Coming October 25: PeerSpot Awards will be announced! Learn more
2015-02-11T18:05:00Z
PeerSpot user
Developer / Systems Admin at a financial services firm with 51-200 employees
  • 8
  • 341

How should we determine which FortiGate model to upgrade to?

We currently use FortiGate 60c and finding it is struggling at times. We have a office of ~30 employees that are online in different Provider portals throughout the day. 

Any thoughts on a way to determine which FortiGate to upgrade to? The nature of our business requires us to be fairly security conscious, so we would be using the full potential of the security profiles on the unit.

10
PeerSpot user
10 Answers
Ariel Lindenfeld - PeerSpot reviewer
Director of Content at PeerSpot (formerly IT Central Station)
Community Manager
2015-02-17T18:54:44Z
17 February 15

Jody- once you make a final decision, it would be great if you would update us all about which you chose and why.

PeerSpot user
Developer / Systems Admin at a financial services firm with 51-200 employees
Vendor
2015-02-17T16:17:18Z
17 February 15

Thanks for further input folks. Asad, good thought on VPN. We do occasionally have remote staff working from home. This may be something that is happening more often, But I wouldn't foresee more than 2 or 3 concurrent connections of this type. And they would all be within same city. Rarely we will have a staff out of town for business, but these are very limited, and usually only for a couple days. I think both the 100D and 200D are going to be valid choices. I will dig into the specs a little deeper and see if there is a point to run with the 200 over the 100.

PeerSpot user
Engineer at a tech services company with 51-200 employees
Consultant
2015-02-15T08:01:21Z
15 February 15

Good Day!!
Sorry for delay. Actually it depends on your throughput requirement mainly
& type of network. Also you have to consider site-to-site vpn tunnels, vpn
client tunnels and sslvpn tunnels etc.
If your network is medium type and remote users are within 300 range for
simultaneous connectectivity to office network, then you can go for
Fortigate 100D. or if it is more than this, i.e. round about 500 then you
can go for Fortigate 200D.
Security is for sure in Fortigate all models if your fortiguard services
are active and your fortigate is registered.

For your requirements and selection please visit the following links to
make your choice.

*Fortigate 100D: *
http://www.fortinet.com/sites/default/files/productdatasheets/FortiGate-100D.pdf
*Fortigate 200D:*
http://www.fortinet.com/sites/default/files/productdatasheets/FortiGate-200D.pdf

Thanks & Regards,
Asad Khan
N/W Support Engineer

PeerSpot user
Business Development
Vendor
2015-02-12T19:34:53Z
12 February 15

We have sold and supported Fortigates for 5 years and while the 60 and 80 series are impressive, we never recommend less than the 100D for enterprises. One reason is models less than 100 don't have the dedicated ASIC's.

PeerSpot user
Developer / Systems Admin at a financial services firm with 51-200 employees
Vendor
2015-02-12T16:24:43Z
12 February 15

Thanks folks, By monitoring CPU and memory usage on the 60C I see the IPS engine frequently spike up into high percentages. My thoughts are leading to assume the IPS throughput on that unit is just not enough to handle our office. There are days of the week were all staff are in the office and a good portion of them are accessing portals for other institutions, moving files etc etc. Kavin, I appreciate your offer, but not comfortable with that. I have been in contact with Fortinet support already. We are also upgrading servers at same time and moving to a rack mount system. So being rack mountable isn't a bad thing. Although Desktop form factor isn't a deal breaker either. I will take all your considerations to mind. And any other input is always appreciated!

PeerSpot user
Senior Security Consultant at a integrator with 501-1,000 employees
Consultant
2015-02-12T16:09:51Z
12 February 15

Hi Boley,

92D is a good model too which is worth of consideration.

Kevin, they are not asking for customer support for you to trouble shoot.

Learn what your peers think about Fortinet FortiGate. Get advice and tips from experienced pros sharing their opinions. Updated: October 2022.
635,513 professionals have used our research since 2012.
it_user188481 - PeerSpot reviewer
Network Admin at a healthcare company with 501-1,000 employees
Real User
2015-02-12T16:07:55Z
12 February 15

The 200D might be a little overkill for only 30 users. An 80C would probably suit your needs especially if you don't have all 30 users on at the same time. That box provides IPS, AV, web filtering subscriptions, and VPN capabilities.

http://www.fortinet.com/sites/default/files/productdatasheets/FortiGate-80C.pdf

PeerSpot user
Network Engineer at a tech services company with 501-1,000 employees
Real User
2015-02-12T15:59:06Z
12 February 15

krishnaraj Raveendran Nair, agreed this would be a good model for the listed requirements. However if the desktop form factor was a requirement, I'd recommend considering FG-92D.

http://www.fortinet.com/sites/default/files/productdatasheets/FortiGate-92D.pdf
This model still has IPS throughput approximately 7 more than a 60C.

PeerSpot user
Technical Support Specialist at a tech services company with 51-200 employees
Consultant
2015-02-12T15:33:44Z
12 February 15

For 30 employees your box is more than enough. No need to upgrade the
Unit. If you are facing trouble, give me a remote session and I can try to solve your problem.

