Cisco Firepower 1000 Series vs. Fortinet FortiGate vs. UniFi WiFi Access Points

I think it is well suited for smaller companies or (as in our case) extension to a central system with higher performance. My personal guess is, that it can be quite annoying with those delays in bigger environments, when 20 or more devices needed to be managed. From the point of security, support and updates it works quite good and seem to have no downsides.

Incentivized

Fortinet FortiGate addressed an immediate security issue we had a few years ago. The device gave us a much clearer picture of the activities on our network and also more importantly, increased our awareness of threats from the internet as a whole. Fortinet FortiGate helps us to mitigate these threats with regular signature updates from Fortiguard labs, identifying certain characteristics which, once recognised by Fortinet FortiGate, can be harnessed to deploy powerful 'playbooks'.

Incentivized

I love the equipment for small-scale commercial solutions and quality without the price tag. I might not recommend their products for a large organization with multiple locations and servers. However, the GUI interface will allow remote access and setup across the network. I think this is a great solution for small businesses and families or home office solutions, provided there is some IT knowledge for setup and maintenance.

Incentivized

• My organization is all Cisco and wants to stay in the Cisco life cycle, Firepower 1000 series is great for small to medium-size office.
• Very robust enterprise-grade security solution with updated threat features to handle any current and upcoming threats. The solution is backed by Cisco to ensure constant security updates. Integrated AnyConnect remote client VPN is a big plus to allow for secure remote workers access. Easier to set up a site to site VPN due to the large user base and case studies published on integrating to other manufacturer solutions.

Incentivized

• SD-WAN - Load balancing of Internet traffic is a USP of Fortigate and makes it stand tall in the competition. Be it 3 or more Internet Links, multiple Subnets/segments of users to distribute and bandwidth load balancing for links and users. SLA based monitoring of Internet Links / MPLS links, makes it even better to choose the links on the basis of performance (Latency, packet loss, Jitter etc).
• SSL VPN configuration - As we all have WFH force (to some extend or all employee) during Covid-19, it is impossible to plan BCP without having a SSL VPN. In Fortigate, the SSL VPN configuration is very easy with the help of wizard. The deep CLI-level debugging is also very helpful in troubleshooting. Type of tunnel can be easily configured - Full Tunnel or Split Tunnel for SSL.
• Explicit Proxy - This is also a great feature to shape and re-route the traffic, configuring the Proxy on the Firewall itself. We are using this feature in Pilot for now, and planned to rollout in few weeks looking at the success rate of the POC.

• Ubiquti WLAN is very easy on setup for fast deployment.
• The monitoring software is offered at different level. Cloudkey, or just throwing up their free controller on a PC somewhere.
• It also does a great job of publishing timely updates to firmware, and addressing bug issues.
• The ease of the interface, without adding a bunch of fluff, makes this literally the best out there in my opinion.

Incentivized

• ACLS in gui are PIA cant see object details
• Objects in ACLs dont show IP addresses
• Have to renames every object to name+ip to make acl GUI useable
• Speed to data can use improvement.
• Health warnings should allow you to resolve you have to dig n search in some cases.

• Documentation is missing a great deal of detail and assumes the customer and just guess and fill in the blanks themselves
• Fortinet has lots and lots of video guides on topics that only a small percentage of customers would ever need
• The documentation and video guides do not get updated so most is only relevant to older software versions

Incentivized

• Initial configuration of access points can be rather tricky. Each one I have installed was a complete pain to get setup and connected with the UniFi Controller software. I never worked out what causes me problems, but thankfully once I've stumbled through the correct procedure, it does work completely reliably after that, for years on end.
• The UniFi Controller software will nag you to share usage data. When offered to opt-in, I choose not to do so, but you'll eventually be nagged again on a future login.
• Some of the 'tooltips' within the Controller software could be more informative.

Incentivized

It is quite good, robust and reliable but not always so easy to manage and configure. The tools could be improved and the price is not low for an entry level firewall

Incentivized

Fortinet's products have kept improving with new software releases and they continue to deliver great value. Their support is also very good. I believe that as a small enterprise, their products have given us competitive advantage delivering features and functionality that enable us to innovate and do things better. They also continue to be a leader in the markets they serve.

Incentivized

Firepowers are secure, reliable, central management and configuration is easy and they fit in well with our existing Cisco infrastructure. Good feature set and support. Good management and control with chassis manager and central control with additional Firepower Management Centre.

