper Contrail SD-WAN
    March 2024
    Find out what your peers are saying about Fortinet FortiGate vs. Juniper Contrail SD-WAN and other solutions. Updated: March 2024.
    769,976 professionals have used our research since 2012.

    Fortinet FortiGate is ranked 2nd in Software Defined WAN (SD-WAN) Solutions with 306 reviews while Juniper Contrail SD-WAN is ranked 15th in Software Defined WAN (SD-WAN) Solutions with 6 reviews. Fortinet FortiGate is rated 8.4, while Juniper Contrail SD-WAN is rated 7.4. The top reviewer of Fortinet FortiGate writes "It's a reliable solution that's easy to install and cheaper than competitors ". On the other hand, the top reviewer of Juniper Contrail SD-WAN writes "A scalable solution that is easy to configure". Fortinet FortiGate is most compared with Sophos XG, Cisco Secure Firewall, Netgate pfSense, Meraki MX and WatchGuard Firebox, whereas Juniper Contrail SD-WAN is most compared with Juniper Mist Edge, Cisco SD-WAN, VMware SD-WAN, Aruba EdgeConnect SD-WAN Platform and Huawei Enterprise Routers. See our Fortinet FortiGate vs. Juniper Contrail SD-WAN report.

    See our list of best Software Defined WAN (SD-WAN) Solutions vendors and best WAN Edge vendors.

    We monitor all Software Defined WAN (SD-WAN) Solutions reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.