Cisco ASA 5500-X with FirePOWER Services vs. Fortinet FortiGate

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Cisco ASA 5500-X with FirePOWER Services
Score 7.5 out of 10
N/A
Cisco offers a threat-focused next-generation firewall (NGFW), the ASA 5500-X Series. The ASA 5500 Series platforms can run either the Cisco ASA Firewall or Cisco Firepower Threat Defense (FTD). The series features appliances in a variety of form factors, including standalone options for small and midsize businesses, ruggedized appliances for extreme environments, midsize appliances for security at the Internet edge, and high-performance appliances for enterprise data centers.N/A
FortiGate
Score 8.8 out of 10
N/A
FortiNet FortiGate is a firewall option with high integrability. It offers a variety of deployment options and next-gen firewall capabilities, including integration with IaaS cloud platforms and public cloud environments.N/A
Pricing
Cisco ASA 5500-X with FirePOWER ServicesFortinet FortiGate
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Cisco ASA 5500-X with FirePOWER ServicesFortiGate
Free Trial
NoYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional DetailsCisco ASA 5500-X pricing starts at ~$400 and scales up to $20,000 for higher capacity appliances.FortiGate pricing starts at $250 for home office use, up to $300,000 for large enterprise appliances. Must contact sales team for pricing.
More Pricing Information
Community Pulse
Cisco ASA 5500-X with FirePOWER ServicesFortinet FortiGate
Considered Both Products
Cisco ASA 5500-X with FirePOWER Services
Chose Cisco ASA 5500-X with FirePOWER Services
The network is homogenous to Cisco and the integration with Cisco products is very easy (e.g. Identity Services Engine). As I am a certified engineer in Cisco Security, it feels very easy to handle Cisco products especially as more and more support docs are available across the …
Chose Cisco ASA 5500-X with FirePOWER Services
Cisco technically has better support on things like VPN, but the Fortinet seems slightly cheaper.
Chose Cisco ASA 5500-X with FirePOWER Services
The [Cisco ASA 5500-X with FirePOWER Services] does compete okay when compared to other devices. This model is begging to age and does not perform as well as the newer models but that is to be expected. I think their interface is okay but again I think ASDM is aging more …
FortiGate
Chose Fortinet FortiGate
We have both devices Fortinet FortiGate and ASA with firepower services, but [the] main difference is price. The price is [less for] Fortinet FortiGate and we are getting the all features. Email filtering and DLP is extra features and very advanced which we will get only in …
Chose Fortinet FortiGate
Ongoing costs and licensing options - the FortiGate product line comes out a winner every time. We especially like the granularity and licensing options compared to something like Meraki that is mostly "all or nothing" or the SonicWall which is less granular and just not as …
Chose Fortinet FortiGate
Feature to feature comparisons, Cisco and Fortinet are on par with each other. Both have great service and support. Both have robust security features that protect your network from various threats and exploits. Both have great logging and reporting capabilities. Both are high …
Top Pros
Top Cons
Features
Cisco ASA 5500-X with FirePOWER ServicesFortinet FortiGate
Firewall
Comparison of Firewall features of Product A and Product B
Cisco ASA 5500-X with FirePOWER Services
9.1
30 Ratings
7% above category average
Fortinet FortiGate
9.3
38 Ratings
9% above category average
Identification Technologies9.228 Ratings9.836 Ratings
Visualization Tools9.324 Ratings8.836 Ratings
Content Inspection9.129 Ratings8.937 Ratings
Policy-based Controls9.928 Ratings9.838 Ratings
Active Directory and LDAP9.929 Ratings9.137 Ratings
Firewall Management Console9.330 Ratings9.838 Ratings
Reporting and Logging8.829 Ratings8.138 Ratings
VPN9.930 Ratings9.838 Ratings
High Availability9.928 Ratings9.833 Ratings
Stateful Inspection8.14 Ratings9.836 Ratings
Proxy Server7.23 Ratings8.927 Ratings
Best Alternatives
Cisco ASA 5500-X with FirePOWER ServicesFortinet FortiGate
Small Businesses
pfSense
pfSense
Score 9.3 out of 10
pfSense
pfSense
Score 9.3 out of 10
Medium-sized Companies
pfSense
pfSense
Score 9.3 out of 10
pfSense
pfSense
