Check Point Harmony SASE vs. Fortinet FortiGate vs. WatchGuard Network Security

I'd suggest that Perimeter81 is recommended when you want something that is easy to administrate, with little maintenance, unlike a VPN/secure network that you host and manage internally. We've had incidents when there has been downtime at Perimeter81, which has effectively locked us out of some of our secure services (anything locked down via IP). They have made improvements to their infrastructure and it seems to have improved in recent months, but this is something to keep in mind for critical connections

Incentivized

Fortinet FortiGate addressed an immediate security issue we had a few years ago. The device gave us a much clearer picture of the activities on our network and also more importantly, increased our awareness of threats from the internet as a whole. Fortinet FortiGate helps us to mitigate these threats with regular signature updates from Fortiguard labs, identifying certain characteristics which, once recognised by Fortinet FortiGate, can be harnessed to deploy powerful 'playbooks'.

Incentivized

WatchGuard Network Security is a true next generation firewall vendor, and they are constantly improving their products. The account management is engaged, and support is responsive and knowledgeable. We've had consistent quality experiences with deployment and warranty response. The feature set is robust and effective when properly configured. Any questions or concerns with configuration have always been handled efficiently and effectively. They've been a great vendor to partner with.

Incentivized

• Simple easy to read icon.
• You can hover over and see if you are logged in via the systems tray on your computer.
• Easy to switch between regions around the world.

Incentivized

• SD-WAN - Load balancing of Internet traffic is a USP of Fortigate and makes it stand tall in the competition. Be it 3 or more Internet Links, multiple Subnets/segments of users to distribute and bandwidth load balancing for links and users. SLA based monitoring of Internet Links / MPLS links, makes it even better to choose the links on the basis of performance (Latency, packet loss, Jitter etc).
• SSL VPN configuration - As we all have WFH force (to some extend or all employee) during Covid-19, it is impossible to plan BCP without having a SSL VPN. In Fortigate, the SSL VPN configuration is very easy with the help of wizard. The deep CLI-level debugging is also very helpful in troubleshooting. Type of tunnel can be easily configured - Full Tunnel or Split Tunnel for SSL.
• Explicit Proxy - This is also a great feature to shape and re-route the traffic, configuring the Proxy on the Firewall itself. We are using this feature in Pilot for now, and planned to rollout in few weeks looking at the success rate of the POC.

• Incoming Torrent attempts were blocked, but outgoing (by a user) were permitted. Similarly, other direct attempts were summarily blocked.
• provides full administrative support for analysis of usage and scope.
• strong Wi-Fi support and security - area wi-fi maps
• They think of all the things secure and I don't have to worry about it.
• I have not identified anything else that needs improvement - I am well satisfied.

Incentivized

• Customer support was lacking before, now seems better.
• Had much difficulty using Chrome as my browser to install the app.
• Increase the throughput speeds at time would be nicer.

Incentivized

• Documentation is missing a great deal of detail and assumes the customer and just guess and fill in the blanks themselves
• Fortinet has lots and lots of video guides on topics that only a small percentage of customers would ever need
• The documentation and video guides do not get updated so most is only relevant to older software versions

Incentivized

• Better integration with VoIP services, such as templates for policies handling traffic for Bria or Asterisk endponts and servers.
• Get webblocker to work without breaking secure websites.
• Lower cost on endpoint agents for antivirus and include application control and webblocker with the agents.
• Make the cost per endpoint with TDR and Netowrk access control lower than the cost of Antivirus licensing that is not integrated.
• Make it easier to set up network access control and VLAN assignment by device, perhaps with templates.
• Get webblocker and application control working with QUIC.

Incentivized

Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.

Incentivized

I'm giving this note to WatchGuard Network Security due to its ease of daily support (after acquiring necessary knowledge in the solution), which allows agility in configuration changes, its integration of several reliable security features (such as SSL VPN, VPN Virtual Interfaces between companies, and others) and functional and stability in operation, with no downtime in the equipment due to problems or malfunctions

Incentivized

The firewall runs very well, firmware updates are fairly quick but you must follow the upgrade path. Neglecting this step will cause a lot of pain. If you decide to go with Fortinet FortiGate switches and/or access points, they can be managed within the firewall which is great. We're also using the FortiAnalyzer which easily plugs into the firewall for any reporting you may require.

