Cisco ACI vs FortiGate

• The REST API allows your to programmatically interact with the network and make massive changes very quickly when needed.
• The API allows you to tie together Server Provisioning tools, storage provisioning tools, into an orchestration platform such as Ansible to streamline new deployments and builds.
• New Deployments are extremely simple once you've worked out your programatic deployment process. We can deploy new clients/tenants in seconds rather than days or weeks like it used to take.
• Replacing failed switches/apics/etc is also extremely easy.
• Tightly couple the underlying Network Infrastructure to VMWare Deployments to allow VMs to move anywhere in the datacenter at the drop of a hat.

Read full review

• It is the most reliable NGFW that we have ever been touch with it.
• You can easily upgrade the firewall cluster firmware without user attention!!!
• User IDentity based feature is fantastic and intrusion prevention just works with least false-positive possible.
• Very reachfull and intuitive GUI, just love it

Read full review

• Cost is always a challenge and ACI is no different.
• The linkage between ACI and Tetration has been rebranded since the initial marketeering of it and this has caused confusion and in some cases diminished the business case as a result.
• The fact that Cisco has developed multiple Orchestrators of their differing network stacks causes issues when trying to pull together a singular approach to orchestration across a Cisco e-2-e network in an Enterprise.

Read full review

• When we switched to Fortinet Fortigate, it took some time getting used to and become familiar with the new interface. Being used to strictly command-line interfaces, a full GUI-based firewall was something brand new. Careful planning had to be done when creating rules to ensure we didn't miss anything. However, once we got used to the new GUI interface, going from one Fortinet product to another was simple, as Fortinet used the same interface for all of its devices.

Read full review

• We typically don't have to touch ACI. It does what we need it to do without having to "baby" it.
• It's constantly running so the amount of downtime we have (if any) is very minimal.
• It was pricey in the beginning but with is reliability it was well worth it.

Read full review

• Fortigates have an interesting bundle model for support and subscription services that make it an attractive option to deploy Firewall, IDS, Ant-virus, anti-SPAM in a single device. The cost of the bundle is pretty much what you pay for the device, not requiring huge expenditures on it's time to renew the hardware.

Read full review