Score 9.3 out of 10
Enterprises
Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto Networks Next-Generation Firewalls - PA Series
Score 9.4 out of 10
Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto Networks Next-Generation Firewalls - PA Series
Score 9.4 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Cisco ASA 5500-X with FirePOWER ServicesFortinet FortiGate
Likelihood to Recommend
9.5
(30 ratings)
9.5
(65 ratings)
Likelihood to Renew
9.7
(3 ratings)
9.9
(4 ratings)
Usability
7.2
(2 ratings)
10.0
(6 ratings)
Availability
10.0
(1 ratings)
10.0
(2 ratings)
Performance
9.5
(26 ratings)
10.0
(1 ratings)
Support Rating
9.6
(29 ratings)
8.6
(26 ratings)
In-Person Training
-
(0 ratings)
10.0
(1 ratings)
Implementation Rating
10.0
(2 ratings)
8.0
(4 ratings)
Configurability
-
(0 ratings)
9.0
(1 ratings)
Ease of integration
9.0
(1 ratings)
7.0
(1 ratings)
Product Scalability
-
(0 ratings)
9.8
(2 ratings)
Vendor post-sale
-
(0 ratings)
10.0
(1 ratings)
Vendor pre-sale
-
(0 ratings)
9.0
(1 ratings)
User Testimonials
Cisco ASA 5500-X with FirePOWER ServicesFortinet FortiGate
Likelihood to Recommend
Cisco
This firewall is best suited for the network edge/perimeter deployment. The next gen features works very well and the remote access VPN is also very much suitable for the organizations which have a huge user base working remotely. The Remote Access VPN is very much customizable and the authentication integration option like LDAP and RADIUS provides and addon.
Read full review
Fortinet
For FortiGate Firewall, the basic functionality and requirement is met easily as Fortigate is among market leaders in NGFW. There are some extra points that inclined us to use Fortigate as our main Firewall. [Fortinet]Fortigate has a very well refined and functional SD-WAN solution when it comes to load balancing for normal Internet Traffic. SD-WAN - Load balancing of Internet traffic is a USP of Fortigate and makes it stand tall in the competition. Be it 3 or more Internet Links, multiple Subnets/segments of users to distribute and bandwidth load balancing for links and users. SLA based monitoring of Internet Links / MPLS links, makes it even better to choose the links on the basis of performance (Latency, packet loss, Jitter etc). SSL VPN configuration - The deep CLI-level debugging is also very helpful in troubleshooting. Type of tunnel can be easily configured - Full Tunnel or Split Tunnel for SSL. Though, I think Fortigate is one of the best options for small and mid-sized organizations, there are some areas for improvement. First, the CLI interface is very hard to adapt as the commands and directory hierarchy is very different for common syntax and standards.
Read full review
Pros
Cisco
  • The Cisco ASA with FirePOWER Services model works perfectly for network edge protection scenarios.
  • It allows for the creation and connection of sites through site-to-site VPN configuration.
  • It enables remote connection and home office with remote SSL or IPSEC VPN.
  • It has layer 7 traffic protection and visibility.
  • It has anti-malware protection from start to finish.
  • The configuration is easy to perform.
Read full review
Fortinet
  • It is the most reliable NGFW that we have ever been touch with it.
  • You can easily upgrade the firewall cluster firmware without user attention!!!
  • User IDentity based feature is fantastic and intrusion prevention just works with least false-positive possible.
  • Very reachfull and intuitive GUI, just love it
Read full review
Cons
Cisco
  • URL Filtering feature could be easier to utilize for beginners
  • I'd like to see a visual of VPN networks setup and show the functioning or malfunctioning status to assist in making troubleshooting easier
  • Recommendations on ACLs for beginners based on their account creation date
Read full review
Fortinet
  • When we switched to Fortinet Fortigate, it took some time getting used to and become familiar with the new interface. Being used to strictly command-line interfaces, a full GUI-based firewall was something brand new. Careful planning had to be done when creating rules to ensure we didn't miss anything. However, once we got used to the new GUI interface, going from one Fortinet product to another was simple, as Fortinet used the same interface for all of its devices.
