Carbonite Availability vs. FortiConverter

I believe it would work well with continuous replication in a DR scenario with no time limits and having the ability to fail back is a bonus, but in a one off move the decision to restrict the time it can sync for has proven to be an issue for us.

Unless you are rebuilding rules from scratch, FortiConverter is a must-have when migrating legacy rulesets from competing platforms such as Cisco ASA, CheckPoint, Juniper, etc. to FortiGate Appliances. Without FortiConverter, guaranteed there will be some flows you missed and you will be troubleshooting them during your cutover maintenance window. Utilizing FortiConverter, you will minimize such issues as cutover time because you have the ability to stage the new ruleset in advance. Complex topologies and multi-platform migrations require highly skilled consultation from experts that [have] done this several times before.

• A product is worthless in my opinion if you don't have a great support team to work with. I've had issues with replication jobs that were resolved quickly and easily by the support team.
• DR - Doubletake is the only tool that I'm aware of that can handle DR replication of both physical and virtual environments. There sre others, but they use a snapshot technology, where doubletake has continuous replication of data.
• Move - we have moved physical and virtual environments from around the world without ever having to leave the office. One of the companies we migrated started off with their equipment in Switzerland, and after the servers were in a fully protected state in the US, that failover to the new location took 45 min.

• Audit existing rulesets from CheckPoint, Cisco, Juniper and other platforms
• Build migration rulesets to FortiGate
• Stages migration before actual cutover
• Reduces or eliminates obsolete and shadow rules
• Simple logic

• More verbose error messages. So we can fix problems with more ease
• More bandwidth settings for throttling.
• Ability to restart services on servers from the double take console

• Programming or scripting skills are not needed but highly recommended
• Requires excellent command of REGEX
• Interface Mapping from complex topologies requires a deep understanding of FortiGate interface capabilities and scripting

FortiConverter is currently the best option to assist in migrating legacy firewalls to FortiGate firewalls. FortiConverter is flexible enough to be the single tool to use when migrating Check Point, Cisco ASA, Juniper and other platforms to FortiGate Firewalls. FortiConverter is not a multi-user software however it is easy for multiple engineers to work on a single or multiple migration projects.

the product UI is user friendly and product is straightforward to use.

Once through to support it is very good and they have assisted us through a number of issues. I don't always think that they provide a solution, more a workaround, but in a move situation where each copy is moving once, that isn't an issue. I'd be more concerned if we were using it to manage a DR scenario.

It is better for critical apps than Veeam due to the lower RPO. Veeam is favoured by some customers due to it's attractive price point. Zerto is a very strong product and is innovating continuously. I don't see so much of this from DoubleTake.

FortiConverter is the easiest of the firewall migration tools to use compared to Checkpoint SmartMove, Cisco Firewall Migration Tool, FWMIG, etc. It has a more robust user interface and allows you to customize the rule imports as needed. Rulebase analysis, hit count, NAT, and dynamic routing are presented in an easy to understand format with FortiConverter.

• It has allowed us through DR testing to meet contractual requirements of our major accounts..
• It gives us peace of mind that in the event of a major issue we can perform our daily business with a relative success rate.

• Streamlined migrations successful on the first try
• Simple and fast cutover maintenance window
• Audit and tune existing rule base
• Quickly identify shadow rules
• Quickly identify rules with elevated access