Incentivized

Although it might take some time to figure out, we have been able to use WatchGuard's online reference library and tech support to create/implement/modify all of our filtering rules and exceptions needed. There really has not been a shortcoming other than perhaps a learning curve.

Incentivized

We had didn't any hardware failures at our two main office locations and upgraded our units last year after using them for about 5-6 years

Incentivized

Availability has always been a strong point of this product, it is rare that watchguard does not have a solution for customers' network monitoring needs.

Incentivized

Good performance and really good integration. We have integration with Microsoft AD.

Incentivized

The performance of WatchGuard Network Security is very good, in the years that we have used the solution we have only had a single error and Watchguard itself was able to solve it. Furthermore, when purchasing any product, the partner always evaluates the capacity of the solution to recommend the most appropriate product for our needs.

Incentivized

The Support team at Fortinet is excellent. They can not only help you configure the device for what you are trying to do, they offer suggestions on improving rules, and troubleshooting issues. Their response time is fast, ensuring you are up and running immediately with no questions asked. We had a hard drive failure in one of our Fortinet Fortigate appliances. The tech answered immediately, and started rebuilding the drive after some preliminary investigations. After rebuilding, there were still errors and issues, so they dispatched a brand new Fortinet Fortigate appliance. The tech then backed up the configurations for when the new device came in, which showed up in a few hours. A restore of the configuration took less than a minute, and there were no more errors or issues.

Incentivized

We have only had to contact them once during the initial set up to help bring the internet back on line. After that for the most part our systems have been automated, and could easily be checked form their online FAQ and Knowledge base that they provide. Everything else is easily handled from their browser based interface

Incentivized

I received it a couple years afters use it and it was just to confirm my knowledge about the tool.

Incentivized

We participate to a in person training and the three days of learning was really useful and complete to gain skill to solve the major part of the problem we encounter during our life. And more the in person training give us the opportunity to create a network with other WatchGuard partner.

Incentivized

Online training is good for learning how to use the product. It does not teach security strategy because that is not its intent.

Incentivized

Make sure that you have the most current version of FortiOS. Make sure all Fortigates are on the same version

Incentivized

I had my key information for setting up the firewall, and they assisted me in finding the settings and appropriate places to enter data. They also helped troubleshoot when I didn't understand some of their feature concepts, and we got it running.

Incentivized

In the beginning, it was a bit rough getting it to work and getting any kind of quality support from customer service. But recently they really improved their service and customer service. I believe they raise 100M in new funding which provides them the resources to make a better product with better tools and a better help desk.

Incentivized

[Fortinet] FortiGate is not only cost effective but it gives the comprehensive security against the APT attacks and gives the complete traffic visibility and granular control. You can easily create the VDOMs (Virtual firewall) within a Fortigate firewall and customize the dashboard as per your requirement if you have multiple VDOMs within a single firewall.

Incentivized

WatchGuard is what I use exclusively now. I have removed all other firewalls. WatchGuard is easier to maintain and easier to set up, PLUS WatchGuard Tech Support is very responsive and helpful. I am very familiar with both the System Management software and the Web-based access to the firewalls, and feel comfortable with the programming and troubleshooting in both areas.

Incentivized

No changes needed to terms and conditions.

Incentivized

My environments are pretty small (less than 100 users per location) so no issues here.

Incentivized

This product is very scalable since previously everything related to Watchguard was on premises but that has now changed with the inclusion of watchguard cloud. Now the product has evolved to have full control of firewalls at the cloud level.

Incentivized

• I think it is just a cost of doing business.
• I don't think the cost is too prohibitive.
• We also use it as an example of what a small cost can provide big protection for your security.

Incentivized

• The pricing given to us for our firewall was well within what we were already spending for other vendors solutions and had the added value of eliminating a separate expense for a dedicated web filtering appliance.
• We have also adopted Fortinet's security fabric approach and thus changed vendors for our switch and AP devices. These devices have come at reduced prices as compared to another previous vendor we were using, particularly in relation to ongoing annual maintenance costs.

Incentivized

• WatchGuard is a well-established company in the industry, and we are confident in its security solutions.
• This solution meets/exceeds our security objectives for CMMC and the DoD standards.
• I wish their cloud management were much stronger and provided more features similar to those of Meraki. If it did, we would exclusively sell these devices.

Incentivized