Read full review
Likelihood to Renew
Cisco
Ever since we installed Cisco ASA 5500-X with FirePOWER Services we have never had to deal with an attack. We can see in the logs almost every day hackers attempting to break into our networks and failing. We also have the ability to blacklist every IP address that attempts to break into our firewalls
Read full review
Fortinet
Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.
Read full review
Usability
Cisco
Cisco firepower provides automatation for an organisations security operations to detect and stop the most advanced threats fast. It also assists in preventing attacks in using intelligence and innovative solutions.
Read full review
Fortinet
The user interface shared among many simultaneous users is very easy to get around. With shared favorites among users, most tasks are easily bookmarked and can quickly be found and edited. Their strategy for web filter integration is easy to understand and manage as well. With some general direction, setup and maintenance were easy to do and easy to teach others in the organization to do as well.
Read full review
Reliability and Availability
Cisco
We have never had an outage caused by firewall failure. We have had a few outages caused by the internet failing or cloud applications going offline but never a firewall breaking down. When making changes we have a very strong change control, major software updates are always carried out out of working hours. At places where we have two firewalls in HA, we are able to do upgrades in working ours and the users will never know that an upgrade is taking place, that how great these firewalls are
Read full review
Fortinet
We had didn't any hardware failures at our two main office locations and upgraded our units last year after using them for about 5-6 years
Read full review
Performance
Cisco
The Cisco ASA 5500X with Firepower performance needs consideration before deploying. Although the solution is Pay as you grow, adding additional features to the system has a negative impact on overall throughput. I would more like now only to deploy the Cisco FPR units as they have better performance and will last the test of time.
Read full review
Fortinet
Good performance and really good integration. We have integration with Microsoft AD.
Read full review
Support Rating
Cisco
I would recommend the purchase of the Smartnet 24x7 service in the case of a unit and the Smartnet 8x5NBD in the case of only one appliance installed on site. This service is important to always have the latest firmware updates, corrective updates and especially the hardware warranty and maintenance service in case of problems. The service is done by phone or on the official Cisco website and I can say that it is very good and efficient.
Read full review
Fortinet
We live in Turkey. Fortinet's Turkey office [dealt] constantly with us in our every problem or our experience. In addition, global support teams also supported every ticket we opened in every problem we encountered. They support innovative approaches and evaluate and offer solutions. In this context, they were very supportive of the problems we encountered in previous versions.
Read full review
In-Person Training
Cisco
No answers on this topic
Fortinet
I received it a couple years afters use it and it was just to confirm my knowledge about the tool.
Read full review
Implementation Rating
Cisco
We implemented a centralized management of all our Cisco ASA 5500-x with FirePOWER Services so that we can have a holistic view of all our sites in London and other European countries. This also helps when making changes, instead of login on to each firewall we can use Firepower Management Center (FMC) to central deploy changes across all devices
Read full review
Fortinet
Make sure that you have the most current version of FortiOS. Make sure all Fortigates are on the same version
Read full review
Alternatives Considered
Cisco
Previous],] I was using the [pfSense] in my organization but when i switched to [Cisco ASA 5500-X with FirePOWER Services] I realized there are lots of issue and missing security features in [pfSense]. The deployment and configuration is very easy as compare to [pfSense]. I highly recommend this product to everyone.
Read full review
Fortinet
[Fortinet] FortiGate is not only cost effective but it gives the comprehensive security against the APT attacks and gives the complete traffic visibility and granular control. You can easily create the VDOMs (Virtual firewall) within a Fortigate firewall and customize the dashboard as per your requirement if you have multiple VDOMs within a single firewall.
Read full review
Scalability
Cisco
No answers on this topic
Fortinet
My environments are pretty small (less than 100 users per location) so no issues here.
Read full review
Return on Investment
Cisco
  • Working of remote workforce made easy
  • Security was enhanced on the data traffic shared with the vendors due to the use of VPNs
  • Inbound attacks were mostly blocked on the edge and saved a lot of resources (which could had been used in case of attacks getting successful on the application servers)
Read full review
Fortinet
  • Fortigates have an interesting bundle model for support and subscription services that make it an attractive option to deploy Firewall, IDS, Ant-virus, anti-SPAM in a single device. The cost of the bundle is pretty much what you pay for the device, not requiring huge expenditures on it's time to renew the hardware.
Read full review
ScreenShots