What is our primary use case?
The main use case is as the branch or SD-WAN, to start with. For example, if you have a branch, for example, for a banking sector, a standalone ADM, for example, and you don't have many options when it comes to connectivity, FortiExtender will help by giving WAN connectivity. 4G, 5G, or 3G, you name it. You just install the SIM card into the device like a hand-sized device. You connect that device, which is the FortiExtender, back to your FortiGate device.
Afterward, you start dealing with the Extender as a virtual interface. So, for example, installing some ADM inside modes where you don't have proper 4G coverage. For example, you can leverage a FortiExtender by installing it over the ceiling. It's like a copper cable back to your communication cabinet. There are a lot of options, a lot of probabilities that widen the possibility when it comes to SD-WAN scenarios.
What is most valuable?
Having the FortiExtender as a part of an SD-WAN topology is a major competitive value. You don't need to have two different vendors to interoperate and get into comparability issues or inter-operability issues. FortiExtender is part of what we call the Fortinet Fabric. Once you install it, it's very seamless. When it comes to implementing FortiExtender, it gives you a very major value. With an SD-WAN topology, you overcome a lot of connectivity limitations. With a standalone ADM, for example, in case you don't have the proper NPLS termination ready yet, a lot of approval needs to be in place from the government and so on, so forth. You can launch the service in no time. To make the long story short, the major value we're looking at is the inter-operability and the integration into what we call the Fortinet Fabric. It offers seamless integration and flexibility.
What needs improvement?
What most of my clients are telling me is the price is a problem. That would be the best thing to start with. They agree on the value, and we have a very solid argument with the clients that proper service and value comes at a proper price. However, we hope to have more flexible pricing. That would be the first point to be mentioned.
The product management team has asked to have a Multi-SIM device. We've had this for one year. Covid just drove everything towards working from home regarding teleworking and all of that stuff.
The product is mature enough. Mainly, that would be the price. If they could therefore have some more, let's say, enhancements on it, then we can make more of a financial case.
One feature that was discussed with the product management team of Fortinet FortiExtender was to have the ability to have the possibility to upload our own drivers. For example, the Extender itself could be dealing with the SIM card directly, where you install it, and then you're ready to go. Or, you may install a USB dongle into the Extender itself. Some mobile carriers here in Jordan do not allow users to relocate the SIM card from within their biscuit or USB dongle and install it in their own modem or their own Extender. However, with particular scenarios, we would appreciate having the possibility to upload a third-party driver for simplicity, integrating whatever sales provider facility we have into the Fortinet technology.
For how long have I used the solution?
I've used the solution for six or seven years, more or less.
I was lucky enough to see the very first portfolios adjusted.
What do I think about the stability of the solution?
The only feedback we're getting is that we need to access the unit or basically reboot the unit during the firmware upgrade process. That's the only time you need to touch the unit, to upgrade, even for maintenance, which is done centrally. If you have 1,000 standalone ADMs that you need to manage and you're having a firmware upgrade that affected some security issues, instead of doing the exact same functionality a thousand times, you can do it from within a centralized management console. That would be FortiManager, in the case of affording that technology. The management's very easy, very straightforward. We used to have some complications, some bugs here and there. However, generally speaking, from a management perspective, the calls we'll see from the clients are most likely about firmware upgrades and bug fixes. Maybe a customer cannot plug it in correctly and he's wondering about some options here and there. However, in terms of stability, I can say, 95 to 98% of the time, it's stable. It's a stable product.
You don't have much to do with the 4G. It's all about the physical layout. It's like a modem with a data link or network wire attached. It's a fairly mature product.
What do I think about the scalability of the solution?
For a customer to scale, they just have to buy more hardware.
However, that shouldn't always be the case. For example, you may have a hundred branches where you only need to implement 4G or 3G connectivity over 20% of those. It's a requirement to have a FortiExtender, or to have an identical physical component set up among all of your branches. If you want to scale, you need to choose a scalable product.
How are customer service and support?
Usually, we don't rely much on the vendor as we heavily invest in our own internal resources. However, when it comes to, for example, firmware bugs, modem drivers, and so on, that is something you have to bounce back to the vendor. Sometimes it takes a while to get feedback.