PeerSpot user
Senior Security Consultant at a integrator with 501-1,000 employees
Consultant
2015-02-12T14:55:28Z
12 February 15

Hello,

As per my understanding fortigate 200D will be a good choice for the above requirement.
You can use all the security features a FG can offer and the 30 existing users will have enough throughput to play with. Since it has IPS throughput of 1.7 Gbps, the performance would be good. Also for furture enhancement the same can be used.

http://www.fortinet.com/sites/default/files/productdatasheets/FortiGate-200D.pdf

Related Questions
MF
User at samehgroup
Jun 06, 2022
Hi security and IT pros, Which firewall product would you choose for your company: FortiGate 200F or Sophos XG 310? Why this would be your choice? Thanks in advance. 
See 2 answers
MV
Consultant with 11-50 employees
25 May 22
FortiGate. Fortinet is in Gartner Leader Magic Quadrant (MQ).  Sophos is in Niche Player Quadrant if I remember right.  You can never go wrong picking a vendor in the Gartner Leader MQ. Show the Gartner MQ to your leadership to get them on board too.
fdiazm - PeerSpot reviewer
Product Manager at Entel Chile
06 June 22
Hi,  If I look at it only from the point of view of analytics and performance, I lean towards Fortinet, but if I look at it at the service level and with the possibility of being part of an even larger project, this is when I don't see competitors for Fortinet and I mean the component. of after-sales services, the local presence in my country has come from less to more, which makes the difference when choosing a partner to work with.
ID
User at Zm3
May 15, 2022
Hi community members, I'm considering replacing a Cisco ASA Firewall with Fortinet FortiGate FG 100F. This is in order to reduce the cost. Is this the right thing to do? What would be your advice? Please elaborate. Thank you for your help!
2 out of 8 answers
Luis Apodaca - PeerSpot reviewer
IT Support and Network Admin at Escuela Carlos Pereyra
09 May 22
Hi @Isaiah Dominic, ​I have a few questions:Does replace mean that you already have a Cisco device? What's the reason for replacing it if is working? So, I assume it's not working. In that case, I have the second question:I suppose you should have a configuration backup for using it, in case your device crashes. How much do you value all that job? Is the cost of the new different device worth it?  If you make the change you gonna need to config the whole thing from scratch!! Is it worth it?Both devices are good enough.I expect this could help you,  Good luck!
DanielValente - PeerSpot reviewer
Head of Platforms and Infrastructure at LOQR
09 May 22
Hi,  You are comparing a piece of old equipment with a true next-gen firewall.  Nevertheless, there is a specific use case where I did this exact exercise and went with Cisco ASA, if the main objective is to terminate IPsec tunnels, in this field (more close to routing) ASA is excellent.  But if you are looking for URL filtering application visibility, and easiness of management go with FortiGate, for sure.
Related Articles
Ariel Lindenfeld - PeerSpot reviewer
Director of Content at PeerSpot (formerly IT Central Station)
Aug 21, 2022
We’re launching an annual User’s Choice Award to showcase the most popular B2B enterprise technology products and we want your vote! If there’s a technology solution that’s really impressed you, here’s an opportunity to recognize that. It’s easy: go to the PeerSpot voting site, complete the brief voter registration form, review the list of nominees and vote. Get your colleagues to vote, too! ...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Aug 17, 2022
Hi dear community members, In this edition of PeerSpot's Community Spotlight, you can find out what your peers are discussing and join in the conversation. Ask and answer questions on the topics that interest you most! Read and respond to articles or contribute your own! Trending These are the topics your peers are talking about on PeerSpot this week How do I estimate the requir...
See 1 comment
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
17 August 22
Thank you to all the community members who share their knowledge with other peers! Also, special thanks to the articles' contributors included in this Community Spotlight: @Janet Staver, @Abhirup Sarkar, @Manoj Narayanan, @Beth Safire and @Shibu Babuchandran.
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Jul 05, 2022
Dear PeerSpot community members, This is our latest Community Spotlight for YOU. Here we've summarized and selected the latest posts (professional questions, articles and discussions) contributed by PeerSpot community members.  Check them out! Trending See what your peers are discussing at the moment! What were your main pain points during the SIEM product purchase process? What...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
May 30, 2022
Hi peers, This is our new bi-weekly Community Spotlight that includes recent contributions (questions, articles and discussions) by the PeerSpot community members.  Articles Check the top products and solutions below (selected based on peer reviews) or contribute your own article! Top Security Orchestration Automation and Response (SOAR) Solutions Top 8 Data Loss Prevention (DL...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Jul 11, 2022
Hi community members, As usual, this new Community Spotlight shares with you the latest articles, questions and trending discussions from your peers. Trending See what is trending at the moment and chime in to discuss! Top 8 Extended Detection and Response (XDR) Tools 2022 Would you recommend replacing Cisco ASA Firewall with Fortinet FortiGate FG 100F due to cost reasons? What is the...
See 2 comments
Ravi Suvvari - PeerSpot reviewer
Performance and Fault-tolerance Architect with 1,001-5,000 employees
30 May 22
Good very informative
Jairo Willian Pereira - PeerSpot reviewer
Information Security Manager at a financial services firm with 5,001-10,000 employees
11 July 22
Analyze the wave of product at Gartner Hype Cycle. EDR was good in the past. After that, MDR joined the hype and now, XDR is the trend. Wait for more in a couple of months and (sic) know the ZDR!
Related Articles
Ariel Lindenfeld - PeerSpot reviewer
Director of Content at PeerSpot (formerly IT Central Station)
Aug 21, 2022
PeerSpot User's Choice Award 2022
We’re launching an annual User’s Choice Award to showcase the most popular B2B enterprise technol...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Aug 17, 2022
Community Spotlight #20
Hi dear community members, In this edition of PeerSpot's Community Spotlight, you can find out w...
Download Free Report
Download our free Fortinet FortiGate Report and get advice and tips from experienced pros sharing their opinions. Updated: October 2022.
DOWNLOAD NOW
635,513 professionals have used our research since 2012.