Incentivized

The firewall runs very well, firmware updates are fairly quick but you must follow the upgrade path. Neglecting this step will cause a lot of pain. If you decide to go with Fortinet FortiGate switches and/or access points, they can be managed within the firewall which is great. We're also using the FortiAnalyzer which easily plugs into the firewall for any reporting you may require.

Incentivized

Ubiquiti makes great Access points at various tiers provided far better coverage and throughput than consumer-grade wireless repeaters and routers. We have not had any performance complaints from guests or from the administration who use the wifi on a daily basis.

Incentivized

Has not let me down yet.

Incentivized

We had didn't any hardware failures at our two main office locations and upgraded our units last year after using them for about 5-6 years

Incentivized

Great performance even on the lower end model of the series. You can push a lot of traffic through these devices without much performance impact. If you decide you want to inspect encrypted traffic however, you may take a big hit on the cpu and memory of the box, but they still manage to keep up even with all the bells and whistles turned on.

Incentivized

Good performance and really good integration. We have integration with Microsoft AD.

Incentivized

I have had troubles with Firepower Management Center and the FTD's in the past. Sticking to a Gold Star image and upgrading when the "bugs" are fixed is great. That still doesn't mean you are left vulnerable though. The extra features are just not enabled yet. Great product and calling support is readily available for any issue.

Incentivized

The Support team at Fortinet is excellent. They can not only help you configure the device for what you are trying to do, they offer suggestions on improving rules, and troubleshooting issues. Their response time is fast, ensuring you are up and running immediately with no questions asked. We had a hard drive failure in one of our Fortinet Fortigate appliances. The tech answered immediately, and started rebuilding the drive after some preliminary investigations. After rebuilding, there were still errors and issues, so they dispatched a brand new Fortinet Fortigate appliance. The tech then backed up the configurations for when the new device came in, which showed up in a few hours. A restore of the configuration took less than a minute, and there were no more errors or issues.

Incentivized

Ubiquiti support is minimal, which is said to help decrease the cost of the equipment. However, with many reports of emails going directly to the Ubiquiti support line taking days to hear a response, you're better off either engaging with the community forums for help from fellow UniFi users or reaching out to a reseller that has training on the equipment that can assist.

Incentivized

I received it a couple years afters use it and it was just to confirm my knowledge about the tool.

Incentivized

Utilize the new FMC cloud which is available in Cisco Defense Orchestrator.

Incentivized

Make sure that you have the most current version of FortiOS. Make sure all Fortigates are on the same version

Incentivized

Cisco Firepower 1000 series are security systems that can be deployed through throughout the network quickly and easily without a lot of initial setup in contrast with other systems. maintaining them can be done from a single management. Interface and maintenance can be isolated to localized sites instead of being widespread.

Incentivized

[Fortinet] FortiGate is not only cost effective but it gives the comprehensive security against the APT attacks and gives the complete traffic visibility and granular control. You can easily create the VDOMs (Virtual firewall) within a Fortigate firewall and customize the dashboard as per your requirement if you have multiple VDOMs within a single firewall.

Incentivized

Ubiquiti is overall easier to work with. There is no special training needed to accomplish many of the things required with a Cisco product. Since my time is stretched thin, I need something that I can manage without being weighed down by command-line communications. Also, I am able to use my wireless devices to maintain every Ubiquiti device on my network.

Incentivized

No changes needed to terms and conditions.

Incentivized

My environments are pretty small (less than 100 users per location) so no issues here.

Incentivized

• We have seen improved throughput on our internet.
• It took several attempts with Cisco engineers to configure the device; it requires a deep set of knowledge to set up in a more complicated environment.
• This will allow us to move forward with a more stable and configurable environment with security available we didn't have before.

Incentivized

• The pricing given to us for our firewall was well within what we were already spending for other vendors solutions and had the added value of eliminating a separate expense for a dedicated web filtering appliance.
• We have also adopted Fortinet's security fabric approach and thus changed vendors for our switch and AP devices. These devices have come at reduced prices as compared to another previous vendor we were using, particularly in relation to ongoing annual maintenance costs.

Incentivized

• Can't say it enough, prices are awesome, so ROI is very high IMHO.
• Remote cloud management allows me to service more clients at greater distances.
• Project estimates become much more attractive when you can show the savings vs more expensive solutions.

Incentivized