They themselves don't have a presence in Jordan. They do have some employees, like a sales team and channel team. However, when it comes to a technical team, they have one or two channel system engineers. We need to manage this on the ground as a Fortinet partner.
How would you rate customer service and support?
How was the initial setup?
From our perspective, as a Fortinet partner doing business with Fortinet since 2008, it's like a piece of cake. You just put it there and let it work. It's a very stable platform. As with any vendor, we have some bugs here and there. However, if you take care of everything, you need to ensure you consider proper sizing, modeling, implementation, design, and so on, which should be like a piece of cake.
It is a straightforward setup. I'd rate it 4.5 out of five in terms of ease of implementation. It should be pretty straightforward and easy to configure. The only half we're missing here is that sometimes we have some issues with the 3G and 4G modem drivers. That may be the only thing or obstacle that may arise. Aside from that, it's very straightforward.
We have about two or three team members that are the personnel responsible for handling the whole setup. That would be the optimal case. Most likely, it's one or two that a company might need.
What was our ROI?
We've seen an ROI based on our experience and the client's feedback.
The ROI they have is visibility. What clients used to do is just pay for a 4G subscription for 100 ADM, and just put the money there and install the modem, and everything is running. However, having FortiExtender in place is when they start to have visibility about seeing the quality, the upstream and downstream links, and how many times the connection drops.
After this solution, a client can say, "Yes, we have this number of services drop per week." So, we start to argue that with the ISP, going for a more committed rate, different SLA conditions, a more strict quality of service, and so on, and so forth. The main driving force is to have visibility. Having the FortiExtender implemented as part of the Fortinet Fabric is where you start getting visibility.
I'd rate the ROI at a five out of five. It's very good.
What's my experience with pricing, setup cost, and licensing?
The pricing is based on a perpetual license. For example, if you buy the physical piece and you install it, you're ready to go. The only licensing term that is applicable for the FortiExtender is what we call the FortiCare, which is the hardware warranty. The customer may go for the hardware warranty if he wants a hardware warranty entitlement. He can purchase this yearly so the hardware warranty will be covering devices.
Other customers do a different approach. If they need, for example, 100 pieces, they will get 110 pieces. The ten pieces will be extra so that they have immediate availability ready to go. That way, instead of opening a ticket, confirming the defective device, approving the RMA, shipping the unit, and getting into the custom cycle, they have one on hand.
From a Fortinet perspective, what they do is to send you the product, the hardware. Afterward, FortiCare is optional. Either you go for it, or you just drop it.
The cost per unit is somewhere around $600 and $700 USD. The annual fee, warranty, et cetera, varies and would be discussed with the account manager. They are flexible, typically.
I'd rate it a two out of five in terms of affordability. That said, the client might pay more. However, they're going to get more visibility and control.
Which other solutions did I evaluate?
There are other options on the market. The main competition is around the price. However, if we can widen the client's perspective enough to include the technical value, we win the deal. One of the main competitive aspects we have is that the ISPs here in Jordan, for example, offer 3G or 4G sets as a standalone piece of hardware within the package with a very minimal financial charge.
However, when it comes to the financial sector, a large enterprise where they are more into technical value rather than price offers Fortinet is an easy battle to win. However, for other market segments, considering other competitors, pricing is a major issue that enters the equation.
What other advice do I have?
We are a Fortinet partner, an expert partner with the highest partnership level with Fortinet.
Along with the technical partnership, we are an authorized trading center for Fortinet. Basically, we're mastering the two parts of the technology, the education, and the practice.
We, as an SDS, are more into the large enterprise carrier market segment. That's where we built our service catalog. For the SMB, it would be tough for them to understand the value. They are not that interested in critical business availability, so you cannot justify the investment that needs to be made. It doesn't make sense to them. They go, "I'm not running a rocket science facility. I can live with a couple of hours in a service outage. I can restart my 4G router every two or three days. I can live with that." For them, it will not make that much sense to invest $500 or $600 into a device when something with lower technical capabilities will meet their needs.
I'd rate the solution nine out of ten. It's not a perfect ten out of ten. However, the price is high.